$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: m33wtxDYH/7pWlBTQWcYtH+MYeguKzaWDtWDKTo7KoE= Subject key identifier: 34:21:D0:7A:CA:57:5E:D5:DB:55:0F:CE:7B:53:32:4C:3F:5D:60:EC Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0A16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 09FD Signing time: Sat 04 May 2024 20:53:04 +0000 Manifest this update: Sat 04 May 2024 20:53:03 +0000 Manifest next update: Sat 11 May 2024 20:53:03 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: 3kx41xFnFuhG4IXUlH1PieqXXglqId37risLg5ZmWZg=) 2: 64460F68F17B11EC806AC312C4F9AE02.roa (hash: Cg+ozZFKJS0FjsmqsA75/MWl3j+ogYPR/cxj43bck4Y=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: IOzHtTbWHhgsZHthrmnKo8KE4uFqwhbjTMYbOTQH+38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2582 (0xa16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: May 4 20:53:03 2024 GMT Not After : May 11 20:53:03 2024 GMT Subject: CN=6636a030-dcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:3e:83:eb:da:a7:55:09:94:ce:28:1f:2f: 14:61:b7:ea:85:d4:9f:98:b4:64:65:53:cd:a4:57: 44:c3:b5:76:6c:e4:44:2c:5f:59:d0:14:31:3a:5a: 92:85:e0:89:f1:0d:80:c3:04:dd:35:db:79:e4:5f: ba:67:ba:94:07:89:9f:ec:43:f2:7d:e9:b5:a3:a3: 9d:d8:34:e7:5c:6c:a4:91:78:aa:46:6e:ec:96:e9: 54:37:9c:06:92:08:2a:ba:dd:81:ab:11:cb:28:23: 5c:9c:0d:98:a7:bc:ab:46:b7:ab:8c:2e:d9:f7:7b: b1:45:88:5f:87:e2:c0:3a:b9:46:31:82:b9:6c:f4: 1e:33:df:d3:2b:c1:03:45:b1:b3:23:07:36:86:25: b6:a6:fd:e8:73:e6:43:8d:64:dc:38:99:41:e7:0d: be:ae:d5:9d:14:8c:13:45:a0:9a:c1:a3:58:be:b4: 49:f7:c9:9d:51:b8:6f:1b:b3:23:8f:56:c1:95:cb: 85:ef:38:e9:1d:04:c6:2d:e3:fa:ba:cf:45:3e:ce: 7d:25:1f:0b:e4:cd:fd:1b:8e:f7:79:02:9a:2f:b3: c0:f9:2e:e4:f1:14:86:29:de:13:b6:04:29:bf:db: d7:31:84:46:94:b0:a5:2e:15:75:0e:bf:0c:b6:f7: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:D0:7A:CA:57:5E:D5:DB:55:0F:CE:7B:53:32:4C:3F:5D:60:EC X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:6c:89:79:1c:98:e1:58:2a:a3:be:ef:b3:a6:68:2d:d7: 00:70:0e:09:4a:ff:e1:15:a5:65:23:87:20:c3:b1:70:6b:c2: 17:0d:87:ab:90:52:d5:be:1e:18:a5:42:d1:d4:83:01:09:99: 7b:b4:11:6d:2a:b4:d2:24:e2:b7:a4:0d:90:26:c8:9b:24:75: 93:d4:84:ed:b8:dd:95:2f:e0:fc:ca:02:73:53:65:c4:fd:a2: 86:23:7b:fb:76:76:fc:be:7f:d9:3b:da:8b:7b:17:0a:85:4d: 45:66:b8:17:12:3a:ef:27:cb:c3:33:2b:75:40:48:aa:30:09: 69:5c:f4:94:b6:9e:ab:9c:12:d2:99:5e:bb:5a:db:9c:1a:28: 41:a9:6b:e2:fd:71:e7:15:28:2f:03:46:9a:e2:ab:50:92:cd: ab:f0:06:e4:ea:cc:46:54:2d:73:ab:46:a8:70:5c:ce:48:ab: b4:3a:36:c4:a5:a0:b0:7f:bf:99:3e:6c:24:d2:dd:52:e3:9f: 56:81:3c:f8:9d:a8:36:de:6d:35:8e:ef:dd:58:5c:0a:4e:45: a5:f9:67:42:87:3d:6e:4b:39:65:38:5e:dd:70:be:11:62:3c: c9:fa:01:b3:da:c3:6d:30:b3:8b:db:2e:d3:2d:f5:b7:80:ae: 7d:72:3e:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjQwNTA0MjA1MzAzWhcNMjQwNTExMjA1MzAzWjAYMRYwFAYD VQQDEw02NjM2YTAzMC1kY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SA+g+vap1UJlM4oHy8UYbfqhdSfmLRkZVPNpFdEw7V2bORELF9Z0BQxOlqS heCJ8Q2AwwTdNdt55F+6Z7qUB4mf7EPyfem1o6Od2DTnXGykkXiqRm7slulUN5wG kggqut2BqxHLKCNcnA2Yp7yrRrerjC7Z93uxRYhfh+LAOrlGMYK5bPQeM9/TK8ED RbGzIwc2hiW2pv3oc+ZDjWTcOJlB5w2+rtWdFIwTRaCawaNYvrRJ98mdUbhvG7Mj j1bBlcuF7zjpHQTGLeP6us9FPs59JR8L5M39G473eQKaL7PA+S7k8RSGKd4TtgQp v9vXMYRGlLClLhV1Dr8Mtvc7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQh0HrK V17V21UPzntTMkw/XWDsMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GmyJeRyY4Vgqo77vs6ZoLdcAcA4JSv/hFaVlI4cgw7Fwa8IXDYer kFLVvh4YpULR1IMBCZl7tBFtKrTSJOK3pA2QJsibJHWT1ITtuN2VL+D8ygJzU2XE /aKGI3v7dnb8vn/ZO9qLexcKhU1FZrgXEjrvJ8vDMyt1QEiqMAlpXPSUtp6rnBLS mV67WtucGihBqWvi/XHnFSgvA0aa4qtQks2r8Abk6sxGVC1zq0aocFzOSKu0OjbE paCwf7+ZPmwk0t1S459WgTz4nag23m01ju/dWFwKTkWl+WdChz1uSzllOF7dcL4R YjzJ+gGz2sNtMLOL2y7TLfW3gK59cj6k -----END CERTIFICATE-----Generated at Sat May 4 21:33:01 2024 by rpki-client on console-fra.rpki-client.org