$ rpki-client -vvf rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft File: tEoweljCbW-uB_4_KF7Wo4K0y0M.mft (raw, json) Hash identifier: YCkNtPbAaZhatQ8be4sY1m2qAt0lITqWQiR9oqSJXuI= Subject key identifier: 83:E2:E2:68:29:1A:57:D9:D1:F5:C9:8A:1E:93:2E:22:72:B5:97:54 Authority key identifier: B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43 Certificate issuer: /CN=A9165CEF/serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft Manifest number: 7D Signing time: Fri 17 May 2024 07:21:48 +0000 Manifest this update: Fri 17 May 2024 07:21:47 +0000 Manifest next update: Fri 24 May 2024 07:21:47 +0000 Files and hashes: 1: tEoweljCbW-uB_4_KF7Wo4K0y0M.crl (hash: v7YUQO6BQ3qzoPoKUPSwzcgZhPZREYgeuxS7nP1B7L8=) 2: CC954D50577211EEA63EF217C4F9AE02.roa (hash: MIHALdRegAwOSR+tY0KjiqNifHvVJUSNetMVKVoFfCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165CEF/serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43 Validity Not Before: May 17 07:21:47 2024 GMT Not After : May 24 07:21:47 2024 GMT Subject: CN=6647058b-fe99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:3a:37:6d:66:9e:4d:1b:c7:c5:37:d2:fe: 6b:68:66:3e:95:c3:26:09:4b:b1:cd:e1:b7:2f:a2: 63:d9:fc:f4:12:3f:4b:32:6f:c2:05:f2:9c:07:7c: bf:f5:30:86:b1:20:e9:66:e7:ce:6f:0e:d4:ec:74: f6:de:46:e2:fa:4e:ca:e7:3b:4e:61:0d:9d:dd:fa: 04:69:2d:f5:ec:5c:cc:56:47:c6:f6:03:fc:fd:aa: 51:bc:96:77:8a:58:65:2b:0b:e5:a7:4b:0c:4d:4b: fe:75:91:10:61:4e:e9:5f:d9:9d:0d:e3:8c:da:f7: c1:a1:41:77:85:ed:9e:54:27:3c:97:b9:1c:7e:00: 2c:9b:dc:88:4c:76:20:fc:e0:0f:4d:e4:5c:b8:ce: 81:3c:8c:8f:07:79:12:a0:2d:12:b0:12:6b:ea:e7: f3:c6:a5:d7:fd:97:1b:7e:75:57:b3:be:01:4d:1a: 2f:c4:96:47:47:96:84:4c:5c:53:f5:61:52:c8:18: 8a:ce:c0:dc:de:79:81:2a:9d:52:9e:75:44:5c:1c: 8a:db:51:2a:5b:64:6a:4d:46:a1:52:70:cb:30:65: 1b:ba:f0:51:e3:75:ce:9d:b2:8c:ff:f5:fe:55:48: 24:8c:37:cd:ee:b4:3c:5a:8c:dd:67:ea:d3:4f:6f: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E2:E2:68:29:1A:57:D9:D1:F5:C9:8A:1E:93:2E:22:72:B5:97:54 X509v3 Authority Key Identifier: keyid:B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d9:cb:38:4a:7a:71:fd:47:e2:23:b5:eb:37:cc:d9:85:4a: 8a:d0:d3:42:13:50:08:c1:64:7b:cc:d3:7d:2a:b7:bc:b2:50: 39:2f:f8:9e:cf:16:66:68:aa:b5:6d:4b:15:65:59:fd:b1:01: 79:dd:5f:f1:07:ba:41:9d:21:3b:b0:70:0f:45:5f:02:00:bf: de:b8:8d:76:32:89:09:3e:11:30:c5:17:e6:d4:c5:23:37:02: 18:6f:ac:b0:cb:60:ab:84:d7:e2:00:a9:20:db:f3:0b:d9:64: c0:e2:66:ac:1a:5a:f6:fb:5c:fb:5c:bd:c5:25:e1:d0:95:d6: 92:64:07:20:2c:0d:4d:b1:df:19:4f:62:38:fa:07:7d:e8:9d: 18:d8:c7:5e:ed:60:61:1f:ca:0f:5d:cb:27:b8:82:43:08:a0: 91:58:41:65:5b:07:5b:6e:41:f2:79:f2:06:df:f7:17:f4:47: 92:fb:7c:08:2a:c9:1c:44:f5:b3:84:f6:93:4a:ef:97:e4:5d: 30:d1:33:0f:86:5e:5f:ad:9b:ca:f9:49:7b:fe:f7:cd:10:a7: 24:69:49:3a:20:ed:40:38:9b:b2:c3:35:fa:fb:75:68:35:11: f6:24:12:d4:b2:07:49:39:94:6b:2c:25:9a:6e:b7:1e:12:b4: cd:ac:e2:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUNFRjExMC8GA1UEBRMoQjQ0QTMwN0E1OEMyNkQ2RkFFMDdGRTNGMjg1RUQ2QTM4 MkI0Q0I0MzAeFw0yNDA1MTcwNzIxNDdaFw0yNDA1MjQwNzIxNDdaMBgxFjAUBgNV BAMTDTY2NDcwNThiLWZlOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMrjo3bWaeTRvHxTfS/mtoZj6VwyYJS7HN4bcvomPZ/PQSP0syb8IF8pwHfL/1 MIaxIOlm585vDtTsdPbeRuL6TsrnO05hDZ3d+gRpLfXsXMxWR8b2A/z9qlG8lneK WGUrC+WnSwxNS/51kRBhTulf2Z0N44za98GhQXeF7Z5UJzyXuRx+ACyb3IhMdiD8 4A9N5Fy4zoE8jI8HeRKgLRKwEmvq5/PGpdf9lxt+dVezvgFNGi/ElkdHloRMXFP1 YVLIGIrOwNzeeYEqnVKedURcHIrbUSpbZGpNRqFScMswZRu68FHjdc6dsoz/9f5V SCSMN83utDxajN1n6tNPb/RZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg+LiaCka V9nR9cmKHpMuInK1l1QwHwYDVR0jBBgwFoAUtEoweljCbW+uB/4/KF7Wo4K0y0Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1Q0VGLzI3NzQ5QzM2NTc3 MjExRUU5REFFNjE1NUM0RjlBRTAyL3RFb3dlbGpDYlctdUJfNF9LRjdXbzRLMHkw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEVvd2VsakNiVy11Ql80X0tGN1dvNEsweTBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 Q0VGLzI3NzQ5QzM2NTc3MjExRUU5REFFNjE1NUM0RjlBRTAyL3RFb3dlbGpDYlct dUJfNF9LRjdXbzRLMHkwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfZyzhKenH9R+Ijtes3zNmFSorQ00ITUAjBZHvM030qt7yyUDkv+J7P FmZoqrVtSxVlWf2xAXndX/EHukGdITuwcA9FXwIAv964jXYyiQk+ETDFF+bUxSM3 AhhvrLDLYKuE1+IAqSDb8wvZZMDiZqwaWvb7XPtcvcUl4dCV1pJkByAsDU2x3xlP Yjj6B33onRjYx17tYGEfyg9dyye4gkMIoJFYQWVbB1tuQfJ58gbf9xf0R5L7fAgq yRxE9bOE9pNK75fkXTDRMw+GXl+tm8r5SXv+980QpyRpSTog7UA4m7LDNfr7dWg1 EfYkEtSyB0k5lGssJZputx4StM2s4ko= -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org