$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: L8tHZ8jBQLVGO2EnjpPzCtwiyREdk3Uy2FR66culIVs= Subject key identifier: AB:44:FF:91:55:1F:84:22:C4:16:38:47:6A:6E:84:A7:23:B8:AF:86 Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 07C8 Signing time: Tue 30 Apr 2024 22:28:01 +0000 Manifest this update: Tue 30 Apr 2024 22:28:00 +0000 Manifest next update: Tue 07 May 2024 22:28:00 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: imyRja4nqcNAvXR0sqFByjY9jyF5xpdnVoA6LY+Jtgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Apr 30 22:28:00 2024 GMT Not After : May 7 22:28:00 2024 GMT Subject: CN=66317071-cd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:4c:93:a4:6a:f9:61:be:bd:12:b7:e1:14: 43:a6:d8:92:cf:77:b5:fa:0a:26:2b:bf:0e:21:60: 36:da:d3:d1:bd:ef:3b:74:28:dc:9c:10:e1:8d:24: 51:7d:76:74:48:22:f1:13:5c:d9:07:d8:a2:8a:92: ae:53:85:e5:3a:65:bc:5a:bf:f2:5b:e9:9a:e6:ed: c4:cf:42:67:80:ff:91:24:a8:14:6c:df:11:a5:7d: 7e:6c:58:a2:d5:e8:7a:b4:0d:3e:92:17:56:02:05: 65:e2:ff:fd:e4:d4:f6:62:08:6a:a6:78:47:60:92: 5c:f3:f0:5c:87:47:86:82:3a:ff:ce:55:dc:db:cd: 92:d6:dc:af:c3:14:c8:d9:82:be:26:49:7d:ee:0b: 30:d6:bd:42:69:be:f0:57:46:55:06:f7:8d:5d:b8: aa:3d:1d:cc:53:48:10:37:ea:8a:75:15:cb:bf:ed: e5:8c:5e:29:7f:59:32:84:d5:69:3f:05:d6:2f:b6: 47:09:83:d6:35:2b:21:1c:ee:af:7b:e2:72:2d:bc: 47:f7:c9:b6:85:07:57:15:f4:fc:9d:70:82:67:2d: 88:90:3e:bb:c7:33:41:ec:2d:2c:c8:97:bb:be:d0: dc:35:f5:54:9f:cf:ac:92:3c:c4:31:48:cd:86:aa: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:44:FF:91:55:1F:84:22:C4:16:38:47:6A:6E:84:A7:23:B8:AF:86 X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:75:7f:98:71:29:89:98:d7:17:7d:2a:93:be:db:20:94:40: 65:6e:c4:93:16:d8:fe:26:d6:15:5b:3d:38:32:a1:bc:31:83: af:20:d1:aa:a6:94:21:53:ba:b5:5f:e2:72:a1:54:fe:83:3c: cd:1e:19:3e:47:5e:f3:db:38:da:9b:38:3e:55:d5:35:79:48: 1b:a2:28:5a:b5:e2:c5:92:7f:c4:2f:5e:d7:90:42:e0:c0:38: 7f:0b:fa:4d:a2:7c:08:34:ee:6d:35:43:09:3e:23:11:9f:42: 79:7a:ed:c2:a0:69:cd:19:ad:fa:25:c8:cf:3d:d3:69:37:0f: e7:76:48:ae:3e:7a:21:53:df:ff:32:4a:b9:87:90:15:41:26: ec:42:0f:d3:75:d8:10:97:8c:3a:6c:cb:aa:32:b9:db:14:65: e0:57:fb:0a:a7:7a:7a:ae:b1:29:1d:5c:03:fd:54:d1:9e:6e: 19:73:07:ae:ec:09:ea:20:f5:59:55:53:0f:19:f5:56:7a:f1: 69:8e:0b:a4:68:bd:9b:6e:a3:fd:d8:f0:fa:6f:fa:86:41:5e: 32:46:d2:2d:bd:aa:7f:3d:82:6a:13:0c:55:f3:3a:6b:0a:b0: 78:14:ca:86:82:8d:4a:e2:af:a2:d1:0a:05:96:db:78:e9:57: b6:06:85:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjQwNDMwMjIyODAwWhcNMjQwNTA3MjIyODAwWjAYMRYwFAYD VQQDEw02NjMxNzA3MS1jZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FRMk6Rq+WG+vRK34RRDptiSz3e1+gomK78OIWA22tPRve87dCjcnBDhjSRR fXZ0SCLxE1zZB9iiipKuU4XlOmW8Wr/yW+ma5u3Ez0JngP+RJKgUbN8RpX1+bFii 1eh6tA0+khdWAgVl4v/95NT2YghqpnhHYJJc8/Bch0eGgjr/zlXc282S1tyvwxTI 2YK+Jkl97gsw1r1Cab7wV0ZVBveNXbiqPR3MU0gQN+qKdRXLv+3ljF4pf1kyhNVp PwXWL7ZHCYPWNSshHO6ve+JyLbxH98m2hQdXFfT8nXCCZy2IkD67xzNB7C0syJe7 vtDcNfVUn8+skjzEMUjNhqqpoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtE/5FV H4QixBY4R2puhKcjuK+GMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGdX+YcSmJmNcXfSqTvtsglEBlbsSTFtj+JtYVWz04MqG8MYOvINGq ppQhU7q1X+JyoVT+gzzNHhk+R17z2zjamzg+VdU1eUgboihateLFkn/EL17XkELg wDh/C/pNonwINO5tNUMJPiMRn0J5eu3CoGnNGa36JcjPPdNpNw/ndkiuPnohU9// Mkq5h5AVQSbsQg/TddgQl4w6bMuqMrnbFGXgV/sKp3p6rrEpHVwD/VTRnm4Zcweu 7AnqIPVZVVMPGfVWevFpjgukaL2bbqP92PD6b/qGQV4yRtItvap/PYJqEwxV8zpr CrB4FMqGgo1K4q+i0QoFltt46Ve2BoVL -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:09 2024 by rpki-client on console-ams.rpki-client.org