$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: 8aHBS9FNG3zQINhzJfdkkjp6PZudvQvdJ/4ccDqVECw= Subject key identifier: 93:60:F3:87:5E:4E:CD:3A:CC:D9:88:DC:C4:29:05:6D:4D:2C:D4:C4 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 24DE Signing time: Fri 26 Apr 2024 16:05:24 +0000 Manifest this update: Fri 26 Apr 2024 16:05:23 +0000 Manifest next update: Fri 03 May 2024 16:05:23 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: OHdvKGvjMXNvPK3gyi7qMQ/9Hym2g1uSE2b70hcgCak=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: yZFbVVTPBwvrRTsqOgmswnZyFQQB/4sMbv/BLqO/6WI=) 3: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: pK13qwu7LElWcXQgX3OLiRCXBPJ1tlV1S05t+rUsNbE=) 4: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: GP4xUsIduNh2HeQhVqr04ctEFbTYTxQ87e01idrQ4Gs=) 5: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: 7iARUiMPv3HLznOKtpkc9GZoAlJZeWaZcC4qfythbSE=) 6: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: DAO6vHZHvWIaCjO27w7a9G3/fUbdbGe7PN0mBE3O0ec=) 7: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: cALMs37p+SMm6hNGN+ODAKaucxmqQpq+zCtGE32DRaQ=) 8: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: YkeekcBpQwTYjFjVb68ulLEw7AyNGZ6teI99pWERpdQ=) 9: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: CsPLqLI82IuxldD9PNs5Yf0k+KTEXxOyQqE0W6w+Qck=) 10: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: bQ+SCtyavdW0tv1oFWRU07IvCRrAGCvxa4R1ht6P4dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9557 (0x2555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Apr 26 16:05:23 2024 GMT Not After : May 3 16:05:23 2024 GMT Subject: CN=662bd0c4-ca0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:fe:d3:1b:6d:4e:6e:4d:bb:7f:49:fa:9b: 40:8c:12:7c:54:bf:ba:6d:d8:e5:a1:25:43:fe:48: 1d:34:b9:81:e3:c6:ca:b2:ae:55:b9:41:30:fe:b8: 83:da:d9:ef:16:d3:be:8e:dc:34:76:82:00:9d:65: 42:d8:17:35:60:a9:7e:dc:b5:ba:0f:f8:d4:86:2e: c2:89:96:b1:7c:79:7f:54:dc:db:10:10:5e:dd:39: 9f:13:5e:ab:9d:95:08:c4:b4:e6:03:03:32:ff:87: bf:1d:59:e9:33:ca:70:78:b6:17:b7:3f:b8:ab:62: b2:24:73:e0:d2:e9:01:b4:6f:d1:28:79:37:7b:b1: 48:45:7c:e6:1f:f2:06:c5:c1:ee:72:00:3b:a0:42: 65:65:d8:76:d8:fb:28:d3:de:d4:35:9a:b1:71:0c: 09:44:3a:bc:ca:c9:fd:5e:d6:78:df:c3:51:a9:48: 46:be:3f:17:20:b1:4f:ca:35:2b:8a:c9:6b:05:24: 44:02:7b:68:6e:f0:31:ee:82:5b:7f:b8:c8:99:01: 2b:f3:29:bf:b0:cb:24:4f:c9:03:4a:0f:1b:13:87: 58:91:64:4c:3a:38:53:e3:a7:30:4d:5a:ea:a9:4e: 03:c9:73:c0:73:23:50:9f:9c:12:c6:c2:cb:79:35: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:F3:87:5E:4E:CD:3A:CC:D9:88:DC:C4:29:05:6D:4D:2C:D4:C4 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9b:cf:2b:aa:ff:18:cd:bd:0f:d5:e9:b1:6d:60:08:d7:5f: 3d:c5:b9:c5:2c:af:ed:66:ef:f1:fa:97:27:e0:7d:92:f2:2c: 7a:6d:d5:2a:b0:ef:5b:e1:a1:a1:62:79:b1:d1:cc:5b:cb:9d: 57:0b:a4:aa:2b:77:67:fe:12:54:ce:ee:f0:19:ab:89:cd:30: 11:88:ab:5b:56:12:d5:2d:e6:6f:79:0a:8d:85:49:75:5a:f2: b8:04:7b:41:43:25:34:83:87:c4:02:b4:08:9d:61:13:a5:2a: d3:8d:88:04:22:3c:67:cc:76:cc:b5:43:a0:a6:75:4b:b7:cd: 58:ed:f4:4a:9d:be:f8:e3:29:b2:37:b8:d5:c6:fd:cd:cf:4b: e8:1a:bb:e9:6b:de:8b:d8:e8:58:17:87:f2:31:54:d6:b3:ce: 48:bc:21:e3:3a:28:55:23:99:86:ab:83:86:1c:b3:7d:83:1f: 41:e8:ed:ed:84:d8:c9:e5:9a:1f:c4:f6:a2:02:46:3c:dd:06: c7:6a:90:36:df:38:4b:df:fc:34:a5:14:4b:57:b9:d8:80:7a: 61:33:5a:f2:67:0d:33:bf:58:f3:31:f0:16:38:40:f3:73:af: 5a:6b:cf:98:d3:3c:bc:35:97:c2:1c:66:1e:eb:fe:d6:3b:5a: 2f:7f:d4:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjQwNDI2MTYwNTIzWhcNMjQwNTAzMTYwNTIzWjAYMRYwFAYD VQQDEw02NjJiZDBjNC1jYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfP+0xttTm5Nu39J+ptAjBJ8VL+6bdjloSVD/kgdNLmB48bKsq5VuUEw/riD 2tnvFtO+jtw0doIAnWVC2Bc1YKl+3LW6D/jUhi7CiZaxfHl/VNzbEBBe3TmfE16r nZUIxLTmAwMy/4e/HVnpM8pweLYXtz+4q2KyJHPg0ukBtG/RKHk3e7FIRXzmH/IG xcHucgA7oEJlZdh22Pso097UNZqxcQwJRDq8ysn9XtZ438NRqUhGvj8XILFPyjUr islrBSREAntobvAx7oJbf7jImQEr8ym/sMskT8kDSg8bE4dYkWRMOjhT46cwTVrq qU4DyXPAcyNQn5wSxsLLeTXUiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNg84de Ts06zNmI3MQpBW1NLNTEMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrm88rqv8Yzb0P1emxbWAI1189xbnFLK/tZu/x+pcn4H2S8ix6bdUq sO9b4aGhYnmx0cxby51XC6SqK3dn/hJUzu7wGauJzTARiKtbVhLVLeZveQqNhUl1 WvK4BHtBQyU0g4fEArQInWETpSrTjYgEIjxnzHbMtUOgpnVLt81Y7fRKnb744ymy N7jVxv3Nz0voGrvpa96L2OhYF4fyMVTWs85IvCHjOihVI5mGq4OGHLN9gx9B6O3t hNjJ5ZofxPaiAkY83QbHapA23zhL3/w0pRRLV7nYgHphM1ryZw0zv1jzMfAWOEDz c69aa8+Y0zy8NZfCHGYe6/7WO1ovf9S5 -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:33 2024 by rpki-client on console-ams.rpki-client.org