$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: J15JI5Ma6TK8dboo/orlkzfY6GxP01d4/jzD24R8Ws8= Subject key identifier: E6:F0:87:DB:43:AD:D9:EB:36:2D:94:34:E6:EB:70:CC:E7:54:21:58 Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 06B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0D78 Signing time: Mon 06 May 2024 23:08:21 +0000 Manifest this update: Mon 06 May 2024 23:08:21 +0000 Manifest next update: Mon 13 May 2024 23:08:21 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: wZ3pJLwUrSged6bClEyf2JNJFuKAiZPVTDYpo56JS4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: May 6 23:08:21 2024 GMT Not After : May 13 23:08:21 2024 GMT Subject: CN=663962e5-dfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:df:66:e8:23:ba:24:d7:b4:89:69:85:57: 5d:10:2b:48:4b:50:33:c0:88:6e:56:52:a6:cb:1d: 8f:15:10:70:9a:81:d1:42:35:6f:a3:f1:06:20:f8: a6:b8:34:7b:33:d1:84:43:45:33:b8:e6:70:22:fe: 50:70:15:e2:55:d0:c1:47:43:84:ef:1f:a2:f7:93: ba:ef:bd:e9:7d:59:84:5c:46:de:91:37:b0:50:3f: 69:d5:b1:1f:7f:31:99:16:0a:d3:fe:11:60:97:0a: 33:64:35:72:6a:1c:57:75:3d:d0:a8:e0:c0:ca:b4: d9:c2:90:cf:70:25:60:44:34:d4:2c:11:5f:9a:10: ef:9c:c7:5d:45:ba:ba:e0:8d:4e:91:76:db:53:4a: 14:2a:43:ab:d1:db:a4:91:3f:3d:0d:1e:0c:54:f4: 12:f0:7e:be:34:e1:67:3b:f6:9d:dc:b5:02:91:73: 4b:50:b5:12:55:2a:3f:85:a0:87:72:2f:f7:9f:67: e1:89:75:ec:55:69:52:8b:78:91:78:05:1c:0e:62: 28:6b:64:1d:7a:ab:4c:d8:44:3b:e5:9c:95:62:7e: 72:74:c2:d3:98:25:56:3a:0b:40:84:f5:fc:57:cd: 01:37:7e:17:c8:07:01:84:d9:dc:a3:4d:05:78:48: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F0:87:DB:43:AD:D9:EB:36:2D:94:34:E6:EB:70:CC:E7:54:21:58 X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:96:5f:ee:f7:02:65:d1:40:34:fa:2a:89:d6:dc:83:57:b3: 38:3f:45:6a:a7:57:db:4d:fc:e6:b5:e6:c0:1b:c2:12:6f:e9: 21:0e:e3:5b:10:d7:de:26:e0:d7:bc:29:c4:56:8c:ad:7e:1b: d2:86:ae:b0:ce:07:4f:26:3e:2d:b8:dd:90:69:9a:b2:35:61: 4a:58:ba:0d:63:f0:b3:c8:a4:65:45:bf:b0:2e:6d:3b:58:6b: b8:40:40:ef:51:0f:62:43:4a:57:4b:08:e3:b8:13:c6:8d:3d: f4:7d:02:fb:af:c4:b9:22:c4:f2:78:e7:3a:41:ee:89:0d:47: 4a:39:5d:bb:f7:d6:90:6d:3f:c7:cc:ab:f8:32:0b:0f:c6:0d: b4:80:bb:e6:7a:05:7f:bd:27:7a:90:fc:1e:4f:88:d8:49:d1: 6e:4d:f9:6a:ff:46:bd:60:11:44:d1:6a:2b:b3:4b:ad:78:e7: ef:f7:66:04:e2:eb:82:26:ac:8d:6a:7a:6a:a9:fd:2a:12:82: 24:32:e6:d8:d8:30:40:ae:e2:f1:d0:cf:d6:7f:fd:ff:c3:c7: 9c:42:12:44:cf:d6:d7:c8:78:1f:51:5f:60:bc:24:60:31:37: bb:d3:63:ea:ab:7e:37:0d:d7:44:4d:1c:3b:17:59:1b:d1:e8: 2a:49:aa:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjQwNTA2MjMwODIxWhcNMjQwNTEzMjMwODIxWjAYMRYwFAYD VQQDEw02NjM5NjJlNS1kZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWPfZugjuiTXtIlphVddECtIS1AzwIhuVlKmyx2PFRBwmoHRQjVvo/EGIPim uDR7M9GEQ0UzuOZwIv5QcBXiVdDBR0OE7x+i95O6773pfVmEXEbekTewUD9p1bEf fzGZFgrT/hFglwozZDVyahxXdT3QqODAyrTZwpDPcCVgRDTULBFfmhDvnMddRbq6 4I1OkXbbU0oUKkOr0dukkT89DR4MVPQS8H6+NOFnO/ad3LUCkXNLULUSVSo/haCH ci/3n2fhiXXsVWlSi3iReAUcDmIoa2QdeqtM2EQ75ZyVYn5ydMLTmCVWOgtAhPX8 V80BN34XyAcBhNnco00FeEiBmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObwh9tD rdnrNi2UNObrcMznVCFYMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ll/u9wJl0UA0+iqJ1tyDV7M4P0Vqp1fbTfzmtebAG8ISb+khDuNb ENfeJuDXvCnEVoytfhvShq6wzgdPJj4tuN2QaZqyNWFKWLoNY/CzyKRlRb+wLm07 WGu4QEDvUQ9iQ0pXSwjjuBPGjT30fQL7r8S5IsTyeOc6Qe6JDUdKOV2799aQbT/H zKv4MgsPxg20gLvmegV/vSd6kPweT4jYSdFuTflq/0a9YBFE0Wors0uteOfv92YE 4uuCJqyNanpqqf0qEoIkMubY2DBAruLx0M/Wf/3/w8ecQhJEz9bXyHgfUV9gvCRg MTe702Pqq343DddETRw7F1kb0egqSaqo -----END CERTIFICATE-----Generated at Tue May 7 01:58:23 2024 by rpki-client on console-fra.rpki-client.org