$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft File: V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json) Hash identifier: n6JcVWA7TlPzo8SnHyAA/LSCTwvBG2q5xE99wh5VYtI= Subject key identifier: B2:7B:EA:0D:52:51:79:6D:A6:BC:F3:DF:E3:51:35:22:9A:95:18:4D Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 Certificate issuer: /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Certificate serial: 26C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft Manifest number: 26C0 Signing time: Tue 30 Apr 2024 15:58:27 +0000 Manifest this update: Tue 30 Apr 2024 15:58:27 +0000 Manifest next update: Tue 07 May 2024 15:58:27 +0000 Files and hashes: 1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: Zbg7x8/xPhxBmWG7s9p5cgaHk4Fx4jQoXRVEiard6wI=) 2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: mR+KcYzjp8rZrlB+Eo35jZGbq2Z7hpJhThVjVMnXKLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9926 (0x26c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Validity Not Before: Apr 30 15:58:27 2024 GMT Not After : May 7 15:58:27 2024 GMT Subject: CN=66311523-7ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:ce:c9:c8:63:79:7e:60:b9:02:1c:b2:88: 92:95:60:91:2e:14:5e:9f:07:22:82:5d:bc:e3:d7: 0e:72:c9:20:75:cb:80:34:21:6b:f8:df:24:3a:04: 0d:96:ef:e1:61:d1:f6:3c:5d:d1:37:80:67:07:29: 82:b5:36:9d:fe:f4:61:5d:14:71:9f:62:b1:d1:f6: 22:b9:64:bf:c2:29:28:33:18:63:54:6b:a3:75:da: e8:9a:8a:ed:40:76:f7:03:01:8f:6b:29:47:d8:fd: 4a:c7:86:44:d7:ec:7d:22:0d:92:d4:3e:31:2d:6d: 58:de:7b:a2:b9:dd:fd:53:a3:c5:2c:7c:e0:a1:8c: 55:39:ec:7d:8d:b0:56:64:2d:2f:47:e7:4c:1d:9d: 60:7d:43:ea:23:bd:49:45:a6:b1:83:67:f0:6a:c2: 9b:19:c4:2c:b5:ea:76:44:c2:37:08:02:ba:07:66: 9a:61:4f:39:31:29:19:6f:b1:0a:c9:31:91:ff:76: e6:c5:14:9d:21:9d:bb:f0:d4:58:ec:cf:c9:c4:42: ca:90:91:c6:54:fb:86:45:28:ab:98:99:42:f9:a6: 4d:aa:d6:e4:82:21:1b:06:74:f6:26:5a:dc:2a:33: 1b:6c:2a:5d:9a:ad:44:af:51:ca:e8:ce:57:31:4d: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7B:EA:0D:52:51:79:6D:A6:BC:F3:DF:E3:51:35:22:9A:95:18:4D X509v3 Authority Key Identifier: keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b5:cc:83:17:97:23:b4:bf:fa:a0:94:5c:f5:a7:f3:e7:57: da:ea:b1:40:a2:0f:7b:26:00:33:ca:f3:9a:44:ea:a7:a8:bb: 44:ad:4b:3d:d8:1b:7d:72:9a:41:6d:ab:20:8a:57:c9:3e:e4: 1c:aa:27:42:0e:30:aa:1b:2a:a2:de:14:de:f3:53:3c:f5:35: 79:80:a3:e3:ae:1e:94:aa:2a:90:04:19:b1:ea:1f:26:3a:8e: fe:bb:f7:f3:c9:ac:20:06:79:78:02:74:b5:48:c7:20:53:1d: d5:ae:27:4b:06:5a:fd:ec:f8:22:de:1c:a2:a2:4f:a3:61:7c: a8:c8:e8:9c:55:2f:88:25:25:55:c2:a7:c6:c0:63:3f:db:54: b7:1b:07:fb:8a:da:ae:f7:66:4e:be:d4:e0:7b:e0:d6:39:90: 68:dd:7b:7d:f6:48:5b:ba:af:53:60:d1:b2:dc:c7:b6:0a:a9: ad:98:a9:ce:27:ac:9f:72:ca:11:4a:4d:2b:03:d8:90:e8:83: 55:c9:2c:2f:e7:4f:ec:37:7c:04:3a:bb:b0:33:b9:72:3c:24: db:7f:96:73:6e:d6:02:c8:21:60:f3:fb:0a:8b:19:2a:fe:bb: c2:40:cb:0f:27:90:4f:0d:c7:9a:d4:d0:eb:fd:bf:ed:d0:a5: d9:d8:ed:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUyN0UxMTAvBgNVBAUTKDU3QjY4NzI3NEIzMzE5RUQ5MDcxQjk2NjE1OEY5QjhB QjY0QUU2RjcwHhcNMjQwNDMwMTU1ODI3WhcNMjQwNTA3MTU1ODI3WjAYMRYwFAYD VQQDEw02NjMxMTUyMy03YWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzHOychjeX5guQIcsoiSlWCRLhRenwcigl2849cOcskgdcuANCFr+N8kOgQN lu/hYdH2PF3RN4BnBymCtTad/vRhXRRxn2Kx0fYiuWS/wikoMxhjVGujddromort QHb3AwGPaylH2P1Kx4ZE1+x9Ig2S1D4xLW1Y3nuiud39U6PFLHzgoYxVOex9jbBW ZC0vR+dMHZ1gfUPqI71JRaaxg2fwasKbGcQstep2RMI3CAK6B2aaYU85MSkZb7EK yTGR/3bmxRSdIZ278NRY7M/JxELKkJHGVPuGRSirmJlC+aZNqtbkgiEbBnT2Jlrc KjMbbCpdmq1Er1HK6M5XMU36tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJ76g1S UXltprzz3+NRNSKalRhNMB8GA1UdIwQYMBaAFFe2hydLMxntkHG5ZhWPm4q2Sub3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTI3RS9FOEE4OENCQUFC NzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdlMlFjYmxtRlktYmlyWks1 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y3YUhKMHN6R2UyUWNibG1GWS1iaXJaSzV2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTI3RS9FOEE4OENCQUFCNzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdl MlFjYmxtRlktYmlyWks1dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEtcyDF5cjtL/6oJRc9afz51fa6rFAog97JgAzyvOaROqnqLtErUs9 2Bt9cppBbasgilfJPuQcqidCDjCqGyqi3hTe81M89TV5gKPjrh6UqiqQBBmx6h8m Oo7+u/fzyawgBnl4AnS1SMcgUx3VridLBlr97Pgi3hyiok+jYXyoyOicVS+IJSVV wqfGwGM/21S3Gwf7itqu92ZOvtTge+DWOZBo3Xt99khbuq9TYNGy3Me2CqmtmKnO J6yfcsoRSk0rA9iQ6INVySwv50/sN3wEOruwM7lyPCTbf5ZzbtYCyCFg8/sKixkq /rvCQMsPJ5BPDcea1NDr/b/t0KXZ2O1D -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:38 2024 by rpki-client on console-fra.rpki-client.org