$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: +r26sN5ISPR0uTvvZvCsua/0fdAitPWBQ+mODj8Nyyg= Subject key identifier: A5:14:CB:98:8A:49:22:BB:99:42:45:7B:A1:B1:DA:33:0A:59:7B:12 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0AC0 Signing time: Sat 18 May 2024 20:06:16 +0000 Manifest this update: Sat 18 May 2024 20:06:16 +0000 Manifest next update: Sat 25 May 2024 20:06:16 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: WynDLd3d0cLpi6qcfZnKBTUbNKCz4I0thFFxBLMy08o=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: UrQLK1EA1WcvJrkNSpWHXgKfB78ZZNO0hE+SH1PfHhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: May 18 20:06:16 2024 GMT Not After : May 25 20:06:16 2024 GMT Subject: CN=66490a38-41c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:1a:69:12:3f:5f:ce:b2:ff:59:77:07:8a: 67:be:82:43:a1:64:03:ef:ed:47:55:e2:2b:1e:e0: ed:8d:ba:b9:68:31:91:46:67:3e:67:8e:23:77:81: 1b:f6:56:fd:b6:0b:e1:ea:3b:f5:0a:af:a2:df:1c: 42:c7:5f:93:cd:8f:87:3f:6c:50:36:b7:1b:65:9e: 3d:f6:c7:54:19:3a:68:9c:70:28:82:54:30:49:1a: ac:c2:3c:64:78:1c:c4:30:03:57:71:cf:20:20:dd: 6a:08:42:f7:2b:cc:fa:cf:87:68:59:ac:9c:a3:08: 9a:c5:1c:02:c9:2e:14:1c:16:76:50:35:be:b9:8e: d2:7e:7c:31:54:c1:0e:f9:08:25:85:f2:47:e2:dc: 5a:7b:3b:32:70:59:2e:40:33:87:c6:3e:75:79:f6: fa:db:d3:ef:ab:92:cd:cb:7c:8f:73:a3:8c:62:de: 15:07:65:7a:f7:df:20:4d:89:6c:04:a1:8f:09:e8: 9d:47:29:52:ae:de:11:3f:56:3e:e6:90:7e:36:19: 93:5f:a8:fc:a3:fc:57:d6:13:22:fb:81:50:e0:31: 19:ba:7e:30:9c:47:d8:6a:49:94:18:53:b1:6d:ee: 89:f1:8c:91:44:8f:b8:c5:ad:e6:fd:1d:6a:5e:87: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:14:CB:98:8A:49:22:BB:99:42:45:7B:A1:B1:DA:33:0A:59:7B:12 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:51:a7:b0:a9:2c:f5:87:24:20:66:79:37:44:08:49:d6:9f: 07:9f:a0:8a:47:f8:70:74:56:4d:50:1c:d9:4a:9a:0a:32:6d: 76:5b:2f:80:ce:c2:71:e9:48:ba:64:75:f0:9c:26:60:83:87: a2:6a:72:80:b7:da:a4:15:94:a9:d7:7f:d2:24:6b:d5:bc:39: 18:59:92:58:61:ef:01:5f:de:b0:1f:96:49:45:3f:32:32:20: ea:d9:ed:cc:72:a2:81:7c:bd:6f:16:fd:06:36:29:88:cf:e0: b4:e9:2f:23:ef:8b:c4:a0:0b:3e:a3:63:f2:b0:23:d9:b8:fb: 45:b0:69:c7:95:f0:23:ff:67:16:a3:b0:5c:f3:9b:85:9d:31: 41:f3:b7:30:10:eb:71:f5:06:08:0b:e6:4a:e7:2a:d1:db:b4: 79:32:02:2f:e0:f7:24:68:f4:00:03:eb:f0:ec:a6:75:a2:86: 21:8d:a4:b3:fb:ae:60:95:67:16:7e:90:36:32:b7:b7:a8:37: 70:70:a7:6d:a1:b0:b8:4a:d5:cc:80:6c:22:a9:c3:80:16:74: 2c:9e:cd:09:e0:52:57:12:75:09:13:48:e6:6d:64:e2:a1:d1: bf:dd:1e:27:79:ee:a1:26:23:5a:06:ab:a2:0b:17:e1:ff:4b: f1:9a:b3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjQwNTE4MjAwNjE2WhcNMjQwNTI1MjAwNjE2WjAYMRYwFAYD VQQDEw02NjQ5MGEzOC00MWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyEaaRI/X86y/1l3B4pnvoJDoWQD7+1HVeIrHuDtjbq5aDGRRmc+Z44jd4Eb 9lb9tgvh6jv1Cq+i3xxCx1+TzY+HP2xQNrcbZZ499sdUGTponHAoglQwSRqswjxk eBzEMANXcc8gIN1qCEL3K8z6z4doWaycowiaxRwCyS4UHBZ2UDW+uY7SfnwxVMEO +QglhfJH4txaezsycFkuQDOHxj51efb629Pvq5LNy3yPc6OMYt4VB2V6998gTYls BKGPCeidRylSrt4RP1Y+5pB+NhmTX6j8o/xX1hMi+4FQ4DEZun4wnEfYakmUGFOx be6J8YyRRI+4xa3m/R1qXoetNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUUy5iK SSK7mUJFe6Gx2jMKWXsSMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpUaewqSz1hyQgZnk3RAhJ1p8Hn6CKR/hwdFZNUBzZSpoKMm12Wy+A zsJx6Ui6ZHXwnCZgg4eianKAt9qkFZSp13/SJGvVvDkYWZJYYe8BX96wH5ZJRT8y MiDq2e3McqKBfL1vFv0GNimIz+C06S8j74vEoAs+o2PysCPZuPtFsGnHlfAj/2cW o7Bc85uFnTFB87cwEOtx9QYIC+ZK5yrR27R5MgIv4PckaPQAA+vw7KZ1ooYhjaSz +65glWcWfpA2Mre3qDdwcKdtobC4StXMgGwiqcOAFnQsns0J4FJXEnUJE0jmbWTi odG/3R4nee6hJiNaBquiCxfh/0vxmrMk -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org