$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: cdvxv+muBoGHYuGZ9yCQdrpFEBehRWGluAdcSEMIZZc= Subject key identifier: 95:06:D1:59:5D:8C:B7:32:06:5D:37:1D:2C:7E:AE:42:E6:5F:ED:B2 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 13A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 138E Signing time: Sun 28 Apr 2024 17:31:29 +0000 Manifest this update: Sun 28 Apr 2024 17:31:29 +0000 Manifest next update: Sun 05 May 2024 17:31:29 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: aELz+vzhZQNhHlnDvf4X9dtxDSQMIu1Pf2RmAhXKEfA=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: cpQwQDSUoYa+Vnot2yqU8AJPODFXEemIQDAmCs6uXVM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: dYCX7IHIDRRn8UilGlq5sfI3SJv98t999gOaYY31/hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5029 (0x13a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Apr 28 17:31:29 2024 GMT Not After : May 5 17:31:29 2024 GMT Subject: CN=662e87f1-838c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:5e:ca:2d:23:32:ef:03:96:60:0b:d8:1f: 9b:66:2f:21:47:62:6a:6c:8c:20:5c:5a:a4:6e:4c: bb:ed:12:4c:19:c2:1d:e4:b1:32:a1:4e:2f:e5:bc: 0a:39:ee:c0:86:fb:44:4a:91:8f:d1:fc:6f:8e:1c: fa:d3:a4:8d:22:cf:80:b8:be:b0:4b:f8:6f:af:c1: d9:1d:a0:32:a3:77:8d:69:8a:3a:85:dd:02:62:b4: df:c1:e7:06:8f:5e:22:3d:99:35:0a:5f:d4:7b:d0: d1:0b:7a:82:f2:55:36:36:f7:af:bb:5e:cc:70:e0: ad:c6:bd:8d:da:cc:5c:0c:b7:e3:07:8e:42:cc:29: 94:e6:6c:e6:00:62:51:76:c2:a5:f2:39:29:66:2b: b9:f2:37:d9:89:17:08:d6:8d:71:09:82:5e:3b:45: 3e:77:1d:5b:3a:2a:f5:8a:0c:45:ef:50:9d:2a:43: 85:e8:d7:30:58:e1:d2:6e:74:87:fb:58:c0:d8:f0: f0:8a:e3:0d:66:c2:fb:21:13:6b:99:8f:70:4e:ae: c2:4e:46:90:22:85:22:ec:f5:97:49:bd:68:b2:54: 34:bd:fa:06:80:53:0c:39:b9:ee:bc:b8:15:09:2a: 26:3a:73:0b:e6:ec:fb:7c:a9:ac:9a:1f:ed:17:3a: d2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:06:D1:59:5D:8C:B7:32:06:5D:37:1D:2C:7E:AE:42:E6:5F:ED:B2 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:1a:e8:8c:6e:d2:72:17:47:c1:48:ea:41:ff:76:16:6a:a9: 89:e3:7b:b6:f6:0c:94:fd:e6:67:58:79:eb:b8:2c:d7:89:b0: ec:63:51:2d:d7:40:1f:c6:69:f2:6c:68:b7:7e:56:d4:c4:50: 9b:a6:43:ab:fb:da:53:05:f2:15:7a:a7:27:0c:92:7d:b5:52: 49:eb:05:27:9d:09:59:fe:35:aa:55:b4:60:04:cf:f7:22:95: b0:4d:15:cd:63:66:fd:45:87:2d:db:52:a3:4b:48:16:0e:b9: 1f:c5:89:54:c5:0d:e0:8a:dc:b5:97:5d:3a:38:5b:76:ef:15: 85:ce:00:dd:61:b7:ae:11:3a:a1:11:d6:03:5a:93:09:eb:15: 6f:b6:2d:53:9f:54:46:47:64:06:88:ee:6d:db:f9:87:04:72: 7a:73:2a:a4:cb:ea:f3:60:6b:73:ea:4d:a4:68:b6:33:13:85: f9:26:35:19:f5:99:f2:c4:9b:9a:f8:bc:bb:0b:27:fc:3a:bd: 97:c1:85:83:56:3c:e1:91:a0:a7:36:c2:b4:06:49:1a:a8:a8: 34:3a:f5:47:89:a3:f5:bd:df:4d:6a:9d:ac:2e:e2:a4:85:00: e1:5a:73:2f:b5:09:d8:3d:80:21:dc:c3:4e:ba:da:a9:33:a6: 01:e1:e8:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjQwNDI4MTczMTI5WhcNMjQwNTA1MTczMTI5WjAYMRYwFAYD VQQDEw02NjJlODdmMS04MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvpeyi0jMu8DlmAL2B+bZi8hR2JqbIwgXFqkbky77RJMGcId5LEyoU4v5bwK Oe7AhvtESpGP0fxvjhz606SNIs+AuL6wS/hvr8HZHaAyo3eNaYo6hd0CYrTfwecG j14iPZk1Cl/Ue9DRC3qC8lU2Nvevu17McOCtxr2N2sxcDLfjB45CzCmU5mzmAGJR dsKl8jkpZiu58jfZiRcI1o1xCYJeO0U+dx1bOir1igxF71CdKkOF6NcwWOHSbnSH +1jA2PDwiuMNZsL7IRNrmY9wTq7CTkaQIoUi7PWXSb1oslQ0vfoGgFMMObnuvLgV CSomOnML5uz7fKmsmh/tFzrSXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUG0Vld jLcyBl03HSx+rkLmX+2yMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByGuiMbtJyF0fBSOpB/3YWaqmJ43u29gyU/eZnWHnruCzXibDsY1Et 10AfxmnybGi3flbUxFCbpkOr+9pTBfIVeqcnDJJ9tVJJ6wUnnQlZ/jWqVbRgBM/3 IpWwTRXNY2b9RYct21KjS0gWDrkfxYlUxQ3gity1l106OFt27xWFzgDdYbeuETqh EdYDWpMJ6xVvti1Tn1RGR2QGiO5t2/mHBHJ6cyqky+rzYGtz6k2kaLYzE4X5JjUZ 9ZnyxJua+Ly7Cyf8Or2XwYWDVjzhkaCnNsK0BkkaqKg0OvVHiaP1vd9Nap2sLuKk hQDhWnMvtQnYPYAh3MNOutqpM6YB4egH -----END CERTIFICATE-----Generated at Sun Apr 28 19:01:38 2024 by rpki-client on console-fra.rpki-client.org