$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft File: 7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json) Hash identifier: Fgc8bsJ9+AKBJDQKw6IltDmRAMNLKYMbYsdyF4c1t5Y= Subject key identifier: E0:A0:4E:BD:11:CC:58:55:93:C9:D8:D6:4B:8C:E4:D5:65:A0:8A:48 Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft Manifest number: 7F Signing time: Sat 25 May 2024 07:30:35 +0000 Manifest this update: Sat 25 May 2024 07:30:35 +0000 Manifest next update: Sat 01 Jun 2024 07:30:35 +0000 Files and hashes: 1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: rkd3idDO/ruc8dzbLT6ngxtyVvyVmkfNtDhdLKEnloY=) 2: 4FC496A657BC11EE9025060BC4F9AE02.roa (hash: t9JXjGRiZJRaRIkD8UWGwvtm6rQfd2ZXh3xYo44qscI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 06:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Validity Not Before: May 25 07:30:35 2024 GMT Not After : Jun 1 07:30:35 2024 GMT Subject: CN=6651939b-6eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:4c:8f:57:57:37:b5:92:f8:cf:43:35:ba: 30:95:5a:4a:ba:36:71:64:50:e6:6e:4a:3d:b8:e4: 05:14:17:89:08:a4:60:c6:95:e5:1d:eb:b3:35:7b: 19:a1:db:f2:0a:77:70:4c:ab:97:1a:c3:42:3b:5f: 9c:b3:8a:f5:0f:a5:cb:ab:d4:4c:93:27:22:94:2c: 3b:1f:fc:b5:80:5d:67:00:ae:19:b6:4a:7b:45:79: 07:e1:58:e2:72:60:83:25:fc:21:eb:49:bf:2a:8e: ad:bf:ef:dd:17:b9:2f:26:a9:93:6e:09:a0:b0:c2: 3e:55:cc:40:28:e7:bb:dd:5e:0d:98:72:ed:c9:64: cf:3d:05:33:72:58:e1:74:4b:39:b1:f4:e0:d1:1d: 47:53:91:b9:08:ec:53:cb:43:c6:58:83:f6:8a:ef: e6:3f:1c:de:dc:6e:cf:78:d5:9b:54:b4:9b:3b:08: 67:c2:91:85:23:b4:2c:90:b6:0f:99:87:06:c4:08: 19:85:f1:22:f9:c2:45:8f:3a:39:f2:14:eb:e7:04: 5d:b1:75:9a:1e:cd:d6:7b:5a:79:77:82:f8:8c:2e: 7d:bf:c6:27:ef:0e:c3:7e:20:15:b4:43:b9:89:5c: 66:eb:de:de:d1:ff:24:f8:c3:39:47:31:d4:86:40: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A0:4E:BD:11:CC:58:55:93:C9:D8:D6:4B:8C:E4:D5:65:A0:8A:48 X509v3 Authority Key Identifier: keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:48:6c:4d:19:26:30:e8:e6:ae:e8:10:78:59:79:4a:93:45: 32:96:07:d6:c7:ed:e7:39:9e:d8:eb:c4:43:8c:64:af:c9:02: 98:85:9a:61:d9:9b:86:4a:d2:ae:d3:10:9b:8c:f0:9c:3e:c5: aa:72:bd:ad:ef:44:01:45:53:c1:c8:4a:26:2c:6d:d9:30:3f: e5:73:f1:85:f0:43:3f:9f:df:87:8c:12:8a:5f:72:5e:8a:e8: d2:39:40:1f:d3:a5:d9:36:63:a1:d8:b9:e9:5e:95:f3:53:62: bb:cb:4e:49:49:f8:86:52:90:1d:66:35:51:0f:01:c7:96:55: 2a:f5:eb:83:34:48:7f:ed:16:51:12:20:10:ea:97:49:90:9b: c0:6c:3c:f5:71:7a:5e:ca:85:00:0b:aa:d8:87:41:ce:48:e9: bf:b4:81:67:e0:31:1c:23:17:44:b0:4a:ef:11:da:4b:1e:b3: be:4d:ec:10:12:fe:42:45:eb:e5:34:b1:5e:48:30:ae:4f:e3: e6:c1:4a:a5:8b:20:53:18:1c:35:55:db:e7:2e:b1:29:ff:3c: 4c:db:74:45:07:a0:12:6f:bf:ea:f1:4d:0e:c3:1c:a8:64:34: a2:b9:79:84:dd:79:0d:4d:37:9b:38:8d:64:79:61:48:06:ee: 59:71:3d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NEYxMTAvBgNVBAUTKEVERTJGNENDNDM0NzI4Qzc5Qzg5MzkxNDE0RjZFRTAz RkI0MTY4OEMwHhcNMjQwNTI1MDczMDM1WhcNMjQwNjAxMDczMDM1WjAYMRYwFAYD VQQDEw02NjUxOTM5Yi02ZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i5Mj1dXN7WS+M9DNbowlVpKujZxZFDmbko9uOQFFBeJCKRgxpXlHeuzNXsZ odvyCndwTKuXGsNCO1+cs4r1D6XLq9RMkycilCw7H/y1gF1nAK4Ztkp7RXkH4Vji cmCDJfwh60m/Ko6tv+/dF7kvJqmTbgmgsMI+VcxAKOe73V4NmHLtyWTPPQUzcljh dEs5sfTg0R1HU5G5COxTy0PGWIP2iu/mPxze3G7PeNWbVLSbOwhnwpGFI7QskLYP mYcGxAgZhfEi+cJFjzo58hTr5wRdsXWaHs3We1p5d4L4jC59v8Yn7w7DfiAVtEO5 iVxm697e0f8k+MM5RzHUhkBZXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCgTr0R zFhVk8nY1kuM5NVloIpIMB8GA1UdIwQYMBaAFO3i9MxDRyjHnIk5FBT27gP7QWiM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk0Ri9DOTg5MDY3MjU3 QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtNZWNpVGtVRlBidUFfdEJh SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdlTDB6RU5IS01lY2lUa1VGUGJ1QV90QmFJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk0Ri9DOTg5MDY3MjU3QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtN ZWNpVGtVRlBidUFfdEJhSXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbSGxNGSYw6Oau6BB4WXlKk0UylgfWx+3nOZ7Y68RDjGSvyQKYhZph 2ZuGStKu0xCbjPCcPsWqcr2t70QBRVPByEomLG3ZMD/lc/GF8EM/n9+HjBKKX3Je iujSOUAf06XZNmOh2LnpXpXzU2K7y05JSfiGUpAdZjVRDwHHllUq9euDNEh/7RZR EiAQ6pdJkJvAbDz1cXpeyoUAC6rYh0HOSOm/tIFn4DEcIxdEsErvEdpLHrO+TewQ Ev5CRevlNLFeSDCuT+PmwUqliyBTGBw1VdvnLrEp/zxM23RFB6ASb7/q8U0Owxyo ZDSiuXmE3XkNTTebOI1keWFIBu5ZcT2O -----END CERTIFICATE-----Generated at Sat May 25 10:21:03 2024 by rpki-client on console-ams.rpki-client.org