$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json) Hash identifier: LX4cr/Fr/WQc73XJ5Z1RKXDJmwqPJXqm3sVb5MlkuRI= Subject key identifier: CA:5A:7E:E6:16:34:2E:85:FC:C8:62:73:F6:7B:C1:17:6B:2D:B0:8D Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft Manifest number: 2F Signing time: Wed 15 May 2024 08:34:43 +0000 Manifest this update: Wed 15 May 2024 08:34:42 +0000 Manifest next update: Wed 22 May 2024 08:34:42 +0000 Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: zzuHJerpZsVWx+xHWiB0gy9aHP9GOBfiqFRsjQEFHwY=) 2: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: bPf9OeOoi06Rnw8uv3TpDzvZ9rbymPD0sd16mNTyii0=) 3: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: l2/AcYIuuEmWmC/Xu8FUURnDfGYw2qZ7H+y/uBwBrJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Validity Not Before: May 15 08:34:42 2024 GMT Not After : May 22 08:34:42 2024 GMT Subject: CN=664473a2-bf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:94:10:d2:4e:45:4a:0f:8b:1b:6e:cc:61: 01:70:e7:31:91:42:3a:ed:e6:ce:c9:38:87:80:33: ee:07:9a:b6:37:38:e6:50:81:d2:85:13:4e:7b:b0: 16:16:41:a5:59:e7:84:38:31:2a:3c:7c:82:d4:72: f6:d2:f9:c9:f8:61:50:c0:c6:53:27:5f:76:6c:cd: b3:42:5f:75:76:69:7e:63:68:7e:16:e6:6a:c1:0b: b4:c4:f4:fd:75:d9:83:8d:f0:72:e1:db:78:4d:c3: 90:21:49:f7:c0:18:fa:2b:6c:5b:2c:8d:9e:9e:ab: 58:47:a9:52:bf:17:65:3c:c0:17:28:76:2e:8a:df: 75:d9:82:b4:a0:d9:c8:f1:e9:f6:c4:55:67:6c:d0: c9:2a:71:3f:40:6f:b9:5b:c0:31:b1:49:c9:0a:f7: d2:e8:41:dd:4d:f6:2d:69:07:9d:49:92:8a:71:3e: 19:18:00:48:3f:6c:bb:2c:db:46:32:ce:8c:fc:90: cf:b2:40:51:ef:fd:12:3e:9c:f2:06:53:48:74:8e: 05:fc:1a:97:3b:a4:63:ea:a3:d6:0c:67:6d:29:37: 6f:80:76:b2:d8:f5:8f:18:62:a1:3c:3d:5a:9b:39: 8a:09:9c:cc:bf:2e:60:1b:97:5b:8a:ca:38:c5:43: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5A:7E:E6:16:34:2E:85:FC:C8:62:73:F6:7B:C1:17:6B:2D:B0:8D X509v3 Authority Key Identifier: keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:a3:6d:cd:3d:b2:37:6b:80:28:e4:1a:c5:6a:b0:f4:2e: 02:a8:86:2e:52:5f:b7:39:f0:49:a1:5c:dd:d3:bd:f8:bd:16: 4f:1c:0d:6c:6f:2f:06:38:af:09:57:33:11:1a:9c:59:e9:6d: e0:73:95:3f:ab:30:64:3a:ab:ab:c3:15:59:df:4d:40:9c:47: a8:4f:63:e9:fb:5b:b3:88:1b:6c:c3:42:47:dc:d8:3a:5f:87: e8:29:cf:e5:36:4d:15:5c:56:e6:d8:d3:03:0f:71:10:88:ea: 8a:70:af:bd:8f:e2:5e:69:bb:9a:42:61:f1:dd:8c:d5:bc:ed: 29:98:fc:40:32:b2:18:5f:ec:e4:33:53:57:d1:74:2a:35:ec: 7f:2a:4e:41:2f:b4:ea:8c:44:b9:ce:67:54:f6:d9:8a:ea:b9: 67:e1:40:fc:0e:45:97:79:ef:30:4b:51:50:61:3a:7c:be:e0: 3a:fb:1b:3f:d9:8e:7b:6b:25:d8:90:90:7f:0a:1f:38:86:5b: 9a:a8:b0:31:04:39:ee:0a:6e:74:12:0b:ff:fe:b0:4f:9a:b5: b9:e1:77:7c:c3:fd:fd:27:88:d7:4a:18:e1:06:b7:fa:bc:bc: 03:2f:70:2a:4d:6b:4c:f0:54:b9:ca:8b:cc:a3:6f:dc:e7:ee: d3:43:08:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkE4MjExMC8GA1UEBRMoQUZCOEZGRTFFODY4NjI5NkI5OTZDNjNBQTkwMkVBOUMx MjhGNDhGRTAeFw0yNDA1MTUwODM0NDJaFw0yNDA1MjIwODM0NDJaMBgxFjAUBgNV BAMTDTY2NDQ3M2EyLWJmMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+p5QQ0k5FSg+LG27MYQFw5zGRQjrt5s7JOIeAM+4HmrY3OOZQgdKFE057sBYW QaVZ54Q4MSo8fILUcvbS+cn4YVDAxlMnX3ZszbNCX3V2aX5jaH4W5mrBC7TE9P11 2YON8HLh23hNw5AhSffAGPorbFssjZ6eq1hHqVK/F2U8wBcodi6K33XZgrSg2cjx 6fbEVWds0MkqcT9Ab7lbwDGxSckK99LoQd1N9i1pB51JkopxPhkYAEg/bLss20Yy zoz8kM+yQFHv/RI+nPIGU0h0jgX8Gpc7pGPqo9YMZ20pN2+AdrLY9Y8YYqE8PVqb OYoJnMy/LmAbl1uKyjjFQzHRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUylp+5hY0 LoX8yGJz9nvBF2stsI0wHwYDVR0jBBgwFoAUr7j/4ehoYpa5lsY6qQLqnBKPSP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCQTgyL0ZCRERBQzI0Q0U1 QTExRUU4QzNCRDAzQUM0RjlBRTAyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdqXzRlaG9ZcGE1bHNZNnFRTHFuQktQU1A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC QTgyL0ZCRERBQzI0Q0U1QTExRUU4QzNCRDAzQUM0RjlBRTAyL3I3al80ZWhvWXBh NWxzWTZxUUxxbkJLUFNQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGqCo23NPbI3a4Ao5BrFarD0LgKohi5SX7c58EmhXN3Tvfi9Fk8cDWxv LwY4rwlXMxEanFnpbeBzlT+rMGQ6q6vDFVnfTUCcR6hPY+n7W7OIG2zDQkfc2Dpf h+gpz+U2TRVcVubY0wMPcRCI6opwr72P4l5pu5pCYfHdjNW87SmY/EAyshhf7OQz U1fRdCo17H8qTkEvtOqMRLnOZ1T22YrquWfhQPwORZd57zBLUVBhOny+4Dr7Gz/Z jntrJdiQkH8KHziGW5qosDEEOe4KbnQSC//+sE+atbnhd3zD/f0niNdKGOEGt/q8 vAMvcCpNa0zwVLnKi8yjb9zn7tNDCFU= -----END CERTIFICATE-----Generated at Wed May 15 09:27:29 2024 by rpki-client on console-fra.rpki-client.org