$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft File: S7gN2OW27S9XRVhQcDM-9KFdcis.mft (raw, json) Hash identifier: WNB9aBNcJUGtxFitB8vm5XfSfZII/Sm9fuJTSaB5+lI= Subject key identifier: D7:64:49:19:26:FF:BF:6D:1A:17:C5:EF:6A:DF:BD:8A:41:78:9C:59 Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B Certificate issuer: /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft Manifest number: 58 Signing time: Wed 15 May 2024 07:54:37 +0000 Manifest this update: Wed 15 May 2024 07:54:36 +0000 Manifest next update: Wed 22 May 2024 07:54:36 +0000 Files and hashes: 1: S7gN2OW27S9XRVhQcDM-9KFdcis.crl (hash: OEWFqKKkauX6OjIx2OMfI+6grh1TZ1k4w5Iq22WpXFg=) 2: 2B752026906B11EE8F088143C4F9AE02.roa (hash: pmbJAheNFOhxQQhbXBEozs5HvMW28O8cu4rrDKnfYtY=) 3: BBCD5340CDCF11EEBFF83067C4F9AE02.roa (hash: HqTtrPpk2fN7Y95oT4OWfNkqpwA2777ymgSvu6SieTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B Validity Not Before: May 15 07:54:36 2024 GMT Not After : May 22 07:54:36 2024 GMT Subject: CN=66446a3d-abad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:98:fe:7d:50:7e:d1:a2:d2:f4:6c:e1:70: 95:38:45:48:31:23:14:0b:e8:91:16:5a:df:94:f8: e2:d4:31:13:f4:6c:d9:88:4c:c9:b6:26:ef:01:1a: 77:92:7e:93:1d:e5:2d:3c:db:3c:6c:78:3c:f5:81: 23:62:12:1e:d7:df:32:9c:94:ea:cb:06:6b:70:ac: d5:cb:73:2c:35:3e:7f:de:8e:a1:0a:5d:2f:a0:8b: 2d:a2:e6:3e:e8:0c:a4:60:83:98:7b:f4:c6:ba:69: 95:53:93:95:fb:88:fe:12:77:1d:88:52:7c:c3:99: 6c:b5:b7:48:70:ee:07:8f:7f:0f:6e:5f:ec:1a:06: 39:3c:6c:42:e9:77:3f:98:d2:a5:b4:cc:6e:28:39: da:f1:bc:77:b7:69:2c:30:79:44:02:a7:53:a6:4c: 9d:7b:f4:87:66:19:e1:f4:73:ff:f9:98:17:ee:e4: 4e:7e:6f:52:05:1e:0f:31:81:63:5a:22:81:92:a9: 93:89:cb:79:22:58:44:c7:e1:ad:5f:06:4c:df:59: 3b:4b:fd:7d:be:4d:fb:68:3a:25:65:ea:59:bf:04: 70:51:fd:2b:17:3f:20:4e:7e:7d:55:e2:f3:10:08: ce:1a:9e:5c:2d:c9:fa:72:07:60:bf:2d:f8:1f:76: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:64:49:19:26:FF:BF:6D:1A:17:C5:EF:6A:DF:BD:8A:41:78:9C:59 X509v3 Authority Key Identifier: keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:56:78:8d:43:49:fd:6b:69:ee:cb:e7:4f:2e:52:53:68:e7: 03:e8:0f:f5:a9:c0:51:a2:33:2b:ca:8c:1d:03:04:b7:ea:4e: 20:f9:4c:e4:ed:9e:3a:2e:3e:76:9c:48:64:ad:b4:ae:31:95: 5f:2b:d4:ae:93:a9:04:5d:80:10:18:a2:f6:bf:50:f8:50:6e: fb:66:83:ba:ae:53:35:19:a8:76:74:4b:ba:f3:f0:75:c1:d3: 7a:6d:cd:5d:40:ea:6c:04:06:b3:1a:c1:a1:9f:9e:a4:ab:03: 15:25:92:4d:ef:15:96:85:70:df:f7:ae:f3:68:3e:d4:46:6d: 1c:14:24:eb:09:a8:dc:91:92:56:08:d0:01:d2:17:6d:1f:37: 77:22:30:4c:45:1a:ef:a2:8c:d3:e1:f7:1c:33:ac:d5:32:13: 67:30:a7:d7:b5:47:02:91:a3:1f:4c:54:4b:7b:e9:92:4d:c7: f6:c4:b0:a2:a8:ea:ed:6e:47:25:8a:25:75:e4:f0:23:78:c5: e1:f9:d8:3f:fb:49:6a:0f:24:53:2c:ca:0d:7f:b2:88:5b:23: 09:e2:04:36:18:9b:5a:f1:55:45:e9:72:34:32:fa:0a:bb:da: f6:7e:29:a9:e3:1e:fe:72:70:c9:2f:ee:cd:2f:9b:3b:bc:71: e3:f0:53:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjA3NzExMC8GA1UEBRMoNEJCODBERDhFNUI2RUQyRjU3NDU1ODUwNzAzMzNFRjRB MTVENzIyQjAeFw0yNDA1MTUwNzU0MzZaFw0yNDA1MjIwNzU0MzZaMBgxFjAUBgNV BAMTDTY2NDQ2YTNkLWFiYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC57pj+fVB+0aLS9GzhcJU4RUgxIxQL6JEWWt+U+OLUMRP0bNmITMm2Ju8BGneS fpMd5S082zxseDz1gSNiEh7X3zKclOrLBmtwrNXLcyw1Pn/ejqEKXS+giy2i5j7o DKRgg5h79Ma6aZVTk5X7iP4Sdx2IUnzDmWy1t0hw7gePfw9uX+waBjk8bELpdz+Y 0qW0zG4oOdrxvHe3aSwweUQCp1OmTJ179IdmGeH0c//5mBfu5E5+b1IFHg8xgWNa IoGSqZOJy3kiWETH4a1fBkzfWTtL/X2+TftoOiVl6lm/BHBR/SsXPyBOfn1V4vMQ CM4anlwtyfpyB2C/LfgfdssvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU12RJGSb/ v20aF8Xvat+9ikF4nFkwHwYDVR0jBBgwFoAUS7gN2OW27S9XRVhQcDM+9KFdcisw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMDc3LzI2QzMwNEVBOTA2 QTExRUVCMzQ5MDYyN0M0RjlBRTAyL1M3Z04yT1cyN1M5WFJWaFFjRE0tOUtGZGNp cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzdnTjJPVzI3UzlYUlZoUWNETS05S0ZkY2lzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC MDc3LzI2QzMwNEVBOTA2QTExRUVCMzQ5MDYyN0M0RjlBRTAyL1M3Z04yT1cyN1M5 WFJWaFFjRE0tOUtGZGNpcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIhWeI1DSf1rae7L508uUlNo5wPoD/WpwFGiMyvKjB0DBLfqTiD5TOTt njouPnacSGSttK4xlV8r1K6TqQRdgBAYova/UPhQbvtmg7quUzUZqHZ0S7rz8HXB 03ptzV1A6mwEBrMawaGfnqSrAxUlkk3vFZaFcN/3rvNoPtRGbRwUJOsJqNyRklYI 0AHSF20fN3ciMExFGu+ijNPh9xwzrNUyE2cwp9e1RwKRox9MVEt76ZJNx/bEsKKo 6u1uRyWKJXXk8CN4xeH52D/7SWoPJFMsyg1/sohbIwniBDYYm1rxVUXpcjQy+gq7 2vZ+KanjHv5ycMkv7s0vmzu8cePwU9w= -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org