$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: 3KESBdP2CW+3jfQV87Q7GXCCA5U8BiidpjQVWvTpAUM= Subject key identifier: 65:A4:9E:7D:B5:41:89:6D:D1:E7:64:2F:67:7D:65:55:7A:81:CD:D5 Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 05A3 Signing time: Fri 03 May 2024 00:26:31 +0000 Manifest this update: Fri 03 May 2024 00:26:31 +0000 Manifest next update: Fri 10 May 2024 00:26:31 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: 8PjdhhF6fo5glbT8kRtG1XjmkSZ8CeAg9eDTl/yeXTk=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: KcSLME++BOQMBTRQC+XSqkvXAXvHcehRuDs7Bz3m1H8=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: h5Ff8XljvqUKSB781O/sZuQPJjFa3auq7G53KGvGsSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: May 3 00:26:31 2024 GMT Not After : May 10 00:26:31 2024 GMT Subject: CN=66342f37-46a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:41:8c:13:53:30:b0:ea:5b:27:48:37:2e: 13:07:31:76:95:1d:c4:3c:b8:3e:c1:5d:88:2c:bd: 4b:db:e4:8b:32:96:46:d4:5c:42:f3:08:c3:37:dc: b2:4c:45:6e:a8:89:33:8e:a0:3f:47:11:c6:b9:46: 9a:15:c9:0b:7c:38:4e:d3:54:59:3a:75:32:a9:e8: e2:27:5d:86:19:7d:08:bf:4a:d1:ae:9b:e0:ad:18: c9:32:6a:b0:ef:3a:45:76:93:26:d1:87:88:28:ad: d4:89:3a:d1:40:21:a8:12:fc:a8:84:58:84:71:e0: 55:2c:f9:44:09:67:48:96:36:74:8d:31:72:20:4d: 09:49:e8:ad:60:40:dd:cc:e6:4f:5e:01:a4:4d:d8: 7c:c5:cc:77:9d:7a:56:36:d0:01:8d:8c:b3:69:bb: d7:68:a6:1b:e1:a4:c8:71:f7:f4:fa:7f:30:e0:b7: 2e:c0:21:46:17:2c:e9:72:eb:f1:65:89:64:9b:be: 66:5d:3a:f1:ba:c5:02:7e:1f:a5:1c:74:a3:f4:ca: 33:50:78:b5:0a:22:5e:aa:e7:0e:ce:a0:fe:b0:51: 70:3d:00:a2:b4:8a:a2:a8:b9:ce:86:40:a0:32:48: 7f:57:13:a5:6c:d1:b2:38:31:44:d8:78:87:33:3a: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A4:9E:7D:B5:41:89:6D:D1:E7:64:2F:67:7D:65:55:7A:81:CD:D5 X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3f:e2:9a:15:6a:fb:b1:44:86:8f:61:e8:37:5d:28:56:b3: cc:e5:4a:0f:8e:70:43:db:57:e2:ee:fc:5e:41:47:87:96:d2: 90:a5:10:7d:71:ee:a4:53:7f:cf:e3:5d:9f:7e:41:ad:ad:6e: c0:a0:78:39:14:b8:f6:2a:18:29:ed:4d:61:38:4d:a1:40:d4: ee:8c:86:90:8d:24:69:10:14:18:69:0a:a0:80:2e:0a:07:04: cc:ec:2a:08:b4:d9:e5:a9:3d:e3:7c:b6:e0:6e:29:0d:bf:fc: 2a:fa:45:67:1a:63:a5:35:4f:bd:37:c4:ba:54:51:9c:50:aa: b8:84:ee:f5:0d:1e:cc:2c:7d:c0:8d:d2:0b:1b:f5:ac:c1:8d: 37:b4:e8:67:03:2a:9f:5e:6a:a7:93:b3:d9:63:68:51:ea:fa: 46:83:38:aa:2f:1b:3b:af:a0:17:b0:ae:7a:9a:eb:9b:56:ce: 71:86:82:be:26:7e:1d:68:d7:ba:e5:ac:a7:2b:76:78:10:87: 27:13:dc:d9:96:fd:a9:f1:ac:9e:79:6c:5c:4f:00:04:6c:06: 3b:cd:3f:18:05:dc:eb:e1:3d:15:11:82:da:34:ae:95:ba:0a: d8:40:4c:85:bc:dd:df:22:a7:67:23:5b:32:dc:0e:66:c2:ae: 02:7f:b0:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjQwNTAzMDAyNjMxWhcNMjQwNTEwMDAyNjMxWjAYMRYwFAYD VQQDEw02NjM0MmYzNy00NmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlZBjBNTMLDqWydINy4TBzF2lR3EPLg+wV2ILL1L2+SLMpZG1FxC8wjDN9yy TEVuqIkzjqA/RxHGuUaaFckLfDhO01RZOnUyqejiJ12GGX0Iv0rRrpvgrRjJMmqw 7zpFdpMm0YeIKK3UiTrRQCGoEvyohFiEceBVLPlECWdIljZ0jTFyIE0JSeitYEDd zOZPXgGkTdh8xcx3nXpWNtABjYyzabvXaKYb4aTIcff0+n8w4LcuwCFGFyzpcuvx ZYlkm75mXTrxusUCfh+lHHSj9MozUHi1CiJequcOzqD+sFFwPQCitIqiqLnOhkCg Mkh/VxOlbNGyODFE2HiHMzrxSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWknn21 QYlt0edkL2d9ZVV6gc3VMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiP+KaFWr7sUSGj2HoN10oVrPM5UoPjnBD21fi7vxeQUeHltKQpRB9 ce6kU3/P412ffkGtrW7AoHg5FLj2Khgp7U1hOE2hQNTujIaQjSRpEBQYaQqggC4K BwTM7CoItNnlqT3jfLbgbikNv/wq+kVnGmOlNU+9N8S6VFGcUKq4hO71DR7MLH3A jdILG/WswY03tOhnAyqfXmqnk7PZY2hR6vpGgziqLxs7r6AXsK56muubVs5xhoK+ Jn4daNe65aynK3Z4EIcnE9zZlv2p8ayeeWxcTwAEbAY7zT8YBdzr4T0VEYLaNK6V ugrYQEyFvN3fIqdnI1sy3A5mwq4Cf7D3 -----END CERTIFICATE-----Generated at Fri May 3 01:30:26 2024 by rpki-client on console-fra.rpki-client.org