$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft File: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json) Hash identifier: 5EolWOfiQGShlj+JY1nuT9+3oye1YSaGg+da4/49qV8= Subject key identifier: CC:7E:84:51:37:8F:7E:C0:A8:CD:77:01:8D:B6:7C:E7:00:D8:DA:D1 Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C Certificate issuer: /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft Manifest number: 7F Signing time: Wed 15 May 2024 07:16:26 +0000 Manifest this update: Wed 15 May 2024 07:16:25 +0000 Manifest next update: Wed 22 May 2024 07:16:25 +0000 Files and hashes: 1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: gFoHEiX13PJoHRut2zj1ZNU+ylbzDeOqJlRVXu5bgAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Validity Not Before: May 15 07:16:25 2024 GMT Not After : May 22 07:16:25 2024 GMT Subject: CN=6644614a-f615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:93:f1:4a:99:14:14:be:26:a9:30:42:ed: 81:89:7c:25:56:c5:27:7e:89:f9:26:f7:50:52:a9: 58:97:de:7b:90:df:c3:cf:ea:1b:73:6f:b1:2b:7b: ad:73:92:38:bb:b3:c3:4b:ee:d7:82:fb:ef:ee:42: 86:cd:d9:55:a8:a5:23:9e:b4:59:0a:85:de:0b:e0: 21:d3:6b:d5:48:57:ca:90:28:4f:ab:1f:03:d5:f7: 34:34:fa:07:91:9a:95:5a:eb:56:9e:80:ef:e4:81: 8d:55:5d:d5:6e:12:71:34:7d:7c:f1:da:5c:01:cf: 7d:6c:86:83:f4:91:93:0a:35:4b:82:f5:3a:3f:d6: 5e:22:ed:9d:ff:6b:e0:ac:8b:7e:a3:ae:18:23:7d: 3e:be:51:99:8a:07:2c:4c:08:76:53:b2:89:00:38: be:ed:b1:43:0f:06:a5:ba:08:f1:82:6a:f5:ed:4d: 03:3a:fa:7f:35:6b:86:e1:98:a2:fe:ac:a8:23:3e: f6:37:b1:e4:60:ba:20:5e:ed:ea:ac:56:84:5c:b7: ae:d1:0b:ab:e9:4c:5a:ea:20:d1:fa:ab:8a:fe:32: e3:8f:0f:d4:0e:bf:1e:ed:b4:9f:3f:57:b0:32:06: a3:9f:1e:9d:30:52:78:86:35:48:fc:a1:9d:80:73: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7E:84:51:37:8F:7E:C0:A8:CD:77:01:8D:B6:7C:E7:00:D8:DA:D1 X509v3 Authority Key Identifier: keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8a:d8:8e:12:de:fc:f4:1e:08:d8:ec:88:81:1d:73:1f:61: b1:eb:8a:a2:12:fb:e1:d4:9e:1a:79:8e:f1:60:ff:87:b6:25: 7c:01:26:0a:fa:4f:c7:6f:b1:ae:04:e5:54:95:9e:fd:5f:36: 52:04:be:47:be:44:01:fe:70:16:ff:de:8e:39:72:56:9e:bd: 27:80:ca:4c:d4:47:74:09:78:29:27:fc:0e:93:64:07:a1:c4: f1:70:d7:d4:80:41:bf:64:37:48:fb:bc:78:2c:9a:6e:c6:cb: af:df:c5:95:c0:ad:b8:32:1a:14:e2:f0:a7:5d:3f:e6:a0:16: ba:55:05:cc:57:ad:c5:00:c5:5d:92:06:f5:a7:46:ea:c7:b4: 6c:c5:84:b0:53:82:87:8a:12:b9:ef:bf:44:98:99:6c:e6:d1: 54:45:e3:8c:a7:4a:62:38:fa:a3:6f:70:ce:4d:c8:09:84:1e: f6:bf:9f:6e:c5:4d:0d:c7:0c:96:20:a4:2b:59:a1:9c:a0:40: 4f:c0:b2:61:4d:4a:c5:16:cd:ef:69:66:fe:9f:4a:46:bb:b6: 6d:86:b5:b7:aa:ed:99:6c:ee:1c:76:17:2f:88:17:0a:75:ea: 31:0d:42:b1:9c:7e:8f:5c:96:da:69:a5:2d:ad:c3:35:be:d5: 5e:90:e5:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzM2OTExMC8GA1UEBRMoRUVBRTUyOTIzQjBCQUU3MkM5ODNEMDEwNUY1MDlERjIx MEJDMDkxQzAeFw0yNDA1MTUwNzE2MjVaFw0yNDA1MjIwNzE2MjVaMBgxFjAUBgNV BAMTDTY2NDQ2MTRhLWY2MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgSJPxSpkUFL4mqTBC7YGJfCVWxSd+ifkm91BSqViX3nuQ38PP6htzb7Ere61z kji7s8NL7teC++/uQobN2VWopSOetFkKhd4L4CHTa9VIV8qQKE+rHwPV9zQ0+geR mpVa61aegO/kgY1VXdVuEnE0fXzx2lwBz31shoP0kZMKNUuC9To/1l4i7Z3/a+Cs i36jrhgjfT6+UZmKByxMCHZTsokAOL7tsUMPBqW6CPGCavXtTQM6+n81a4bhmKL+ rKgjPvY3seRguiBe7eqsVoRct67RC6vpTFrqINH6q4r+MuOPD9QOvx7ttJ8/V7Ay BqOfHp0wUniGNUj8oZ2Ac6h1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzH6EUTeP fsCozXcBjbZ85wDY2tEwHwYDVR0jBBgwFoAU7q5SkjsLrnLJg9AQX1Cd8hC8CRww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMzY5L0E1MUM0Q0FBNEVG RTExRUU5RDkxMUM2RUM0RjlBRTAyLzdxNVNranNMcm5MSmc5QVFYMUNkOGhDOENS dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3E1U2tqc0xybkxKZzlBUVgxQ2Q4aEM4Q1J3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MzY5L0E1MUM0Q0FBNEVGRTExRUU5RDkxMUM2RUM0RjlBRTAyLzdxNVNranNMcm5M Smc5QVFYMUNkOGhDOENSdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGWK2I4S3vz0HgjY7IiBHXMfYbHriqIS++HUnhp5jvFg/4e2JXwBJgr6 T8dvsa4E5VSVnv1fNlIEvke+RAH+cBb/3o45claevSeAykzUR3QJeCkn/A6TZAeh xPFw19SAQb9kN0j7vHgsmm7Gy6/fxZXArbgyGhTi8KddP+agFrpVBcxXrcUAxV2S BvWnRurHtGzFhLBTgoeKErnvv0SYmWzm0VRF44ynSmI4+qNvcM5NyAmEHva/n27F TQ3HDJYgpCtZoZygQE/AsmFNSsUWze9pZv6fSka7tm2Gtbeq7Zls7hx2Fy+IFwp1 6jENQrGcfo9cltpppS2twzW+1V6Q5fk= -----END CERTIFICATE-----Generated at Wed May 15 09:04:41 2024 by rpki-client on console-ams.rpki-client.org