$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft File: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json) Hash identifier: 3FNppsQbrR5iSWaTKX9tpu/fnIRdWUfClSvxnjJStVs= Subject key identifier: 78:F6:C1:5E:1D:4B:EF:02:65:9D:51:B0:B7:CE:86:AD:75:F0:20:57 Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Certificate serial: 0711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft Manifest number: 070B Signing time: Tue 14 May 2024 22:45:34 +0000 Manifest this update: Tue 14 May 2024 22:45:33 +0000 Manifest next update: Tue 21 May 2024 22:45:33 +0000 Files and hashes: 1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: g2hKeD8kSF5eQ3KU5HSyl/Q3doqHFrCa8qstvhAQau8=) 2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: lRCubr7EYku0VIB1rDtAT6Aai84rlwXyTT83KuJ/9/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 22:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Validity Not Before: May 14 22:45:33 2024 GMT Not After : May 21 22:45:33 2024 GMT Subject: CN=6643e98e-ce6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:99:e6:83:0e:80:fb:d5:25:f2:75:0f:d8: 11:dd:b1:48:b2:34:7e:d8:d6:86:8d:0b:72:5e:86: 39:e9:36:7a:b1:e9:dd:48:50:25:b0:7c:8d:23:33: 8e:9b:80:47:f8:31:49:9b:79:8e:c7:ef:a5:fb:15: d7:96:59:9f:af:2c:6d:c0:84:05:0b:10:fe:61:39: 58:3e:3a:52:70:5d:6f:aa:03:1e:63:80:3b:43:7a: 6e:13:ae:28:c5:3d:ca:f3:3f:cd:22:19:2c:59:c1: af:aa:6b:c0:62:f5:f6:08:da:be:93:1d:38:1f:23: 1c:15:77:55:36:c8:0b:9d:bf:a1:44:8a:16:22:3d: 29:f4:14:62:37:2b:d3:09:de:cf:d0:6e:68:54:e6: 32:04:00:70:02:4e:8e:46:51:24:e3:81:aa:3f:df: 5f:88:28:d5:7a:0d:63:85:38:8c:b0:dc:8c:65:23: 85:42:c9:68:92:0c:80:45:e9:6f:c0:6a:0b:02:50: fd:f9:22:b4:ce:17:27:d2:e5:89:ff:75:32:f9:e1: 5e:dc:38:ce:7e:50:64:a5:20:45:81:29:4d:6d:82: 98:c4:2a:d2:bd:48:8c:63:96:ca:8c:ef:2d:8a:ac: f4:3c:7d:8f:8e:40:a1:df:ac:32:75:d9:60:9c:b6: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F6:C1:5E:1D:4B:EF:02:65:9D:51:B0:B7:CE:86:AD:75:F0:20:57 X509v3 Authority Key Identifier: keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:31:68:64:9f:6a:b7:c3:67:2d:ad:48:ef:e0:61:54:30:82: 74:7e:1c:f3:de:41:25:4a:e6:e3:9e:c6:1e:87:33:ea:09:3d: bd:a5:17:04:bf:72:01:30:d4:95:03:2b:32:a8:58:77:6f:c5: f4:ff:86:1a:17:65:4e:9f:63:6a:4e:59:da:f1:6f:a9:45:e6: 6b:28:6a:be:47:55:a4:69:a5:96:9b:ab:d3:66:83:e2:33:44: 9d:d5:8d:b4:83:63:48:0d:2f:ab:6d:ea:b8:15:85:f4:82:4e: 87:21:3d:51:1c:c2:04:ac:4c:98:f5:29:09:63:48:81:bc:43: 53:d1:e3:4c:2d:93:44:3f:96:39:0c:36:26:d9:b0:91:ac:9e: 96:ee:8d:aa:28:d9:45:dd:d6:16:00:a4:45:08:b9:b8:00:04: d0:4e:36:c2:69:1a:ce:1c:38:07:11:14:2b:f4:6d:bf:21:fd: 41:53:6e:1e:b6:f9:de:cf:a0:9a:2e:ff:4a:09:f1:f2:d7:07: 9f:cd:05:b0:66:6b:a7:c9:af:70:bc:2c:5e:05:a5:89:96:f5: 50:c1:89:0a:37:c2:55:17:c0:da:3c:bb:f6:30:cf:e2:30:5f: 29:9b:72:f9:b6:af:e2:ab:9a:32:b1:49:23:c7:09:19:e5:de: 82:a3:1e:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEOEIxMTAvBgNVBAUTKEVGMUE5NkQxMTJERTE2MjJCMTFDOEM3RTk0QUVCMDQw RURENkFCMDAwHhcNMjQwNTE0MjI0NTMzWhcNMjQwNTIxMjI0NTMzWjAYMRYwFAYD VQQDEw02NjQzZTk4ZS1jZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCKZ5oMOgPvVJfJ1D9gR3bFIsjR+2NaGjQtyXoY56TZ6sendSFAlsHyNIzOO m4BH+DFJm3mOx++l+xXXllmfryxtwIQFCxD+YTlYPjpScF1vqgMeY4A7Q3puE64o xT3K8z/NIhksWcGvqmvAYvX2CNq+kx04HyMcFXdVNsgLnb+hRIoWIj0p9BRiNyvT Cd7P0G5oVOYyBABwAk6ORlEk44GqP99fiCjVeg1jhTiMsNyMZSOFQslokgyARelv wGoLAlD9+SK0zhcn0uWJ/3Uy+eFe3DjOflBkpSBFgSlNbYKYxCrSvUiMY5bKjO8t iqz0PH2PjkCh36wyddlgnLasfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj2wV4d S+8CZZ1RsLfOhq118CBXMB8GA1UdIwQYMBaAFO8altES3hYisRyMfpSusEDt1qsA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ4Qi9EMDBBQTg1Q0Y0 MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZpS3hISXgtbEs2d1FPM1dx d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd4cVcwUkxlRmlLeEhJeC1sSzZ3UU8zV3F3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ4Qi9EMDBBQTg1Q0Y0MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZp S3hISXgtbEs2d1FPM1dxd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGMWhkn2q3w2ctrUjv4GFUMIJ0fhzz3kElSubjnsYehzPqCT29pRcE v3IBMNSVAysyqFh3b8X0/4YaF2VOn2NqTlna8W+pReZrKGq+R1WkaaWWm6vTZoPi M0Sd1Y20g2NIDS+rbeq4FYX0gk6HIT1RHMIErEyY9SkJY0iBvENT0eNMLZNEP5Y5 DDYm2bCRrJ6W7o2qKNlF3dYWAKRFCLm4AATQTjbCaRrOHDgHERQr9G2/If1BU24e tvnez6CaLv9KCfHy1wefzQWwZmunya9wvCxeBaWJlvVQwYkKN8JVF8DaPLv2MM/i MF8pm3L5tq/iq5oysUkjxwkZ5d6Cox5I -----END CERTIFICATE-----Generated at Tue May 14 23:38:42 2024 by rpki-client on console-ams.rpki-client.org