$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: 2oq4js6lMLcvWgjPEEKNo0aOLDVV4fTJqeobH4q1SzA= Subject key identifier: E8:07:1C:33:6E:DA:0E:DD:F0:B2:B7:AC:FC:18:BE:07:77:50:D0:F8 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 03EE Signing time: Fri 31 May 2024 02:52:23 +0000 Manifest this update: Fri 31 May 2024 02:52:23 +0000 Manifest next update: Fri 07 Jun 2024 02:52:23 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: 0KOz8cClisdQ90zSdLB1wfkuD5QPKcyqGsvcQuY9lKc=) 2: BFFCDCF231D611EC8FE99534C4F9AE02.roa (hash: ZFEfKizIJXyQgD5gzS5RD5WcSWioOejV7AFqRSCQ69Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: May 31 02:52:23 2024 GMT Not After : Jun 7 02:52:23 2024 GMT Subject: CN=66593b67-539b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:c3:1c:0f:ab:12:68:d5:9f:9e:5a:8f:99: fc:f0:e9:21:53:c0:9a:c6:b3:65:5f:ce:68:da:b5: 2d:3a:63:e7:74:0a:fb:28:33:ec:6d:93:63:07:2d: 6c:45:36:7b:7c:62:69:9e:5f:c7:52:1e:8a:af:9a: 25:26:e5:e1:7b:4f:61:9f:49:f6:1d:0e:bb:af:e7: ca:74:fa:51:bd:98:b8:7f:aa:9d:3d:e4:c1:57:b2: d1:8e:fe:ad:6b:c6:56:3e:a6:cc:42:5e:d0:2e:f5: ab:e4:29:42:5b:f2:ee:97:9c:9d:76:0b:d8:16:20: a9:75:0c:2e:97:ac:a1:2b:2d:81:83:02:dc:32:c2: f7:4d:08:ce:9e:e5:5b:e0:50:dc:c7:0a:a1:44:81: e3:9a:43:fc:b3:12:e5:7f:29:01:e5:64:23:1f:05: 7e:71:02:48:52:9f:dd:e9:43:19:62:d9:5e:ad:bc: bc:f6:64:0b:fb:df:64:4c:47:26:c6:50:15:3c:b4: a3:20:cd:87:09:58:39:d4:24:a9:96:df:6c:73:5e: 3b:eb:90:18:4c:2d:5c:03:4f:89:62:44:60:bb:70: 8e:6c:cb:b3:c7:9c:af:39:15:6e:4f:ca:b1:ea:82: 98:86:4b:0d:77:94:99:28:79:ba:d6:ba:ea:75:87: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:07:1C:33:6E:DA:0E:DD:F0:B2:B7:AC:FC:18:BE:07:77:50:D0:F8 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:dc:cb:b2:05:85:e7:ac:ee:65:92:81:4f:22:fd:3a:a2:b0: 06:4e:e4:83:10:a7:d9:31:21:d5:40:dd:72:5d:61:b3:6c:20: 2f:85:de:3b:f3:a5:71:37:58:96:ca:93:34:7e:04:21:b4:91: 3a:5e:bc:ec:7d:fa:a8:ca:fa:84:4b:4c:52:2f:30:0e:41:b8: 2c:2c:2e:ad:30:91:2f:47:17:e8:5f:21:84:39:ea:87:a5:d8: 3a:fd:f2:e4:1c:b6:2e:fc:1c:72:08:84:ed:8b:e9:5e:fa:62: a9:27:74:39:6a:ff:cc:3d:78:82:36:59:f8:5e:8f:a4:7b:16: 5f:41:79:83:b1:9b:5f:97:2e:67:6a:ca:a4:6a:2c:92:2e:b3: 53:79:d1:ef:14:24:7e:35:7b:62:3a:b2:7b:96:c2:1e:22:8e: 76:4f:48:91:0e:98:93:cd:91:97:2f:6c:71:8c:d6:a8:0e:d3: 7e:2a:d2:9c:e5:0c:73:78:16:5a:12:79:78:63:e8:20:33:ba: 74:c1:7d:0c:5f:93:0e:2b:87:30:0c:07:dd:33:92:6c:0e:54: 0a:d2:5c:7d:c3:fa:bf:6c:ce:82:98:a8:51:54:1d:f3:b8:bf: ad:35:e8:45:04:a1:8b:fc:81:c0:b1:c1:e2:66:61:05:a4:36: 02:63:93:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjQwNTMxMDI1MjIzWhcNMjQwNjA3MDI1MjIzWjAYMRYwFAYD VQQDEw02NjU5M2I2Ny01MzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf/DHA+rEmjVn55aj5n88OkhU8CaxrNlX85o2rUtOmPndAr7KDPsbZNjBy1s RTZ7fGJpnl/HUh6Kr5olJuXhe09hn0n2HQ67r+fKdPpRvZi4f6qdPeTBV7LRjv6t a8ZWPqbMQl7QLvWr5ClCW/Lul5yddgvYFiCpdQwul6yhKy2BgwLcMsL3TQjOnuVb 4FDcxwqhRIHjmkP8sxLlfykB5WQjHwV+cQJIUp/d6UMZYtlerby89mQL+99kTEcm xlAVPLSjIM2HCVg51CSplt9sc14765AYTC1cA0+JYkRgu3CObMuzx5yvORVuT8qx 6oKYhksNd5SZKHm61rrqdYeDhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgHHDNu 2g7d8LK3rPwYvgd3UND4MB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD3MuyBYXnrO5lkoFPIv06orAGTuSDEKfZMSHVQN1yXWGzbCAvhd47 86VxN1iWypM0fgQhtJE6XrzsffqoyvqES0xSLzAOQbgsLC6tMJEvRxfoXyGEOeqH pdg6/fLkHLYu/BxyCITti+le+mKpJ3Q5av/MPXiCNln4Xo+kexZfQXmDsZtfly5n asqkaiySLrNTedHvFCR+NXtiOrJ7lsIeIo52T0iRDpiTzZGXL2xxjNaoDtN+KtKc 5QxzeBZaEnl4Y+ggM7p0wX0MX5MOK4cwDAfdM5JsDlQK0lx9w/q/bM6CmKhRVB3z uL+tNehFBKGL/IHAscHiZmEFpDYCY5O4 -----END CERTIFICATE-----Generated at Fri May 31 04:53:55 2024 by rpki-client on console-fra.rpki-client.org