$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: zef9OgOqPuxVsTjUZZzzpCHYHB7d3kWwDjBPiW31+NU= Subject key identifier: EE:AD:75:AD:E5:70:1E:B3:91:B9:CC:2B:2F:7B:90:8A:CD:4B:D5:CB Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 06B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 06A7 Signing time: Mon 20 May 2024 10:35:16 +0000 Manifest this update: Mon 20 May 2024 10:35:15 +0000 Manifest next update: Mon 27 May 2024 10:35:15 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: KnmWkZsBX1u4xX50uDMfNt1vkTg+mf9Xiv+Qse1m464=) 2: A312537E169411EFBC833016C4F9AE02.roa (hash: CDozPZpX15/jpS4czDfJafOacHEJoHJfVpRvvCn1e8A=) 3: 1709C2B8168A11EF9AB3AC81C4F9AE02.roa (hash: 65ll2MDD/UN4/d8BQxA3aPxmady3SIHtLTokkAU6wzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 10:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: May 20 10:35:15 2024 GMT Not After : May 27 10:35:15 2024 GMT Subject: CN=664b2763-5ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:0d:78:75:4f:7f:1f:cc:5b:ff:d4:12:68: 4a:2f:8a:c9:6b:b4:1b:db:8a:cd:5c:f0:35:1d:94: 3c:b3:33:4f:e8:a8:bc:47:2c:ef:c7:ef:0d:cf:4e: 25:de:0e:39:f3:2b:14:04:a4:11:71:38:2a:92:4a: b0:60:6e:76:8a:0e:ec:31:c8:d8:d0:eb:cb:44:22: a7:cf:70:e5:55:ea:eb:e9:b4:0b:58:c1:d4:82:e5: d4:09:09:c4:fd:2a:00:69:b0:4b:31:a3:0a:ca:aa: 79:01:24:7e:7d:41:08:0f:b9:b1:69:95:0f:e8:ee: 54:ef:e3:9a:d5:e6:c7:44:b2:31:4a:c9:92:07:3f: 38:2e:b7:84:74:e5:6f:68:16:c8:8a:b1:dc:21:3e: 89:46:18:4b:b0:a5:6b:34:7e:58:4c:a4:54:7a:13: 6a:37:36:6b:9c:09:4c:af:00:a5:f1:49:9a:34:f8: d9:12:4b:64:04:fa:80:fa:1e:e2:07:b8:5f:76:9b: 36:14:aa:03:93:f5:dc:4f:bf:1d:b2:ed:c6:08:82: 15:4a:89:7c:bf:aa:b1:61:2b:76:2a:95:02:e7:50: ef:2a:d1:73:ad:6a:c8:2e:9f:95:08:86:7e:37:17: bc:0e:45:08:4b:fb:9f:70:55:d4:10:f1:37:e4:f5: a1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AD:75:AD:E5:70:1E:B3:91:B9:CC:2B:2F:7B:90:8A:CD:4B:D5:CB X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:4a:f9:e0:d0:9a:01:01:49:5c:58:85:72:98:d0:fe:38:7a: 04:70:72:72:d0:84:4c:3e:f4:3f:b6:53:1f:6b:09:fc:c6:4d: 84:64:50:e3:c5:00:67:c0:3a:eb:5f:72:0c:68:bc:95:c9:2e: c3:c5:87:35:5c:55:69:44:4c:28:03:7f:a2:36:d2:46:7a:86: b9:46:75:d6:21:56:0c:ce:fb:fb:36:88:cb:3a:b1:27:d9:92: dd:5c:71:ad:02:2c:e1:a1:13:50:6f:e3:ec:be:34:16:61:67: 3b:58:e4:7c:51:ac:1f:f1:8a:d6:cc:f4:13:a8:82:1f:5d:63: d9:d4:54:91:84:8a:ff:80:db:1b:67:19:7f:85:37:60:d1:15: 35:55:3f:ca:ff:3b:d1:78:dc:70:29:d6:96:ed:e2:2d:18:78: 30:a2:9b:27:17:bb:04:d0:a4:d4:6b:24:ec:48:d4:75:31:a4: 14:f1:4c:1a:2a:4c:82:48:d3:61:86:8f:de:54:b9:86:49:01: 82:bd:23:b0:cd:68:19:d1:a9:22:23:49:75:08:e5:4a:6b:a9: 9a:31:09:1d:bf:e8:11:b3:eb:c9:ae:e2:74:ae:8c:85:55:b4: 1d:39:d5:c1:bb:2a:45:80:0c:d7:5e:db:ba:1c:12:ab:65:7b: d4:c9:fa:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjQwNTIwMTAzNTE1WhcNMjQwNTI3MTAzNTE1WjAYMRYwFAYD VQQDEw02NjRiMjc2My01ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhYNeHVPfx/MW//UEmhKL4rJa7Qb24rNXPA1HZQ8szNP6Ki8Ryzvx+8Nz04l 3g458ysUBKQRcTgqkkqwYG52ig7sMcjY0OvLRCKnz3DlVerr6bQLWMHUguXUCQnE /SoAabBLMaMKyqp5ASR+fUEID7mxaZUP6O5U7+Oa1ebHRLIxSsmSBz84LreEdOVv aBbIirHcIT6JRhhLsKVrNH5YTKRUehNqNzZrnAlMrwCl8UmaNPjZEktkBPqA+h7i B7hfdps2FKoDk/XcT78dsu3GCIIVSol8v6qxYSt2KpUC51DvKtFzrWrILp+VCIZ+ Nxe8DkUIS/ufcFXUEPE35PWhsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6tda3l cB6zkbnMKy97kIrNS9XLMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVSvng0JoBAUlcWIVymND+OHoEcHJy0IRMPvQ/tlMfawn8xk2EZFDj xQBnwDrrX3IMaLyVyS7DxYc1XFVpREwoA3+iNtJGeoa5RnXWIVYMzvv7NojLOrEn 2ZLdXHGtAizhoRNQb+PsvjQWYWc7WOR8Uawf8YrWzPQTqIIfXWPZ1FSRhIr/gNsb Zxl/hTdg0RU1VT/K/zvReNxwKdaW7eItGHgwopsnF7sE0KTUayTsSNR1MaQU8Uwa KkyCSNNhho/eVLmGSQGCvSOwzWgZ0akiI0l1COVKa6maMQkdv+gRs+vJruJ0royF VbQdOdXBuypFgAzXXtu6HBKrZXvUyfqh -----END CERTIFICATE-----Generated at Mon May 20 12:08:13 2024 by rpki-client on console-ams.rpki-client.org