$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: otwdCKfOxB8n8usXge3yY0J4uSigaGLZ8zR7iLXJpRo= Subject key identifier: 37:3A:03:D9:C5:D9:72:DD:20:52:FF:ED:EB:6F:2F:6B:0C:63:49:72 Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0A90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0A8C Signing time: Mon 06 May 2024 20:20:10 +0000 Manifest this update: Mon 06 May 2024 20:20:10 +0000 Manifest next update: Mon 13 May 2024 20:20:10 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: pxERgvUcq8mbKHV2f1t6eb2Gp5vW2w0Lo3Kv5bQ+ros=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2704 (0xa90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: May 6 20:20:10 2024 GMT Not After : May 13 20:20:10 2024 GMT Subject: CN=66393b7a-52ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:9f:19:c5:f4:82:13:62:f4:14:be:dd:2e: 59:ef:ab:a6:79:09:37:8d:30:8c:94:2c:11:d5:7a: 54:b1:5b:77:71:94:58:67:69:9a:73:4b:51:af:1d: 72:d6:2d:31:9a:23:c3:9f:c1:e1:10:88:9e:e1:62: 9d:11:b3:a4:f3:ac:12:0c:ab:b2:2c:db:8c:1a:98: ac:90:ea:9a:c5:96:95:88:e1:03:f3:de:ea:b2:94: 4a:b6:46:bd:05:91:bd:66:60:e7:81:dc:76:00:d5: 68:4b:15:d4:38:87:12:6a:87:44:b3:79:ed:14:4e: a2:30:fa:e1:5e:c0:9f:d1:5f:01:eb:47:22:5c:69: 52:46:c9:da:a0:51:b3:13:7e:d0:f9:85:a6:90:85: 8d:03:44:c9:ab:3b:83:2a:70:c9:f8:36:9a:02:39: 24:fe:1e:2c:dc:33:a8:cb:9a:32:8c:bd:00:91:5a: 59:e5:6a:83:64:41:d2:d1:63:8a:b5:6e:f9:f8:1b: 95:18:7b:7b:df:c1:64:47:6d:65:88:fc:52:23:d5: d1:92:06:36:58:62:5c:f5:7f:66:03:dd:82:fc:b2: 7e:3e:83:21:bb:95:82:7a:58:f8:20:7c:5c:86:67: 55:ad:92:9c:6b:1c:01:5a:00:87:f0:1c:bf:81:bc: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3A:03:D9:C5:D9:72:DD:20:52:FF:ED:EB:6F:2F:6B:0C:63:49:72 X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:d0:31:d3:28:b2:4b:6a:61:a6:40:98:c0:b5:f5:e4:71:9a: 78:b3:3e:a9:55:52:f0:f7:c2:f1:27:c7:41:3e:fb:e8:d0:2a: f2:60:91:18:15:fe:85:50:22:c6:69:27:50:78:d3:67:eb:c6: 29:d4:98:f7:28:cb:10:81:29:f4:fa:de:c7:db:e4:da:20:ae: 7d:32:71:ab:a2:54:46:3e:0a:88:af:71:09:d5:38:34:18:4a: 2c:be:e9:ef:d7:da:e9:dd:20:57:e0:f7:98:65:c5:09:a2:c0: 38:88:3a:69:12:16:b8:34:b9:3e:8a:e3:3e:f5:33:b6:fe:3b: 86:47:ca:8b:74:44:40:c9:b8:77:82:65:e9:86:d5:ea:cd:81: f3:53:14:9a:5c:5b:b0:a4:2b:a5:33:50:5a:b3:4c:e9:46:74: d6:54:3f:09:bb:f3:8c:46:c0:fb:e1:01:2e:70:9c:24:ac:d8: b6:0b:df:5c:b7:de:35:9e:85:6c:9e:1b:1e:5b:6c:20:12:3f: c7:cb:28:59:8a:f3:cc:c1:04:c6:2d:50:c3:ed:65:b3:22:df: 6b:6c:01:07:27:27:66:8f:03:ea:d4:98:91:c4:9d:77:63:41: 94:ed:91:88:5a:53:a4:04:f5:04:c8:5c:ff:0b:4d:13:24:38: 6a:73:cb:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjQwNTA2MjAyMDEwWhcNMjQwNTEzMjAyMDEwWjAYMRYwFAYD VQQDEw02NjM5M2I3YS01MmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqifGcX0ghNi9BS+3S5Z76umeQk3jTCMlCwR1XpUsVt3cZRYZ2mac0tRrx1y 1i0xmiPDn8HhEIie4WKdEbOk86wSDKuyLNuMGpiskOqaxZaViOED897qspRKtka9 BZG9ZmDngdx2ANVoSxXUOIcSaodEs3ntFE6iMPrhXsCf0V8B60ciXGlSRsnaoFGz E37Q+YWmkIWNA0TJqzuDKnDJ+DaaAjkk/h4s3DOoy5oyjL0AkVpZ5WqDZEHS0WOK tW75+BuVGHt738FkR21liPxSI9XRkgY2WGJc9X9mA92C/LJ+PoMhu5WCelj4IHxc hmdVrZKcaxwBWgCH8By/gbz6XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc6A9nF 2XLdIFL/7etvL2sMY0lyMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ0DHTKLJLamGmQJjAtfXkcZp4sz6pVVLw98LxJ8dBPvvo0CryYJEY Ff6FUCLGaSdQeNNn68Yp1Jj3KMsQgSn0+t7H2+TaIK59MnGrolRGPgqIr3EJ1Tg0 GEosvunv19rp3SBX4PeYZcUJosA4iDppEha4NLk+iuM+9TO2/juGR8qLdERAybh3 gmXphtXqzYHzUxSaXFuwpCulM1Bas0zpRnTWVD8Ju/OMRsD74QEucJwkrNi2C99c t941noVsnhseW2wgEj/HyyhZivPMwQTGLVDD7WWzIt9rbAEHJydmjwPq1JiRxJ13 Y0GU7ZGIWlOkBPUEyFz/C00TJDhqc8uA -----END CERTIFICATE-----Generated at Mon May 6 23:05:41 2024 by rpki-client on console-fra.rpki-client.org