$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: kTqIZL7ugVQzyI2jHin7BG36WoLXqHNBnjBGSTmn0sY= Subject key identifier: 36:F4:2D:B7:2F:04:09:26:24:5F:4A:9E:71:DD:F7:E6:9C:5C:5F:50 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 05AC Signing time: Sat 01 Jun 2024 01:08:43 +0000 Manifest this update: Sat 01 Jun 2024 01:08:43 +0000 Manifest next update: Sat 08 Jun 2024 01:08:43 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: H565yhlSc06PCpp9JlSSOfgHkjwaGR6Q3nXNWoiOjwk=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 9gWAlYui5HAMuRW7/VDGjU6Xnl/T3f6FvG1ktEoqp10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Jun 1 01:08:43 2024 GMT Not After : Jun 8 01:08:43 2024 GMT Subject: CN=665a749b-fe98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2c:39:78:65:63:15:65:13:8f:d0:ad:e5:ed: 45:c7:b2:30:9e:24:17:19:b0:f9:71:21:26:e3:08: 4a:d5:ad:03:64:e0:3a:dc:a8:c4:f2:c2:a5:6a:bb: 70:29:4a:8c:29:79:69:d3:c5:36:9f:77:cd:2d:df: 7f:be:ec:ff:2a:3c:fc:38:a7:be:09:7d:bd:cd:04: 16:eb:05:d3:27:bb:4b:d7:88:87:94:27:41:1b:26: 8b:83:2f:69:f4:4a:4f:fc:6b:34:5b:cd:c3:49:56: 8c:9f:22:f6:05:87:c6:ee:28:39:1c:41:52:8d:fb: dd:dc:35:48:93:86:6b:26:c0:ca:3e:89:df:46:2c: b8:c4:fc:6a:b5:9e:10:91:42:a0:7a:3a:0f:d8:40: c1:67:fa:5a:ea:c3:71:fa:85:99:44:d1:8b:20:ca: d5:25:ff:16:cb:31:11:20:2b:79:53:09:37:bc:7e: 87:a3:8e:32:20:49:24:21:a5:f7:12:12:78:86:7c: 1c:dd:07:39:09:55:e4:6d:f7:32:41:2e:79:ba:ac: 71:a2:ac:6d:9b:37:9f:8b:c2:43:31:65:63:31:92: 71:93:59:b7:27:a6:bd:54:eb:14:43:3a:af:16:cc: d7:e2:82:42:b1:aa:e6:dc:fd:fa:c1:00:09:6c:c9: f7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F4:2D:B7:2F:04:09:26:24:5F:4A:9E:71:DD:F7:E6:9C:5C:5F:50 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:55:ce:c4:32:0c:0b:c7:64:81:f0:fc:d3:8a:c0:c6:91:52: 5f:8d:be:65:5e:0e:66:bf:13:b4:e7:79:74:f5:27:83:66:8c: 2a:4c:83:70:33:8f:78:ae:eb:09:ba:2d:41:75:fd:9f:12:dc: 28:cb:3c:64:1d:54:ed:9b:00:b7:e9:d5:07:6d:bc:81:28:06: fb:7b:fd:be:c3:9e:a8:ad:29:fa:ed:1f:ab:68:f1:90:16:76: 2c:7f:79:27:d5:a3:81:e0:48:bf:5d:79:8a:83:a1:e1:85:4f: f5:38:ea:86:19:c5:4c:c2:2d:26:c6:72:71:62:6c:a5:36:91: 16:00:f7:3f:10:bc:14:05:62:4f:7c:cf:ee:db:f7:ae:be:a0: 5c:08:13:47:d7:8d:91:f1:36:f1:19:47:50:c6:2f:02:a3:3c: 8e:8c:6b:10:e5:d1:e2:83:6b:95:3e:3d:62:37:43:6e:18:c9: 8b:92:14:5b:15:93:b1:0a:c0:0b:e6:36:69:ba:c2:80:1a:7a: 2d:2c:65:bb:81:79:18:06:c4:3b:c3:f0:0c:ca:cb:5b:2a:fc: 5f:8e:81:f8:50:f7:ee:01:a6:d2:70:d1:90:40:a5:f5:00:c8: 98:59:3a:8b:1c:15:56:78:4f:98:98:ea:47:4b:2b:db:b9:c8: 48:21:c3:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjQwNjAxMDEwODQzWhcNMjQwNjA4MDEwODQzWjAYMRYwFAYD VQQDEw02NjVhNzQ5Yi1mZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Cw5eGVjFWUTj9Ct5e1Fx7IwniQXGbD5cSEm4whK1a0DZOA63KjE8sKlartw KUqMKXlp08U2n3fNLd9/vuz/Kjz8OKe+CX29zQQW6wXTJ7tL14iHlCdBGyaLgy9p 9EpP/Gs0W83DSVaMnyL2BYfG7ig5HEFSjfvd3DVIk4ZrJsDKPonfRiy4xPxqtZ4Q kUKgejoP2EDBZ/pa6sNx+oWZRNGLIMrVJf8WyzERICt5Uwk3vH6Ho44yIEkkIaX3 EhJ4hnwc3Qc5CVXkbfcyQS55uqxxoqxtmzefi8JDMWVjMZJxk1m3J6a9VOsUQzqv FszX4oJCsarm3P36wQAJbMn34wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb0Lbcv BAkmJF9KnnHd9+acXF9QMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASVc7EMgwLx2SB8PzTisDGkVJfjb5lXg5mvxO053l09SeDZowqTINw M494rusJui1Bdf2fEtwoyzxkHVTtmwC36dUHbbyBKAb7e/2+w56orSn67R+raPGQ FnYsf3kn1aOB4Ei/XXmKg6HhhU/1OOqGGcVMwi0mxnJxYmylNpEWAPc/ELwUBWJP fM/u2/euvqBcCBNH142R8TbxGUdQxi8CozyOjGsQ5dHig2uVPj1iN0NuGMmLkhRb FZOxCsAL5jZpusKAGnotLGW7gXkYBsQ7w/AMystbKvxfjoH4UPfuAabScNGQQKX1 AMiYWTqLHBVWeE+YmOpHSyvbuchIIcMD -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:11 2024 by rpki-client on console-ams.rpki-client.org