$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: Lsru8Oi6OkDq0xM3fpQ1zBAIoRzZ0nDJrRhjKb/1ogg= Subject key identifier: C1:A1:1D:12:9D:3C:1E:D6:53:70:65:10:4E:D2:75:E8:76:2D:36:F7 Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 7C Signing time: Sun 19 May 2024 07:15:38 +0000 Manifest this update: Sun 19 May 2024 07:15:37 +0000 Manifest next update: Sun 26 May 2024 07:15:37 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: DSa3dC8ClbTL34WLGP68Vux+1dLeTEWFBJNYhnKkc9w=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: F0K355M1aG7oGDdsprpmFmgy3E7CbG8XN18PJkx+ngE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: May 19 07:15:37 2024 GMT Not After : May 26 07:15:37 2024 GMT Subject: CN=6649a719-ab06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:7d:27:35:4f:46:34:89:5c:1d:cb:0a:55: a9:cf:02:e7:39:5e:13:51:6c:4e:48:53:e0:21:08: 84:fd:0a:75:08:7c:95:10:ef:b6:17:f0:3f:a0:c5: f3:24:dc:9b:39:81:24:8c:97:a3:e0:a4:22:18:19: 2d:40:97:f5:a4:b1:25:8d:6a:a9:e0:3d:2e:8f:6f: b2:24:6a:70:12:f6:97:1c:24:a5:8d:62:d8:e7:88: 42:e7:c0:0b:f1:2b:85:c6:81:0f:4f:14:86:44:97: 85:be:e4:d0:81:f6:e0:a3:04:41:e0:21:40:28:dd: 5c:a9:74:4a:f4:f0:d8:01:a2:12:ee:91:17:e8:5b: 6c:5e:10:b7:61:f4:34:65:ad:67:1f:dc:21:49:e9: e9:7e:69:c7:46:32:d3:86:9b:08:89:06:7e:8a:14: 0c:00:55:8c:bc:ed:84:35:3f:38:c5:53:b7:f8:7a: e0:96:fb:25:e4:74:be:62:56:c9:12:86:02:6c:87: 8b:e4:c1:dd:7f:2e:da:8a:15:33:02:96:e0:73:46: 55:ee:44:9c:d4:7f:d4:3e:56:de:ad:e4:92:e8:38: ac:06:87:88:03:f3:71:87:39:92:f8:80:70:64:2d: 64:e7:74:37:7f:0d:5b:2c:16:17:ae:54:fe:c5:c9: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A1:1D:12:9D:3C:1E:D6:53:70:65:10:4E:D2:75:E8:76:2D:36:F7 X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:05:2a:17:ae:f8:60:69:b2:89:99:79:01:ac:30:de:58:8a: c3:84:d3:e7:35:03:6d:c4:9c:eb:f6:e6:b0:61:4c:21:06:ab: 6b:cf:42:a6:1c:10:61:a4:b7:44:cc:27:54:fe:6c:36:52:7d: 68:74:57:42:06:1a:da:10:bb:fb:a0:be:22:cb:29:98:ea:ee: 39:b3:6b:17:89:aa:7f:21:47:da:7b:df:e8:cd:79:fb:c3:b9: c1:dc:cf:16:2a:1c:68:34:47:4a:5a:cb:6d:db:cb:d3:56:1c: ed:97:f2:4b:6c:a4:d5:96:f8:8e:62:8f:5f:ea:fa:41:73:54: 52:67:7c:c8:fa:21:5d:77:bb:11:f5:16:8a:3d:2c:ba:40:db: bc:69:ad:8c:2a:21:4a:ec:9e:1c:6e:70:eb:f3:3d:0d:3b:62: f9:47:88:b7:78:c8:69:1c:0d:1a:8e:79:77:39:25:b8:69:18: 53:47:f6:53:10:64:11:ad:ec:5f:43:50:5f:f1:7d:e4:eb:f0: 38:71:a1:3a:33:e2:50:b1:fe:85:75:1a:f0:a2:1f:ff:a2:b6: 66:e4:79:38:d7:60:32:10:4d:57:b8:81:82:e8:0b:7a:43:97: 17:a5:7c:b6:7f:4f:c7:04:2b:68:c9:90:2b:e9:f6:a7:ed:ba: 05:96:53:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEVGNTExMC8GA1UEBRMoOThGNEVEMUVBNTZFRkUzN0NBMTM0Rjg3NkE5NjVGMkFD NkZBMzc0ODAeFw0yNDA1MTkwNzE1MzdaFw0yNDA1MjYwNzE1MzdaMBgxFjAUBgNV BAMTDTY2NDlhNzE5LWFiMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm3H0nNU9GNIlcHcsKVanPAuc5XhNRbE5IU+AhCIT9CnUIfJUQ77YX8D+gxfMk 3Js5gSSMl6PgpCIYGS1Al/WksSWNaqngPS6Pb7IkanAS9pccJKWNYtjniELnwAvx K4XGgQ9PFIZEl4W+5NCB9uCjBEHgIUAo3VypdEr08NgBohLukRfoW2xeELdh9DRl rWcf3CFJ6el+acdGMtOGmwiJBn6KFAwAVYy87YQ1PzjFU7f4euCW+yXkdL5iVskS hgJsh4vkwd1/LtqKFTMCluBzRlXuRJzUf9Q+Vt6t5JLoOKwGh4gD83GHOZL4gHBk LWTndDd/DVssFheuVP7FyXXzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwaEdEp08 HtZTcGUQTtJ16HYtNvcwHwYDVR0jBBgwFoAUmPTtHqVu/jfKE0+HapZfKsb6N0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRUY1Lzk0MDY2MjhFNTc3 ODExRUU4Q0RGODU3QUM0RjlBRTAyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4w Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbVBUdEhxVnVfamZLRTAtSGFwWmZLc2I2TjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw RUY1Lzk0MDY2MjhFNTc3ODExRUU4Q0RGODU3QUM0RjlBRTAyL21QVHRIcVZ1X2pm S0UwLUhhcFpmS3NiNk4wZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACwFKheu+GBpsomZeQGsMN5YisOE0+c1A23EnOv25rBhTCEGq2vPQqYc EGGkt0TMJ1T+bDZSfWh0V0IGGtoQu/ugviLLKZjq7jmzaxeJqn8hR9p73+jNefvD ucHczxYqHGg0R0pay23by9NWHO2X8ktspNWW+I5ij1/q+kFzVFJnfMj6IV13uxH1 Foo9LLpA27xprYwqIUrsnhxucOvzPQ07YvlHiLd4yGkcDRqOeXc5JbhpGFNH9lMQ ZBGt7F9DUF/xfeTr8DhxoToz4lCx/oV1GvCiH/+itmbkeTjXYDIQTVe4gYLoC3pD lxelfLZ/T8cEK2jJkCvp9qftugWWU2U= -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org