$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: Pt7LkVtLRImQ4Va0S6QqdNXYqeeZXT+TJV0+APzKl6U= Subject key identifier: 0F:E4:C3:03:26:B0:4C:78:1B:32:72:D0:C3:95:77:AC:FD:1D:E0:20 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 089B Signing time: Mon 06 May 2024 21:38:14 +0000 Manifest this update: Mon 06 May 2024 21:38:13 +0000 Manifest next update: Mon 13 May 2024 21:38:13 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: kwLF0bLn9KABW+f9KrOKi9Miy9UZyKccFEGV81Nl+u0=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: 5x1qc/WoeaNVoEpC5uhb9hW2H/Qy8G3Vz638uPldxWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: May 6 21:38:13 2024 GMT Not After : May 13 21:38:13 2024 GMT Subject: CN=66394dc6-b262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:a6:fb:70:91:47:d6:2f:6c:25:9d:99:ef: 4a:c0:af:40:27:39:fe:e8:13:c3:24:b5:0e:0f:29: df:4d:77:a6:75:9f:75:6f:f0:ce:4d:e6:45:20:01: 92:3b:08:5b:c4:48:af:96:0e:e8:70:c7:52:95:e0: e6:3f:c3:1a:87:a1:68:ac:d7:13:a8:84:3e:42:90: 6b:83:3b:2f:79:32:10:47:d6:1c:81:e9:36:77:93: 43:1c:9c:a5:3c:72:a1:c1:54:b2:19:c2:3a:75:7f: db:4c:ac:ab:6f:7c:b3:c7:81:62:63:7e:81:3b:fd: 8e:d9:55:f8:80:e0:a9:f6:89:e3:16:9c:99:80:b4: b0:e7:5a:9e:14:a5:1f:6e:2a:9a:c7:40:73:bb:25: 28:14:91:eb:6e:1b:2b:e1:e4:09:20:b1:e5:22:97: 26:57:74:b0:e6:42:9b:c1:78:ea:9c:dd:8b:3c:17: eb:7d:92:e7:74:81:c9:8a:e2:ac:0d:e5:10:2a:cc: c9:0f:f8:bd:43:6d:4a:73:46:d6:d9:4c:4b:0b:d8: b0:f0:65:56:40:ea:d2:36:b6:fb:99:c3:2a:31:be: cd:e2:f2:51:6f:fe:d7:1b:e7:c5:48:fe:32:e5:07: a4:6d:2f:ea:6e:ac:7a:61:f8:0e:db:ef:2d:11:3e: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E4:C3:03:26:B0:4C:78:1B:32:72:D0:C3:95:77:AC:FD:1D:E0:20 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:93:15:93:39:50:74:a7:c7:18:1a:c4:4a:8c:6c:a5:ab:26: a1:98:9f:d8:93:64:fd:d4:0f:57:6e:39:71:95:d8:e1:48:4b: 5b:f0:21:17:c1:fa:b7:9c:62:7c:96:55:ef:74:38:ad:1d:e8: 0e:18:1d:6f:30:66:1e:d7:2f:cd:67:d4:e2:d3:ad:4f:7d:95: 9d:33:1a:1f:b7:78:54:3c:aa:77:c7:a6:ca:29:9a:11:07:dc: d1:53:76:97:61:51:86:0d:11:d0:26:2d:95:62:ff:c2:a1:3c: 13:ed:9e:43:6d:9e:dc:85:59:c1:12:eb:21:1c:7b:5e:51:0a: 2c:a9:1c:e9:11:b3:a9:a3:2f:18:1d:c8:84:66:41:74:84:30: 9f:43:e1:fa:a6:1f:4a:a9:dd:1f:8e:1d:a3:4a:11:b7:bc:41: 6b:4f:fd:f8:2e:ed:39:53:a0:8c:e9:21:ba:2c:8a:f0:7b:8f: 6a:24:71:fe:dc:1f:a3:ca:c8:8f:97:ec:ea:f3:43:eb:ca:0e: 5a:bb:40:00:1f:97:35:8b:9e:f9:2c:a3:a8:4d:a0:32:de:3a: 75:8d:3c:96:a3:34:b7:67:10:38:d2:6f:62:7f:76:24:7f:f7: 37:a6:97:62:29:6b:0c:d1:8e:6c:d5:04:4b:97:ee:1d:3d:38: e8:a5:67:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjQwNTA2MjEzODEzWhcNMjQwNTEzMjEzODEzWjAYMRYwFAYD VQQDEw02NjM5NGRjNi1iMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr2m+3CRR9YvbCWdme9KwK9AJzn+6BPDJLUODynfTXemdZ91b/DOTeZFIAGS OwhbxEivlg7ocMdSleDmP8Mah6ForNcTqIQ+QpBrgzsveTIQR9Ycgek2d5NDHJyl PHKhwVSyGcI6dX/bTKyrb3yzx4FiY36BO/2O2VX4gOCp9onjFpyZgLSw51qeFKUf biqax0BzuyUoFJHrbhsr4eQJILHlIpcmV3Sw5kKbwXjqnN2LPBfrfZLndIHJiuKs DeUQKszJD/i9Q21Kc0bW2UxLC9iw8GVWQOrSNrb7mcMqMb7N4vJRb/7XG+fFSP4y 5QekbS/qbqx6YfgO2+8tET7KVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/kwwMm sEx4GzJy0MOVd6z9HeAgMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEkxWTOVB0p8cYGsRKjGylqyahmJ/Yk2T91A9XbjlxldjhSEtb8CEX wfq3nGJ8llXvdDitHegOGB1vMGYe1y/NZ9Ti061PfZWdMxoft3hUPKp3x6bKKZoR B9zRU3aXYVGGDRHQJi2VYv/CoTwT7Z5DbZ7chVnBEushHHteUQosqRzpEbOpoy8Y HciEZkF0hDCfQ+H6ph9Kqd0fjh2jShG3vEFrT/34Lu05U6CM6SG6LIrwe49qJHH+ 3B+jysiPl+zq80Pryg5au0AAH5c1i575LKOoTaAy3jp1jTyWozS3ZxA40m9if3Yk f/c3ppdiKWsM0Y5s1QRLl+4dPTjopWe/ -----END CERTIFICATE-----Generated at Mon May 6 22:40:59 2024 by rpki-client on console-ams.rpki-client.org