$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: 5Boe57Ou/X9motRv6m/jplr/L2KOr8xM0zyE0OJS6fs= Subject key identifier: BC:9C:3F:D9:40:B7:0F:4F:D1:98:33:6B:9D:BB:7B:9E:45:A5:9E:0E Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: 1D Signing time: Wed 15 May 2024 08:48:31 +0000 Manifest this update: Wed 15 May 2024 08:48:30 +0000 Manifest next update: Wed 22 May 2024 08:48:30 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: 9BoHBk057eR4KOD2+wxwdsywUpQPUKmqBN53tNssPNY=) 2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: zFf97/9MWDJ1OuFa86jOAQdYZPSbsznuzGtJuPn2650=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: May 15 08:48:30 2024 GMT Not After : May 22 08:48:30 2024 GMT Subject: CN=664476df-b39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:20:4e:d4:bc:23:c3:ab:f9:42:0a:ec:c2: 13:8e:ec:a1:12:a5:06:5c:5a:76:61:d6:72:73:f7: d2:22:89:77:8f:17:ef:4c:e9:23:a0:ea:10:da:9e: c1:60:d1:e8:82:52:04:73:48:21:83:f9:3c:e6:6d: 6d:fc:53:13:3f:92:6a:2a:0c:d2:2a:5a:10:f4:ad: 14:7f:1c:88:82:2e:f7:2f:4f:67:2a:9b:10:82:37: 84:36:40:0d:e8:97:ee:5b:e0:67:bc:e4:be:bd:22: e8:cb:cc:83:39:60:6a:ef:8e:91:05:68:3b:d5:4c: 4d:ef:f7:c6:78:56:7b:f3:c0:34:da:17:ac:94:12: 2d:0d:42:99:7d:ca:b8:fa:44:f0:85:8b:4e:59:6b: 16:b0:b2:d2:12:8c:6f:56:42:fa:94:82:21:17:ba: 5d:fa:65:b8:ee:39:60:44:32:d3:47:1a:b7:f8:85: 25:02:21:5a:3f:f0:a9:83:fc:18:5a:c9:3f:49:bc: fe:ee:1a:b9:be:27:f9:c7:45:1c:49:3e:af:55:07: fd:96:7b:b6:7e:af:29:70:07:21:c8:d1:ba:51:0d: cf:8b:02:c2:e7:d5:22:a3:db:78:e1:5e:42:b0:ef: bf:e4:02:19:b9:4d:73:85:f0:be:da:ef:4d:65:bb: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9C:3F:D9:40:B7:0F:4F:D1:98:33:6B:9D:BB:7B:9E:45:A5:9E:0E X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1c:7d:c4:c9:cb:df:5a:d3:0e:a2:7a:47:55:f6:d1:3e:34: cc:9e:96:98:17:8d:10:ed:df:77:11:47:b0:bc:95:69:94:55: f4:75:11:74:7e:5b:69:ca:54:16:33:ac:b2:ce:08:45:02:02: e4:d9:a3:ee:1c:fd:8a:0c:7d:5c:3c:61:1a:a3:71:a9:87:41: 7a:50:0c:61:55:e2:c5:68:00:ff:c2:8a:93:fe:a1:aa:e7:0f: d4:90:c1:03:7e:db:1a:7b:9c:24:55:3b:06:27:94:30:28:b6: 4c:7f:9c:93:db:f1:09:e0:02:f7:c7:f9:96:6c:46:35:f9:85: b0:55:72:c9:21:39:9a:2e:d8:8e:17:3b:f1:93:7c:52:ba:3f: 7f:7a:da:cf:e4:43:2a:40:7b:8c:93:e2:3a:c9:6f:ae:40:f0: 4f:91:fe:03:49:de:09:d5:99:eb:77:c9:f0:ec:bb:98:c2:e5: 5e:7a:7f:fd:d3:c3:39:92:ef:80:00:60:69:34:7a:f0:0b:a2: 69:fa:06:8c:99:a4:be:1f:82:0a:5b:7f:12:d9:96:5b:07:0e: 4b:99:db:36:c5:3c:0f:5c:bb:cb:20:32:e6:78:b3:41:f7:a6: 99:6b:5e:24:81:36:77:8b:0d:ec:38:e6:cc:62:01:bd:3e:05: 20:96:66:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzkwQjExMC8GA1UEBRMoMDdFRUNDNDQyNkE4QzMzRDQ1OTBCQ0RBMTJEOTc1MEM0 OTA0ODU3RDAeFw0yNDA1MTUwODQ4MzBaFw0yNDA1MjIwODQ4MzBaMBgxFjAUBgNV BAMTDTY2NDQ3NmRmLWIzOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIDiBO1Lwjw6v5QgrswhOO7KESpQZcWnZh1nJz99IiiXePF+9M6SOg6hDansFg 0eiCUgRzSCGD+TzmbW38UxM/kmoqDNIqWhD0rRR/HIiCLvcvT2cqmxCCN4Q2QA3o l+5b4Ge85L69IujLzIM5YGrvjpEFaDvVTE3v98Z4VnvzwDTaF6yUEi0NQpl9yrj6 RPCFi05ZaxawstISjG9WQvqUgiEXul36ZbjuOWBEMtNHGrf4hSUCIVo/8KmD/Bha yT9JvP7uGrm+J/nHRRxJPq9VB/2We7Z+rylwByHI0bpRDc+LAsLn1SKj23jhXkKw 77/kAhm5TXOF8L7a701lu9G5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvJw/2UC3 D0/RmDNrnbt7nkWlng4wHwYDVR0jBBgwFoAUB+7MRCaowz1FkLzaEtl1DEkEhX0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDOTBCLzkyODQyNzAyRTcx MDExRUVBOURCQzI1MkM0RjlBRTAyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhY MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQi03TVJDYW93ejFGa0x6YUV0bDFERWtFaFgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD OTBCLzkyODQyNzAyRTcxMDExRUVBOURCQzI1MkM0RjlBRTAyL0ItN01SQ2Fvd3ox RmtMemFFdGwxREVrRWhYMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIocfcTJy99a0w6iekdV9tE+NMyelpgXjRDt33cRR7C8lWmUVfR1EXR+ W2nKVBYzrLLOCEUCAuTZo+4c/YoMfVw8YRqjcamHQXpQDGFV4sVoAP/CipP+oarn D9SQwQN+2xp7nCRVOwYnlDAotkx/nJPb8QngAvfH+ZZsRjX5hbBVcskhOZou2I4X O/GTfFK6P3962s/kQypAe4yT4jrJb65A8E+R/gNJ3gnVmet3yfDsu5jC5V56f/3T wzmS74AAYGk0evALomn6BoyZpL4fggpbfxLZllsHDkuZ2zbFPA9cu8sgMuZ4s0H3 pplrXiSBNneLDew45sxiAb0+BSCWZic= -----END CERTIFICATE-----Generated at Wed May 15 09:27:31 2024 by rpki-client on console-fra.rpki-client.org