$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: 78jyJ3VRPcq4pIYYUMd1U4UIlCU+R9DshREOIQYe0jY= Subject key identifier: B3:61:A4:01:CF:17:C9:45:C4:F8:68:C2:48:E7:22:2D:58:D4:05:F8 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 075C Signing time: Thu 02 May 2024 22:27:19 +0000 Manifest this update: Thu 02 May 2024 22:27:19 +0000 Manifest next update: Thu 09 May 2024 22:27:19 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: tYeJzLGnXEbvm09rDLUkgVkZJW6ZSQm8d7saQ5AlHpk=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: yKLG4+4C6c5AczdoqwT5jvtakffjN4p5Kvq/AkjJqa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: May 2 22:27:19 2024 GMT Not After : May 9 22:27:19 2024 GMT Subject: CN=66341347-7ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:2d:7e:ce:8f:5a:18:e5:48:57:5c:8d:f8: 73:46:3c:82:2b:b1:a5:f2:4e:77:98:c1:cd:58:0e: 9e:58:7f:75:98:90:57:c7:4c:8e:6a:07:4a:e1:eb: 4f:55:e9:17:1a:a1:7c:87:fa:75:76:7f:a1:33:fb: be:37:88:d6:8a:14:03:61:11:8c:7f:61:c9:05:9c: f0:71:83:27:27:b0:ca:96:5e:9c:76:08:7e:26:97: 66:36:18:6d:7c:b5:a1:99:5b:e9:8b:e0:77:ca:27: fa:7f:0b:49:43:f6:c0:60:44:a5:56:16:0c:f7:aa: 5e:01:5c:59:9d:42:e6:fd:3f:0d:8f:d1:ca:48:5b: 43:17:ce:98:ed:fd:db:45:0f:26:cc:92:e5:29:39: 45:ce:76:ed:84:72:22:e1:ac:99:74:23:0a:5b:e2: 7f:20:0a:33:46:50:ca:30:9f:f7:14:d4:4c:a6:0f: 43:07:3c:99:82:50:d2:0f:57:61:74:b1:47:e0:fa: ed:20:5c:64:0f:8b:11:2b:cd:16:be:f3:ca:10:e8: 38:31:c0:78:c9:54:4a:ab:61:cc:51:ad:c9:70:aa: ef:e8:9b:52:6b:72:13:11:be:13:cf:87:3b:79:27: e0:ef:82:d2:5f:80:ec:ef:e3:ce:35:50:e9:63:de: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:61:A4:01:CF:17:C9:45:C4:F8:68:C2:48:E7:22:2D:58:D4:05:F8 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:18:dd:1b:3d:e8:48:8a:81:97:e6:ff:ce:29:49:02:67:ca: bb:0b:34:f4:b3:40:00:67:b5:fe:02:66:95:f9:89:81:a9:9c: cf:85:9f:dc:32:23:54:cb:3e:cc:56:b3:03:46:30:65:cc:b1: b8:14:5f:d7:56:6a:e4:fe:14:1b:11:c4:50:f1:97:9d:9c:ab: b0:83:99:eb:d4:f8:f8:b9:96:11:59:be:12:0c:62:91:b4:ad: c2:53:fb:82:de:ea:74:fb:40:85:12:44:32:3c:df:31:34:87: 09:74:5e:bb:f6:b4:d7:f5:34:0c:04:8d:43:92:6e:51:ae:6c: df:b6:be:76:96:54:70:43:a9:8c:2d:53:65:e8:4e:9e:6a:ef: 87:89:df:e6:5f:82:24:88:86:63:15:fe:eb:ce:2c:81:c2:08: 0e:0e:12:d4:ef:bd:07:23:de:c0:37:cb:ed:fc:83:c0:ba:6e: 0a:65:d1:36:b1:3d:2f:79:79:cf:c9:77:56:ef:75:d6:8e:ce: fd:0c:d5:b9:dc:41:c3:a6:92:c2:17:01:e1:0a:17:b9:ac:44: 6c:1a:0d:a4:71:f1:9d:bd:71:fe:fc:0f:34:b1:e7:a0:6e:b2: 19:9f:0c:f1:0b:d2:a4:1f:5c:a9:e8:2d:e8:9c:cc:02:eb:7f: e3:a7:bd:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjQwNTAyMjIyNzE5WhcNMjQwNTA5MjIyNzE5WjAYMRYwFAYD VQQDEw02NjM0MTM0Ny03YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmwtfs6PWhjlSFdcjfhzRjyCK7Gl8k53mMHNWA6eWH91mJBXx0yOagdK4etP VekXGqF8h/p1dn+hM/u+N4jWihQDYRGMf2HJBZzwcYMnJ7DKll6cdgh+JpdmNhht fLWhmVvpi+B3yif6fwtJQ/bAYESlVhYM96peAVxZnULm/T8Nj9HKSFtDF86Y7f3b RQ8mzJLlKTlFznbthHIi4ayZdCMKW+J/IAozRlDKMJ/3FNRMpg9DBzyZglDSD1dh dLFH4PrtIFxkD4sRK80WvvPKEOg4McB4yVRKq2HMUa3JcKrv6JtSa3ITEb4Tz4c7 eSfg74LSX4Ds7+PONVDpY94BwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNhpAHP F8lFxPhowkjnIi1Y1AX4MB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfGN0bPehIioGX5v/OKUkCZ8q7CzT0s0AAZ7X+AmaV+YmBqZzPhZ/c MiNUyz7MVrMDRjBlzLG4FF/XVmrk/hQbEcRQ8ZednKuwg5nr1Pj4uZYRWb4SDGKR tK3CU/uC3up0+0CFEkQyPN8xNIcJdF679rTX9TQMBI1Dkm5Rrmzftr52llRwQ6mM LVNl6E6eau+Hid/mX4IkiIZjFf7rziyBwggODhLU770HI97AN8vt/IPAum4KZdE2 sT0veXnPyXdW73XWjs79DNW53EHDppLCFwHhChe5rERsGg2kcfGdvXH+/A80seeg brIZnwzxC9KkH1yp6C3onMwC63/jp71E -----END CERTIFICATE-----Generated at Thu May 2 23:19:01 2024 by rpki-client on console-ams.rpki-client.org