$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: FONP6D1J819P3nmw2dyLeoqQXuA1qSP8431tS4yITdM= Subject key identifier: 79:61:E1:6F:95:48:CA:66:38:C0:70:D4:AF:88:EE:FC:D6:49:64:2C Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0B7C Signing time: Mon 06 May 2024 19:31:29 +0000 Manifest this update: Mon 06 May 2024 19:31:29 +0000 Manifest next update: Mon 13 May 2024 19:31:29 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: QwHB6Gfg0vv5+JfbIUQ9FVkBNbwwUFvSbUP6vdb5Fi0=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: 03PZ9RQjgxD40nMbJ2eys41ohZjgGWxawEredJUIf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: May 6 19:31:29 2024 GMT Not After : May 13 19:31:29 2024 GMT Subject: CN=66393011-dd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:cf:66:34:3d:81:d7:ff:22:ab:11:76:70: 78:78:3c:4a:f2:44:48:5b:bd:c7:46:8e:19:ca:58: b4:3c:11:99:4b:19:a4:4e:1f:4e:6a:b1:c2:4d:4f: f6:21:16:73:72:14:f4:4a:12:ae:41:b1:d1:f1:99: fe:81:93:7b:7f:5d:06:ff:63:aa:88:c3:da:a0:86: 9f:be:fb:70:9b:2b:8a:8d:15:70:ad:2f:62:e2:f5: 9a:d4:53:74:ec:6a:93:8e:49:f9:a9:04:06:77:3d: 85:8a:59:bf:9a:02:cc:bc:55:51:22:d9:87:c7:4b: bc:fc:3f:ad:0b:01:30:68:0f:24:be:b6:85:a6:c8: 14:9f:33:0b:d6:4f:1c:21:ca:d2:3b:49:39:9e:ae: 02:fd:8d:72:75:86:9a:8e:b4:ff:b0:51:ba:96:b2: d3:ef:a5:b1:55:99:2f:38:e5:a9:e2:53:bf:20:39: 96:5e:a9:23:d5:ae:6f:28:7a:e9:5e:d2:8c:53:17: 85:d2:b9:bc:8f:ab:8d:6f:72:47:5b:53:43:fe:aa: a6:66:62:cc:af:dc:a4:6a:db:4f:12:ab:15:8c:21: fb:68:b4:3d:2b:5b:e8:16:1d:2a:58:88:d8:b4:d3: 79:9e:c6:7d:c8:8b:32:01:73:de:c9:67:3b:79:45: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:61:E1:6F:95:48:CA:66:38:C0:70:D4:AF:88:EE:FC:D6:49:64:2C X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:86:e0:af:22:16:1c:a5:e5:58:e2:7b:b6:5f:4c:6f:b6:cf: 70:35:e5:4e:5c:17:9e:24:2e:26:00:9a:c3:37:1f:2b:34:3c: 7c:e3:97:6d:76:ca:64:f6:56:16:7d:73:4c:6e:e4:7b:b2:d1: 1b:94:06:17:8d:28:4b:be:0a:95:77:af:e9:69:e7:89:57:ca: 7e:42:de:d5:2d:f8:a0:a4:c2:8c:17:1f:d9:aa:7a:c1:89:dc: 48:79:ce:8d:4b:49:f4:5e:f5:0c:e4:96:a9:d5:a1:52:ef:38: de:2d:b4:a6:8e:7b:6a:ce:46:54:da:33:31:64:b6:39:5f:9b: 95:16:64:00:d6:99:28:a0:ea:44:cf:99:a4:01:27:97:9f:cb: 0e:4a:20:e1:d3:21:68:ab:04:1d:c1:a4:01:31:22:ca:b8:98: 2d:c6:9f:9d:eb:b8:ca:9d:e3:f9:96:c4:00:3a:78:7f:7c:e3: ea:99:50:6a:7b:75:cb:72:c2:b2:bb:30:d1:f3:fb:10:05:5a: 7a:47:c2:0b:e5:69:c4:93:6d:2b:ef:aa:c5:6e:8e:a7:20:97: 6e:6d:de:ef:6a:c9:1b:b2:f2:ac:47:ca:7e:68:09:42:0f:86: 47:e3:79:e0:12:a1:58:2b:76:b9:e7:0d:82:e3:ed:1f:9e:d1: ee:a1:af:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjQwNTA2MTkzMTI5WhcNMjQwNTEzMTkzMTI5WjAYMRYwFAYD VQQDEw02NjM5MzAxMS1kZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDHPZjQ9gdf/IqsRdnB4eDxK8kRIW73HRo4Zyli0PBGZSxmkTh9OarHCTU/2 IRZzchT0ShKuQbHR8Zn+gZN7f10G/2OqiMPaoIafvvtwmyuKjRVwrS9i4vWa1FN0 7GqTjkn5qQQGdz2Film/mgLMvFVRItmHx0u8/D+tCwEwaA8kvraFpsgUnzML1k8c IcrSO0k5nq4C/Y1ydYaajrT/sFG6lrLT76WxVZkvOOWp4lO/IDmWXqkj1a5vKHrp XtKMUxeF0rm8j6uNb3JHW1ND/qqmZmLMr9ykattPEqsVjCH7aLQ9K1voFh0qWIjY tNN5nsZ9yIsyAXPeyWc7eUVm8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlh4W+V SMpmOMBw1K+I7vzWSWQsMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVhuCvIhYcpeVY4nu2X0xvts9wNeVOXBeeJC4mAJrDNx8rNDx845dt dspk9lYWfXNMbuR7stEblAYXjShLvgqVd6/paeeJV8p+Qt7VLfigpMKMFx/ZqnrB idxIec6NS0n0XvUM5Jap1aFS7zjeLbSmjntqzkZU2jMxZLY5X5uVFmQA1pkooOpE z5mkASeXn8sOSiDh0yFoqwQdwaQBMSLKuJgtxp+d67jKneP5lsQAOnh/fOPqmVBq e3XLcsKyuzDR8/sQBVp6R8IL5WnEk20r76rFbo6nIJdubd7vaskbsvKsR8p+aAlC D4ZH43ngEqFYK3a55w2C4+0fntHuoa9y -----END CERTIFICATE-----Generated at Mon May 6 20:19:08 2024 by rpki-client on console-fra.rpki-client.org