$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft File: 7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json) Hash identifier: bjxPrAa2YN5GrkqIMom+wIY+T0zAjQZcsgPuYNiFg/Q= Subject key identifier: B0:C5:63:08:ED:5E:33:46:AB:8A:1F:28:85:F7:3E:29:6E:45:E9:48 Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 Certificate issuer: /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Certificate serial: 323B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft Manifest number: 3A70 Signing time: Sat 04 May 2024 15:39:23 +0000 Manifest this update: Sat 04 May 2024 15:39:22 +0000 Manifest next update: Sat 11 May 2024 15:39:22 +0000 Files and hashes: 1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: rhgRV+zgh6iNNSecmIrUJoF5jazVlrs/DtaSVjMu2cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12859 (0x323b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Validity Not Before: May 4 15:39:22 2024 GMT Not After : May 11 15:39:22 2024 GMT Subject: CN=663656aa-978e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:d6:dc:28:96:08:fe:fa:c5:ce:1c:af:6e: 97:72:9c:62:d5:5c:6f:42:fd:84:2a:aa:68:ef:59: a5:0b:ae:38:f3:8b:64:e0:58:a9:b7:e2:17:8c:28: 89:75:0a:49:6f:4a:d9:51:85:b5:94:ef:1c:bf:5c: 65:0b:b9:2b:da:8a:b9:eb:89:1d:1f:fa:a7:6a:f5: a7:7f:24:2c:ad:8d:6b:90:c4:5b:ff:fa:2b:83:3f: 75:22:93:f6:d9:a6:69:fb:4e:b2:ff:ba:7e:2a:3d: 24:20:6d:37:05:ee:9a:b4:9f:fb:e3:5d:c4:d0:2f: 0b:3f:56:76:de:99:92:87:0a:b8:f9:c0:5c:ec:df: 90:5b:8e:12:40:bc:89:68:26:79:c6:6c:67:38:20: a5:a1:8c:09:c3:fa:04:1d:ba:85:80:ed:6e:e3:4b: 14:41:56:59:ad:77:b7:20:5d:bc:6a:60:eb:40:2e: ff:c1:0c:aa:08:85:36:10:8c:b1:96:70:36:50:11: d9:30:8f:69:c3:07:1a:1e:97:08:f9:44:5b:fe:22: 11:b6:ad:5a:c3:a8:67:4a:86:37:16:9a:84:d3:22: c5:c4:98:79:9d:02:95:6d:63:28:bc:80:52:c9:4c: 37:87:ba:8b:12:90:a5:63:dc:d2:0b:fa:31:30:3c: 06:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C5:63:08:ED:5E:33:46:AB:8A:1F:28:85:F7:3E:29:6E:45:E9:48 X509v3 Authority Key Identifier: keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:12:8b:81:99:ff:dc:ac:15:2a:69:d7:0a:a3:3e:a3:86:76: 46:c8:00:aa:da:0d:ba:8a:cb:99:6f:52:05:d9:62:9c:8e:5f: c4:f2:c9:de:bb:8e:43:29:c6:c8:70:f3:89:8f:b0:a5:2a:c5: 86:0c:2f:92:f0:16:27:f4:f5:d4:56:29:7a:35:68:9e:0c:77: 4d:32:4f:03:ab:af:4f:3f:59:c0:31:b3:00:fc:37:4c:d7:b1: 16:b0:74:3e:6f:22:0e:cf:ad:80:d2:16:f7:23:f5:62:ce:bf: aa:56:ce:1c:d7:a0:9d:52:04:48:63:39:bc:af:99:ca:e1:f4: 57:d4:9b:18:49:ad:03:3b:54:a3:01:0a:1b:ec:36:34:3d:7b: 7b:99:e4:3d:5f:cc:3a:d7:76:1b:bd:8d:18:f3:25:73:59:dc: c3:05:b3:1c:be:44:c1:c5:a8:cf:26:d3:2e:b0:59:17:f0:f8: 07:36:d0:e9:7d:db:11:85:aa:72:81:45:16:d5:ba:b7:0d:39: cf:c4:d7:d3:d5:d7:4f:6f:1b:da:7f:9c:4f:f4:42:16:62:ea: 3b:cc:07:35:15:09:42:c6:63:88:53:1e:2b:c6:ca:76:fb:ab: ab:cf:37:5d:19:e6:d0:e5:d7:73:96:f6:16:c4:1c:71:ef:84: ee:54:23:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKEVDOTVCOEE4NDk3MjlCQTZFRjg0MkM2MzcxQUFENEFD N0Q4RjIxRjcwHhcNMjQwNTA0MTUzOTIyWhcNMjQwNTExMTUzOTIyWjAYMRYwFAYD VQQDEw02NjM2NTZhYS05NzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6jW3CiWCP76xc4cr26Xcpxi1VxvQv2EKqpo71mlC64484tk4Fipt+IXjCiJ dQpJb0rZUYW1lO8cv1xlC7kr2oq564kdH/qnavWnfyQsrY1rkMRb//orgz91IpP2 2aZp+06y/7p+Kj0kIG03Be6atJ/7413E0C8LP1Z23pmShwq4+cBc7N+QW44SQLyJ aCZ5xmxnOCCloYwJw/oEHbqFgO1u40sUQVZZrXe3IF28amDrQC7/wQyqCIU2EIyx lnA2UBHZMI9pwwcaHpcI+URb/iIRtq1aw6hnSoY3FpqE0yLFxJh5nQKVbWMovIBS yUw3h7qLEpClY9zSC/oxMDwGfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDFYwjt XjNGq4ofKIX3PiluRelIMB8GA1UdIwQYMBaAFOyVuKhJcpum74QsY3Gq1Kx9jyH3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02YnZoQ3hqY2FyVXJIMlBJ ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdKVzRxRWx5bTZidmhDeGpjYXJVckgyUElmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02 YnZoQ3hqY2FyVXJIMlBJZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgEouBmf/crBUqadcKoz6jhnZGyACq2g26isuZb1IF2WKcjl/E8sne u45DKcbIcPOJj7ClKsWGDC+S8BYn9PXUVil6NWieDHdNMk8Dq69PP1nAMbMA/DdM 17EWsHQ+byIOz62A0hb3I/Vizr+qVs4c16CdUgRIYzm8r5nK4fRX1JsYSa0DO1Sj AQob7DY0PXt7meQ9X8w613YbvY0Y8yVzWdzDBbMcvkTBxajPJtMusFkX8PgHNtDp fdsRhapygUUW1bq3DTnPxNfT1ddPbxvaf5xP9EIWYuo7zAc1FQlCxmOIUx4rxsp2 +6urzzddGebQ5ddzlvYWxBxx74TuVCOz -----END CERTIFICATE-----Generated at Sat May 4 16:34:31 2024 by rpki-client on console-fra.rpki-client.org