$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: PjpStjo6B81VpXpkVECFPoKXFvofGE/I9L0AaWpfTlA= Subject key identifier: 69:7E:26:43:CB:AC:B7:54:5E:23:DD:37:E7:03:DC:9E:BC:9A:33:9C Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: A7 Signing time: Fri 17 May 2024 06:53:40 +0000 Manifest this update: Fri 17 May 2024 06:53:40 +0000 Manifest next update: Fri 24 May 2024 06:53:40 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: T85LBx5lFVmfYuYcow2bNuwqeXrNa36Ax0rUMCgLaKQ=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: aFp0PQud0q/TjxdCuxh6tVPwMKuXsDlwgaqllQ0z8s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: May 17 06:53:40 2024 GMT Not After : May 24 06:53:40 2024 GMT Subject: CN=6646fef4-c96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:ab:74:d8:0f:a8:6e:87:c2:a2:29:9e:41: 4b:70:a4:ee:96:82:a0:43:76:1c:81:6e:09:08:a6: 44:86:d7:2c:94:f4:1c:0e:a5:ba:f5:92:c8:75:77: 08:21:d9:d1:b7:7d:7e:e0:35:88:6b:2a:6f:29:45: 47:e1:79:19:2a:de:7f:fd:13:92:84:6d:10:4d:ec: c2:03:f8:d3:a5:87:8e:26:10:c6:46:3f:6a:a3:4c: ad:27:36:75:fa:9a:a1:22:be:98:8b:b6:b0:3f:92: 17:9b:4b:3a:f6:87:42:a3:04:7d:4b:d9:d8:db:c4: 6b:d6:68:1b:a1:f8:20:d1:ee:dc:00:21:49:4a:79: c8:09:3f:da:99:d6:1f:a5:76:58:13:a9:e3:c2:55: 4b:81:a3:f5:17:8f:66:65:d6:fc:04:34:88:8f:41: d9:55:f2:78:b9:61:b6:c5:aa:85:72:b2:5d:c5:cd: 9a:c4:6e:55:86:cd:e8:e0:9e:a5:28:32:f3:a8:1a: 01:bb:13:de:13:99:b8:97:6c:a5:61:8a:19:b8:f5: 55:2a:c6:ed:91:5f:c7:ba:bb:3a:35:f2:46:dc:48: 0d:2e:43:02:26:95:77:e5:ad:a3:a6:40:10:08:39: 2a:33:93:5e:a6:11:fd:aa:27:94:47:93:27:5a:07: e7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7E:26:43:CB:AC:B7:54:5E:23:DD:37:E7:03:DC:9E:BC:9A:33:9C X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a8:43:09:00:f0:35:7f:6a:61:04:71:cd:82:92:6d:bc:91: 04:2b:26:f3:e7:9d:56:d5:82:91:13:b6:eb:b9:d7:b8:fe:af: 6c:af:f9:a1:e2:0d:46:10:eb:82:9e:f8:d6:82:b3:80:93:5d: a8:09:53:73:fc:24:e0:1a:d0:e5:8c:92:cb:99:b1:5f:b2:ef: 1b:00:54:29:77:24:5d:28:13:0f:24:a8:b9:6a:92:c5:21:78: be:01:94:36:23:cb:f0:7b:7a:e2:1f:e1:fd:b7:5a:01:e4:b5: 6e:2c:5a:24:fb:fe:24:8f:ab:52:47:fb:85:0b:21:39:ba:cd: ef:f9:5f:50:bf:0e:98:d2:8d:0d:d0:9d:4d:9e:91:63:a3:3d: 32:c9:61:6f:f4:85:79:19:0a:bf:80:b1:0f:6e:24:ee:bf:1c: ce:a9:fe:a0:77:12:02:37:1c:9f:c3:90:a1:e3:09:f9:ff:b2: 3f:48:b0:ad:f8:0f:b3:39:99:42:ab:f6:45:63:4c:ab:e6:19: e2:bb:43:08:8f:9b:40:8c:c8:db:1c:d4:6b:81:90:82:0a:d4: 3f:19:fc:b0:49:1d:60:82:91:68:86:ef:35:49:78:1a:ef:88: 59:03:dc:4b:dd:49:17:2f:64:cd:1d:df:9c:0e:e2:70:5a:de: 40:ad:68:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjQwNTE3MDY1MzQwWhcNMjQwNTI0MDY1MzQwWjAYMRYwFAYD VQQDEw02NjQ2ZmVmNC1jOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykSrdNgPqG6HwqIpnkFLcKTuloKgQ3YcgW4JCKZEhtcslPQcDqW69ZLIdXcI IdnRt31+4DWIaypvKUVH4XkZKt5//ROShG0QTezCA/jTpYeOJhDGRj9qo0ytJzZ1 +pqhIr6Yi7awP5IXm0s69odCowR9S9nY28Rr1mgbofgg0e7cACFJSnnICT/amdYf pXZYE6njwlVLgaP1F49mZdb8BDSIj0HZVfJ4uWG2xaqFcrJdxc2axG5Vhs3o4J6l KDLzqBoBuxPeE5m4l2ylYYoZuPVVKsbtkV/Hurs6NfJG3EgNLkMCJpV35a2jpkAQ CDkqM5NephH9qieUR5MnWgfnQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl+JkPL rLdUXiPdN+cD3J68mjOcMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqqEMJAPA1f2phBHHNgpJtvJEEKybz551W1YKRE7brude4/q9sr/mh 4g1GEOuCnvjWgrOAk12oCVNz/CTgGtDljJLLmbFfsu8bAFQpdyRdKBMPJKi5apLF IXi+AZQ2I8vwe3riH+H9t1oB5LVuLFok+/4kj6tSR/uFCyE5us3v+V9Qvw6Y0o0N 0J1NnpFjoz0yyWFv9IV5GQq/gLEPbiTuvxzOqf6gdxICNxyfw5Ch4wn5/7I/SLCt +A+zOZlCq/ZFY0yr5hniu0MIj5tAjMjbHNRrgZCCCtQ/GfywSR1ggpFohu81SXga 74hZA9xL3UkXL2TNHd+cDuJwWt5ArWhc -----END CERTIFICATE-----Generated at Fri May 17 08:13:50 2024 by rpki-client on console-fra.rpki-client.org