$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json) Hash identifier: FbUXoMA9tMqPkwvht0zGWcfYhFoNcaDMJKWLJsjGeXs= Subject key identifier: C4:BC:8A:A5:B7:FE:D2:C3:D4:47:E8:71:31:D0:59:D6:CF:73:AD:6A Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Certificate serial: 18FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft Manifest number: 18FD Signing time: Tue 30 Apr 2024 16:59:18 +0000 Manifest this update: Tue 30 Apr 2024 16:59:17 +0000 Manifest next update: Tue 07 May 2024 16:59:17 +0000 Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: 8wDRtuv/TU1aph0HdzLTmD4FIPaX/xVomjqXhgCmBI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6397 (0x18fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Validity Not Before: Apr 30 16:59:17 2024 GMT Not After : May 7 16:59:17 2024 GMT Subject: CN=66312365-d037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:72:7e:5b:5d:94:a9:ea:e6:fa:26:4b:a2: ed:0a:ba:59:6d:da:af:bd:8f:11:ce:59:c0:6c:93: 02:85:87:79:02:b5:db:d4:f5:08:73:ac:57:39:9f: 5d:48:49:fd:e6:69:32:7a:ef:ad:96:27:b4:aa:6f: 78:b6:77:6a:4b:dc:90:69:b6:5d:e9:c3:94:f7:7c: 12:42:fb:0e:a3:99:25:e1:72:6c:45:d9:10:2a:76: 88:19:56:9b:ca:03:ad:30:16:4e:d2:d0:57:97:1e: a7:12:2b:fe:66:ae:21:d3:06:86:78:87:24:c2:b4: f5:e1:32:a2:54:d9:a3:1a:a5:b7:e3:5a:c8:bb:3a: 01:c6:ae:5d:51:0c:aa:19:0c:cc:54:55:1d:fc:c8: 8a:a1:75:fc:14:de:f3:40:bf:6d:41:90:89:8f:df: a0:fa:c6:1b:5d:3b:19:b8:2e:50:bb:6a:ee:75:d9: f8:62:b3:a6:a2:a3:ec:53:e2:34:b0:bd:a1:9a:ea: 3e:60:d7:c3:0a:52:b9:88:90:d4:e2:4e:d7:7b:f8: 0f:6b:99:21:08:9f:f1:6c:6b:23:37:43:f3:54:a4: d9:58:3b:58:c1:ad:e8:61:2a:2c:a6:6a:be:5b:d0: 78:ec:63:f6:61:44:7e:48:1e:ba:8a:4b:cd:f3:60: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BC:8A:A5:B7:FE:D2:C3:D4:47:E8:71:31:D0:59:D6:CF:73:AD:6A X509v3 Authority Key Identifier: keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:36:f3:8f:b6:b6:a3:6c:16:5b:87:0c:ef:02:2a:c7:e3:0d: fc:0f:35:79:49:8e:8a:b6:70:54:3f:01:d2:6e:31:77:96:a4: dd:5f:02:21:86:40:d0:bf:43:01:11:b9:20:e9:10:c8:5f:c8: bb:ed:c9:5e:66:8c:d9:7f:28:72:8d:9f:65:77:3a:c1:fb:fb: 07:86:fc:bb:a1:90:3d:4b:8a:df:bb:69:94:54:87:8e:a7:1e: a5:2f:86:d3:81:7f:4d:bc:6a:99:85:d4:a1:03:00:4a:20:3f: 40:c9:c5:59:70:c2:22:96:74:c6:88:bc:7a:e9:54:cd:73:da: 8e:94:c6:88:c2:a3:04:e8:eb:68:15:29:89:84:8d:b7:94:07: 63:36:d0:fb:0a:de:fa:12:ae:f0:4b:c9:3a:94:a3:66:76:50: 59:80:f4:46:b0:ba:59:77:f6:3f:0d:ea:f9:99:c5:01:fd:61: 54:db:86:0a:d2:f3:e3:03:69:b0:c4:4f:e2:71:1f:c3:39:fc: 3f:6e:1b:41:b7:6a:df:0d:79:d5:9b:0d:e9:4b:0b:6a:ff:7f: 8f:ab:62:45:dc:a3:f4:e1:59:24:16:35:d1:71:6a:48:51:3e: d4:3b:c2:8a:6d:ce:4b:fc:2f:ef:3f:83:10:3e:ee:52:67:74: fc:b1:6e:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy OTkxRDdBOTgwHhcNMjQwNDMwMTY1OTE3WhcNMjQwNTA3MTY1OTE3WjAYMRYwFAYD VQQDEw02NjMxMjM2NS1kMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLVyfltdlKnq5vomS6LtCrpZbdqvvY8RzlnAbJMChYd5ArXb1PUIc6xXOZ9d SEn95mkyeu+tlie0qm94tndqS9yQabZd6cOU93wSQvsOo5kl4XJsRdkQKnaIGVab ygOtMBZO0tBXlx6nEiv+Zq4h0waGeIckwrT14TKiVNmjGqW341rIuzoBxq5dUQyq GQzMVFUd/MiKoXX8FN7zQL9tQZCJj9+g+sYbXTsZuC5Qu2ruddn4YrOmoqPsU+I0 sL2hmuo+YNfDClK5iJDU4k7Xe/gPa5khCJ/xbGsjN0PzVKTZWDtYwa3oYSospmq+ W9B47GP2YUR+SB66ikvN82B8WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS8iqW3 /tLD1EfocTHQWdbPc61qMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL RWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbNvOPtrajbBZbhwzvAirH4w38DzV5SY6KtnBUPwHSbjF3lqTdXwIh hkDQv0MBEbkg6RDIX8i77cleZozZfyhyjZ9ldzrB+/sHhvy7oZA9S4rfu2mUVIeO px6lL4bTgX9NvGqZhdShAwBKID9AycVZcMIilnTGiLx66VTNc9qOlMaIwqME6Oto FSmJhI23lAdjNtD7Ct76Eq7wS8k6lKNmdlBZgPRGsLpZd/Y/Der5mcUB/WFU24YK 0vPjA2mwxE/icR/DOfw/bhtBt2rfDXnVmw3pSwtq/3+Pq2JF3KP04VkkFjXRcWpI UT7UO8KKbc5L/C/vP4MQPu5SZ3T8sW4G -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:04 2024 by rpki-client on console-fra.rpki-client.org