$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json) Hash identifier: MwloVNZMG0a1bE6VrXTW4i1/lq0U4fqQF78SsgQs/wQ= Subject key identifier: 8B:EC:58:71:14:69:A5:DE:FA:19:05:AE:E2:64:F3:70:37:30:72:65 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 18B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft Manifest number: 18AC Signing time: Thu 02 May 2024 16:56:29 +0000 Manifest this update: Thu 02 May 2024 16:56:29 +0000 Manifest next update: Thu 09 May 2024 16:56:29 +0000 Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: 0XG7KL64rheq3pUk4aUXl0/4wW7Ss9XfsDrg6dxKQWw=) 2: 545743246D1911E7A4448D81C4F9AE02.roa (hash: OnvtK5lSr6pRvpSbhh6BxoIOFbnQbsNqWIc62+qe+8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6324 (0x18b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: May 2 16:56:29 2024 GMT Not After : May 9 16:56:29 2024 GMT Subject: CN=6633c5bd-0229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:b2:03:b9:07:b2:08:66:49:fb:f3:84:17: d9:f6:c5:cd:8a:81:fd:01:e7:5e:9b:bd:9e:2d:de: df:e3:7c:12:21:70:9e:98:f8:50:e5:da:a3:34:53: 9c:4b:43:f1:dc:17:a0:7b:e2:06:a9:17:af:19:66: 13:dd:0e:75:e8:1f:9f:2c:64:f5:a2:b3:d0:e6:a6: 9c:da:e9:d7:d4:d1:2b:9f:f0:9d:64:5a:52:51:fd: 0d:5b:b7:30:bd:e2:2a:b8:8d:d5:b7:da:4e:2e:71: 30:d3:35:e5:6e:aa:ce:0a:97:21:82:66:3a:e4:d4: 89:25:d3:27:4b:f3:26:be:23:3a:e4:e7:01:68:d7: 1b:71:b6:f8:e0:d4:4d:89:e6:b8:45:a2:4b:f2:f0: bc:cc:b8:90:32:71:5a:13:32:2b:61:49:0c:c8:17: d8:f6:3d:47:9b:a1:cf:bf:b5:02:99:88:2f:ea:d6: 40:e1:d3:cb:28:41:3e:fb:20:88:da:e0:9e:05:1d: 72:30:c3:fa:25:14:22:a7:d6:14:85:bf:65:85:34: 77:86:f7:90:e8:cb:35:02:fe:43:06:b5:5c:69:da: ab:09:73:84:85:5d:a3:5e:eb:6f:ab:62:d2:9a:7e: 69:a8:fa:cb:2a:a8:9c:51:7b:da:d3:7b:e3:73:18: 1a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EC:58:71:14:69:A5:DE:FA:19:05:AE:E2:64:F3:70:37:30:72:65 X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d7:14:f4:b2:e9:57:f1:fa:b0:59:41:54:0e:33:35:d4:c8: ee:74:ff:51:18:dd:6b:ca:59:ed:19:ec:23:ac:e2:45:26:7e: f9:00:ff:f3:63:81:6e:83:fe:d8:ad:f5:a3:06:6d:18:54:5f: ac:28:fc:bf:fc:b8:2a:0f:ce:34:90:a9:96:3c:26:a6:30:44: 2c:aa:db:c0:12:9d:03:6c:2a:4f:cd:ef:e8:8f:ac:6a:d9:d1: 41:b6:9a:3e:2f:a3:1e:d0:3c:51:2f:67:2f:e8:a1:ba:12:0c: 92:d7:13:62:49:0b:cf:f0:09:93:23:d8:74:00:51:83:62:0f: ab:06:19:56:59:c0:ce:88:9f:ab:81:2d:62:9d:fd:12:df:16: 34:2f:b9:4c:e0:f7:da:ed:05:21:9f:0e:9a:1a:dd:90:8a:6a: a5:8e:50:8d:5e:17:e8:04:d0:72:2f:59:86:f3:52:4d:24:c2: 93:26:05:7e:8e:87:cd:8c:be:52:a9:ba:0a:d4:24:bc:a3:cd: de:6a:68:b1:7a:f9:5d:fa:b6:de:99:da:5c:0f:b6:75:0b:63: 69:f5:05:45:0f:03:5e:94:5b:42:22:ba:af:ea:b0:c1:31:67: b1:92:c0:dd:63:09:31:ea:43:e8:88:cd:39:2e:a0:d9:b4:c9: 06:60:7d:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjQwNTAyMTY1NjI5WhcNMjQwNTA5MTY1NjI5WjAYMRYwFAYD VQQDEw02NjMzYzViZC0wMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfeyA7kHsghmSfvzhBfZ9sXNioH9Aedem72eLd7f43wSIXCemPhQ5dqjNFOc S0Px3Bege+IGqRevGWYT3Q516B+fLGT1orPQ5qac2unX1NErn/CdZFpSUf0NW7cw veIquI3Vt9pOLnEw0zXlbqrOCpchgmY65NSJJdMnS/MmviM65OcBaNcbcbb44NRN iea4RaJL8vC8zLiQMnFaEzIrYUkMyBfY9j1Hm6HPv7UCmYgv6tZA4dPLKEE++yCI 2uCeBR1yMMP6JRQip9YUhb9lhTR3hveQ6Ms1Av5DBrVcadqrCXOEhV2jXutvq2LS mn5pqPrLKqicUXva03vjcxgaDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvsWHEU aaXe+hkFruJk83A3MHJlMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx ODlHdlhHcThBeHB0dC1iT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA61xT0sulX8fqwWUFUDjM11MjudP9RGN1rylntGewjrOJFJn75AP/z Y4Fug/7YrfWjBm0YVF+sKPy//LgqD840kKmWPCamMEQsqtvAEp0DbCpPze/oj6xq 2dFBtpo+L6Me0DxRL2cv6KG6EgyS1xNiSQvP8AmTI9h0AFGDYg+rBhlWWcDOiJ+r gS1inf0S3xY0L7lM4Pfa7QUhnw6aGt2QimqljlCNXhfoBNByL1mG81JNJMKTJgV+ jofNjL5SqboK1CS8o83eamixevld+rbemdpcD7Z1C2Np9QVFDwNelFtCIrqv6rDB MWexksDdYwkx6kPoiM05LqDZtMkGYH28 -----END CERTIFICATE-----Generated at Thu May 2 20:04:50 2024 by rpki-client on console-ams.rpki-client.org