$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json) Hash identifier: ZEHU4viZnagnRE3x1lgKN0apu4FlETp4svNjZ8iC1L4= Subject key identifier: 2C:1B:04:42:48:24:04:24:AA:86:F5:EB:A9:58:81:33:4C:6C:AF:8A Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft Manifest number: 04EC Signing time: Sun 19 May 2024 01:15:46 +0000 Manifest this update: Sun 19 May 2024 01:15:46 +0000 Manifest next update: Sun 26 May 2024 01:15:46 +0000 Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: dxdUp6IV6FxZQ/4vvrvIoalg4jSFrSWXOpP6ZG1rBPw=) 2: C3623470CF4611EBBBA79165C4F9AE02.roa (hash: rgWYkJMIKCy/+cDut/DrKgQZ/ahGBNA4CeK+i59E9po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: May 19 01:15:46 2024 GMT Not After : May 26 01:15:46 2024 GMT Subject: CN=664952c2-4906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:94:ff:56:be:78:97:3b:cf:df:71:e1:64: d0:0f:5b:dd:9b:ac:c3:3a:03:0f:e5:77:97:fa:30: 7b:e5:da:db:89:09:00:0c:64:a6:76:9a:dd:d4:80: 9c:cb:29:a7:52:9e:9f:fa:26:bd:9f:31:59:80:43: be:f6:61:be:a3:96:3c:08:87:8f:85:0f:af:06:4c: 5b:b6:0e:19:ac:47:96:8e:34:25:3c:65:bd:ed:39: d6:78:fa:fe:f9:58:ad:dd:91:fe:95:ca:b8:46:9e: 3b:3d:be:40:2e:34:0b:82:5e:ec:ec:51:64:b9:f6: c5:a6:f8:81:c2:1e:b2:14:07:ba:11:3a:76:69:7c: 93:ff:9f:12:32:d1:e4:02:f5:49:29:f9:0e:7d:3e: 88:9e:d1:dd:c3:05:36:54:72:d9:a7:32:45:eb:52: 14:f4:35:4d:54:cc:0f:6e:e2:52:ec:a1:0e:b2:e9: 99:50:ef:94:51:0c:17:62:0d:21:96:2b:c0:7c:ff: 5d:9e:d0:aa:12:cb:9b:37:c6:4b:f8:1b:1e:21:3e: 4c:2d:57:b5:df:c8:93:f8:95:ba:66:6a:85:41:24: 5b:4c:de:eb:fb:b2:f5:4d:96:ac:63:14:19:4c:2e: 20:78:56:87:79:0d:20:aa:9c:ec:f7:9c:22:a6:aa: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:04:42:48:24:04:24:AA:86:F5:EB:A9:58:81:33:4C:6C:AF:8A X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:81:0b:04:32:2b:66:d8:e7:17:ba:13:d1:97:0b:5f:3e:9c: d0:e2:dd:af:63:02:5a:88:ec:15:ca:67:6a:77:20:4c:b3:ee: f3:ad:a0:22:6e:5d:20:24:65:22:f9:3a:85:bd:4b:98:6c:1d: cc:f6:f8:2d:20:3c:5f:0c:20:18:af:76:25:14:4a:63:f4:bb: e5:f8:4f:31:f0:16:61:bf:03:8f:6c:27:13:eb:15:0f:b7:79: 43:1e:77:77:a8:cd:87:b4:ab:51:1f:9e:08:96:09:11:10:b6: 15:ef:4b:e3:b1:a1:90:b1:dc:a4:fa:0a:1c:46:10:69:10:9a: e6:ec:54:74:b2:14:e3:fc:35:b2:df:48:ae:c7:84:8d:75:c8: 9e:06:bb:80:fc:9f:9e:ee:27:44:51:ba:92:8e:36:23:77:0c: 8b:e7:c0:cc:fd:54:17:84:79:15:1a:b6:e7:a5:2c:cd:97:1c: 00:26:58:3b:fe:80:2e:a2:b8:82:f7:15:30:6e:3b:35:5c:65: 60:64:73:56:46:fd:e6:87:7f:23:0a:79:ca:f4:ef:1b:f7:8e: 8f:99:eb:f1:3b:52:6e:79:fb:cf:20:95:15:f9:3f:2f:cb:6f: 99:19:e8:3f:76:8a:91:43:8c:1b:eb:32:97:00:cb:2d:18:ec: 64:74:04:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjQwNTE5MDExNTQ2WhcNMjQwNTI2MDExNTQ2WjAYMRYwFAYD VQQDEw02NjQ5NTJjMi00OTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lqU/1a+eJc7z99x4WTQD1vdm6zDOgMP5XeX+jB75drbiQkADGSmdprd1ICc yymnUp6f+ia9nzFZgEO+9mG+o5Y8CIePhQ+vBkxbtg4ZrEeWjjQlPGW97TnWePr+ +Vit3ZH+lcq4Rp47Pb5ALjQLgl7s7FFkufbFpviBwh6yFAe6ETp2aXyT/58SMtHk AvVJKfkOfT6IntHdwwU2VHLZpzJF61IU9DVNVMwPbuJS7KEOsumZUO+UUQwXYg0h livAfP9dntCqEsubN8ZL+BseIT5MLVe138iT+JW6ZmqFQSRbTN7r+7L1TZasYxQZ TC4geFaHeQ0gqpzs95wipqoPMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwbBEJI JAQkqob166lYgTNMbK+KMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6 S1dZM2J5NEhWVUVpUVdLdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQgQsEMitm2OcXuhPRlwtfPpzQ4t2vYwJaiOwVymdqdyBMs+7zraAi bl0gJGUi+TqFvUuYbB3M9vgtIDxfDCAYr3YlFEpj9Lvl+E8x8BZhvwOPbCcT6xUP t3lDHnd3qM2HtKtRH54IlgkRELYV70vjsaGQsdyk+gocRhBpEJrm7FR0shTj/DWy 30iux4SNdcieBruA/J+e7idEUbqSjjYjdwyL58DM/VQXhHkVGrbnpSzNlxwAJlg7 /oAuoriC9xUwbjs1XGVgZHNWRv3mh38jCnnK9O8b946PmevxO1JuefvPIJUV+T8v y2+ZGeg/doqRQ4wb6zKXAMstGOxkdARm -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org