$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json) Hash identifier: VDsZ4GHODyYiFK8P7LUrBLgB59oPVpLYqu1VelNjqyQ= Subject key identifier: 2A:AC:FC:2E:A9:2E:CB:D8:B4:49:17:0B:93:C5:B6:1B:96:D6:BF:DC Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Certificate serial: 1858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft Manifest number: 184C Signing time: Sat 04 May 2024 16:59:45 +0000 Manifest this update: Sat 04 May 2024 16:59:45 +0000 Manifest next update: Sat 11 May 2024 16:59:45 +0000 Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: By5r0xXZ1/Z7z2l3SE6ywAVSNgY6+jQWvXUOIV+KvkI=) 2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: 2vFJXRetro19f/ftbJpO2Tj14/S2KHmPLbXgsvcE0k0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6232 (0x1858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Validity Not Before: May 4 16:59:45 2024 GMT Not After : May 11 16:59:45 2024 GMT Subject: CN=66366981-b6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2a:7b:65:c4:13:1e:f6:a3:f7:80:6e:4a:2a: ea:10:e2:54:7f:c2:e3:85:62:8f:d5:be:d5:39:eb: c7:91:ae:7e:9e:df:87:8f:02:9f:35:c6:90:69:75: a7:f5:53:7e:84:91:8b:8e:dc:36:bc:a4:dd:f8:d1: ea:18:68:2c:32:3e:67:0b:80:47:d5:f7:3b:7e:e7: 70:55:37:b4:b1:9d:19:15:70:5a:36:43:b9:5d:cf: d1:2f:19:d9:19:60:25:db:65:c6:ec:2d:a2:ca:0c: 15:9d:4c:46:7e:f9:56:bc:6c:3c:bd:8a:ea:a7:be: 80:d5:b4:ac:d4:b9:1b:b1:4c:51:5d:c3:8b:d7:63: 03:94:71:14:3a:5e:9f:0b:0e:02:93:11:d8:c1:5b: 55:54:b7:15:cd:95:ff:0e:9e:89:eb:4c:8a:ba:17: 18:54:6e:74:99:1f:63:52:91:7e:02:16:2a:5d:d1: c1:08:f4:98:70:3c:60:c9:dc:91:32:fc:af:f0:81: 1c:da:81:01:1b:9a:74:ea:24:9d:b4:2a:c9:41:fb: 06:ad:41:3f:39:f6:59:b9:a5:cc:ec:66:67:34:1c: b7:58:fc:61:e0:a0:92:e7:fa:37:62:ab:4e:d1:75: aa:01:37:3e:ce:9e:f5:35:f0:67:71:d1:79:c8:81: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:FC:2E:A9:2E:CB:D8:B4:49:17:0B:93:C5:B6:1B:96:D6:BF:DC X509v3 Authority Key Identifier: keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:bf:a4:bb:b7:68:13:1c:fc:94:6b:bf:cb:93:14:f8:60:8b: d0:9b:52:b5:60:f7:52:cc:24:0c:ae:69:b0:48:0d:57:b4:90: 07:55:a2:f3:50:d1:7e:a2:ae:a9:3f:d1:d4:a1:a2:eb:6d:b5: 6f:0a:d7:e5:68:80:34:5e:ca:87:98:9c:0f:06:c9:f0:80:3f: 41:87:c2:89:29:1d:ab:2f:36:a8:2d:8c:6f:a2:a9:f4:5f:03: 48:1d:80:04:98:30:3f:ab:74:34:3e:65:9d:0a:aa:8d:6f:3d: aa:38:cb:93:8d:3e:50:b5:ad:e5:11:97:79:3d:5a:79:5b:ef: 16:48:bb:ee:d2:19:44:9b:6d:14:5b:1d:7d:91:69:84:e0:35: 8d:d9:4f:ed:e5:06:3b:49:14:e8:8e:83:94:0b:15:b9:2b:c2: 63:5e:f1:84:72:90:60:93:29:6a:12:74:09:70:d7:91:39:37: 8f:54:d6:9a:d8:90:1f:74:27:fe:b8:a1:56:82:a2:bd:9c:e3: 03:c5:09:72:ea:04:52:26:b4:82:3c:0b:d7:12:d6:30:87:5b: c6:65:c5:30:01:39:c0:79:12:cb:b3:94:33:35:14:20:f8:cb: 9f:eb:93:e2:f1:b3:f0:61:1f:2f:71:3c:9d:60:26:f2:5a:66: 2d:2c:45:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3MjUxMTAvBgNVBAUTKEVEMTdEMUJFM0Q1NzExQzZDOThDOENDQzU5QUFGNzM3 RTg2NUMzODQwHhcNMjQwNTA0MTY1OTQ1WhcNMjQwNTExMTY1OTQ1WjAYMRYwFAYD VQQDEw02NjM2Njk4MS1iNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yp7ZcQTHvaj94BuSirqEOJUf8LjhWKP1b7VOevHka5+nt+HjwKfNcaQaXWn 9VN+hJGLjtw2vKTd+NHqGGgsMj5nC4BH1fc7fudwVTe0sZ0ZFXBaNkO5Xc/RLxnZ GWAl22XG7C2iygwVnUxGfvlWvGw8vYrqp76A1bSs1LkbsUxRXcOL12MDlHEUOl6f Cw4CkxHYwVtVVLcVzZX/Dp6J60yKuhcYVG50mR9jUpF+AhYqXdHBCPSYcDxgydyR Mvyv8IEc2oEBG5p06iSdtCrJQfsGrUE/OfZZuaXM7GZnNBy3WPxh4KCS5/o3YqtO 0XWqATc+zp71NfBncdF5yIECdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqs/C6p LsvYtEkXC5PFthuW1r/cMB8GA1UdIwQYMBaAFO0X0b49VxHGyYyMzFmq9zfoZcOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzcyNS8zMTg0NEMzNjgw OUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVjYkpqSXpNV2FyM04taGx3 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSZlJ2ajFYRWNiSmpJek1XYXIzTi1obHc0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzcyNS8zMTg0NEMzNjgwOUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVj YkpqSXpNV2FyM04taGx3NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZv6S7t2gTHPyUa7/LkxT4YIvQm1K1YPdSzCQMrmmwSA1XtJAHVaLz UNF+oq6pP9HUoaLrbbVvCtflaIA0XsqHmJwPBsnwgD9Bh8KJKR2rLzaoLYxvoqn0 XwNIHYAEmDA/q3Q0PmWdCqqNbz2qOMuTjT5Qta3lEZd5PVp5W+8WSLvu0hlEm20U Wx19kWmE4DWN2U/t5QY7SRTojoOUCxW5K8JjXvGEcpBgkylqEnQJcNeROTePVNaa 2JAfdCf+uKFWgqK9nOMDxQly6gRSJrSCPAvXEtYwh1vGZcUwATnAeRLLs5QzNRQg +Muf65Pi8bPwYR8vcTydYCbyWmYtLEUh -----END CERTIFICATE-----Generated at Sat May 4 18:00:11 2024 by rpki-client on console-fra.rpki-client.org