$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: RWjp+/AViQh22vrS+bwtH7DxjfR9ZDlvn6HneJE/eng= Subject key identifier: 8A:9C:FB:2D:71:E6:05:D6:E3:C1:3A:AF:A0:62:CB:FD:D9:50:94:01 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: DD Signing time: Wed 01 May 2024 06:28:29 +0000 Manifest this update: Wed 01 May 2024 06:28:28 +0000 Manifest next update: Wed 08 May 2024 06:28:28 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: cf9WwkWqT+6UK+T3uzSHhhgl7NCaisw4ezwEvv5DYIk=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: wZAMwabhPphZz41oY7gf6inGAUn+jP9FZcAbwBbTFFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: May 1 06:28:28 2024 GMT Not After : May 8 06:28:28 2024 GMT Subject: CN=6631e10c-9df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:51:f2:89:d3:b9:40:dd:42:0e:4f:ce:9e: 71:cc:1d:67:3f:40:1d:f9:16:26:b7:64:7e:c7:71: 00:27:63:47:c7:ec:6b:2f:da:a5:48:ec:7e:d5:41: 14:a1:54:66:b4:dc:cd:6c:52:19:06:b9:f1:f2:13: 3d:76:d8:c0:c6:69:ad:c5:d7:5f:8d:18:2e:d2:e8: 87:13:71:c3:f1:02:ae:fd:1d:a3:51:ef:5a:c0:88: 31:16:7b:2a:f2:b4:69:eb:82:bf:12:9f:d0:df:38: ef:30:2a:97:90:40:4b:fe:5c:a5:a7:fb:e6:b2:c2: a7:ae:e2:9d:1c:3d:f4:99:94:f1:4e:ee:3e:fc:b8: e1:1e:7a:db:a6:0e:b9:7b:c4:16:d5:ec:15:11:20: 3b:7f:1b:70:96:55:e3:b0:fa:34:4f:ba:9c:6c:32: 5c:b4:42:1d:78:4a:e1:4b:07:05:2a:57:64:ce:98: 5e:19:be:75:4d:58:01:5d:28:7b:09:b3:17:56:92: 6f:dc:69:22:e3:81:80:b0:1b:ea:5f:5d:cb:06:c5: 19:67:ff:e1:3b:2f:55:b6:aa:f8:4b:4b:94:61:bc: 21:a3:7c:42:50:40:7c:07:d1:11:2e:e3:76:e8:b9: ea:bb:c6:ef:a8:71:cf:06:cd:6b:31:e8:b1:5b:91: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9C:FB:2D:71:E6:05:D6:E3:C1:3A:AF:A0:62:CB:FD:D9:50:94:01 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:08:0f:47:95:1f:d9:8c:16:14:01:c1:e6:26:57:3b:f3:c8: 82:c0:07:1b:43:44:4c:6e:97:ee:69:19:06:e5:cf:c9:e1:8b: 11:bb:24:78:f4:4e:aa:bd:bd:98:2f:cf:58:72:1b:a7:05:e8: a4:ca:38:ca:d8:17:5d:53:a8:ab:b9:48:cd:82:7f:b0:93:a2: f0:0f:42:29:99:35:ac:1a:e3:e7:3c:77:1c:34:15:c9:ee:65: 9f:33:32:70:ff:3b:19:9b:57:eb:b8:e7:b2:eb:81:d6:b7:7a: 32:69:3a:40:16:b0:9f:0b:86:a0:bb:b0:ed:12:8f:ee:06:23: a1:1f:1f:31:5f:17:9f:1d:5b:ad:d5:3e:ad:ae:d2:00:4b:69: e2:ff:73:84:7d:d0:3f:a0:54:c4:29:ea:e9:d4:4f:17:d5:8c: ff:76:59:33:ab:c8:b4:e2:c0:d3:03:f4:fe:0c:00:1f:99:2a: 88:6e:74:14:e1:1a:ce:11:5f:cb:28:7d:6c:6e:19:42:91:76: 46:08:6e:8d:27:84:c6:9c:85:94:9f:56:81:b6:58:22:ac:13: b8:23:c7:05:21:95:82:43:91:1a:50:f0:e0:5d:9c:55:ff:47: 0d:fb:30:a2:03:56:5f:67:78:c8:58:c7:54:06:e0:03:7c:fc: df:b2:d1:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjQwNTAxMDYyODI4WhcNMjQwNTA4MDYyODI4WjAYMRYwFAYD VQQDEw02NjMxZTEwYy05ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7VR8onTuUDdQg5Pzp5xzB1nP0Ad+RYmt2R+x3EAJ2NHx+xrL9qlSOx+1UEU oVRmtNzNbFIZBrnx8hM9dtjAxmmtxddfjRgu0uiHE3HD8QKu/R2jUe9awIgxFnsq 8rRp64K/Ep/Q3zjvMCqXkEBL/lylp/vmssKnruKdHD30mZTxTu4+/LjhHnrbpg65 e8QW1ewVESA7fxtwllXjsPo0T7qcbDJctEIdeErhSwcFKldkzpheGb51TVgBXSh7 CbMXVpJv3Gki44GAsBvqX13LBsUZZ//hOy9Vtqr4S0uUYbwho3xCUEB8B9ERLuN2 6Lnqu8bvqHHPBs1rMeixW5FzFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqc+y1x 5gXW48E6r6Biy/3ZUJQBMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1CA9HlR/ZjBYUAcHmJlc788iCwAcbQ0RMbpfuaRkG5c/J4YsRuyR4 9E6qvb2YL89YchunBeikyjjK2BddU6iruUjNgn+wk6LwD0IpmTWsGuPnPHccNBXJ 7mWfMzJw/zsZm1fruOey64HWt3oyaTpAFrCfC4agu7DtEo/uBiOhHx8xXxefHVut 1T6trtIAS2ni/3OEfdA/oFTEKerp1E8X1Yz/dlkzq8i04sDTA/T+DAAfmSqIbnQU 4RrOEV/LKH1sbhlCkXZGCG6NJ4TGnIWUn1aBtlgirBO4I8cFIZWCQ5EaUPDgXZxV /0cN+zCiA1ZfZ3jIWMdUBuADfPzfstFJ -----END CERTIFICATE-----Generated at Wed May 1 07:06:27 2024 by rpki-client on console-fra.rpki-client.org