$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: X7E28uJ5As+jjgpOULMtM26VY9G+lTIvmXaRjgpq7IM= Subject key identifier: C7:08:B7:8F:DE:A4:01:3A:0A:99:A0:A0:AD:8F:9F:C5:19:80:DA:C8 Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 03FD Signing time: Sun 05 May 2024 02:17:29 +0000 Manifest this update: Sun 05 May 2024 02:17:29 +0000 Manifest next update: Sun 12 May 2024 02:17:29 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: RYc+tr6IpD8trQbA+hXHl0cgRfQpNxO4X/pHS/gCvbk=) 2: 65303DE225D211ECB2CCF633C4F9AE02.roa (hash: P9aJahu3U3M4rS1dS/pRTIBjHHxz1UfX4P2yDMw8ksE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: May 5 02:17:29 2024 GMT Not After : May 12 02:17:29 2024 GMT Subject: CN=6636ec39-f685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:fc:a9:63:73:28:11:0b:25:10:19:6c:76: 00:48:0a:c7:af:1f:44:c4:41:f7:a8:3f:44:99:ad: 61:71:27:7c:92:8a:3f:26:bd:fe:ab:c6:0a:d3:8c: f7:c8:ee:29:f8:4f:8e:17:7a:6b:5c:5e:d2:fa:19: 94:1b:c9:81:c1:8c:10:eb:6c:15:a4:d6:5d:ed:ec: 52:f3:c9:25:59:53:91:46:01:3c:f5:eb:6e:1d:46: 78:37:da:c5:2a:b6:d4:ce:27:fd:52:fb:a2:6c:7a: a7:15:20:06:89:6b:40:44:c3:bf:de:85:6c:f1:d6: 2c:2d:7f:e7:0a:d4:14:8b:0b:ac:a2:f8:48:a2:5c: d9:a6:0b:13:31:cc:d1:88:08:c2:87:b3:01:19:bd: 40:c4:e1:c2:48:b4:db:93:71:bc:91:ae:28:4a:cb: 9f:81:ea:16:17:78:71:17:93:7e:47:4f:9b:1f:4a: 76:05:da:0e:9a:eb:a2:28:63:9a:2d:cb:d1:f7:c0: c7:54:5a:04:b0:0f:2c:12:bd:bd:1d:b8:89:b0:b1: ed:a9:78:a6:df:e0:3c:20:17:22:15:4a:95:b0:61: 85:7b:e3:3b:0e:d4:9a:3f:54:ff:7e:4d:6a:39:62: 0c:dc:de:f1:f4:87:d6:ef:81:fa:c7:61:3d:2a:7c: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:B7:8F:DE:A4:01:3A:0A:99:A0:A0:AD:8F:9F:C5:19:80:DA:C8 X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:da:ed:e9:7c:5f:98:f8:f0:5a:25:41:88:68:44:f1:0a:a6: 18:c2:a7:e0:b1:b1:6f:d6:10:73:f4:d6:b4:05:40:f9:bb:e0: b0:fb:c4:f5:df:f9:83:2d:13:58:0f:cb:97:06:4e:d9:f9:19: fd:50:be:7b:2b:46:0c:bc:d0:9b:2b:5f:4b:fb:79:24:a9:27: ef:fb:04:bb:b6:04:92:1a:ea:e5:5c:dd:39:16:ba:1e:a1:f3: 7f:46:3d:e2:58:a9:41:9f:98:7a:97:35:70:31:0c:72:50:3b: 8a:85:3f:09:a9:b0:c5:52:d8:a5:36:7e:e0:c1:e5:40:14:80: aa:64:fa:c3:5b:ad:59:5e:7f:63:4a:f9:83:c9:b9:25:a9:f4: 40:0b:ee:fd:41:ae:0c:88:a0:ed:2b:98:27:62:3e:c9:f9:14: 45:1c:49:3f:55:b2:60:d6:24:67:e5:9b:75:a4:26:52:bd:d3: 8b:04:d2:9f:70:23:be:8f:36:9a:0d:18:04:92:41:f4:69:5f: f1:8c:59:77:95:13:ac:55:3f:09:39:08:60:61:ca:c0:47:d2: 26:72:6c:78:99:33:d3:e3:71:8e:20:be:9e:44:6d:1b:00:c0: 13:69:3b:63:a8:b5:bb:65:7f:3d:4a:50:d3:84:80:0f:90:c7: 2c:e4:94:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjQwNTA1MDIxNzI5WhcNMjQwNTEyMDIxNzI5WjAYMRYwFAYD VQQDEw02NjM2ZWMzOS1mNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp78qWNzKBELJRAZbHYASArHrx9ExEH3qD9Ema1hcSd8koo/Jr3+q8YK04z3 yO4p+E+OF3prXF7S+hmUG8mBwYwQ62wVpNZd7exS88klWVORRgE89etuHUZ4N9rF KrbUzif9UvuibHqnFSAGiWtARMO/3oVs8dYsLX/nCtQUiwusovhIolzZpgsTMczR iAjCh7MBGb1AxOHCSLTbk3G8ka4oSsufgeoWF3hxF5N+R0+bH0p2BdoOmuuiKGOa LcvR98DHVFoEsA8sEr29HbiJsLHtqXim3+A8IBciFUqVsGGFe+M7DtSaP1T/fk1q OWIM3N7x9IfW74H6x2E9KnyP+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcIt4/e pAE6CpmgoK2Pn8UZgNrIMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb2u3pfF+Y+PBaJUGIaETxCqYYwqfgsbFv1hBz9Na0BUD5u+Cw+8T1 3/mDLRNYD8uXBk7Z+Rn9UL57K0YMvNCbK19L+3kkqSfv+wS7tgSSGurlXN05Froe ofN/Rj3iWKlBn5h6lzVwMQxyUDuKhT8JqbDFUtilNn7gweVAFICqZPrDW61ZXn9j SvmDybklqfRAC+79Qa4MiKDtK5gnYj7J+RRFHEk/VbJg1iRn5Zt1pCZSvdOLBNKf cCO+jzaaDRgEkkH0aV/xjFl3lROsVT8JOQhgYcrAR9Imcmx4mTPT43GOIL6eRG0b AMATaTtjqLW7ZX89SlDThIAPkMcs5JRN -----END CERTIFICATE-----Generated at Sun May 5 03:47:45 2024 by rpki-client on console-fra.rpki-client.org