$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: mlX8TB9OLxS7BoV3M4CiuSz6shm7EFl2OOn4nKSwpf0= Subject key identifier: 78:0B:BF:AC:A9:F7:92:38:78:72:1F:99:82:97:38:E0:6C:52:B9:91 Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 7B Signing time: Wed 15 May 2024 07:24:24 +0000 Manifest this update: Wed 15 May 2024 07:24:23 +0000 Manifest next update: Wed 22 May 2024 07:24:23 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: l3gMgC5kXD83scpXlmyUaCMDlTpjWhhjwdnaBaLgxHY=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: gVUndys1FOrdFAUgWj7NFlEkhtcr9jjG/N1oaA3t584=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: May 15 07:24:23 2024 GMT Not After : May 22 07:24:23 2024 GMT Subject: CN=66446327-c7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:eb:13:f8:af:39:94:5b:e8:7a:8e:f2:1c: 96:c5:d9:06:a6:2a:25:c2:29:71:73:47:fb:8f:0b: e2:5e:8b:7e:89:4b:97:c4:ab:56:96:d7:b1:df:a0: 9b:7b:c3:e6:5c:d4:f3:dd:eb:36:10:3b:29:51:42: e7:ed:11:d7:ad:11:02:6e:5e:61:3a:64:a4:1a:01: 9d:c6:dd:03:99:fa:24:88:de:6f:61:df:1e:50:ca: 72:93:32:98:b9:a1:15:a0:31:3c:82:1e:58:ca:f2: f9:83:2f:ca:b0:2f:8a:37:6c:18:0a:63:cd:cf:bc: 10:42:fb:f7:b0:a8:f6:50:f9:ea:d3:23:ef:a6:9e: 80:87:37:ea:4f:06:64:33:cd:03:74:72:27:b5:3a: c1:50:5b:7e:b6:69:2b:21:2c:29:3c:65:ff:e9:36: dc:83:cb:d0:14:4a:03:86:aa:f1:77:8e:78:b2:8d: 10:b3:7a:36:11:04:1f:65:a2:39:6b:65:2b:19:57: 69:ef:ec:57:43:7d:9b:9b:79:72:7a:aa:57:03:de: 4e:3d:52:bd:1b:8d:cc:f8:c2:a8:57:b8:0a:eb:fe: be:e8:cf:e7:88:b4:67:ac:ff:0a:71:53:1a:5f:4a: f3:04:90:c5:33:9a:65:59:83:fd:71:f7:8c:82:2a: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:BF:AC:A9:F7:92:38:78:72:1F:99:82:97:38:E0:6C:52:B9:91 X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0b:70:c6:17:30:89:7a:1a:c9:27:b7:f6:0e:55:56:a4:7c: 0b:96:45:10:d7:90:ce:c9:45:6e:bb:94:71:fe:cc:5f:a6:de: a0:80:12:ba:77:d3:c7:c0:88:98:a8:30:81:29:a6:54:64:da: 54:61:2e:ea:49:dc:2c:2a:62:01:7b:91:bf:be:7e:e3:3d:95: 73:fc:2c:92:02:51:74:73:cc:26:1d:56:4a:aa:9a:c5:81:10: 42:49:4a:f1:9f:b1:c3:b4:ed:d2:5e:fc:ef:af:e2:f1:2c:8e: e4:01:a8:8a:47:ee:54:b4:a7:4d:fd:cc:8f:9f:f7:6d:f0:aa: c8:12:7e:e1:17:da:ef:b2:1a:62:10:77:e7:c3:79:11:b7:55: 95:b2:36:44:a4:f7:93:52:7f:a4:78:d7:04:bf:80:9e:fb:0b: 6a:19:8b:a4:eb:30:11:45:86:e1:1a:fc:64:c7:fe:77:dd:b3: ee:f0:f3:91:b4:98:42:1d:c9:38:37:a9:1f:dc:62:98:fe:6f: af:6b:31:89:3b:7c:1d:ea:7c:0d:70:38:0b:e4:13:e8:7a:32: 4e:c8:0c:b4:eb:88:51:03:45:55:64:42:20:e5:85:d8:12:28: c8:ce:73:1b:27:81:38:98:90:47:f2:d9:77:7d:b2:45:ff:82: 49:f4:46:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzRCQjExMC8GA1UEBRMoQjMxMkMyMkYzRDBCOTdCQUFGMzI3M0U1QzY2QjhGMTQw MjAzRTJGOTAeFw0yNDA1MTUwNzI0MjNaFw0yNDA1MjIwNzI0MjNaMBgxFjAUBgNV BAMTDTY2NDQ2MzI3LWM3Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8FOsT+K85lFvoeo7yHJbF2QamKiXCKXFzR/uPC+Jei36JS5fEq1aW17HfoJt7 w+Zc1PPd6zYQOylRQuftEdetEQJuXmE6ZKQaAZ3G3QOZ+iSI3m9h3x5QynKTMpi5 oRWgMTyCHljK8vmDL8qwL4o3bBgKY83PvBBC+/ewqPZQ+erTI++mnoCHN+pPBmQz zQN0cie1OsFQW362aSshLCk8Zf/pNtyDy9AUSgOGqvF3jniyjRCzejYRBB9lojlr ZSsZV2nv7FdDfZubeXJ6qlcD3k49Ur0bjcz4wqhXuArr/r7oz+eItGes/wpxUxpf SvMEkMUzmmVZg/1x94yCKt2VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeAu/rKn3 kjh4ch+Zgpc44GxSuZEwHwYDVR0jBBgwFoAUsxLCLz0Ll7qvMnPlxmuPFAID4vkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3NEJCLzY0ODU0MkM4NUI2 QTExRUU4MEQzNkI1NEM0RjlBRTAyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3hMQ0x6MExsN3F2TW5QbHhtdVBGQUlENHZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 NEJCLzY0ODU0MkM4NUI2QTExRUU4MEQzNkI1NEM0RjlBRTAyL3N4TENMejBMbDdx dk1uUGx4bXVQRkFJRDR2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHkLcMYXMIl6Gsknt/YOVVakfAuWRRDXkM7JRW67lHH+zF+m3qCAErp3 08fAiJioMIEpplRk2lRhLupJ3CwqYgF7kb++fuM9lXP8LJICUXRzzCYdVkqqmsWB EEJJSvGfscO07dJe/O+v4vEsjuQBqIpH7lS0p039zI+f923wqsgSfuEX2u+yGmIQ d+fDeRG3VZWyNkSk95NSf6R41wS/gJ77C2oZi6TrMBFFhuEa/GTH/nfds+7w85G0 mEIdyTg3qR/cYpj+b69rMYk7fB3qfA1wOAvkE+h6Mk7IDLTriFEDRVVkQiDlhdgS KMjOcxsngTiYkEfy2Xd9skX/gkn0RtM= -----END CERTIFICATE-----Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org