$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft File: h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json) Hash identifier: 4/Jah2gtEk7nn7RgzmTNZl1QSSeJAC9l9c4L0lugrOI= Subject key identifier: C7:0F:39:B0:76:DF:96:7F:9C:66:66:0A:1A:AB:C9:A2:1A:CA:CF:E2 Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft Manifest number: 0756 Signing time: Sat 04 May 2024 22:34:20 +0000 Manifest this update: Sat 04 May 2024 22:34:20 +0000 Manifest next update: Sat 11 May 2024 22:34:20 +0000 Files and hashes: 1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: o5DqI7feJzKorAzuyvUgD2n6N1YgE/l1FlLs1lJCmAE=) 2: 0A7320284D4811EE86B7A71FC4F9AE02.roa (hash: yZGE9NUKytobw2NJNo7Q0ZEPB8cxjTvRwKD5n6D5+gs=) 3: 021F5D1E005F11EE9D6E2530C4F9AE02.roa (hash: 7JBpmwEWdLsAHDeSZKzUDXaj0QWtY2+VyPqJO87U2zU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Validity Not Before: May 4 22:34:20 2024 GMT Not After : May 11 22:34:20 2024 GMT Subject: CN=6636b7ec-1ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:e4:cd:ac:53:80:68:af:1c:75:2f:3b:80: 6f:c4:20:e5:a0:78:f5:27:4b:ea:f5:17:f2:ff:14: 56:74:06:a3:84:61:14:e0:94:6a:cf:a5:95:8f:a5: 00:86:fd:af:58:15:9a:a0:95:fd:12:50:ee:f2:a6: 6e:29:79:2a:b0:95:9b:55:ad:ec:8c:0f:ea:03:fe: 5c:36:a3:47:aa:a5:cc:8d:c9:ba:ae:18:ab:73:1f: b0:6e:03:bb:12:fd:8d:f8:3d:0e:f3:00:23:04:44: 5b:ac:e1:f2:b1:d4:1d:88:9d:8b:cf:eb:8f:3b:f2: b8:3c:29:e4:46:9c:56:61:28:81:0c:b9:b1:60:02: 98:06:53:85:be:29:df:d6:cb:2a:4a:91:0d:60:98: 1c:75:99:81:99:f2:04:7c:21:39:2f:e8:8f:66:ba: 3f:3a:4d:bc:f8:89:42:53:d3:d6:1b:bd:71:c5:67: 39:c0:99:9d:b1:9f:83:7f:86:80:67:20:4c:96:9f: 48:fc:3f:52:1a:70:22:71:b3:6a:26:96:10:2d:5b: cd:ec:88:d9:a1:8c:6e:28:44:3d:2e:07:96:48:03: e6:b5:70:f9:4b:d4:de:d9:7f:60:e4:01:fa:e6:ba: 0a:36:b3:2d:e1:e5:75:6b:ec:59:db:b6:c4:07:05: b0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0F:39:B0:76:DF:96:7F:9C:66:66:0A:1A:AB:C9:A2:1A:CA:CF:E2 X509v3 Authority Key Identifier: keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a7:af:5b:7b:ab:45:a1:d6:0d:b2:3b:8a:b3:fb:80:3c:e8: d0:9a:b9:29:63:b9:3c:87:36:fa:0c:ef:bf:da:98:6a:37:77: c3:b6:6a:b7:3e:b7:b6:ed:e7:01:a5:0f:8c:d0:7c:3e:a0:2c: 14:d5:14:ca:2c:fd:11:78:cb:75:89:92:e1:9a:e0:d9:25:e2: bc:08:fc:22:4e:df:11:bd:b8:37:bb:6c:da:19:29:f2:4e:36: ac:f5:06:31:fa:5c:5a:30:c7:6d:c1:9a:09:50:af:0a:39:e6: 9f:57:00:11:d7:d6:f4:a2:31:a9:79:0d:e4:03:d5:99:c7:c8: 46:80:14:70:01:ab:c3:cb:0e:9a:05:0a:6d:28:8b:e2:59:a6: 1e:ef:5a:2e:57:7a:a7:fc:c0:36:6b:0b:02:e4:f5:fb:6e:65: 76:5d:e5:28:4b:56:ba:0e:76:c5:48:4f:31:3b:b6:ad:f6:f0: 83:76:57:74:ed:b6:e5:90:6a:fa:61:15:50:82:3d:c4:ae:b0: 77:33:08:a3:cf:4f:75:ba:16:7e:30:f5:22:1b:34:83:a5:47: 40:92:c7:93:ba:ca:aa:80:30:14:3e:cb:09:6e:49:e8:d3:d9: f9:ab:f4:9a:72:f4:07:3c:2f:bc:2e:46:d3:53:41:78:ac:4c: df:71:d3:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjAxMTAvBgNVBAUTKDg3QjJDMEU4Mjk1NDFEMkVGNTI2NjM4NUVCMzk0NkI4 RDUyOTA2MDgwHhcNMjQwNTA0MjIzNDIwWhcNMjQwNTExMjIzNDIwWjAYMRYwFAYD VQQDEw02NjM2YjdlYy0xZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn/kzaxTgGivHHUvO4BvxCDloHj1J0vq9Rfy/xRWdAajhGEU4JRqz6WVj6UA hv2vWBWaoJX9ElDu8qZuKXkqsJWbVa3sjA/qA/5cNqNHqqXMjcm6rhircx+wbgO7 Ev2N+D0O8wAjBERbrOHysdQdiJ2Lz+uPO/K4PCnkRpxWYSiBDLmxYAKYBlOFvinf 1ssqSpENYJgcdZmBmfIEfCE5L+iPZro/Ok28+IlCU9PWG71xxWc5wJmdsZ+Df4aA ZyBMlp9I/D9SGnAicbNqJpYQLVvN7IjZoYxuKEQ9LgeWSAPmtXD5S9Te2X9g5AH6 5roKNrMt4eV1a+xZ27bEBwWwUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcPObB2 35Z/nGZmChqryaIays/iMB8GA1UdIwQYMBaAFIeywOgpVB0u9SZjhes5RrjVKQYI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCMC9BMkRGNENFQ0RE NEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhTNzFKbU9GNnpsR3VOVXBC Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3TEE2Q2xVSFM3MUptT0Y2emxHdU5VcEJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCMC9BMkRGNENFQ0RENEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhT NzFKbU9GNnpsR3VOVXBCZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEp69be6tFodYNsjuKs/uAPOjQmrkpY7k8hzb6DO+/2phqN3fDtmq3 Pre27ecBpQ+M0Hw+oCwU1RTKLP0ReMt1iZLhmuDZJeK8CPwiTt8Rvbg3u2zaGSny Tjas9QYx+lxaMMdtwZoJUK8KOeafVwAR19b0ojGpeQ3kA9WZx8hGgBRwAavDyw6a BQptKIviWaYe71ouV3qn/MA2awsC5PX7bmV2XeUoS1a6DnbFSE8xO7at9vCDdld0 7bblkGr6YRVQgj3ErrB3Mwijz091uhZ+MPUiGzSDpUdAkseTusqqgDAUPssJbkno 09n5q/SacvQHPC+8LkbTU0F4rEzfcdP0 -----END CERTIFICATE-----Generated at Sun May 5 00:12:20 2024 by rpki-client on console-fra.rpki-client.org