$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: mNWHt/eVvINeBWZ5vYA5/ENAGZPEsyfSZnFEbVQJXfU= Subject key identifier: E7:8B:3E:FE:A7:A9:BD:C9:D9:50:43:B9:E0:74:64:CA:0C:75:C4:D2 Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 05FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 05F8 Signing time: Sat 01 Jun 2024 00:50:28 +0000 Manifest this update: Sat 01 Jun 2024 00:50:28 +0000 Manifest next update: Sat 08 Jun 2024 00:50:28 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: rFTTt5Fbb10EpswtvieGIC8s5uLQR1vnrzhU8m1zsfU=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: LHDbj/hV/cUaeJllia6zIhntNzxDgCaw+1JA8dG5siY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1532 (0x5fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Jun 1 00:50:28 2024 GMT Not After : Jun 8 00:50:28 2024 GMT Subject: CN=665a7054-f285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:b5:c7:2b:8a:ff:2d:c2:5c:23:f3:3c:8d: c1:13:82:3d:fc:d4:4a:f0:a4:33:6e:10:db:94:71: 43:7a:00:22:78:2f:80:64:f4:a2:10:3b:bc:5a:c3: de:cf:e6:01:69:d0:8f:f9:45:4f:ef:9c:62:f5:95: 15:0b:52:75:0c:a9:52:1d:25:eb:6f:5a:d2:53:bf: e0:c4:c0:59:3f:11:69:70:b8:5c:54:0b:e0:41:fd: 34:c4:61:5e:cc:68:b6:2e:ea:c5:d8:be:8c:0a:55: 3f:7e:21:d6:20:f4:ae:6d:2a:80:08:95:ee:b3:63: a1:92:ed:bc:ed:fe:a0:ed:98:83:09:bb:de:ec:b1: f2:6a:13:d4:c3:f3:bc:35:04:ed:3c:f0:da:61:8d: 18:93:28:dd:c9:ae:7f:7b:7b:4a:41:a1:05:73:df: 35:d4:83:3e:19:6f:b8:2e:cc:79:09:8c:cd:22:c7: 48:05:c5:98:30:0b:dc:03:61:a3:bd:92:be:21:78: 1f:64:f1:97:c3:f7:10:93:05:f3:05:1e:c7:d4:7d: 5a:92:ba:97:85:19:a6:73:0e:21:04:69:0f:12:4f: cb:84:28:2e:c9:67:01:2f:26:b5:61:44:22:2b:e2: fc:e8:75:c3:7d:7d:79:10:86:28:85:ce:7f:b3:9c: ee:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8B:3E:FE:A7:A9:BD:C9:D9:50:43:B9:E0:74:64:CA:0C:75:C4:D2 X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d1:e3:18:53:93:a3:e3:fd:75:31:97:a1:34:43:83:ec:c8: de:96:dd:f3:42:f7:37:11:c7:42:30:8c:1c:42:53:cd:ec:2e: 2d:ff:a5:60:1e:95:98:ec:02:77:3e:68:ec:30:89:8a:88:e0: c9:66:4c:e5:bf:b3:fb:03:e5:ef:c8:9c:95:7d:89:73:bf:86: 42:ff:27:ba:13:8e:fa:b6:dc:b8:ba:df:e7:b4:ff:07:a3:c5: cd:b8:ac:81:c8:06:0a:ef:88:df:0e:a7:f0:4d:e8:10:03:96: ef:dc:a1:a9:81:30:45:4b:4e:0c:9a:16:69:6f:7d:1c:53:6a: 19:c0:e3:0a:04:63:a5:6b:9b:44:58:e4:df:30:bd:79:5f:dd: ce:06:7f:df:64:b0:8f:fd:64:19:e0:f4:15:fd:4b:1b:b3:49: 71:95:dc:e9:9b:25:53:b5:2a:05:e3:1e:9b:12:df:70:c7:8c: d5:45:4e:c5:46:7d:b9:c8:5c:5d:3e:d7:f3:5f:2b:a1:73:b9: cc:8f:cc:63:33:77:66:32:85:37:71:83:6a:9d:bd:e4:a8:5e: 0a:6b:3f:e9:81:bb:9e:a4:67:b9:31:57:98:cc:93:35:ce:b4: 65:74:20:17:c9:38:db:14:63:2c:70:08:f1:4e:a0:eb:32:2c: 56:2c:97:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjQwNjAxMDA1MDI4WhcNMjQwNjA4MDA1MDI4WjAYMRYwFAYD VQQDEw02NjVhNzA1NC1mMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7W1xyuK/y3CXCPzPI3BE4I9/NRK8KQzbhDblHFDegAieC+AZPSiEDu8WsPe z+YBadCP+UVP75xi9ZUVC1J1DKlSHSXrb1rSU7/gxMBZPxFpcLhcVAvgQf00xGFe zGi2LurF2L6MClU/fiHWIPSubSqACJXus2Ohku287f6g7ZiDCbve7LHyahPUw/O8 NQTtPPDaYY0Ykyjdya5/e3tKQaEFc9811IM+GW+4Lsx5CYzNIsdIBcWYMAvcA2Gj vZK+IXgfZPGXw/cQkwXzBR7H1H1akrqXhRmmcw4hBGkPEk/LhCguyWcBLya1YUQi K+L86HXDfX15EIYohc5/s5zuUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeLPv6n qb3J2VBDueB0ZMoMdcTSMB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv0eMYU5Oj4/11MZehNEOD7Mjelt3zQvc3EcdCMIwcQlPN7C4t/6Vg HpWY7AJ3PmjsMImKiODJZkzlv7P7A+XvyJyVfYlzv4ZC/ye6E476tty4ut/ntP8H o8XNuKyByAYK74jfDqfwTegQA5bv3KGpgTBFS04MmhZpb30cU2oZwOMKBGOla5tE WOTfML15X93OBn/fZLCP/WQZ4PQV/Usbs0lxldzpmyVTtSoF4x6bEt9wx4zVRU7F Rn25yFxdPtfzXyuhc7nMj8xjM3dmMoU3cYNqnb3kqF4Kaz/pgbuepGe5MVeYzJM1 zrRldCAXyTjbFGMscAjxTqDrMixWLJfq -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:43 2024 by rpki-client on console-fra.rpki-client.org