$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json) Hash identifier: 7sJM3JhXCPNNgiSTDE3mSahFOkC+mggIEssHqE48My0= Subject key identifier: 7F:B1:03:2A:ED:DE:4E:71:BA:5A:BC:7E:EA:16:C8:31:8B:CF:56:60 Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Certificate serial: 095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft Manifest number: 0957 Signing time: Sat 04 May 2024 21:14:16 +0000 Manifest this update: Sat 04 May 2024 21:14:15 +0000 Manifest next update: Sat 11 May 2024 21:14:15 +0000 Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: Fb+9+RSH0e80XVFGkBROSgG3DLFt4IZjcL7fuW8NYLc=) 2: 11502BAC719111EAAC505266C4F9AE02.roa (hash: RDM7Lb5HfvMFUtS/P2rwwBWdJyjHtFv0PrhdCwgVU6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Validity Not Before: May 4 21:14:15 2024 GMT Not After : May 11 21:14:15 2024 GMT Subject: CN=6636a527-b021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:6c:d4:0d:98:e9:04:dc:07:d7:53:c4:c3: 36:8a:9e:ff:50:91:34:b7:7a:8e:b1:96:cb:3d:09: 21:4a:a6:a3:79:c2:85:11:05:de:f6:e4:37:e5:b2: d8:31:62:17:89:1b:ca:ca:ef:0a:65:a0:34:d7:41: a1:c8:d2:60:41:64:73:20:e6:08:01:e9:c6:6a:f3: a4:74:af:e5:79:95:16:1f:50:6d:38:31:fc:38:62: f0:84:d8:e7:d9:e9:fd:09:7d:29:39:9c:20:1a:90: d0:d1:69:dd:ac:c9:7c:12:aa:29:80:ba:66:f8:4e: 9d:d8:a8:02:f0:e0:a8:93:dc:67:eb:0d:95:3f:01: 31:93:62:fa:9f:e0:26:04:f7:d0:1b:f5:93:72:b7: 51:8b:8c:40:9b:89:a7:a3:6f:e1:5c:ab:09:6b:91: 70:a7:b8:46:5b:02:64:18:16:9b:e8:f2:91:76:43: 9f:74:d5:c5:11:e4:87:58:87:cb:9c:0b:8d:e5:97: 84:80:7b:14:ca:ba:88:0c:5b:e6:c2:f9:3b:24:d5: 92:91:be:f2:a0:f0:80:7e:0c:25:19:00:27:50:3a: 73:3e:03:d4:0e:b7:7a:d8:3a:15:da:a1:d3:cc:5a: 4a:2d:0c:a2:3f:44:bb:19:3e:53:7b:1d:e0:8d:59: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B1:03:2A:ED:DE:4E:71:BA:5A:BC:7E:EA:16:C8:31:8B:CF:56:60 X509v3 Authority Key Identifier: keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:25:27:6c:e0:a2:93:12:24:96:e1:87:70:51:67:1f:c2:fb: da:50:1c:06:90:1b:2b:19:9b:f9:12:bd:0a:7a:61:24:23:1b: 9b:59:5c:70:52:98:6c:fc:68:0d:76:a3:e2:b9:bb:e9:1a:40: da:0a:26:3e:28:a7:ed:92:b0:cf:26:85:7d:4a:25:3e:dd:f0: 36:f4:b4:6c:2a:50:23:d0:59:98:05:51:c3:8d:5d:73:2f:07: 94:fc:6c:61:6e:66:2a:37:f7:a6:0c:89:82:21:51:5b:85:2b: 35:83:32:5c:98:e9:ac:bb:35:ff:0d:1d:15:91:47:e8:f3:ee: ab:16:09:d2:59:aa:86:fa:90:3f:d5:a8:28:27:4e:5e:3d:f1: 23:7f:7e:a0:98:94:93:6c:4e:de:7e:00:79:46:6d:81:35:dd: ca:c9:aa:ed:ec:6d:af:5c:d1:e2:82:45:61:f3:69:dc:6a:11: fd:04:24:77:68:b8:74:58:c4:93:a3:77:4f:8c:ae:71:c3:52: 51:81:65:44:8d:a1:1d:de:e8:1b:02:95:b1:bc:5f:a7:c2:cd: 38:08:56:dd:de:28:91:19:59:2b:6a:b8:f1:dc:7e:3b:5f:9e: fb:af:0f:39:67:e3:b3:ca:59:25:08:72:39:dd:f8:ef:e7:57: cb:59:88:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz QzI5NTUyODMwHhcNMjQwNTA0MjExNDE1WhcNMjQwNTExMjExNDE1WjAYMRYwFAYD VQQDEw02NjM2YTUyNy1iMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Jds1A2Y6QTcB9dTxMM2ip7/UJE0t3qOsZbLPQkhSqajecKFEQXe9uQ35bLY MWIXiRvKyu8KZaA010GhyNJgQWRzIOYIAenGavOkdK/leZUWH1BtODH8OGLwhNjn 2en9CX0pOZwgGpDQ0WndrMl8EqopgLpm+E6d2KgC8OCok9xn6w2VPwExk2L6n+Am BPfQG/WTcrdRi4xAm4mno2/hXKsJa5Fwp7hGWwJkGBab6PKRdkOfdNXFEeSHWIfL nAuN5ZeEgHsUyrqIDFvmwvk7JNWSkb7yoPCAfgwlGQAnUDpzPgPUDrd62DoV2qHT zFpKLQyiP0S7GT5Tex3gjVl8FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+xAyrt 3k5xulq8fuoWyDGLz1ZgMB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzJSds4KKTEiSW4YdwUWcfwvvaUBwGkBsrGZv5Er0KemEkIxubWVxw Uphs/GgNdqPiubvpGkDaCiY+KKftkrDPJoV9SiU+3fA29LRsKlAj0FmYBVHDjV1z LweU/GxhbmYqN/emDImCIVFbhSs1gzJcmOmsuzX/DR0VkUfo8+6rFgnSWaqG+pA/ 1agoJ05ePfEjf36gmJSTbE7efgB5Rm2BNd3Kyart7G2vXNHigkVh82ncahH9BCR3 aLh0WMSTo3dPjK5xw1JRgWVEjaEd3ugbApWxvF+nws04CFbd3iiRGVkrarjx3H47 X577rw85Z+OzylklCHI53fjv51fLWYgU -----END CERTIFICATE-----Generated at Sun May 5 00:12:30 2024 by rpki-client on console-fra.rpki-client.org