$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft File: 7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json) Hash identifier: DNcSIkK+Z4iqD/L0/vtOfcq//Q4RCVhJE9IbOWHbsyU= Subject key identifier: 4B:CD:2B:06:3F:95:A6:38:3F:C0:12:85:B3:BC:B3:96:7D:15:21:8A Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF Certificate issuer: /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Certificate serial: 33B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft Manifest number: 33B9 Signing time: Tue 30 Apr 2024 14:34:28 +0000 Manifest this update: Tue 30 Apr 2024 14:34:28 +0000 Manifest next update: Tue 07 May 2024 14:34:28 +0000 Files and hashes: 1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: 6MKRLAQ0e40QHco/O/Y+9LuFli9XylYq88cGqyKbq34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13241 (0x33b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Validity Not Before: Apr 30 14:34:28 2024 GMT Not After : May 7 14:34:28 2024 GMT Subject: CN=66310174-1f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:a3:d1:d0:d8:9b:17:4a:99:bd:f0:08:d9: b1:55:44:7d:9f:fb:02:e2:e6:ad:45:14:fe:f9:b5: ba:3b:0f:39:8c:ea:d5:dd:59:ec:e1:eb:c8:2b:7a: ce:3b:2a:d3:7d:a0:45:c5:53:4b:f3:3a:4a:2a:b0: 91:e6:5b:2d:1f:e7:6c:82:19:89:11:05:ec:0a:78: 60:c3:e2:2d:16:ee:cc:65:8a:aa:11:a2:47:c1:04: cc:3b:30:05:56:24:7d:f5:97:07:7d:49:fb:2c:0b: ce:2e:07:ad:f4:cb:e6:08:26:aa:36:bc:17:5f:eb: fd:6a:e8:bd:75:79:91:c5:b4:da:7a:9b:60:3b:37: 0f:00:13:d6:e2:62:d7:f2:79:d5:81:8c:e1:6b:d5: 82:83:56:9b:05:53:2e:90:2e:d8:86:fc:32:e6:08: 19:ca:26:d0:17:6d:2e:79:45:c1:d8:71:20:13:6a: 9b:68:d3:8a:a2:37:b1:d0:64:a3:d5:08:f9:b1:b3: 2c:5f:46:44:13:d4:30:55:38:41:f3:7b:86:c4:77: bd:a6:a1:75:76:83:c2:b0:e8:b3:60:a2:74:b0:39: f0:4c:e0:63:53:a7:fc:5d:d5:75:d7:c6:eb:56:04: 90:bb:ee:a9:7d:48:16:8f:6e:39:47:e1:19:26:14: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CD:2B:06:3F:95:A6:38:3F:C0:12:85:B3:BC:B3:96:7D:15:21:8A X509v3 Authority Key Identifier: keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e9:c9:d9:df:a8:5d:f9:04:1e:4c:ea:63:aa:a7:07:2e:ce: d6:67:88:c5:16:7e:5c:dc:bb:03:41:39:79:9b:07:9f:6b:f3: a5:03:34:26:97:3b:2c:25:3e:c6:f4:5c:c2:91:9c:ee:d4:2c: da:11:fc:c5:b5:fb:8b:c5:bc:30:28:02:bc:e3:8f:81:12:81: 83:38:7e:53:5c:78:d2:b6:8f:81:8b:cd:39:b4:00:8b:b8:d8: 4e:f1:f8:68:5b:7b:4d:ad:20:2c:80:17:a0:56:94:ab:d1:f3: 13:68:1f:9d:9e:66:e1:b0:8b:f8:0a:d4:cb:9c:57:3c:53:4f: 87:52:cf:68:d7:f2:2e:16:37:84:40:ae:0e:92:e8:18:27:36: c5:56:1b:d6:c9:46:9a:b3:96:ab:81:8f:9e:4b:5f:41:1b:c1: 19:8c:b3:25:e3:82:38:04:cd:15:64:a8:8e:31:8e:0d:f8:18: 9f:a7:b7:2c:9b:83:82:3d:20:2a:a1:0b:b9:9f:1f:46:45:48: 2d:50:cd:28:21:e1:de:d4:56:a0:49:57:09:73:e9:de:91:67: 07:9b:c7:ba:30:4d:f9:60:09:71:7f:46:a2:e0:93:64:b0:03: 89:02:00:7c:11:d7:7e:d9:3a:15:be:dc:02:6e:19:3f:5b:be: 0e:09:fa:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy QjYxMjhGQUYwHhcNMjQwNDMwMTQzNDI4WhcNMjQwNTA3MTQzNDI4WjAYMRYwFAYD VQQDEw02NjMxMDE3NC0xZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSGj0dDYmxdKmb3wCNmxVUR9n/sC4uatRRT++bW6Ow85jOrV3Vns4evIK3rO OyrTfaBFxVNL8zpKKrCR5lstH+dsghmJEQXsCnhgw+ItFu7MZYqqEaJHwQTMOzAF ViR99ZcHfUn7LAvOLget9MvmCCaqNrwXX+v9aui9dXmRxbTaeptgOzcPABPW4mLX 8nnVgYzha9WCg1abBVMukC7Yhvwy5ggZyibQF20ueUXB2HEgE2qbaNOKojex0GSj 1Qj5sbMsX0ZEE9QwVThB83uGxHe9pqF1doPCsOizYKJ0sDnwTOBjU6f8XdV118br VgSQu+6pfUgWj245R+EZJhT/gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvNKwY/ laY4P8AShbO8s5Z9FSGKMB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz YW9yY1dqRHBtb1VyWVNqNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr6cnZ36hd+QQeTOpjqqcHLs7WZ4jFFn5c3LsDQTl5mwefa/OlAzQm lzssJT7G9FzCkZzu1CzaEfzFtfuLxbwwKAK844+BEoGDOH5TXHjSto+Bi805tACL uNhO8fhoW3tNrSAsgBegVpSr0fMTaB+dnmbhsIv4CtTLnFc8U0+HUs9o1/IuFjeE QK4OkugYJzbFVhvWyUaas5argY+eS19BG8EZjLMl44I4BM0VZKiOMY4N+Bifp7cs m4OCPSAqoQu5nx9GRUgtUM0oIeHe1FagSVcJc+nekWcHm8e6ME35YAlxf0ai4JNk sAOJAgB8Edd+2ToVvtwCbhk/W74OCfoZ -----END CERTIFICATE-----Generated at Tue Apr 30 15:52:30 2024 by rpki-client on console-fra.rpki-client.org