$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft File: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json) Hash identifier: dBdoMg9nfLePMyxY5eBnx7Qj71B62FpKLFh2NuApDqM= Subject key identifier: CD:9C:02:40:D2:0C:16:BE:1E:BE:B1:6E:E5:CF:95:4E:37:57:BC:BB Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft Manifest number: 27 Signing time: Wed 15 May 2024 08:40:07 +0000 Manifest this update: Wed 15 May 2024 08:40:06 +0000 Manifest next update: Wed 22 May 2024 08:40:06 +0000 Files and hashes: 1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: W0YOJXCkT1xZdTB/dnR1SOKmjeAWqVoO6RmeWkHTwOg=) 2: FB0AD342D69A11EEA3EDC75CC4F9AE02.roa (hash: EdoX20z7j/pThLubrL/LtxDHAa+sdVRvnOnw+V03wQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Validity Not Before: May 15 08:40:06 2024 GMT Not After : May 22 08:40:06 2024 GMT Subject: CN=664474e7-03d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:0f:cc:02:76:d3:1b:2f:3c:99:67:64:cf: 12:6e:3f:9c:de:2c:1f:0d:c8:b7:0b:fa:ec:8e:67: 8d:28:c9:1f:ae:36:16:d1:50:0d:f8:66:0f:5e:f8: f0:0b:e4:f5:b9:db:1c:68:19:63:e7:f2:45:00:63: a5:a9:9c:fb:a1:1e:36:69:14:80:9e:a8:21:f1:79: 41:1f:d6:e6:4a:62:05:fe:77:0b:36:8c:fd:61:bf: 9b:dd:e8:84:28:8c:ce:db:7f:df:2b:ca:21:bf:27: d5:83:bc:b7:2b:ac:30:25:4e:60:ee:22:95:d0:c7: 0a:50:18:b0:aa:57:f7:5d:5b:9e:ac:3c:35:9c:6b: 47:d9:52:0a:47:53:28:1e:46:2b:04:ef:57:d0:67: 34:54:5b:2f:c4:4a:37:6f:20:e0:37:ba:99:2b:a5: 40:c0:53:a7:d6:1a:85:ce:17:bd:84:c8:d1:4e:b3: 9a:7f:85:b1:71:8d:94:32:41:81:a0:a8:d2:e1:e8: f6:54:ff:84:9e:65:2b:da:6b:9d:97:5e:9f:20:61: d5:a7:bf:11:59:5a:a1:2f:62:73:39:a5:78:a1:c7: dc:39:88:31:7d:5b:9b:f7:39:a7:08:43:2b:67:b9: 37:7c:42:86:6c:8e:42:90:7e:01:3c:b3:e6:73:e1: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9C:02:40:D2:0C:16:BE:1E:BE:B1:6E:E5:CF:95:4E:37:57:BC:BB X509v3 Authority Key Identifier: keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:7a:23:e0:68:fe:9b:64:c2:16:69:76:df:70:8b:ff:da:a5: 7c:a6:67:fc:1c:40:2a:fc:d9:76:b3:80:e8:d0:eb:bd:bc:b6: c2:32:a4:f2:2f:81:10:6c:4d:c2:77:6a:f9:3d:61:46:14:00: 4b:83:51:9c:75:49:ae:de:9d:74:f8:04:fd:36:71:84:ef:46: 9a:f4:1b:d7:50:3f:5e:b0:94:36:7f:6d:fa:d5:08:c6:82:eb: e8:97:77:e3:24:c0:8c:63:25:8d:7e:e4:e1:7c:1e:e0:64:d1: 15:c0:de:bd:02:30:50:8d:ce:7e:7d:c4:74:c3:8c:9f:89:09: be:b5:1a:8a:1f:91:d8:95:7d:d0:d9:d5:38:46:58:3a:ba:6d: b4:12:4b:91:ca:33:a0:b5:c6:b2:1b:0e:23:05:c4:3e:f0:3f: e0:e3:53:25:90:ef:48:7b:e3:06:67:ff:aa:38:f4:cd:3d:29: 50:87:16:d7:d2:d9:7d:88:cc:31:e3:ae:9a:f2:60:f6:4b:ab: a2:d5:56:62:f9:e8:f2:5c:28:7e:16:91:d1:f4:a0:bd:df:ee: 18:97:02:ee:8f:88:4e:ad:59:61:49:f9:74:e0:d6:3f:07:b2: fd:cf:8a:91:17:1d:a5:ca:09:e0:9a:43:5b:83:14:f5:9a:1c: 80:b3:f8:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODgwNjExMC8GA1UEBRMoRUQxRTYzQzRDQTg1MjA0RUNCQUQyNkNFMkM5NDYyNjQ1 RTBCMUNBRDAeFw0yNDA1MTUwODQwMDZaFw0yNDA1MjIwODQwMDZaMBgxFjAUBgNV BAMTDTY2NDQ3NGU3LTAzZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOsg/MAnbTGy88mWdkzxJuP5zeLB8NyLcL+uyOZ40oyR+uNhbRUA34Zg9e+PAL 5PW52xxoGWPn8kUAY6WpnPuhHjZpFICeqCHxeUEf1uZKYgX+dws2jP1hv5vd6IQo jM7bf98ryiG/J9WDvLcrrDAlTmDuIpXQxwpQGLCqV/ddW56sPDWca0fZUgpHUyge RisE71fQZzRUWy/ESjdvIOA3upkrpUDAU6fWGoXOF72EyNFOs5p/hbFxjZQyQYGg qNLh6PZU/4SeZSvaa52XXp8gYdWnvxFZWqEvYnM5pXihx9w5iDF9W5v3OacIQytn uTd8QoZsjkKQfgE8s+Zz4aSlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzZwCQNIM Fr4evrFu5c+VTjdXvLswHwYDVR0jBBgwFoAU7R5jxMqFIE7LrSbOLJRiZF4LHK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4ODA2LzM5RDA4N0FBRDY5 ODExRUVBNTQ0QjQzOEM0RjlBRTAyLzdSNWp4TXFGSUU3THJTYk9MSlJpWkY0TEhL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1I1anhNcUZJRTdMclNiT0xKUmlaRjRMSEswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 ODA2LzM5RDA4N0FBRDY5ODExRUVBNTQ0QjQzOEM0RjlBRTAyLzdSNWp4TXFGSUU3 THJTYk9MSlJpWkY0TEhLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMt6I+Bo/ptkwhZpdt9wi//apXymZ/wcQCr82XazgOjQ6728tsIypPIv gRBsTcJ3avk9YUYUAEuDUZx1Sa7enXT4BP02cYTvRpr0G9dQP16wlDZ/bfrVCMaC 6+iXd+MkwIxjJY1+5OF8HuBk0RXA3r0CMFCNzn59xHTDjJ+JCb61GoofkdiVfdDZ 1ThGWDq6bbQSS5HKM6C1xrIbDiMFxD7wP+DjUyWQ70h74wZn/6o49M09KVCHFtfS 2X2IzDHjrpryYPZLq6LVVmL56PJcKH4WkdH0oL3f7hiXAu6PiE6tWWFJ+XTg1j8H sv3PipEXHaXKCeCaQ1uDFPWaHICz+GI= -----END CERTIFICATE-----Generated at Wed May 15 09:28:19 2024 by rpki-client on console-fra.rpki-client.org