$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: SkC1/Xqx6yfc7U+xXAJ/Kx+iWm6TUvGj0RS0HzEsqvM= Subject key identifier: 01:FC:B6:C3:51:35:28:DF:E3:9B:4D:7F:B3:FD:03:16:84:86:35:06 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 3432 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 33F8 Signing time: Mon 06 May 2024 14:24:05 +0000 Manifest this update: Mon 06 May 2024 14:24:05 +0000 Manifest next update: Mon 13 May 2024 14:24:05 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: 0YnVio0+Gqa3ZzodxKfYJl+Gn2uJz/TJ2iO39RwMflE=) 2: 6480462C1F5511EC999E640AC4F9AE02.roa (hash: FGOl/G+64uwQtPqszdubijBBc16NQ5r432NkvWyIy/g=) 3: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: fr8jc0OjrSAvapdmv6mLZQKQ3e4BFRuPxTXrBFPpD+4=) 4: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: c0rx5XUzdJvRjRHOltYTr7X2WQMdZ/lTKL0Od4UdmIA=) 5: F669E30EB64511EC89F8CB43C4F9AE02.roa (hash: 92DcIObdK1A5WMu0qqghPkZ1XrxR9jXChVphqdw6eQg=) 6: 13D46804A47B11E9867CBF58C4F9AE02.roa (hash: dfzoXKpGZSWk6RNHscqU4qOUiyyKtbFuRpR7IJztr3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13362 (0x3432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: May 6 14:24:05 2024 GMT Not After : May 13 14:24:05 2024 GMT Subject: CN=6638e805-cf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:b6:9f:9b:6c:79:f5:66:b4:f0:b8:c6:ec: 02:71:f4:10:cd:81:91:14:f6:92:46:51:2c:9c:25: 22:fa:d0:73:b2:36:4e:a7:88:72:9f:f6:2a:f7:12: 27:bf:e2:c7:78:7e:2d:62:d7:39:28:b8:fa:ed:bb: 6c:a8:28:7f:1b:f7:06:6d:5a:fa:a8:c6:9e:8d:9d: f2:92:6b:79:c4:cc:a0:b0:24:1d:c4:f3:cd:b7:d1: cf:c3:37:89:36:6d:59:69:c4:20:a1:86:b8:65:c4: 81:f1:be:45:9f:91:e3:e0:56:8b:d6:f9:66:aa:0d: 7b:62:79:ee:44:1d:bf:29:c5:7a:7c:72:50:76:f0: 9c:d8:21:0d:39:79:a8:f4:42:00:3f:ce:d4:09:65: e4:46:f1:99:6a:9f:9c:c8:03:2d:02:9d:14:dd:a1: 05:a7:dc:ff:1e:01:46:20:0a:cc:bc:f7:11:40:a6: 9c:7f:0a:24:7c:b8:ec:e3:b4:dc:65:90:07:0b:53: 5a:e5:59:e6:83:d7:b5:d3:72:5c:0f:38:9e:fe:d2: 47:5a:a4:f2:5c:bc:cb:92:1a:31:5c:d3:84:b7:62: 26:55:49:23:a8:e6:c4:a5:13:f5:3e:e3:f0:81:6a: 72:c2:0d:14:8b:5f:24:40:1e:45:2e:b3:2d:d7:1a: 87:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FC:B6:C3:51:35:28:DF:E3:9B:4D:7F:B3:FD:03:16:84:86:35:06 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:08:1e:ab:e2:15:bc:a0:8a:b3:82:26:f3:3b:a4:5c:ef:5e: 0c:a4:da:ad:4a:9b:e5:74:51:dd:a0:fb:ef:5e:9d:bd:82:3a: 5d:1a:3c:35:06:f1:a2:f8:b1:36:f6:12:81:a3:fe:d2:7e:f7: e3:cc:12:ac:23:77:4f:5b:cf:c0:c2:fb:28:46:5a:f0:24:62: 17:ab:53:b0:e7:04:37:ff:94:5e:fa:7b:c6:c6:d5:1a:f2:b4: 3e:03:ca:4f:09:ec:c9:f6:c2:c7:e3:a7:9a:2b:08:dd:e8:bf: a0:9c:21:bd:68:a6:2b:1c:59:ba:3e:c9:43:a5:67:03:21:98: 0f:0d:cb:4f:62:87:ae:01:8e:0e:62:a3:8d:c3:ed:26:b9:e6: ac:88:bb:8c:2e:c6:b4:b1:8e:22:3f:4b:ed:4b:56:ed:d4:b6: db:d8:14:3a:8b:7d:fc:99:08:1e:f6:36:a5:1e:23:80:af:38: 60:97:7e:a4:8b:bc:18:7c:6a:dd:4d:b1:40:73:46:ee:30:b3: ad:74:e8:7f:9e:3e:3d:12:08:e4:e2:86:65:b5:bc:e6:66:97: dd:7c:17:fd:87:fb:90:5b:0b:d2:8a:f5:62:5c:a5:d6:79:7f: 74:77:8c:57:6e:00:93:61:f2:8c:70:09:f1:64:6e:1f:e8:08: 66:bf:61:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjQwNTA2MTQyNDA1WhcNMjQwNTEzMTQyNDA1WjAYMRYwFAYD VQQDEw02NjM4ZTgwNS1jZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqu2n5tsefVmtPC4xuwCcfQQzYGRFPaSRlEsnCUi+tBzsjZOp4hyn/Yq9xIn v+LHeH4tYtc5KLj67btsqCh/G/cGbVr6qMaejZ3ykmt5xMygsCQdxPPNt9HPwzeJ Nm1ZacQgoYa4ZcSB8b5Fn5Hj4FaL1vlmqg17YnnuRB2/KcV6fHJQdvCc2CENOXmo 9EIAP87UCWXkRvGZap+cyAMtAp0U3aEFp9z/HgFGIArMvPcRQKacfwokfLjs47Tc ZZAHC1Na5Vnmg9e103JcDzie/tJHWqTyXLzLkhoxXNOEt2ImVUkjqObEpRP1PuPw gWpywg0Ui18kQB5FLrMt1xqHbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH8tsNR NSjf45tNf7P9AxaEhjUGMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvCB6r4hW8oIqzgibzO6Rc714MpNqtSpvldFHdoPvvXp29gjpdGjw1 BvGi+LE29hKBo/7SfvfjzBKsI3dPW8/AwvsoRlrwJGIXq1Ow5wQ3/5Re+nvGxtUa 8rQ+A8pPCezJ9sLH46eaKwjd6L+gnCG9aKYrHFm6PslDpWcDIZgPDctPYoeuAY4O YqONw+0mueasiLuMLsa0sY4iP0vtS1bt1Lbb2BQ6i338mQge9jalHiOArzhgl36k i7wYfGrdTbFAc0buMLOtdOh/nj49Egjk4oZltbzmZpfdfBf9h/uQWwvSivViXKXW eX90d4xXbgCTYfKMcAnxZG4f6Ahmv2HA -----END CERTIFICATE-----Generated at Mon May 6 17:35:40 2024 by rpki-client on console-fra.rpki-client.org