$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json) Hash identifier: 55C6LMU8oDEN9YqwuksCpMsRxueAU0CnTX1GR1bBb6Q= Subject key identifier: E4:4C:F8:89:7D:BC:59:44:80:27:CF:9E:AC:5F:02:F7:D3:3F:B7:FE Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Certificate serial: 33B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft Manifest number: 33B7 Signing time: Tue 30 Apr 2024 15:16:17 +0000 Manifest this update: Tue 30 Apr 2024 15:16:16 +0000 Manifest next update: Tue 07 May 2024 15:16:16 +0000 Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: JTMEwB/S8GKfdZ53oZzMZ3iwSmfxvgIB7dFZtHKWCBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13239 (0x33b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Validity Not Before: Apr 30 15:16:16 2024 GMT Not After : May 7 15:16:16 2024 GMT Subject: CN=66310b41-5829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:88:e0:99:d0:99:01:97:ee:ef:ee:9d:4e: 1b:13:a1:55:b4:9b:e8:c2:75:ac:ac:3a:f1:e9:0e: 8d:21:6c:01:32:b5:43:25:88:05:92:a1:cf:13:02: 04:bd:58:bc:ed:1e:c7:5d:de:de:0f:84:95:0e:e0: 35:5f:42:38:54:5d:0b:86:c9:2d:40:17:68:e8:26: 3d:27:9f:ce:b0:75:a5:31:6f:47:d9:ef:62:ef:2f: ad:b3:ad:36:6b:b8:89:03:7e:39:a3:5c:34:35:f1: 9e:2c:09:03:f1:e3:34:45:d3:f0:6f:ba:91:b5:c2: 25:6b:05:61:ff:a7:72:78:c4:06:c3:6b:e1:a5:08: 2e:95:56:57:02:5a:c6:3d:5c:83:83:48:1a:6f:e6: 2e:bd:8a:89:64:bf:c0:7d:14:a5:a2:cd:76:25:e1: bc:5a:d2:53:e8:2d:28:71:26:00:c4:ac:5f:13:10: e2:93:d5:4d:ed:f3:c4:54:87:cc:e8:ca:24:06:9c: 8a:22:00:0f:5e:db:90:04:e0:b2:a2:f2:09:3e:19: 84:15:b3:07:84:0f:c5:9e:96:a9:b4:89:ab:c2:06: 76:4c:15:a2:a6:1d:03:be:e6:7f:46:23:29:2d:6e: 55:05:ea:81:b9:98:f3:c3:5f:ec:3a:39:4c:61:61: 16:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:F8:89:7D:BC:59:44:80:27:CF:9E:AC:5F:02:F7:D3:3F:B7:FE X509v3 Authority Key Identifier: keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:02:63:aa:48:50:34:e7:45:47:5e:1b:3f:f1:bc:9d:a9:f2: ed:25:23:b2:28:99:7e:ba:f1:07:bc:58:02:64:e5:ac:90:a6: 20:ae:38:f1:1f:d1:85:bc:97:e3:1d:d2:82:0a:68:57:0f:52: 78:ea:3c:cd:8b:24:dc:70:04:f6:2f:29:c9:d9:87:98:1c:ee: d4:89:8e:af:8a:4a:27:b7:74:4f:dd:49:55:00:02:1d:b0:e6: ca:f1:07:26:7d:0d:42:2a:2e:a7:3a:6f:7c:7b:fa:14:b3:7e: 9d:6b:90:ab:a3:c4:94:91:b7:bd:00:3c:a7:c2:c0:af:32:35: 6a:9e:cf:fe:52:85:7a:10:59:37:a8:83:38:8f:c6:ba:23:8b: 92:69:a3:37:1f:e2:39:97:2b:f1:49:74:90:56:9e:91:e5:f9: bf:a1:b0:98:f7:24:e0:89:cb:89:d6:c3:07:8a:44:eb:b8:77: 9c:ff:ab:f1:a9:37:41:10:84:1b:cd:7b:0b:a6:22:4a:cf:e9: b1:0b:11:39:77:fa:25:77:83:37:8e:f7:4a:29:4d:61:86:36: de:3b:4b:d0:dc:d4:d8:bb:76:bd:bd:a0:c5:74:06:a0:59:fc: e3:25:9f:5c:c3:5a:aa:84:f4:fb:81:94:c1:83:3a:b3:c8:33: 42:6c:a3:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG RDE1MTFFRUYwHhcNMjQwNDMwMTUxNjE2WhcNMjQwNTA3MTUxNjE2WjAYMRYwFAYD VQQDEw02NjMxMGI0MS01ODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygeI4JnQmQGX7u/unU4bE6FVtJvownWsrDrx6Q6NIWwBMrVDJYgFkqHPEwIE vVi87R7HXd7eD4SVDuA1X0I4VF0LhsktQBdo6CY9J5/OsHWlMW9H2e9i7y+ts602 a7iJA345o1w0NfGeLAkD8eM0RdPwb7qRtcIlawVh/6dyeMQGw2vhpQgulVZXAlrG PVyDg0gab+YuvYqJZL/AfRSlos12JeG8WtJT6C0ocSYAxKxfExDik9VN7fPEVIfM 6MokBpyKIgAPXtuQBOCyovIJPhmEFbMHhA/FnpaptImrwgZ2TBWiph0DvuZ/RiMp LW5VBeqBuZjzw1/sOjlMYWEWGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORM+Il9 vFlEgCfPnqxfAvfTP7f+MB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+AmOqSFA050VHXhs/8bydqfLtJSOyKJl+uvEHvFgCZOWskKYgrjjx H9GFvJfjHdKCCmhXD1J46jzNiyTccAT2LynJ2YeYHO7UiY6vikont3RP3UlVAAId sObK8QcmfQ1CKi6nOm98e/oUs36da5Cro8SUkbe9ADynwsCvMjVqns/+UoV6EFk3 qIM4j8a6I4uSaaM3H+I5lyvxSXSQVp6R5fm/obCY9yTgicuJ1sMHikTruHec/6vx qTdBEIQbzXsLpiJKz+mxCxE5d/old4M3jvdKKU1hhjbeO0vQ3NTYu3a9vaDFdAag WfzjJZ9cw1qqhPT7gZTBgzqzyDNCbKNb -----END CERTIFICATE-----Generated at Tue Apr 30 15:52:28 2024 by rpki-client on console-fra.rpki-client.org