$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: C9u0z0nxL9OtAxeYzipQlhUCTmAhNVryzWTa0YGu+hI= Subject key identifier: 51:64:59:42:61:AE:0C:E1:68:FC:2B:52:2C:A7:CF:07:53:19:93:D0 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 071C Signing time: Fri 31 May 2024 23:21:13 +0000 Manifest this update: Fri 31 May 2024 23:21:13 +0000 Manifest next update: Fri 07 Jun 2024 23:21:13 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: KJBjXmrOyG68dNdooaaFXRWTpZ+zNZ3iPYSvUqaWWT8=) 2: C5CB3D8A323211EB883CC65EC4F9AE02.roa (hash: aDuhWDHj77bxq634nU5tf9ldPUJ/lcZDnXvipNuOpf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: May 31 23:21:13 2024 GMT Not After : Jun 7 23:21:13 2024 GMT Subject: CN=665a5b69-b8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:cb:21:2b:b7:2b:14:1b:cc:c0:52:d7:c2: 01:10:a2:a0:80:20:5b:5a:70:b0:3e:55:5b:3b:06: d3:3e:99:3c:db:05:1b:b1:41:c3:87:43:52:42:78: 8f:f2:0a:9f:e2:be:a1:c8:06:bd:4e:b3:66:ba:c3: 8b:40:32:dd:6e:aa:3f:9e:ba:1f:16:34:47:52:54: 96:32:be:d5:75:0f:14:23:a4:17:77:ff:72:51:73: 88:3d:f5:ec:33:97:83:86:4b:f9:a2:26:6a:88:1b: 0b:92:81:d5:e2:e9:d7:72:fb:09:27:80:2d:1a:a0: e8:0d:73:5b:62:72:ba:ec:91:e1:cd:7e:b9:5b:52: 16:77:b1:9c:0b:17:d0:54:73:f7:9e:7d:fd:0f:26: 20:e2:16:9f:95:57:4b:af:ba:dc:30:17:0c:81:4a: 17:ee:a8:a4:be:d5:31:59:bc:f5:f1:ae:2a:61:6c: 5d:1f:4e:17:e2:62:3c:8d:d9:7b:b0:ad:fa:db:dd: cd:cd:6d:5f:9d:ae:50:2f:34:3b:0d:7f:60:5a:0f: e7:bc:c3:85:6d:98:00:c2:db:d4:7f:9f:09:96:90: fa:34:b5:30:2f:9c:c2:4f:bb:6e:7f:a7:9b:ad:0a: 6f:84:a7:86:13:1d:4d:d6:4e:be:72:0f:65:45:20: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:64:59:42:61:AE:0C:E1:68:FC:2B:52:2C:A7:CF:07:53:19:93:D0 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ee:a3:36:06:d9:30:f1:41:2a:63:f3:15:b3:e1:50:13:a3: 78:1e:c5:79:6b:e3:71:70:11:10:a7:66:d4:11:9a:17:09:2a: 93:ca:24:19:ae:10:18:d1:33:ee:39:fe:cc:fc:31:4f:3c:ff: 40:70:ec:8d:68:41:87:ab:6d:0d:32:90:35:7c:12:c2:d3:6c: 84:4a:0d:c9:7a:c7:ee:63:2c:04:92:61:59:5b:b3:68:b6:9b: 49:2a:8e:cb:4c:81:aa:03:77:9e:22:94:81:6b:9b:36:c3:37: 6f:96:65:34:03:0f:b7:c5:cc:36:e2:83:7b:d8:ad:3b:54:bb: 68:e0:8a:ce:9c:f8:5a:69:e4:bc:8d:42:7d:54:03:cc:31:ba: 9c:82:e6:a4:2d:cf:25:be:3c:03:7c:40:75:70:85:68:54:dd: 32:ae:61:5e:15:ab:c0:cd:92:d9:ee:44:7b:93:09:a0:b1:3a: f8:a7:5d:bd:ba:e1:ed:dd:55:0b:7e:29:5a:1f:a5:51:eb:d6: 4c:25:c6:cc:9e:0f:a0:11:a9:97:8a:62:9e:ce:14:68:ea:48: 42:4b:fa:c0:5a:f3:12:e4:40:5d:10:56:da:2e:48:36:75:5c: 9e:94:9a:85:88:b5:89:d9:6b:29:fa:f2:e1:cf:d2:70:5d:fe: 1a:28:d9:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjQwNTMxMjMyMTEzWhcNMjQwNjA3MjMyMTEzWjAYMRYwFAYD VQQDEw02NjVhNWI2OS1iOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq3LISu3KxQbzMBS18IBEKKggCBbWnCwPlVbOwbTPpk82wUbsUHDh0NSQniP 8gqf4r6hyAa9TrNmusOLQDLdbqo/nrofFjRHUlSWMr7VdQ8UI6QXd/9yUXOIPfXs M5eDhkv5oiZqiBsLkoHV4unXcvsJJ4AtGqDoDXNbYnK67JHhzX65W1IWd7GcCxfQ VHP3nn39DyYg4haflVdLr7rcMBcMgUoX7qikvtUxWbz18a4qYWxdH04X4mI8jdl7 sK36293NzW1fna5QLzQ7DX9gWg/nvMOFbZgAwtvUf58JlpD6NLUwL5zCT7tuf6eb rQpvhKeGEx1N1k6+cg9lRSChOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFkWUJh rgzhaPwrUiynzwdTGZPQMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm7qM2Btkw8UEqY/MVs+FQE6N4HsV5a+NxcBEQp2bUEZoXCSqTyiQZ rhAY0TPuOf7M/DFPPP9AcOyNaEGHq20NMpA1fBLC02yESg3JesfuYywEkmFZW7No tptJKo7LTIGqA3eeIpSBa5s2wzdvlmU0Aw+3xcw24oN72K07VLto4IrOnPhaaeS8 jUJ9VAPMMbqcguakLc8lvjwDfEB1cIVoVN0yrmFeFavAzZLZ7kR7kwmgsTr4p129 uuHt3VULfilaH6VR69ZMJcbMng+gEamXimKezhRo6khCS/rAWvMS5EBdEFbaLkg2 dVyelJqFiLWJ2Wsp+vLhz9JwXf4aKNnn -----END CERTIFICATE-----Generated at Fri May 31 23:53:05 2024 by rpki-client on console-fra.rpki-client.org