$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: M8eoNf8nM5uWYfNDAn/UEeIHoAiRuN/hcuNSIld8aiA= Subject key identifier: F0:D6:F0:8E:4F:D7:22:2D:07:15:D9:68:69:45:DE:55:1F:16:F9:2F Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0A60 Signing time: Mon 06 May 2024 20:26:32 +0000 Manifest this update: Mon 06 May 2024 20:26:32 +0000 Manifest next update: Mon 13 May 2024 20:26:32 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: iRmY1RVfUecyGPLen70Q6/aivSyadxbBy9EWIUxGuoA=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: 42VvBlg/h+BrMDeCNHd6S2PYJbQdXPmTgZgY8yTqMto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: May 6 20:26:32 2024 GMT Not After : May 13 20:26:32 2024 GMT Subject: CN=66393cf8-7ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:51:fd:17:d4:5e:c3:3b:2a:bf:d0:de:85: 2a:24:02:af:75:41:ad:93:0e:1a:76:81:0b:e3:63: bf:c2:7a:d3:e0:80:71:3b:f7:97:6b:9b:21:25:fa: 38:5d:48:a6:26:81:6a:8a:2a:e7:93:1e:2f:39:37: c8:04:15:6d:14:a4:1d:41:f6:19:fc:34:c1:d8:90: 01:9e:69:fd:fa:87:71:20:48:f0:e3:d2:f2:a2:00: d0:7a:08:70:4f:d1:bd:3e:18:c1:eb:dc:82:bc:07: d8:85:92:92:66:10:53:6d:3e:3d:11:44:fa:d7:1d: a3:29:3b:9b:11:0e:67:b7:cb:2c:87:56:b3:ce:d3: b0:4c:f3:e0:60:ed:51:da:57:e2:cd:6e:6d:f1:4c: 2f:e8:68:0a:44:42:55:3f:93:16:d9:88:ec:71:e0: 78:e1:6a:4b:95:70:87:27:77:1e:c4:ce:2f:6b:c9: f9:ee:27:e1:29:6d:f5:1f:18:64:48:ce:50:b9:90: 34:7a:32:b0:27:75:b8:ca:b0:49:c2:a8:4c:22:5e: 6b:e0:ad:3b:7b:70:69:8c:38:04:5a:d3:d1:d8:17: 44:da:82:31:d8:86:90:1d:1e:42:3a:a8:b9:15:88: e8:fd:8a:77:7c:1b:95:71:33:21:d5:ed:bc:0e:3a: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D6:F0:8E:4F:D7:22:2D:07:15:D9:68:69:45:DE:55:1F:16:F9:2F X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:07:c1:84:a7:61:83:b5:00:b9:3f:df:c5:6c:83:12:ff:a7: 14:50:29:17:0d:11:03:27:5f:c3:5e:a5:08:97:8d:18:9d:95: 8a:2c:a2:1e:27:fd:82:24:ff:1e:8e:dc:71:0b:13:08:aa:36: dc:01:eb:b2:a1:41:1f:e1:93:bf:aa:db:5f:f4:cc:01:68:fe: 0f:2e:bf:67:a9:48:69:c0:29:37:15:32:70:d9:88:c1:12:ba: 90:f9:ca:d2:1b:f1:af:7e:84:b6:ba:a1:6b:67:ea:84:46:74: b7:42:46:45:c6:d0:1d:51:bc:9e:db:d3:9e:af:eb:cb:03:f3: e8:b2:2e:70:62:e1:28:0e:ec:07:42:8a:4d:db:0d:3d:3b:31: 0d:44:f1:e1:dc:81:79:7f:1d:f0:27:47:fc:73:29:e4:b4:7d: f8:9f:c0:f7:8d:31:1d:42:33:c2:1c:5a:c0:4e:fe:6c:11:08: e4:bf:6e:a3:a8:be:f7:dc:ff:61:18:b8:79:45:43:42:e9:c9: 25:0f:c0:2c:11:e7:e7:95:70:77:10:23:f5:ba:ad:23:9d:74: e8:91:32:ba:98:a0:31:52:ae:5e:2a:4a:35:44:c5:62:91:69: 7e:49:b6:ac:25:80:4f:03:9a:23:b5:e0:55:5c:d9:10:84:95: ee:6d:22:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjQwNTA2MjAyNjMyWhcNMjQwNTEzMjAyNjMyWjAYMRYwFAYD VQQDEw02NjM5M2NmOC03ZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCZR/RfUXsM7Kr/Q3oUqJAKvdUGtkw4adoEL42O/wnrT4IBxO/eXa5shJfo4 XUimJoFqiirnkx4vOTfIBBVtFKQdQfYZ/DTB2JABnmn9+odxIEjw49LyogDQeghw T9G9PhjB69yCvAfYhZKSZhBTbT49EUT61x2jKTubEQ5nt8ssh1azztOwTPPgYO1R 2lfizW5t8Uwv6GgKREJVP5MW2YjsceB44WpLlXCHJ3cexM4va8n57ifhKW31Hxhk SM5QuZA0ejKwJ3W4yrBJwqhMIl5r4K07e3BpjDgEWtPR2BdE2oIx2IaQHR5COqi5 FYjo/Yp3fBuVcTMh1e28Djo6ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDW8I5P 1yItBxXZaGlF3lUfFvkvMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEB8GEp2GDtQC5P9/FbIMS/6cUUCkXDREDJ1/DXqUIl40YnZWKLKIe J/2CJP8ejtxxCxMIqjbcAeuyoUEf4ZO/qttf9MwBaP4PLr9nqUhpwCk3FTJw2YjB ErqQ+crSG/GvfoS2uqFrZ+qERnS3QkZFxtAdUbye29Oer+vLA/Posi5wYuEoDuwH QopN2w09OzENRPHh3IF5fx3wJ0f8cynktH34n8D3jTEdQjPCHFrATv5sEQjkv26j qL733P9hGLh5RUNC6cklD8AsEefnlXB3ECP1uq0jnXTokTK6mKAxUq5eKko1RMVi kWl+SbasJYBPA5ojteBVXNkQhJXubSJ8 -----END CERTIFICATE-----Generated at Mon May 6 22:41:02 2024 by rpki-client on console-ams.rpki-client.org