$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: BVZaV0uNsSKlUODEjb6wqVu7Kppfz+Z1y+snUPseayU= Subject key identifier: 51:26:46:E6:8B:2A:43:04:45:C2:89:C6:2E:0B:BC:C4:5F:B6:2F:0B Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0A24 Signing time: Thu 02 May 2024 20:40:43 +0000 Manifest this update: Thu 02 May 2024 20:40:43 +0000 Manifest next update: Thu 09 May 2024 20:40:43 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: H0WAEyO5KWDlPzA8yukLxlMYKtYVFKHdhrxAweHRPjA=) 2: 2791E5FC476811EA943F5A66C4F9AE02.roa (hash: k4+lsY8L02z32iF+UWjCQvZeaHHhQdbaThZCLODRGV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2601 (0xa29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: May 2 20:40:43 2024 GMT Not After : May 9 20:40:43 2024 GMT Subject: CN=6633fa4b-3b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:ff:bf:19:f2:80:25:9c:f7:2c:13:81:16: 4d:0b:b3:0f:81:fb:9f:39:83:6b:92:49:d8:98:a5: 01:c8:16:47:6d:ee:0a:f5:1a:90:01:ea:e1:82:3a: d5:48:21:78:23:a2:3f:7a:b8:eb:46:a7:9b:2a:0f: b9:25:13:da:28:9c:47:1b:5b:43:c8:b9:0b:e2:df: 96:b6:42:c0:54:53:b9:ce:1f:eb:aa:98:36:5c:65: 2b:cf:0d:56:40:64:92:9f:c1:ca:11:2a:5b:70:79: 3a:ae:af:18:72:77:17:e4:ad:e5:c8:c8:8e:27:2e: 51:35:41:ed:68:7f:7f:51:89:08:b4:ba:5d:71:fc: b6:62:93:8b:0d:ce:98:69:fb:ed:73:c6:eb:ae:94: 3f:e1:01:4e:6e:d0:3f:36:31:fe:4d:bf:54:2f:3a: bd:9b:3c:b0:00:a4:8b:ad:17:96:d7:a3:5d:f0:6b: 6c:53:9f:eb:63:93:24:5f:62:b0:9e:8e:a9:95:3a: 79:07:a4:85:ce:eb:3a:13:6d:b5:b3:16:fb:05:5d: 5e:14:24:27:4c:a9:e0:7d:0a:5a:b5:47:8e:a1:2f: 4f:b6:40:72:80:f2:09:e4:f0:f0:fb:6b:8d:ba:bd: ad:76:80:0e:d2:b8:d5:72:9f:2e:3a:4a:ca:9a:72: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:26:46:E6:8B:2A:43:04:45:C2:89:C6:2E:0B:BC:C4:5F:B6:2F:0B X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ba:e6:f3:20:b0:5f:9f:e3:d2:4a:86:95:42:58:63:1c:83: b1:5f:0c:58:84:ee:8e:e5:83:3b:c9:09:f4:49:91:16:db:b2: bb:11:89:0b:56:62:7a:90:1a:9e:7c:e1:4b:23:1a:2f:cb:fd: 9f:5c:f9:e5:22:84:3b:a6:7a:93:6d:25:89:d5:15:00:03:83: cd:6c:42:1e:81:1b:f0:13:10:73:e1:f6:fa:15:9b:1b:33:79: a7:bc:d6:9e:9b:89:31:5b:bd:17:27:78:07:e3:52:1f:29:fd: c0:ee:5d:7a:1c:b4:2e:39:0f:53:1c:7a:06:1a:d0:99:d9:7d: 48:45:ef:25:10:78:ca:2d:d7:eb:d3:ca:1d:fc:f7:c9:cb:c8: 79:59:92:1d:aa:85:96:b0:a5:98:1c:8e:b5:f5:44:15:70:11: 2a:ed:a7:ab:98:4d:c3:85:54:a5:d8:69:0d:60:81:68:04:e8: a8:63:df:2f:31:ba:04:04:fb:be:5d:43:ee:c7:76:43:01:29: 63:6b:3a:43:a9:02:27:85:2b:38:e3:54:16:6d:35:f3:3d:76: 34:e1:cd:90:5a:ff:bd:a4:3e:9f:f2:6a:d7:56:6b:0b:f9:6b: fb:d7:47:ca:00:2b:dc:13:a5:f9:a1:92:25:27:d8:61:24:d6: 61:ae:9e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjQwNTAyMjA0MDQzWhcNMjQwNTA5MjA0MDQzWjAYMRYwFAYD VQQDEw02NjMzZmE0Yi0zYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPX/vxnygCWc9ywTgRZNC7MPgfufOYNrkknYmKUByBZHbe4K9RqQAerhgjrV SCF4I6I/erjrRqebKg+5JRPaKJxHG1tDyLkL4t+WtkLAVFO5zh/rqpg2XGUrzw1W QGSSn8HKESpbcHk6rq8YcncX5K3lyMiOJy5RNUHtaH9/UYkItLpdcfy2YpOLDc6Y afvtc8brrpQ/4QFObtA/NjH+Tb9ULzq9mzywAKSLrReW16Nd8GtsU5/rY5MkX2Kw no6plTp5B6SFzus6E221sxb7BV1eFCQnTKngfQpatUeOoS9PtkBygPIJ5PDw+2uN ur2tdoAO0rjVcp8uOkrKmnKHmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEmRuaL KkMERcKJxi4LvMRfti8LMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeuubzILBfn+PSSoaVQlhjHIOxXwxYhO6O5YM7yQn0SZEW27K7EYkL VmJ6kBqefOFLIxovy/2fXPnlIoQ7pnqTbSWJ1RUAA4PNbEIegRvwExBz4fb6FZsb M3mnvNaem4kxW70XJ3gH41IfKf3A7l16HLQuOQ9THHoGGtCZ2X1IRe8lEHjKLdfr 08od/PfJy8h5WZIdqoWWsKWYHI619UQVcBEq7aermE3DhVSl2GkNYIFoBOioY98v MboEBPu+XUPux3ZDASljazpDqQInhSs441QWbTXzPXY04c2QWv+9pD6f8mrXVmsL +Wv710fKACvcE6X5oZIlJ9hhJNZhrp5F -----END CERTIFICATE-----Generated at Thu May 2 22:13:20 2024 by rpki-client on console-fra.rpki-client.org