$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: oYSUsC58JkNBntqNTmRiB+Zh1RGYQC0A+MNgyr528vM= Subject key identifier: E4:D1:0E:49:5D:F1:4D:04:81:6F:05:A5:36:C7:DB:14:4C:04:EE:AE Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 33BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 33BE Signing time: Wed 24 Apr 2024 15:26:27 +0000 Manifest this update: Wed 24 Apr 2024 15:26:27 +0000 Manifest next update: Wed 01 May 2024 15:26:27 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: 2cZOKsSa/bgjIXxrWf9Ok8Q7DVEWNPWD3Nmf7YCAMH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13246 (0x33be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Apr 24 15:26:27 2024 GMT Not After : May 1 15:26:27 2024 GMT Subject: CN=662924a3-7500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:b4:64:7c:53:50:f1:c9:49:2b:48:93:06: e7:03:a2:70:53:38:39:5e:85:34:96:08:3f:04:37: 9c:a6:58:04:7b:55:02:93:ed:8f:cf:46:13:89:0c: 56:40:ac:45:20:d1:d2:6b:5a:40:c8:f1:24:72:7e: ea:b6:6e:e0:78:2f:d3:47:c2:98:9a:eb:c1:16:ea: 13:dc:41:41:38:c3:ad:5a:5c:fc:33:88:b0:7f:79: 18:d8:3d:6e:c7:f4:28:2d:37:38:64:c4:45:be:d7: 93:38:f6:77:7e:c4:f2:d4:08:eb:91:b4:01:2c:72: 92:2f:50:a4:f7:80:71:98:a8:a8:50:34:cd:7a:9f: 23:b5:4c:28:f9:db:7b:23:2d:03:b4:0d:b0:c3:12: 36:e3:de:5d:93:8a:7c:3d:3a:39:74:7c:15:91:78: 08:c6:84:51:26:c0:9c:13:db:43:c1:6c:11:98:e7: 90:f4:35:31:92:34:bb:22:a3:12:24:64:20:74:16: bd:d2:17:1b:99:3f:4f:ad:ae:3f:db:ca:0f:bc:78: 35:fe:b0:89:0a:94:1b:2c:8d:b1:75:5b:8a:6e:a0: 02:a5:34:3d:46:3d:92:10:4b:62:58:32:a0:f2:28: aa:23:5c:11:91:1c:b3:3e:71:97:c1:36:a7:ae:b6: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D1:0E:49:5D:F1:4D:04:81:6F:05:A5:36:C7:DB:14:4C:04:EE:AE X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3e:34:ce:9c:2a:71:37:82:03:54:94:a8:0d:70:62:c3:9a: d5:24:1d:3c:0a:2e:b3:99:66:12:c6:f3:8b:a3:1f:1b:01:e8: fd:10:76:17:b9:3e:b1:ae:0c:8e:c0:f7:3e:e9:31:f6:6f:62: 0f:ea:7b:67:00:1b:56:e4:59:e0:ef:52:c6:a2:ee:c5:1c:19: 40:75:46:55:c3:5e:ff:df:03:3b:28:d1:cf:c8:70:88:9e:50: a7:5c:05:ff:d3:4f:98:09:dd:ab:d9:24:dc:cc:e1:1b:aa:fe: 40:cc:18:db:7a:94:68:52:de:c7:02:07:a2:ae:b4:fd:4c:ba: 38:7f:81:e5:4d:33:9c:c5:d4:30:91:78:c6:2d:89:3f:59:74: 21:16:5a:f3:97:02:8e:f8:77:a0:5e:e7:7b:93:75:03:5f:1d: 14:a7:a8:76:b7:86:a1:b8:57:ff:b1:60:13:33:62:16:9e:01: f5:51:88:25:e2:b1:c4:84:87:d7:6c:0c:37:29:4e:c9:f5:f2: 18:40:b4:19:1f:fd:ae:d7:92:d5:ef:37:d2:99:86:90:78:67: d8:05:06:d5:db:45:70:cd:da:13:28:4b:68:a1:c7:3f:90:85: 81:73:94:dd:fd:4d:e4:0f:88:32:04:23:9f:ac:91:a8:03:59: f9:9f:b4:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjQwNDI0MTUyNjI3WhcNMjQwNTAxMTUyNjI3WjAYMRYwFAYD VQQDEw02NjI5MjRhMy03NTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Vq0ZHxTUPHJSStIkwbnA6JwUzg5XoU0lgg/BDecplgEe1UCk+2Pz0YTiQxW QKxFINHSa1pAyPEkcn7qtm7geC/TR8KYmuvBFuoT3EFBOMOtWlz8M4iwf3kY2D1u x/QoLTc4ZMRFvteTOPZ3fsTy1AjrkbQBLHKSL1Ck94BxmKioUDTNep8jtUwo+dt7 Iy0DtA2wwxI2495dk4p8PTo5dHwVkXgIxoRRJsCcE9tDwWwRmOeQ9DUxkjS7IqMS JGQgdBa90hcbmT9Pra4/28oPvHg1/rCJCpQbLI2xdVuKbqACpTQ9Rj2SEEtiWDKg 8iiqI1wRkRyzPnGXwTanrraHWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTRDkld 8U0EgW8FpTbH2xRMBO6uMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6PjTOnCpxN4IDVJSoDXBiw5rVJB08Ci6zmWYSxvOLox8bAej9EHYX uT6xrgyOwPc+6TH2b2IP6ntnABtW5Fng71LGou7FHBlAdUZVw17/3wM7KNHPyHCI nlCnXAX/00+YCd2r2STczOEbqv5AzBjbepRoUt7HAgeirrT9TLo4f4HlTTOcxdQw kXjGLYk/WXQhFlrzlwKO+HegXud7k3UDXx0Up6h2t4ahuFf/sWATM2IWngH1UYgl 4rHEhIfXbAw3KU7J9fIYQLQZH/2u15LV7zfSmYaQeGfYBQbV20VwzdoTKEtoocc/ kIWBc5Td/U3kD4gyBCOfrJGoA1n5n7QX -----END CERTIFICATE-----Generated at Wed Apr 24 16:35:45 2024 by rpki-client on console-fra.rpki-client.org