$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft File: 7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json) Hash identifier: WBG4vCtpPVbPZsBFmE8WCp9dFd4aCFoalEf26wnldr4= Subject key identifier: AA:16:85:5B:1F:AF:BD:54:7E:69:DF:24:0A:FC:37:0D:B1:73:AB:2D Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2 Certificate issuer: /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft Manifest number: 06D4 Signing time: Tue 30 Apr 2024 23:13:29 +0000 Manifest this update: Tue 30 Apr 2024 23:13:28 +0000 Manifest next update: Tue 07 May 2024 23:13:28 +0000 Files and hashes: 1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: o/tjBPTls6K/HebkdLXJmw0IRt+eZQ+Wc/VtD6iyp30=) 2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: 0c4oRd9DQ+yEUO8nCU4UYf57mFm08+GFhyF3dnO3s/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2 Validity Not Before: Apr 30 23:13:28 2024 GMT Not After : May 7 23:13:28 2024 GMT Subject: CN=66317b18-7fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:82:cf:3b:ca:6e:d2:c5:04:54:cd:87:7e: a0:4e:17:72:44:5a:a2:c8:87:7b:1c:ec:e1:69:5b: e0:10:e7:43:e5:87:99:b8:d6:31:31:57:25:4a:ad: c1:ac:97:e9:aa:5a:47:93:9c:6d:04:49:63:3b:83: 1c:1a:8e:bc:5a:ae:d2:85:bc:78:65:b9:05:cf:22: 1e:3d:be:6f:05:d5:ec:f8:aa:13:e6:2a:dc:5d:d2: 6b:a4:b5:f8:de:38:a7:59:80:de:e3:2c:33:b1:28: ab:f0:1e:0a:d0:72:22:9b:03:4e:b0:56:df:a0:e5: b1:35:d8:ba:28:bd:bd:33:90:31:29:d5:d7:54:95: da:74:67:96:18:05:8f:70:96:25:95:d6:a1:78:b7: da:98:7c:ba:07:e8:54:e1:83:4e:46:9b:ca:6e:67: 62:70:ff:33:7e:b0:07:13:e5:39:3a:31:d3:7b:62: 55:7d:70:ea:bd:84:83:03:20:5c:38:a0:5e:12:e6: 94:48:5b:10:c8:88:36:c0:d5:1c:91:93:4e:46:04: e7:dd:13:41:eb:29:f7:70:3b:fc:0a:d9:77:b6:5b: 0c:3c:f8:29:30:79:59:a2:06:f8:ef:86:99:04:c8: 93:56:85:23:40:c0:f9:8c:f3:2d:34:00:ab:e1:08: b5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:16:85:5B:1F:AF:BD:54:7E:69:DF:24:0A:FC:37:0D:B1:73:AB:2D X509v3 Authority Key Identifier: keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4e:58:49:05:5e:53:79:aa:43:af:9c:f1:4d:a4:7f:cb:15: cc:d4:d5:e1:bd:1f:50:fa:53:83:e9:e3:24:d3:92:a7:b4:a0: 51:60:f5:27:d0:bd:d0:56:4c:c0:20:93:9b:20:57:77:ff:6c: d1:56:eb:48:2c:53:c7:5c:a8:47:cf:de:89:37:0b:51:c2:36: 70:0f:28:e4:11:c4:e4:98:63:02:0c:b5:8a:a4:28:f5:ef:8b: 31:d5:9c:d4:d6:41:91:ef:a3:5b:70:65:82:5b:a8:7d:80:da: 25:54:f9:6b:f7:52:6b:e6:29:c3:43:2e:72:c7:4e:28:13:26: e5:de:3e:73:64:6c:c2:e5:16:f7:db:95:e4:ba:29:99:9a:87: 77:25:01:7c:ef:ac:ef:90:9d:35:43:47:c4:31:03:fb:70:e5: c3:43:df:ab:df:9c:5e:81:23:fd:e3:9d:27:9c:08:ba:e9:a6: 72:fe:3e:8b:c0:ca:f9:dc:6c:1f:49:33:cc:c3:fe:48:4e:52: f3:58:42:d2:f5:00:de:fe:2a:71:78:3b:02:84:97:8f:7b:4e: 7f:7f:2f:f7:b4:b9:a9:e0:bc:41:84:be:ac:37:62:f7:6b:f5: 87:e3:16:78:9d:3d:99:f7:81:2a:51:7f:f0:70:a0:10:ae:ce: 76:0c:84:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDRDMxMTAvBgNVBAUTKEVERjcyQzVDQjg1MkIyMkMyRjBGNTI1MjExMjI4RDQ1 MDdBM0Y5QzIwHhcNMjQwNDMwMjMxMzI4WhcNMjQwNTA3MjMxMzI4WjAYMRYwFAYD VQQDEw02NjMxN2IxOC03ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukCCzzvKbtLFBFTNh36gThdyRFqiyId7HOzhaVvgEOdD5YeZuNYxMVclSq3B rJfpqlpHk5xtBEljO4McGo68Wq7Shbx4ZbkFzyIePb5vBdXs+KoT5ircXdJrpLX4 3jinWYDe4ywzsSir8B4K0HIimwNOsFbfoOWxNdi6KL29M5AxKdXXVJXadGeWGAWP cJYlldaheLfamHy6B+hU4YNORpvKbmdicP8zfrAHE+U5OjHTe2JVfXDqvYSDAyBc OKBeEuaUSFsQyIg2wNUckZNORgTn3RNB6yn3cDv8Ctl3tlsMPPgpMHlZogb474aZ BMiTVoUjQMD5jPMtNACr4Qi1XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoWhVsf r71UfmnfJAr8Nw2xc6stMB8GA1UdIwQYMBaAFO33LFy4UrIsLw9SUhEijUUHo/nC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMENEMy85RjkzMERCMjA1 RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Npd3ZEMUpTRVNLTlJRZWot Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmY3NYTGhTc2l3dkQxSlNFU0tOUlFlai1jSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MENEMy85RjkzMERCMjA1RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Np d3ZEMUpTRVNLTlJRZWotY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1TlhJBV5TeapDr5zxTaR/yxXM1NXhvR9Q+lOD6eMk05KntKBRYPUn 0L3QVkzAIJObIFd3/2zRVutILFPHXKhHz96JNwtRwjZwDyjkEcTkmGMCDLWKpCj1 74sx1ZzU1kGR76NbcGWCW6h9gNolVPlr91Jr5inDQy5yx04oEybl3j5zZGzC5Rb3 25XkuimZmod3JQF876zvkJ01Q0fEMQP7cOXDQ9+r35xegSP9450nnAi66aZy/j6L wMr53GwfSTPMw/5ITlLzWELS9QDe/ipxeDsChJePe05/fy/3tLmp4LxBhL6sN2L3 a/WH4xZ4nT2Z94EqUX/wcKAQrs52DIS0 -----END CERTIFICATE-----Generated at Tue Apr 30 23:52:28 2024 by rpki-client on console-ams.rpki-client.org