$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: vnLNEbvrSliBeFIbkpflN2rWEutw5WyK7mRQZqakZOY= Subject key identifier: 6C:0B:0A:01:8A:33:92:7A:EA:17:01:C8:57:79:EF:4A:50:BF:22:C8 Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: 10 Signing time: Wed 15 May 2024 08:59:54 +0000 Manifest this update: Wed 15 May 2024 08:59:54 +0000 Manifest next update: Wed 22 May 2024 08:59:54 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: voIlSU9DposKugw7DSPsn/HhzRk3CjzmIjT9/R+i6bI=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: TkSH2eeRMqY94jagMtgrF0f2pi1KvzFN767qntLjkUk=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: AVG8UOICPIOwfxF6CejSjbDjEsfHRJtOVBJAR9mZ1BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: May 15 08:59:54 2024 GMT Not After : May 22 08:59:54 2024 GMT Subject: CN=6644798a-ce3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:eb:14:9f:64:6e:a8:bc:e4:5d:4a:c2:06: 21:9a:be:ae:a3:c6:78:1b:b2:d6:8f:05:3e:47:f3: 65:ce:6f:7a:ab:51:66:0a:71:b3:aa:c1:17:df:73: cb:66:04:06:6b:ae:47:1f:7b:ba:d4:08:83:5b:af: e7:85:b2:c6:0c:d6:b6:8a:50:68:f2:b9:89:66:4f: 40:b6:36:4c:86:f1:4f:74:0b:da:93:eb:96:aa:1c: e7:ca:20:99:26:ae:b4:9f:a0:9e:c8:a7:21:2c:b5: 41:3e:e8:c0:6b:00:8f:e0:bb:e1:e0:bf:77:06:a1: dc:ea:e2:2e:f1:bf:87:39:a9:14:5c:0c:f7:27:e9: a6:22:0c:c6:12:51:fe:c5:cb:6e:e8:bd:54:64:28: 21:49:1c:0c:73:38:8e:9b:cc:a5:49:7d:af:b4:ba: e2:45:05:f5:ed:29:9d:c5:30:eb:f7:49:97:c0:03: 8c:d3:a8:3e:98:e4:15:fb:48:70:37:ef:52:5a:16: 2b:d7:63:7e:47:18:4a:0f:87:2e:64:d8:0e:98:3f: 08:44:e0:7e:15:1c:be:d8:e7:1e:9b:ec:c1:bd:b1: 65:a2:19:40:89:06:08:11:de:28:dc:d7:b4:a8:70: 22:fc:2f:ec:1e:69:0e:d7:1a:1a:c2:ba:8b:6b:c4: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0B:0A:01:8A:33:92:7A:EA:17:01:C8:57:79:EF:4A:50:BF:22:C8 X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:59:20:2b:5a:82:e9:87:45:a3:92:c1:ee:cc:f2:30:3f:71: 4b:1c:0b:49:d9:30:23:65:f7:b6:f2:4a:f5:57:3c:34:25:f0: 1a:99:b8:fc:e1:ac:da:61:81:0d:1b:6c:b3:03:30:d2:dd:db: 1a:55:17:8a:58:43:8d:9f:6a:57:95:d9:c1:33:11:e1:ba:e1: dc:3a:d1:e5:55:24:da:5f:eb:6b:d6:df:e6:2a:23:c0:38:98: a9:44:e2:f5:75:15:e3:08:f1:54:82:cf:4f:70:4d:68:0c:6c: 57:65:f2:31:8b:88:66:2d:87:3b:af:70:ab:96:6f:91:a0:08: 07:ed:68:7e:e3:a2:ef:a4:b5:85:33:04:ca:fb:6e:a1:75:66: e7:83:6f:e5:1a:f3:ea:5b:ba:d8:a0:f2:fc:f2:5b:af:6f:58: 3d:e0:3f:5a:f4:22:4f:a5:17:8f:c6:ad:18:73:57:40:a7:1a: cf:86:f5:20:fa:c6:42:7a:6a:86:7a:12:0c:9a:e9:15:bd:d7: d8:cd:55:5b:ab:4e:a8:3b:31:3a:88:82:07:4a:7e:45:47:d6: f7:ab:df:52:21:02:dc:29:08:70:81:22:97:a4:77:1c:99:8f: 15:fe:4e:e2:76:5e:f9:11:25:f1:23:1b:a9:3d:5a:c9:d6:6d: 46:04:af:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3NTExMC8GA1UEBRMoRUM1RUYzMzU0RTRDRDUzNEFCODYyNUI5OUI3MzEyRDZG NEU0OEIxNTAeFw0yNDA1MTUwODU5NTRaFw0yNDA1MjIwODU5NTRaMBgxFjAUBgNV BAMTDTY2NDQ3OThhLWNlM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDgOsUn2RuqLzkXUrCBiGavq6jxngbstaPBT5H82XOb3qrUWYKcbOqwRffc8tm BAZrrkcfe7rUCINbr+eFssYM1raKUGjyuYlmT0C2NkyG8U90C9qT65aqHOfKIJkm rrSfoJ7IpyEstUE+6MBrAI/gu+Hgv3cGodzq4i7xv4c5qRRcDPcn6aYiDMYSUf7F y27ovVRkKCFJHAxzOI6bzKVJfa+0uuJFBfXtKZ3FMOv3SZfAA4zTqD6Y5BX7SHA3 71JaFivXY35HGEoPhy5k2A6YPwhE4H4VHL7Y5x6b7MG9sWWiGUCJBggR3ijc17So cCL8L+weaQ7XGhrCuotrxKnnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbAsKAYoz knrqFwHIV3nvSlC/IsgwHwYDVR0jBBgwFoAU7F7zNU5M1TSrhiW5m3MS1vTkixUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTc1LzA0NjBBQTE4RkJG QjExRUVBMUVFQUYxRkM0RjlBRTAyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0Y3ek5VNU0xVFNyaGlXNW0zTVMxdlRraXhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG MTc1LzA0NjBBQTE4RkJGQjExRUVBMUVFQUYxRkM0RjlBRTAyLzdGN3pOVTVNMVRT cmhpVzVtM01TMXZUa2l4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNZICtagumHRaOSwe7M8jA/cUscC0nZMCNl97bySvVXPDQl8BqZuPzh rNphgQ0bbLMDMNLd2xpVF4pYQ42faleV2cEzEeG64dw60eVVJNpf62vW3+YqI8A4 mKlE4vV1FeMI8VSCz09wTWgMbFdl8jGLiGYthzuvcKuWb5GgCAftaH7jou+ktYUz BMr7bqF1ZueDb+Ua8+pbutig8vzyW69vWD3gP1r0Ik+lF4/GrRhzV0CnGs+G9SD6 xkJ6aoZ6Egya6RW919jNVVurTqg7MTqIggdKfkVH1ver31IhAtwpCHCBIpekdxyZ jxX+TuJ2XvkRJfEjG6k9WsnWbUYEr1I= -----END CERTIFICATE-----Generated at Wed May 15 11:17:44 2024 by rpki-client on console-ams.rpki-client.org