$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: V0W63j/Y+YwgND1YuszugDWWI5fVGDigH6v/qL7Y8i8= Subject key identifier: 21:2A:02:48:12:02:3F:BF:3C:01:2A:E3:1B:D9:84:EA:49:CF:07:EB Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 02A9 Signing time: Tue 07 May 2024 03:40:19 +0000 Manifest this update: Tue 07 May 2024 03:40:18 +0000 Manifest next update: Tue 14 May 2024 03:40:18 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: zzBDMiDFYTtx6rWDwV41KeuQdosOmHb/xVcYUaYSDKs=) 2: AAFD824CBCFA11EDAD328D3AC4F9AE02.roa (hash: bAefQD+i2DUr5zX++CqMyYJLlTVBnnX0/82YDtmfqOM=) 3: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: p2XvCNFD6d4VIAif72MiFgokcw+e7+Qk3biI5UhdJ/g=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: oDrhzyW7lkRnV2JdbCV+XPs93kiucplQyCNzYwjrpJw=) 5: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: WToU+UpRxbQJKSr2QGut5hwA296t8z/pXjsZxqDqyvg=) 6: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: pU1vPEKHKX3MOYQLTe0KME/abi6a4AV9Hhdy4Bzh3YM=) 7: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: vOZZW9Fz+Ew432aoBZJQA6i/cbgp+fKwlVmKDZ1QXVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: May 7 03:40:18 2024 GMT Not After : May 14 03:40:18 2024 GMT Subject: CN=6639a2a3-0b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:25:32:fb:e3:f1:74:27:3b:2c:4c:f2:63: 51:b7:4a:2a:96:ed:f3:ed:ea:c2:67:76:35:87:74: db:4f:d7:6c:59:db:3a:c3:d0:94:4b:7e:27:c7:0c: bb:aa:a7:58:06:47:c6:88:1b:08:6e:49:48:b2:94: 69:a1:b4:b0:39:be:00:9e:77:52:3e:8d:f6:5f:54: 52:56:c7:8a:b6:5e:78:fe:33:fc:ca:9c:c3:85:02: 6a:c0:87:0f:00:7b:a1:7f:bc:41:a3:77:51:5d:c2: 39:e6:9c:0c:fc:69:d7:ef:a7:5a:d0:f0:1e:ed:1c: 19:35:d0:a7:a3:d6:4b:4e:19:1c:f9:53:22:a3:58: 54:79:16:08:81:7f:dc:fc:76:8d:ec:32:09:ea:93: a6:58:1d:0a:fc:98:9d:95:6d:72:f7:48:71:cd:17: 56:5f:26:82:b3:4c:c8:8a:56:b8:13:03:b9:5d:aa: a3:d9:5d:c8:6c:2e:47:0e:0b:1a:91:c6:ad:ea:2f: 57:9d:65:f9:b5:2e:a5:07:fa:d6:87:d1:e4:38:16: 79:96:c7:1a:f4:fd:c2:47:d8:42:76:e2:5a:8a:e4: ff:49:46:de:e0:32:6a:3f:9c:61:de:72:fb:38:72: 45:02:fe:6d:8e:f9:67:1e:62:3f:b5:7a:c9:ca:c3: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:02:48:12:02:3F:BF:3C:01:2A:E3:1B:D9:84:EA:49:CF:07:EB X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:0b:72:c2:11:77:73:c4:de:62:d2:b8:df:2d:20:48:bb: 29:b3:1a:d7:71:95:0f:ad:11:28:a3:8c:da:f8:61:cc:48:77: f2:e4:5c:4e:c1:fc:aa:a5:b6:f8:70:2b:09:7c:57:b1:10:54: 09:51:4e:d4:1b:82:7d:e9:6d:db:5c:b9:55:f1:b7:21:3e:7e: 36:5a:23:15:ae:f8:53:8c:e0:38:96:35:76:e1:2a:da:64:37: 26:ee:b7:94:3d:59:3d:09:3a:89:35:0e:4b:ec:f8:04:16:f3: 10:dc:fa:0d:53:70:a6:29:d6:3c:5a:de:78:3c:c6:d3:22:2d: 86:6c:8a:42:57:44:d5:cb:2a:85:90:16:e1:17:47:54:bc:d1: e5:80:18:93:aa:1d:f1:b2:3f:fe:d4:71:47:c3:99:b0:97:51: 11:0f:0f:e1:1f:6d:c7:fd:2a:87:e3:ec:02:db:5e:24:c9:28: a6:c5:e6:08:91:40:2d:59:53:a0:1b:75:8b:dd:f6:d6:64:47: b5:fc:6a:ba:95:ea:28:c8:7b:77:90:56:39:be:b0:fd:36:d3: 07:00:69:7c:74:81:e7:03:ca:e7:34:7f:b9:b7:69:0e:fe:b5: 22:f8:c5:be:da:9c:0f:a5:47:2e:65:e0:a8:f3:ad:00:14:62: b7:83:4c:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjQwNTA3MDM0MDE4WhcNMjQwNTE0MDM0MDE4WjAYMRYwFAYD VQQDEw02NjM5YTJhMy0wYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHQlMvvj8XQnOyxM8mNRt0oqlu3z7erCZ3Y1h3TbT9dsWds6w9CUS34nxwy7 qqdYBkfGiBsIbklIspRpobSwOb4AnndSPo32X1RSVseKtl54/jP8ypzDhQJqwIcP AHuhf7xBo3dRXcI55pwM/GnX76da0PAe7RwZNdCno9ZLThkc+VMio1hUeRYIgX/c /HaN7DIJ6pOmWB0K/JidlW1y90hxzRdWXyaCs0zIila4EwO5Xaqj2V3IbC5HDgsa kcat6i9XnWX5tS6lB/rWh9HkOBZ5lsca9P3CR9hCduJaiuT/SUbe4DJqP5xh3nL7 OHJFAv5tjvlnHmI/tXrJysOhGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEqAkgS Aj+/PAEq4xvZhOpJzwfrMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1DQtywhF3c8TeYtK43y0gSLspsxrXcZUPrREoo4za+GHMSHfy5FxO wfyqpbb4cCsJfFexEFQJUU7UG4J96W3bXLlV8bchPn42WiMVrvhTjOA4ljV24Sra ZDcm7reUPVk9CTqJNQ5L7PgEFvMQ3PoNU3CmKdY8Wt54PMbTIi2GbIpCV0TVyyqF kBbhF0dUvNHlgBiTqh3xsj/+1HFHw5mwl1ERDw/hH23H/SqH4+wC214kySimxeYI kUAtWVOgG3WL3fbWZEe1/Gq6leooyHt3kFY5vrD9NtMHAGl8dIHnA8rnNH+5t2kO /rUi+MW+2pwPpUcuZeCo860AFGK3g0zH -----END CERTIFICATE-----Generated at Tue May 7 04:34:48 2024 by rpki-client on console-fra.rpki-client.org