$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: xJTk7bbJixKIVA42EaVHKHQ/MWpVaofzhitBl5OVep4= Subject key identifier: 9E:D6:B0:F5:FF:5D:6B:87:A7:A8:64:5B:27:B1:8A:44:2C:F7:48:15 Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 0525 Signing time: Sun 05 May 2024 01:11:44 +0000 Manifest this update: Sun 05 May 2024 01:11:44 +0000 Manifest next update: Sun 12 May 2024 01:11:44 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: huTrZ7LUfR2fcnWSXxfPcVVb6X4+mMks5JVQtLq31cA=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 71YGKNQuEj1eOHiH3hSh40TaFwuCn87ADtJkRqIHklk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: May 5 01:11:44 2024 GMT Not After : May 12 01:11:44 2024 GMT Subject: CN=6636dcd0-01a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:bb:8e:aa:9a:23:b9:83:2f:5c:99:76:83: fa:48:35:79:df:4d:bc:df:f8:12:d0:51:e8:04:1a: 38:16:83:cf:03:3e:31:0f:c4:94:43:fe:94:2e:8b: 71:ef:e5:c2:b9:89:fb:4b:2d:4b:87:c2:21:93:00: db:10:cc:ad:f1:3d:79:5e:8d:2a:3f:f2:b2:74:90: 32:35:f1:60:fa:3e:32:11:09:00:f3:9b:2c:7c:b7: 5c:da:8a:4b:5b:5a:9d:6e:d1:94:08:ec:2b:d3:f6: 67:db:ae:ea:f2:7f:3a:eb:d0:a0:5c:69:53:c9:2d: 57:2a:43:12:72:02:63:e9:0c:24:1f:b0:ce:03:81: 98:ff:3c:3f:5f:5e:d7:14:b3:2e:86:63:02:4a:0e: b7:38:a4:18:e1:2e:af:9b:9e:28:94:6c:c0:07:58: 27:2d:87:97:df:7c:5c:81:53:e7:09:28:dc:9a:02: c1:fb:ab:d3:0b:d0:c1:3f:e7:f3:79:25:d2:fb:c0: 2d:8c:76:80:50:43:ff:e0:f5:c8:33:a0:64:ad:d2: e4:76:0c:ae:9e:f1:2e:81:e9:3f:ab:de:95:41:b7: fd:23:17:ac:e5:1a:15:20:97:0d:5e:2d:26:95:54: ba:f2:3a:4f:3a:df:d4:10:66:23:d2:91:27:28:d8: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D6:B0:F5:FF:5D:6B:87:A7:A8:64:5B:27:B1:8A:44:2C:F7:48:15 X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9f:17:92:b8:cf:09:cf:ed:d7:3d:33:f7:6a:a8:91:1e:e7: f3:b7:ea:63:6d:9d:ca:9e:26:85:19:a8:30:7f:26:48:87:2d: 90:9f:16:ed:a4:39:63:49:43:04:f0:73:93:a7:99:f1:ee:19: 5e:22:3a:f7:68:87:67:58:a8:23:2c:99:e8:34:c5:7c:a9:64: b4:54:29:29:7f:63:7b:da:d7:aa:99:82:22:04:cd:d1:6d:49: d9:24:84:f1:2d:ed:f9:da:39:f3:bc:ee:b7:82:1b:4c:64:aa: 9c:57:d5:93:08:b9:df:42:a0:8f:2d:31:22:82:ee:bf:23:3e: a8:52:6f:16:4b:bc:82:1b:db:c6:1b:46:fd:88:ed:6f:06:c9: 2f:dd:0a:3d:cf:0f:40:b3:73:15:7b:a1:2b:1d:dc:c4:c0:dd: 0c:0b:48:dd:63:7f:e1:ad:4e:bf:07:34:53:4d:65:ca:25:d9: 29:da:3b:41:3b:da:4b:4b:4d:ba:5c:24:91:75:b4:02:ab:32: 4a:56:04:c3:e4:10:93:e2:a6:4e:8d:6a:25:df:0b:1f:c0:1d: 06:37:a1:d2:f1:f1:05:a6:96:31:3c:f0:8e:62:ef:8a:b2:95: 59:14:94:9f:e4:52:78:d2:54:b5:d9:1b:a7:94:cd:c5:ee:17: 62:05:86:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjQwNTA1MDExMTQ0WhcNMjQwNTEyMDExMTQ0WjAYMRYwFAYD VQQDEw02NjM2ZGNkMC0wMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUa7jqqaI7mDL1yZdoP6SDV530283/gS0FHoBBo4FoPPAz4xD8SUQ/6ULotx 7+XCuYn7Sy1Lh8IhkwDbEMyt8T15Xo0qP/KydJAyNfFg+j4yEQkA85ssfLdc2opL W1qdbtGUCOwr0/Zn267q8n8669CgXGlTyS1XKkMScgJj6QwkH7DOA4GY/zw/X17X FLMuhmMCSg63OKQY4S6vm54olGzAB1gnLYeX33xcgVPnCSjcmgLB+6vTC9DBP+fz eSXS+8AtjHaAUEP/4PXIM6BkrdLkdgyunvEugek/q96VQbf9Ixes5RoVIJcNXi0m lVS68jpPOt/UEGYj0pEnKNilnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7WsPX/ XWuHp6hkWyexikQs90gVMB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOnxeSuM8Jz+3XPTP3aqiRHufzt+pjbZ3KniaFGagwfyZIhy2Qnxbt pDljSUME8HOTp5nx7hleIjr3aIdnWKgjLJnoNMV8qWS0VCkpf2N72teqmYIiBM3R bUnZJITxLe352jnzvO63ghtMZKqcV9WTCLnfQqCPLTEigu6/Iz6oUm8WS7yCG9vG G0b9iO1vBskv3Qo9zw9As3MVe6ErHdzEwN0MC0jdY3/hrU6/BzRTTWXKJdkp2jtB O9pLS026XCSRdbQCqzJKVgTD5BCT4qZOjWol3wsfwB0GN6HS8fEFppYxPPCOYu+K spVZFJSf5FJ40lS12RunlM3F7hdiBYZz -----END CERTIFICATE-----Generated at Sun May 5 02:33:38 2024 by rpki-client on console-fra.rpki-client.org