$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json) Hash identifier: nIwonrvAVb+Sz8QFa+IWycu/NDt+D0xzGhJoazsQt3I= Subject key identifier: 6B:B7:B9:D5:F7:71:52:5A:E6:83:14:68:B0:BB:43:B9:82:EF:43:FA Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft Manifest number: 01C7 Signing time: Wed 01 May 2024 04:44:35 +0000 Manifest this update: Wed 01 May 2024 04:44:34 +0000 Manifest next update: Wed 08 May 2024 04:44:34 +0000 Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: AD/snu1NzuMNa+W3savOpEH/gKGjJaBQDP1N0I4kqSw=) 2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: CWQRhDcsRk+PrAPNNvmnTDq9CpqjytNv9S7aPPwX5Y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Validity Not Before: May 1 04:44:34 2024 GMT Not After : May 8 04:44:34 2024 GMT Subject: CN=6631c8b2-f397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:b2:10:bc:df:d3:3b:d2:05:36:5c:42:78: 6c:ae:f4:dc:50:38:2f:4a:03:2c:77:d6:43:f9:ed: 7a:b8:37:99:d3:91:ee:07:17:e6:12:07:9b:09:69: 1b:aa:e5:b2:53:54:3b:5a:c1:27:42:f8:9b:84:a7: fd:ef:56:f1:29:eb:42:b9:83:68:18:3c:16:e2:97: 70:c0:1c:0c:d1:8c:09:c7:9f:5b:3e:a9:ff:41:97: 65:9d:e8:49:a0:00:a1:0b:1f:d7:7c:8f:4b:e7:6a: 66:49:6c:20:7f:09:6c:22:ef:72:39:16:89:2c:d5: 18:8e:7d:f9:1c:15:38:d2:1f:cf:24:06:28:ed:38: df:b6:85:18:78:e4:3b:5d:e9:ce:2b:2f:26:e8:8e: a5:8e:11:7a:ee:f5:77:63:24:47:39:2b:9d:1e:a0: d6:12:62:9b:19:d4:da:c0:21:1e:05:1e:76:e5:d8: b8:60:7c:81:9d:a4:7f:cb:f2:69:e3:64:97:4f:91: 58:2e:dc:34:40:be:69:a6:ac:1c:8e:65:14:8d:71: b8:4e:58:e9:48:c2:ed:56:d2:7a:0f:75:3e:7e:8c: 83:59:15:86:78:66:85:f9:7c:f7:96:ca:b5:1b:64: 63:2c:10:97:04:8b:bc:52:24:d2:24:26:c6:7a:cd: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B7:B9:D5:F7:71:52:5A:E6:83:14:68:B0:BB:43:B9:82:EF:43:FA X509v3 Authority Key Identifier: keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:1c:36:84:81:22:f2:ea:34:c5:dd:dd:43:bd:ae:df:f7:23: 46:37:ff:18:64:ad:4d:cc:bb:b5:89:e8:18:f8:6e:13:db:1c: 8f:be:36:b1:ad:06:9e:0e:be:d3:e5:c5:63:63:9d:dd:c9:ef: 32:b1:4c:55:8f:f9:9a:9e:bd:ba:c3:23:68:ce:95:77:4e:71: 03:10:25:b8:f9:7a:5c:2c:e2:ec:a2:a6:2b:85:fe:6b:58:cb: c1:52:86:91:04:45:4f:1b:83:c6:13:02:df:b3:29:32:d3:ee: 83:15:c4:75:ff:f5:6c:0e:a4:fa:64:d4:81:c7:db:73:ee:64: b1:83:31:c7:03:26:5a:08:6c:c8:3a:0c:bd:68:bc:fe:4e:cc: 79:56:5f:7d:45:c1:65:40:66:22:03:57:55:be:1c:83:66:fa: c2:64:68:6e:93:f4:e0:e6:36:50:38:bb:9e:e6:5c:9b:42:c5: d1:73:19:58:3f:28:5d:52:ef:11:f5:6c:59:3e:dd:54:33:2d: 14:e2:bc:5c:17:ee:13:68:9b:9f:6e:e7:82:41:a4:c8:e5:73: ef:03:80:c0:7d:9f:cf:87:43:ff:ca:ab:05:07:90:8d:ef:06: 50:a8:c5:9c:e9:e4:35:fa:5f:c4:12:a0:37:21:d9:01:11:33: 74:e2:54:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYzMzgxMTAvBgNVBAUTKDcwQ0Q0Q0QxM0UyRTM3N0U1RTVDMzdBQkJDNzk3RUVE RTZCNjYyMUIwHhcNMjQwNTAxMDQ0NDM0WhcNMjQwNTA4MDQ0NDM0WjAYMRYwFAYD VQQDEw02NjMxYzhiMi1mMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv06yELzf0zvSBTZcQnhsrvTcUDgvSgMsd9ZD+e16uDeZ05HuBxfmEgebCWkb quWyU1Q7WsEnQvibhKf971bxKetCuYNoGDwW4pdwwBwM0YwJx59bPqn/QZdlnehJ oAChCx/XfI9L52pmSWwgfwlsIu9yORaJLNUYjn35HBU40h/PJAYo7TjftoUYeOQ7 XenOKy8m6I6ljhF67vV3YyRHOSudHqDWEmKbGdTawCEeBR525di4YHyBnaR/y/Jp 42SXT5FYLtw0QL5ppqwcjmUUjXG4TljpSMLtVtJ6D3U+foyDWRWGeGaF+Xz3lsq1 G2RjLBCXBIu8UiTSJCbGes262QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGu3udX3 cVJa5oMUaLC7Q7mC70P6MB8GA1UdIwQYMBaAFHDNTNE+Ljd+Xlw3q7x5fu3mtmIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjMzOC9EMjExMTdEQzA0 M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4zNWVYRGVydkhsLTdlYTJZ aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMU0wVDR1TjM1ZVhEZXJ2SGwtN2VhMllocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjMzOC9EMjExMTdEQzA0M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4z NWVYRGVydkhsLTdlYTJZaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOHDaEgSLy6jTF3d1Dva7f9yNGN/8YZK1NzLu1iegY+G4T2xyPvjax rQaeDr7T5cVjY53dye8ysUxVj/manr26wyNozpV3TnEDECW4+XpcLOLsoqYrhf5r WMvBUoaRBEVPG4PGEwLfsyky0+6DFcR1//VsDqT6ZNSBx9tz7mSxgzHHAyZaCGzI Ogy9aLz+Tsx5Vl99RcFlQGYiA1dVvhyDZvrCZGhuk/Tg5jZQOLue5lybQsXRcxlY PyhdUu8R9WxZPt1UMy0U4rxcF+4TaJufbueCQaTI5XPvA4DAfZ/Ph0P/yqsFB5CN 7wZQqMWc6eQ1+l/EEqA3IdkBETN04lQW -----END CERTIFICATE-----Generated at Wed May 1 05:59:05 2024 by rpki-client on console-fra.rpki-client.org