$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json) Hash identifier: Q5/3fbNkPsKJguLgy/GyYej/2hDYZN5s1Fb9yEL2VE4= Subject key identifier: 89:46:9F:AE:6F:B6:97:D8:8A:5B:9D:3C:75:85:BA:3A:F4:32:1A:CE Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft Manifest number: 0B49 Signing time: Tue 30 Apr 2024 20:01:18 +0000 Manifest this update: Tue 30 Apr 2024 20:01:17 +0000 Manifest next update: Tue 07 May 2024 20:01:17 +0000 Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: Idf3KrtgTpAZVWdJZfb8HnjsW7nOzxRox/L4xlg64YY=) 2: CB5012460F6311EABC47D53EC4F9AE02.roa (hash: 2uhaFp2nWFeo3Y3jnekedFo/w13cWaAn7I9VwpKEhvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Apr 30 20:01:17 2024 GMT Not After : May 7 20:01:17 2024 GMT Subject: CN=66314e0d-f977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:43:6a:4d:7e:cb:db:6a:d8:a1:79:00:4d:eb: 0e:18:9c:b4:bd:55:a5:84:77:d0:5a:5c:88:08:d8: 23:e5:09:49:b9:34:d7:f1:6e:89:14:8d:7d:c8:3b: 61:63:83:89:52:7e:d6:92:9c:20:bd:03:ca:f1:53: 3c:55:a7:de:e1:94:db:51:bd:79:b1:9a:8a:28:ca: cf:f8:ad:86:60:ed:4f:9f:c9:99:33:dc:86:d5:f5: 77:e1:25:d5:58:c7:89:70:47:62:be:3b:72:de:72: d7:e6:c1:92:7b:96:07:66:35:c3:41:4c:13:76:fa: 59:40:cb:72:e8:a8:7a:3e:36:e4:e1:67:ed:1b:85: 73:25:6f:41:5d:2b:bc:0e:3b:eb:5d:86:83:ac:56: e6:e6:0a:20:be:f5:b9:c6:d9:d7:67:ba:bc:ba:71: 3c:0f:84:0f:dd:28:f1:0c:e3:ff:ed:5b:0d:23:3f: 9e:eb:82:47:a8:91:97:dd:dc:27:79:a7:88:6c:62: a7:aa:91:51:26:2e:68:d8:13:72:cd:14:d1:43:88: 28:72:75:96:60:47:4f:45:c7:8a:a5:0a:7a:49:21: f1:b3:64:c1:95:a6:38:82:7d:1d:e7:23:5f:b3:c1: 09:17:fe:00:f3:c6:21:14:47:8f:cc:40:05:df:19: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:46:9F:AE:6F:B6:97:D8:8A:5B:9D:3C:75:85:BA:3A:F4:32:1A:CE X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:52:f9:39:35:71:96:cd:07:75:90:75:8c:31:b1:f3:b7:1e: 77:e5:72:98:ec:e5:31:2f:e7:a3:38:c9:58:e7:f6:f6:bb:ea: 1e:27:fa:f7:c2:0e:33:c4:44:78:4b:5b:e2:af:89:66:2d:04: eb:f9:d6:6b:1c:70:23:b1:27:64:05:43:69:c7:93:a3:fb:03: 67:f6:d1:1c:54:d9:ab:ff:bd:8a:44:30:47:67:b6:c9:66:df: 5d:95:70:b5:cc:4e:43:3e:d6:d4:4c:d1:4d:7b:b9:a0:83:43: c5:a6:ab:c9:eb:f7:02:d5:2a:e7:75:5f:f4:a6:8e:24:89:7e: 11:31:7e:12:f4:90:37:54:c5:8e:8a:c4:4e:05:e5:65:cc:46: 10:e6:15:10:6f:f3:d6:be:97:e4:2d:1f:ee:47:fa:7f:9b:15: 54:a4:24:e1:d6:99:5d:51:f2:bf:b9:e9:62:0e:8b:f8:b7:1a: 8c:4e:d4:cd:86:87:64:02:6c:4c:63:51:bc:df:c2:36:7b:d5: 01:54:ef:68:b4:7f:da:97:ff:53:8c:b5:c2:3f:79:4c:36:e6: 53:83:b8:8e:ca:03:fa:71:62:d9:ab:52:78:2f:89:5e:df:65: c3:8b:0c:16:06:e3:be:80:76:c7:b2:02:9c:3d:4c:4e:70:94: 21:3f:ee:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjQwNDMwMjAwMTE3WhcNMjQwNTA3MjAwMTE3WjAYMRYwFAYD VQQDEw02NjMxNGUwZC1mOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ENqTX7L22rYoXkATesOGJy0vVWlhHfQWlyICNgj5QlJuTTX8W6JFI19yDth Y4OJUn7WkpwgvQPK8VM8Vafe4ZTbUb15sZqKKMrP+K2GYO1Pn8mZM9yG1fV34SXV WMeJcEdivjty3nLX5sGSe5YHZjXDQUwTdvpZQMty6Kh6Pjbk4WftG4VzJW9BXSu8 DjvrXYaDrFbm5gogvvW5xtnXZ7q8unE8D4QP3SjxDOP/7VsNIz+e64JHqJGX3dwn eaeIbGKnqpFRJi5o2BNyzRTRQ4gocnWWYEdPRceKpQp6SSHxs2TBlaY4gn0d5yNf s8EJF/4A88YhFEePzEAF3xn8dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlGn65v tpfYiludPHWFujr0MhrOMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw NXN0SHVWZzA0cW5EMldobU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkUvk5NXGWzQd1kHWMMbHztx535XKY7OUxL+ejOMlY5/b2u+oeJ/r3 wg4zxER4S1vir4lmLQTr+dZrHHAjsSdkBUNpx5Oj+wNn9tEcVNmr/72KRDBHZ7bJ Zt9dlXC1zE5DPtbUTNFNe7mgg0PFpqvJ6/cC1SrndV/0po4kiX4RMX4S9JA3VMWO isROBeVlzEYQ5hUQb/PWvpfkLR/uR/p/mxVUpCTh1pldUfK/ueliDov4txqMTtTN hodkAmxMY1G838I2e9UBVO9otH/al/9TjLXCP3lMNuZTg7iOygP6cWLZq1J4L4le 32XDiwwWBuO+gHbHsgKcPUxOcJQhP+5h -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:54 2024 by rpki-client on console-fra.rpki-client.org