$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: dnpEnglwlWKOyiM70HiDaCxeAUUqP6D0/NPszj/6lLs= Subject key identifier: A6:8A:5A:B6:09:F1:59:FE:04:2C:E5:48:B0:64:66:61:19:76:98:3C Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: F5 Signing time: Fri 31 May 2024 06:28:14 +0000 Manifest this update: Fri 31 May 2024 06:28:14 +0000 Manifest next update: Fri 07 Jun 2024 06:28:14 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: zsY1n3c7Gb8cYdhpd5angZ84bArVxUtSNWHrRxxQw+A=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: y9v0FSsT+mxiOFAaAJ7M5RjFM0To/dNcbG/XdZ3DuW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: May 31 06:28:14 2024 GMT Not After : Jun 7 06:28:14 2024 GMT Subject: CN=66596dfe-74a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:47:05:49:d6:21:e7:93:94:fa:a6:38:79: 26:04:8e:03:b8:48:8e:66:06:b9:18:a8:2f:7f:36: 7b:20:a0:03:19:89:cb:75:08:b8:d8:22:24:a7:6a: 3d:3e:2d:62:0b:34:5c:e2:13:74:01:56:25:42:af: d5:b5:c8:bb:88:d3:28:31:93:bc:3e:8b:80:6f:71: 32:4f:1e:ac:f5:11:cf:4d:0e:9b:d5:1c:77:c5:55: 94:c8:37:52:88:28:f2:2e:e9:33:01:03:4c:b9:25: d5:76:5b:66:9c:14:d3:26:a4:92:d8:90:a0:6e:2c: 5f:6c:5b:5e:f0:e2:91:d5:9b:27:dd:3f:45:93:a7: 10:a7:7e:62:f4:00:77:74:87:35:d4:62:91:29:33: 7b:bc:d7:99:a7:7e:b1:3f:6d:be:81:90:4a:56:b8: f5:72:c8:26:7b:91:f1:88:d3:e9:5c:0b:1a:b3:a8: 00:e2:66:33:48:3a:f3:76:33:86:fd:ce:bf:5f:9d: 4f:15:09:f0:00:bc:14:6d:71:7a:29:39:d8:a6:04: bc:8b:dd:d3:15:d8:be:67:c7:ef:c4:cb:be:28:0c: 78:07:c0:73:5b:1b:73:5f:f5:d5:a7:bb:eb:bd:69: 09:cb:09:e6:7a:a6:20:bd:e6:94:a0:2d:07:1c:4b: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8A:5A:B6:09:F1:59:FE:04:2C:E5:48:B0:64:66:61:19:76:98:3C X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:aa:19:13:ac:8d:5e:9a:bf:e7:a4:78:2d:ed:6a:ee:a8:8c: 41:09:2b:d3:13:ce:8e:43:7d:6e:56:74:33:11:ba:4a:fd:78: 07:4e:3c:6b:65:5b:42:d5:90:4a:62:7a:f7:10:5b:4f:f9:30: 43:ae:9e:43:ae:57:1a:2c:f3:e3:23:45:99:0c:c3:7d:79:6b: 10:e2:48:8c:6b:cc:49:61:17:53:a5:9d:17:68:16:64:a0:c4: ec:8a:cf:d7:06:d8:d6:19:04:5a:f8:60:27:1c:4b:cb:14:39: 52:12:93:c9:dd:c2:e6:17:e1:ac:51:69:8b:a5:02:88:44:dc: 8e:f2:a7:d3:c6:de:19:c9:ab:02:aa:dd:97:94:9a:66:77:ab: 98:8d:64:80:88:15:62:ea:8b:3b:54:f1:45:58:e9:aa:dc:b9: e7:88:52:ee:09:d0:c2:ee:f0:cb:e6:9d:08:83:a2:df:37:a2: 70:b6:a2:25:d0:a7:63:c4:9b:26:92:83:5a:77:6b:40:4f:bd: 39:f4:33:14:44:37:b6:2b:f9:39:47:59:6b:a0:eb:61:e9:07: d5:f0:ff:a2:a1:eb:82:1e:5e:a5:00:bd:36:4c:0d:25:9c:f4: a8:fa:6e:50:c1:9c:de:d5:58:1e:0c:ce:41:e8:7c:2a:69:72: 00:b4:60:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjQwNTMxMDYyODE0WhcNMjQwNjA3MDYyODE0WjAYMRYwFAYD VQQDEw02NjU5NmRmZS03NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBJHBUnWIeeTlPqmOHkmBI4DuEiOZga5GKgvfzZ7IKADGYnLdQi42CIkp2o9 Pi1iCzRc4hN0AVYlQq/Vtci7iNMoMZO8PouAb3EyTx6s9RHPTQ6b1Rx3xVWUyDdS iCjyLukzAQNMuSXVdltmnBTTJqSS2JCgbixfbFte8OKR1Zsn3T9Fk6cQp35i9AB3 dIc11GKRKTN7vNeZp36xP22+gZBKVrj1csgme5HxiNPpXAsas6gA4mYzSDrzdjOG /c6/X51PFQnwALwUbXF6KTnYpgS8i93TFdi+Z8fvxMu+KAx4B8BzWxtzX/XVp7vr vWkJywnmeqYgveaUoC0HHEuwLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaKWrYJ 8Vn+BCzlSLBkZmEZdpg8MB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcqhkTrI1emr/npHgt7WruqIxBCSvTE86OQ31uVnQzEbpK/XgHTjxr ZVtC1ZBKYnr3EFtP+TBDrp5DrlcaLPPjI0WZDMN9eWsQ4kiMa8xJYRdTpZ0XaBZk oMTsis/XBtjWGQRa+GAnHEvLFDlSEpPJ3cLmF+GsUWmLpQKIRNyO8qfTxt4ZyasC qt2XlJpmd6uYjWSAiBVi6os7VPFFWOmq3LnniFLuCdDC7vDL5p0Ig6LfN6JwtqIl 0KdjxJsmkoNad2tAT7059DMURDe2K/k5R1lroOth6QfV8P+ioeuCHl6lAL02TA0l nPSo+m5QwZze1VgeDM5B6HwqaXIAtGB8 -----END CERTIFICATE-----Generated at Fri May 31 08:38:28 2024 by rpki-client on console-fra.rpki-client.org