$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json) Hash identifier: FPRMC0Hb28VyTv2rJu4Jpw0SXKTedR34B1azoDhYxuI= Subject key identifier: 7F:5A:3F:70:31:8C:C3:4A:3F:3A:86:F3:42:64:D4:E7:BE:F9:7B:74 Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 1104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft Manifest number: 10F7 Signing time: Mon 06 May 2024 17:57:25 +0000 Manifest this update: Mon 06 May 2024 17:57:24 +0000 Manifest next update: Mon 13 May 2024 17:57:24 +0000 Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: 986qlm+0LeiDSuEVzh+yxDGTuJhH+d1uXm1fFF8QUaw=) 2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: yzhbO4fNgFXSarfTZtISXiyDIysa917WS3nmXTjeXuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4356 (0x1104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: May 6 17:57:24 2024 GMT Not After : May 13 17:57:24 2024 GMT Subject: CN=66391a05-7417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:a2:78:40:fa:c0:36:5c:20:f3:b2:cc:8b: e8:8a:12:86:c3:7f:fa:b8:16:2c:ce:2b:e9:48:ac: ce:25:02:26:7a:31:12:00:9e:93:01:6f:3e:45:14: e4:a2:f7:d0:3d:4b:b0:bc:a1:4e:8c:56:02:59:58: 93:7a:19:ff:98:8f:89:09:fd:f6:c2:6b:7c:76:d2: d1:f4:59:81:e9:80:40:1e:69:5e:56:d1:cd:18:c7: 1a:1e:79:0a:52:11:f9:dc:5f:a3:60:6c:c6:8d:b6: 8f:d1:11:42:36:d8:01:7d:fc:a1:d9:05:63:3e:25: 51:5c:2c:49:42:88:27:fc:76:11:2c:20:fa:c5:59: ea:a1:eb:f0:bf:6e:0d:48:ae:6f:f6:3a:66:88:d3: 39:e7:3a:bc:3f:59:c3:46:0c:35:18:a1:b3:55:c5: 4b:a9:f9:e4:75:38:f5:c1:42:21:75:ac:79:ef:f2: a9:a3:26:22:52:0e:f1:c0:e7:8d:ce:f6:ca:af:77: 00:31:d1:9f:53:72:02:df:ec:5f:65:6c:b4:24:26: c1:32:d6:58:67:de:fc:dc:b6:12:d7:c9:6c:51:6a: 69:6c:e3:b2:0a:43:3e:86:71:aa:08:b6:b7:54:b7: 72:a4:0c:e4:a5:e2:63:f5:16:3f:e1:39:52:0b:07: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:3F:70:31:8C:C3:4A:3F:3A:86:F3:42:64:D4:E7:BE:F9:7B:74 X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:cc:82:ac:5d:a0:4d:e0:40:23:35:b0:b3:7a:b2:07:45:71: b3:42:8c:4f:53:35:2d:6c:fa:ae:4b:da:41:f9:8c:6c:32:d2: 34:18:5b:7b:78:63:9c:86:af:be:89:d7:10:42:fe:bd:90:24: e7:25:85:5e:ac:12:a0:dc:3a:27:72:45:c2:38:aa:12:dc:39: d2:94:b8:02:cc:70:86:92:ae:58:c3:5e:56:9c:e5:f3:ca:46: 87:d3:e0:ce:69:8c:3a:56:4a:6a:92:90:35:d9:9a:83:68:d5: 72:c8:f5:32:3e:35:e0:3c:b0:64:d5:67:8e:87:59:28:e1:12: f5:cf:7a:6c:c0:64:63:47:44:f9:97:08:49:95:8e:e9:5d:76: 4c:65:5f:56:9b:de:9d:8e:b9:7c:98:86:08:fe:0e:c0:6f:43: b1:63:28:73:65:b6:19:5a:80:63:52:15:9d:18:92:81:74:ff: b2:29:5c:c8:20:a9:dc:64:6e:f9:74:32:e7:a9:8c:5d:79:c9: 95:e7:13:4e:24:ca:f4:93:00:06:42:98:51:e1:c6:5e:e4:fe: 42:64:c0:a9:dd:9d:0b:4d:af:74:fe:a4:49:30:2c:17:a6:95: 0c:84:cf:8f:b2:c5:1c:3c:87:15:3f:c1:9d:c9:61:1d:28:9f: 9b:2b:ee:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjQwNTA2MTc1NzI0WhcNMjQwNTEzMTc1NzI0WjAYMRYwFAYD VQQDEw02NjM5MWEwNS03NDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVaieED6wDZcIPOyzIvoihKGw3/6uBYszivpSKzOJQImejESAJ6TAW8+RRTk ovfQPUuwvKFOjFYCWViTehn/mI+JCf32wmt8dtLR9FmB6YBAHmleVtHNGMcaHnkK UhH53F+jYGzGjbaP0RFCNtgBffyh2QVjPiVRXCxJQogn/HYRLCD6xVnqoevwv24N SK5v9jpmiNM55zq8P1nDRgw1GKGzVcVLqfnkdTj1wUIhdax57/KpoyYiUg7xwOeN zvbKr3cAMdGfU3IC3+xfZWy0JCbBMtZYZ9783LYS18lsUWppbOOyCkM+hnGqCLa3 VLdypAzkpeJj9RY/4TlSCwc5HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9aP3Ax jMNKPzqG80Jk1Oe++Xt0MB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqzIKsXaBN4EAjNbCzerIHRXGzQoxPUzUtbPquS9pB+YxsMtI0GFt7 eGOchq++idcQQv69kCTnJYVerBKg3DonckXCOKoS3DnSlLgCzHCGkq5Yw15WnOXz ykaH0+DOaYw6VkpqkpA12ZqDaNVyyPUyPjXgPLBk1WeOh1ko4RL1z3pswGRjR0T5 lwhJlY7pXXZMZV9Wm96djrl8mIYI/g7Ab0OxYyhzZbYZWoBjUhWdGJKBdP+yKVzI IKncZG75dDLnqYxdecmV5xNOJMr0kwAGQphR4cZe5P5CZMCp3Z0LTa90/qRJMCwX ppUMhM+PssUcPIcVP8GdyWEdKJ+bK+7z -----END CERTIFICATE-----Generated at Mon May 6 20:19:19 2024 by rpki-client on console-fra.rpki-client.org