$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: AiYE+Wd/dGLdst+3DqOCTjwLbr/sUZFM0bzsvVSKLww= Subject key identifier: 93:A1:55:6E:44:A1:4D:9C:1F:BB:E8:EA:34:6A:1C:24:02:46:AA:94 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 343E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 3405 Signing time: Sat 18 May 2024 14:52:16 +0000 Manifest this update: Sat 18 May 2024 14:52:16 +0000 Manifest next update: Sat 25 May 2024 14:52:16 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: DePdRbBxtnFES37P++CYJWd8i96Vt7Qd7/FEe01IX9c=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: UGmd8QELWsu1xZPbv3EbMKtVWXhurjRGgVQ5D223B4s=) 3: A8F46E3ACE3C11EE9418F274C4F9AE02.roa (hash: k25puRX4BdWVRPYjE6qhQYjwuDv+2e85ycXNsRtKBV4=) 4: 60177FBCCCDF11EE9828E50CC4F9AE02.roa (hash: b0pH7FZw1wzadO7JgLQpKz3jsdQQEvPfmy2NqZoo/50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13374 (0x343e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: May 18 14:52:16 2024 GMT Not After : May 25 14:52:16 2024 GMT Subject: CN=6648c0a0-0be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:28:f0:71:34:f8:22:0a:c6:c6:dc:65:55: c8:37:47:66:ce:94:94:f4:17:8b:f8:8e:2a:af:37: bf:bc:61:a8:e2:61:e4:9f:38:ba:52:32:cf:26:28: 58:da:d4:ce:1c:5b:50:d1:a7:fd:6a:f8:e2:52:80: 67:f4:3c:b8:53:53:6f:7b:0f:dc:4a:71:6a:c2:77: b2:99:01:bf:ab:07:21:49:51:7d:43:4c:b7:63:55: da:09:30:65:62:17:a8:4b:38:4f:b1:22:be:c7:a3: 87:03:83:e9:dc:e8:fc:8a:fc:3a:26:95:00:27:8c: c7:4d:de:13:97:6f:fc:8a:a8:da:8b:05:c2:9f:50: bf:2a:48:fc:c4:4e:3e:ca:af:6d:99:db:37:42:8f: e8:4a:9a:6f:26:33:d2:1e:58:0b:6a:de:5a:66:22: 41:42:40:c3:bf:1c:e4:fe:ad:76:74:eb:49:21:be: d8:c3:7d:9c:d3:03:d3:49:15:12:40:e2:d1:3c:07: 8e:da:7e:c1:19:6d:70:2f:c3:8c:53:ee:23:bb:3f: 47:fe:da:69:92:71:f7:95:d2:0a:10:f0:69:d6:4d: 14:e5:99:3b:cd:4c:43:3a:2a:a5:5e:65:da:b1:d0: 59:8b:c6:ca:77:b4:95:50:6a:27:bb:b5:01:ba:60: 55:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A1:55:6E:44:A1:4D:9C:1F:BB:E8:EA:34:6A:1C:24:02:46:AA:94 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:80:17:25:cf:39:30:97:2d:2a:c6:e3:f6:6e:17:41:ff:54: 4a:36:18:19:7e:33:8c:b8:2c:1c:e2:f3:72:2a:00:db:0a:ea: 00:e4:fb:68:04:7e:64:52:00:68:21:ee:60:86:85:96:47:3f: 2b:5e:70:7c:3f:9a:85:c7:55:ba:02:c7:6e:73:dd:f7:43:e2: 02:87:f8:bd:c8:82:21:48:2c:54:bf:a3:35:7c:1a:be:21:4a: b9:f4:88:93:86:b3:df:70:c5:6b:02:f2:ec:18:d1:d2:bd:93: 1a:01:ca:9c:86:10:6c:61:eb:04:53:51:d2:ce:f7:ae:65:36: 05:b1:a9:b1:2f:4a:fa:5c:bb:e8:4f:c0:9d:3f:b8:70:1d:31: ea:44:ba:82:8c:06:91:67:42:74:30:b1:fc:cf:61:da:4a:d3: 55:05:e2:ba:a9:e6:56:5b:13:5b:32:0f:92:32:de:d4:ae:d2: 7d:5a:cc:eb:a1:96:e4:a8:19:89:44:eb:42:d2:dd:77:0e:f2: ff:c3:83:11:bc:fe:86:c2:e0:7e:9e:52:f1:52:4f:71:41:ed: 25:51:84:d7:2a:49:76:10:74:26:c8:f5:ae:e1:4c:41:42:9b: a7:19:63:0f:a9:44:a4:74:1e:d1:cf:18:2d:fe:3d:86:e7:26: f1:0c:9d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICND4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjQwNTE4MTQ1MjE2WhcNMjQwNTI1MTQ1MjE2WjAYMRYwFAYD VQQDEw02NjQ4YzBhMC0wYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC0o8HE0+CIKxsbcZVXIN0dmzpSU9BeL+I4qrze/vGGo4mHknzi6UjLPJihY 2tTOHFtQ0af9avjiUoBn9Dy4U1Nvew/cSnFqwneymQG/qwchSVF9Q0y3Y1XaCTBl YheoSzhPsSK+x6OHA4Pp3Oj8ivw6JpUAJ4zHTd4Tl2/8iqjaiwXCn1C/Kkj8xE4+ yq9tmds3Qo/oSppvJjPSHlgLat5aZiJBQkDDvxzk/q12dOtJIb7Yw32c0wPTSRUS QOLRPAeO2n7BGW1wL8OMU+4juz9H/tppknH3ldIKEPBp1k0U5Zk7zUxDOiqlXmXa sdBZi8bKd7SVUGonu7UBumBVIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOhVW5E oU2cH7vo6jRqHCQCRqqUMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBogBclzzkwly0qxuP2bhdB/1RKNhgZfjOMuCwc4vNyKgDbCuoA5Pto BH5kUgBoIe5ghoWWRz8rXnB8P5qFx1W6Asduc933Q+ICh/i9yIIhSCxUv6M1fBq+ IUq59IiThrPfcMVrAvLsGNHSvZMaAcqchhBsYesEU1HSzveuZTYFsamxL0r6XLvo T8CdP7hwHTHqRLqCjAaRZ0J0MLH8z2HaStNVBeK6qeZWWxNbMg+SMt7UrtJ9Wszr oZbkqBmJROtC0t13DvL/w4MRvP6GwuB+nlLxUk9xQe0lUYTXKkl2EHQmyPWu4UxB QpunGWMPqUSkdB7Rzxgt/j2G5ybxDJ1G -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org