$ rpki-client -vvf rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.mft File: 7WjKai0SqIzH0paivCvxUZoLX_M.mft (raw, json) Hash identifier: 4DrqVqwbU1LIe6lriyjlcGuyd1pACxFPEg1YG2XL8NI= Subject key identifier: B8:C8:C3:75:4C:D5:4D:AE:19:A6:5C:23:41:9C:6C:29:E6:7A:94:F9 Authority key identifier: ED:68:CA:6A:2D:12:A8:8C:C7:D2:96:A2:BC:2B:F1:51:9A:0B:5F:F3 Certificate issuer: /CN=A911E2E0/serialNumber=ED68CA6A2D12A88CC7D296A2BC2BF1519A0B5FF3 Certificate serial: 220D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.mft Manifest number: 21FC Signing time: Mon 06 May 2024 16:16:53 +0000 Manifest this update: Mon 06 May 2024 16:16:52 +0000 Manifest next update: Mon 13 May 2024 16:16:52 +0000 Files and hashes: 1: 7WjKai0SqIzH0paivCvxUZoLX_M.crl (hash: DHNBefby0qRsJMNKxpWSR05odUktnb5yS5gbNIwGnS4=) 2: C4D639B63B2B11EEB806E26CC4F9AE02.roa (hash: wq2IjpgPrmfbsS1rpcNsBC0KyZ9HGIUelXDlD6xiXbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.crl rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8717 (0x220d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E2E0/serialNumber=ED68CA6A2D12A88CC7D296A2BC2BF1519A0B5FF3 Validity Not Before: May 6 16:16:52 2024 GMT Not After : May 13 16:16:52 2024 GMT Subject: CN=66390274-a9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:7b:fb:18:0c:70:6c:58:de:92:bc:fb:36: bf:b3:0d:ba:a7:99:c8:e8:09:fe:90:04:db:d5:28: 43:b7:75:a8:a5:d6:85:27:56:21:73:17:68:87:6a: a0:22:f3:83:19:bd:86:f8:8e:03:7f:e2:0a:68:76: 32:8e:24:ca:1d:45:af:4d:5c:da:83:56:c3:d0:7a: e8:70:b7:3f:ef:81:08:5a:8d:b2:d0:c1:87:a7:b7: a5:a3:68:60:98:ff:89:db:ae:25:c2:34:87:f4:c7: 19:b4:de:39:bd:38:b9:90:e0:2b:b4:f0:fe:5e:42: d9:76:d9:72:a8:e8:05:4a:e3:5a:4f:80:09:5c:aa: b9:8d:9d:6c:c4:9c:56:27:cc:bf:75:ff:23:ea:24: f0:16:25:7e:c8:dd:71:7a:b9:fb:55:30:53:e7:12: 6d:8f:fb:97:b9:62:77:37:c3:29:ec:1b:ff:c3:53: 32:f2:92:78:cb:d8:fb:ea:ef:23:f3:92:58:b1:03: c7:2b:f5:9d:90:f6:cd:50:a2:e9:6d:1e:69:44:8b: 77:0a:42:7e:47:e4:41:22:54:ec:c6:f4:68:82:18: 14:d9:7e:8c:c8:a4:90:52:91:ef:d4:84:67:98:2d: ae:10:38:d0:00:bb:52:37:92:08:c4:66:0e:34:83: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C8:C3:75:4C:D5:4D:AE:19:A6:5C:23:41:9C:6C:29:E6:7A:94:F9 X509v3 Authority Key Identifier: keyid:ED:68:CA:6A:2D:12:A8:8C:C7:D2:96:A2:BC:2B:F1:51:9A:0B:5F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b6:1a:a0:11:e3:75:46:bc:8b:0c:91:f7:f3:1a:c3:9b:6a: 22:af:26:2e:a0:f8:7e:fc:82:f8:48:87:e7:2c:c4:5c:bc:57: c5:61:30:64:4b:8c:75:fe:04:03:a7:3e:87:22:91:28:ef:cc: 16:0b:7d:e4:c2:f4:55:6c:e6:82:df:26:3b:2f:b1:db:6b:61: 77:3c:ab:83:9c:74:62:4c:2d:28:99:58:a1:ea:f6:13:ce:17: 88:53:38:bd:cc:18:31:f9:65:a3:01:bd:2d:bd:8e:f3:af:d1: 2a:f4:72:5a:6d:41:d6:db:76:34:e6:5a:b4:6a:1e:29:ab:9f: 03:be:51:56:56:87:ab:89:3f:5f:9a:45:35:64:c4:10:79:02: 46:35:ee:04:0e:b5:8b:f5:da:69:d5:9c:1d:72:be:be:3a:22: ce:b9:d6:ca:e2:01:e2:95:63:20:69:44:cd:d3:97:9f:62:31: 4b:3a:2b:55:ac:66:f2:d5:ee:1c:e7:92:1d:c3:66:95:97:1e: 0c:cc:40:c6:4a:5b:4e:28:34:ea:e9:c2:f3:f9:0e:9c:25:3c: 50:31:1c:24:c3:24:96:6d:a5:4a:29:ee:9a:53:18:3d:11:79: 24:66:ad:10:d5:85:e7:39:7a:f9:c3:85:2c:df:55:cb:5e:d9: 05:87:a5:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyRTAxMTAvBgNVBAUTKEVENjhDQTZBMkQxMkE4OENDN0QyOTZBMkJDMkJGMTUx OUEwQjVGRjMwHhcNMjQwNTA2MTYxNjUyWhcNMjQwNTEzMTYxNjUyWjAYMRYwFAYD VQQDEw02NjM5MDI3NC1hOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFF7+xgMcGxY3pK8+za/sw26p5nI6An+kATb1ShDt3WopdaFJ1Yhcxdoh2qg IvODGb2G+I4Df+IKaHYyjiTKHUWvTVzag1bD0HrocLc/74EIWo2y0MGHp7elo2hg mP+J264lwjSH9McZtN45vTi5kOArtPD+XkLZdtlyqOgFSuNaT4AJXKq5jZ1sxJxW J8y/df8j6iTwFiV+yN1xern7VTBT5xJtj/uXuWJ3N8Mp7Bv/w1My8pJ4y9j76u8j 85JYsQPHK/WdkPbNUKLpbR5pRIt3CkJ+R+RBIlTsxvRoghgU2X6MyKSQUpHv1IRn mC2uEDjQALtSN5IIxGYONIO1OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjIw3VM 1U2uGaZcI0GcbCnmepT5MB8GA1UdIwQYMBaAFO1oymotEqiMx9KWorwr8VGaC1/z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTJFMC9CM0U4MTVEQzlF NDYxMUU1ODhENDYwMTZDNEY5QUUwMi83V2pLYWkwU3FJekgwcGFpdkN2eFVab0xY X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdXakthaTBTcUl6SDBwYWl2Q3Z4VVpvTFhfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTJFMC9CM0U4MTVEQzlFNDYxMUU1ODhENDYwMTZDNEY5QUUwMi83V2pLYWkwU3FJ ekgwcGFpdkN2eFVab0xYX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqthqgEeN1RryLDJH38xrDm2oiryYuoPh+/IL4SIfnLMRcvFfFYTBk S4x1/gQDpz6HIpEo78wWC33kwvRVbOaC3yY7L7Hba2F3PKuDnHRiTC0omVih6vYT zheIUzi9zBgx+WWjAb0tvY7zr9Eq9HJabUHW23Y05lq0ah4pq58DvlFWVoeriT9f mkU1ZMQQeQJGNe4EDrWL9dpp1Zwdcr6+OiLOudbK4gHilWMgaUTN05efYjFLOitV rGby1e4c55Idw2aVlx4MzEDGSltOKDTq6cLz+Q6cJTxQMRwkwySWbaVKKe6aUxg9 EXkkZq0Q1YXnOXr5w4Us31XLXtkFh6VC -----END CERTIFICATE-----Generated at Mon May 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org