$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json) Hash identifier: Z5o8igpLaI8SQK+J3mVkNuVStw0CkjI1jZqQGlOv7D8= Subject key identifier: CC:9E:28:BE:DF:4B:15:8A:2E:FA:96:B1:39:B3:77:84:50:A5:0E:9B Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Certificate serial: 33B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft Manifest number: 33B6 Signing time: Fri 26 Apr 2024 14:39:05 +0000 Manifest this update: Fri 26 Apr 2024 14:39:05 +0000 Manifest next update: Fri 03 May 2024 14:39:05 +0000 Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: /44RpF1YqOBvSBgoY1DJpyVh1oIw5paDM9SQy9GpqSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13238 (0x33b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Validity Not Before: Apr 26 14:39:05 2024 GMT Not After : May 3 14:39:05 2024 GMT Subject: CN=662bbc89-b71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:c0:4e:d2:dc:75:1c:56:2a:4d:5f:2e:3e: d9:83:6b:29:5a:43:a7:e1:df:8c:a5:22:1d:2f:e8: 20:d5:c2:96:06:6a:51:7b:37:82:4f:30:75:76:ca: b6:14:84:26:0c:0e:ac:b7:69:dd:63:ab:fc:54:69: c7:77:1f:d9:ff:fb:d6:2e:c7:bb:cc:a9:93:85:f1: d8:4e:2d:fd:8f:5a:d1:ba:b3:9e:b2:cb:4b:cd:d9: c3:ec:0a:32:a4:e6:d6:c5:ae:36:54:b9:24:35:e2: 37:0a:ce:73:fd:76:93:b2:40:9b:11:f8:fe:8e:b2: 40:6b:8b:d0:00:48:bb:bb:fc:54:ee:d8:17:3c:d0: 5a:c0:33:ed:c4:35:ab:21:4a:93:56:d6:e3:7f:5d: ed:1d:0b:1c:92:a0:29:ef:0b:c4:42:20:a6:db:6f: 84:04:f5:ff:cb:2a:ab:c3:97:2f:ca:2d:e6:d0:73: fd:c0:9b:ed:32:30:eb:ff:55:f5:55:fc:c1:e1:43: db:81:c7:7c:6b:08:40:0e:74:75:51:58:c2:6b:c0: a2:16:43:78:a6:84:c6:86:f9:7c:a5:c4:5b:0c:4e: 6b:f7:2c:a0:72:9a:b5:d6:1e:1e:22:e4:e3:92:c0: 34:83:6e:51:a7:6e:53:d8:53:c4:75:1d:a2:aa:df: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9E:28:BE:DF:4B:15:8A:2E:FA:96:B1:39:B3:77:84:50:A5:0E:9B X509v3 Authority Key Identifier: keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:cd:8e:e1:c5:a1:b4:a8:83:92:b7:43:41:41:27:95:f3:0a: 46:4f:ec:09:1c:db:91:7c:4b:5f:2e:15:ae:ca:9b:3f:84:98: 88:09:fa:47:c0:0c:41:cd:27:38:6a:1c:c2:48:b1:10:32:ab: 42:43:f1:93:5d:1b:99:bb:b6:be:33:0b:73:11:ef:b2:c9:57: af:2c:6f:57:1e:b0:17:68:d7:ea:00:32:fe:76:b4:40:5a:82: 7a:6b:a6:81:62:ff:aa:b2:b4:36:aa:3e:08:da:1e:b4:7a:89: 0b:67:8e:28:77:aa:3a:e3:e1:4e:b0:56:07:d7:31:ab:74:20: 3a:9a:92:d1:33:5a:cf:e1:55:a7:d7:dc:96:82:0e:27:eb:9a: cb:d2:69:22:dc:c9:04:f1:19:5d:17:c7:92:eb:02:ab:75:cf: 92:94:6d:92:35:31:39:93:72:ad:34:28:66:58:f8:b3:cb:96: bb:86:fc:74:81:1f:3b:68:e7:2c:d2:8f:49:e1:18:cc:8c:28: e6:da:df:e0:95:91:6f:5a:fb:8c:32:a2:ed:58:27:dd:a9:06: d0:9b:d4:d3:af:c7:f1:f8:b9:be:d2:a5:cb:18:7a:6c:64:0e: 17:87:9b:3f:7b:65:5d:68:03:6c:22:2e:87:3d:5d:c1:aa:9e: da:76:f2:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE RUYwN0YzQUQwHhcNMjQwNDI2MTQzOTA1WhcNMjQwNTAzMTQzOTA1WjAYMRYwFAYD VQQDEw02NjJiYmM4OS1iNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycfATtLcdRxWKk1fLj7Zg2spWkOn4d+MpSIdL+gg1cKWBmpRezeCTzB1dsq2 FIQmDA6st2ndY6v8VGnHdx/Z//vWLse7zKmThfHYTi39j1rRurOesstLzdnD7Aoy pObWxa42VLkkNeI3Cs5z/XaTskCbEfj+jrJAa4vQAEi7u/xU7tgXPNBawDPtxDWr IUqTVtbjf13tHQsckqAp7wvEQiCm22+EBPX/yyqrw5cvyi3m0HP9wJvtMjDr/1X1 VfzB4UPbgcd8awhADnR1UVjCa8CiFkN4poTGhvl8pcRbDE5r9yygcpq11h4eIuTj ksA0g25Rp25T2FPEdR2iqt9PfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyeKL7f SxWKLvqWsTmzd4RQpQ6bMB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4 NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSzY7hxaG0qIOSt0NBQSeV8wpGT+wJHNuRfEtfLhWuyps/hJiICfpH wAxBzSc4ahzCSLEQMqtCQ/GTXRuZu7a+MwtzEe+yyVevLG9XHrAXaNfqADL+drRA WoJ6a6aBYv+qsrQ2qj4I2h60eokLZ44od6o64+FOsFYH1zGrdCA6mpLRM1rP4VWn 19yWgg4n65rL0mki3MkE8RldF8eS6wKrdc+SlG2SNTE5k3KtNChmWPizy5a7hvx0 gR87aOcs0o9J4RjMjCjm2t/glZFvWvuMMqLtWCfdqQbQm9TTr8fx+Lm+0qXLGHps ZA4Xh5s/e2VdaANsIi6HPV3Bqp7advIv -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:35 2024 by rpki-client on console-ams.rpki-client.org