$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft File: r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json) Hash identifier: jo2hhgKq/gN3WLZmEaHAXSuceKSzmtBE9klhsn5uMDs= Subject key identifier: D6:92:7D:A8:89:21:31:A1:FE:6A:51:12:91:89:2D:94:B1:2C:83:16 Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC Certificate issuer: /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft Manifest number: 0254 Signing time: Sat 01 Jun 2024 05:06:15 +0000 Manifest this update: Sat 01 Jun 2024 05:06:14 +0000 Manifest next update: Sat 08 Jun 2024 05:06:14 +0000 Files and hashes: 1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: wXVSjqxZomZw+araJzB4ZY5xZPoO4i9bWpjSYQFp1cE=) 2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: cyccNf1WwD4krYHt0/vPhLCJh3tg2kVajow/BtHfDjw=) 3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: MnZ4Y5WD+4CLTW5o0KbI1Mk1wuBOKOQZhJI4q+2ilYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC Validity Not Before: Jun 1 05:06:14 2024 GMT Not After : Jun 8 05:06:14 2024 GMT Subject: CN=665aac47-ef51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:6b:2e:0a:5c:9d:56:c7:ea:f3:c9:d4:63: d6:d3:19:27:9f:77:b8:cc:62:c2:a8:d9:fa:27:2d: dc:d4:86:91:9d:53:62:25:35:f8:3b:10:bb:00:d4: 5e:6a:af:5e:32:93:8c:e2:18:37:70:1f:7c:19:fa: c2:9e:b6:27:3b:dd:98:67:0d:db:8d:55:70:56:37: 0f:4a:d9:ff:08:53:7d:2f:9a:84:5c:b8:d6:3f:c6: 2c:60:30:b2:80:f3:1a:e9:29:92:d6:e0:8a:35:5a: 50:cf:d9:a4:24:1d:89:92:9d:d2:d0:af:de:79:41: 44:d0:37:8f:ad:56:7b:12:28:0c:1f:64:a3:03:3b: b1:52:35:0b:5f:38:05:61:4f:8a:83:67:a6:4f:da: be:60:d9:66:e3:4c:4a:13:f8:71:53:0d:15:b1:68: d3:38:fb:20:b4:fb:f2:6f:8e:7f:91:98:29:d2:75: c8:2a:dd:d4:f8:5a:6f:4d:16:3f:ce:1c:d6:59:42: e3:1f:45:05:c0:a5:c3:fd:4d:aa:f8:1a:bb:99:18: 39:57:73:b3:b2:bd:27:21:db:38:f2:55:85:6f:36: 4b:5a:af:84:3b:aa:93:08:c5:89:d3:d9:b4:8f:70: 32:1e:b2:e1:c2:b0:7a:c4:e6:bf:35:a5:12:c8:41: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:92:7D:A8:89:21:31:A1:FE:6A:51:12:91:89:2D:94:B1:2C:83:16 X509v3 Authority Key Identifier: keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:64:74:a2:c1:07:f9:91:29:a4:c3:64:0f:c3:98:8a:c7:f8: 06:38:93:28:67:46:a8:91:72:18:3d:e7:cc:89:27:de:68:92: 75:3b:2f:ec:d8:c4:b9:78:6a:54:a6:a1:d0:c2:42:fb:9d:e5: 14:b1:03:67:3d:83:89:be:f2:76:d5:b5:d7:da:07:71:bc:cb: f0:f4:7e:81:d0:e5:e3:11:c1:84:23:86:07:49:0f:84:d0:69: 9a:29:32:94:3d:bd:8f:8b:c0:ad:79:9e:09:73:4e:05:2d:e1: 16:09:6f:fe:69:01:4c:32:60:47:7c:fa:8e:3e:3d:b9:ba:33: d1:13:f5:d3:ac:f6:25:ef:2e:e3:28:5e:72:4a:35:83:a1:b7: 2b:aa:31:cf:39:27:16:59:6e:ca:3b:03:f6:07:1b:4c:1c:27: d7:6c:be:c0:cf:8d:23:08:88:03:9a:b2:78:e4:0f:e0:0a:31: 17:5c:bf:00:25:21:25:32:a3:45:de:38:6a:58:61:7c:0c:84: c2:66:ee:b4:2b:92:35:dd:13:b0:5c:62:16:4d:08:39:c7:ff: 41:49:b5:90:b2:0d:68:1b:88:df:cc:06:ee:82:41:03:fb:44: b0:69:f0:a9:ca:48:fc:98:d4:ff:df:f0:20:ea:54:d8:8d:a3: 57:4b:4f:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3NTgxMTAvBgNVBAUTKEFGNTU1ODFCQTEyN0UyMDkwQTBBNTQ2MkZFN0JDRTcw NjE2RjJDREMwHhcNMjQwNjAxMDUwNjE0WhcNMjQwNjA4MDUwNjE0WjAYMRYwFAYD VQQDEw02NjVhYWM0Ny1lZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO5rLgpcnVbH6vPJ1GPW0xknn3e4zGLCqNn6Jy3c1IaRnVNiJTX4OxC7ANRe aq9eMpOM4hg3cB98GfrCnrYnO92YZw3bjVVwVjcPStn/CFN9L5qEXLjWP8YsYDCy gPMa6SmS1uCKNVpQz9mkJB2Jkp3S0K/eeUFE0DePrVZ7EigMH2SjAzuxUjULXzgF YU+Kg2emT9q+YNlm40xKE/hxUw0VsWjTOPsgtPvyb45/kZgp0nXIKt3U+FpvTRY/ zhzWWULjH0UFwKXD/U2q+Bq7mRg5V3Ozsr0nIds48lWFbzZLWq+EO6qTCMWJ09m0 j3AyHrLhwrB6xOa/NaUSyEGHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaSfaiJ ITGh/mpREpGJLZSxLIMWMB8GA1UdIwQYMBaAFK9VWBuhJ+IJCgpUYv57znBhbyzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc1OC80QzdBMjg2OEQz NkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRna0tDbFJpX252T2NHRnZM TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxVllHNkVuNGdrS0NsUmlfbnZPY0dGdkxOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc1OC80QzdBMjg2OEQzNkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRn a0tDbFJpX252T2NHRnZMTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnZHSiwQf5kSmkw2QPw5iKx/gGOJMoZ0aokXIYPefMiSfeaJJ1Oy/s 2MS5eGpUpqHQwkL7neUUsQNnPYOJvvJ21bXX2gdxvMvw9H6B0OXjEcGEI4YHSQ+E 0GmaKTKUPb2Pi8CteZ4Jc04FLeEWCW/+aQFMMmBHfPqOPj25ujPRE/XTrPYl7y7j KF5ySjWDobcrqjHPOScWWW7KOwP2BxtMHCfXbL7Az40jCIgDmrJ45A/gCjEXXL8A JSElMqNF3jhqWGF8DITCZu60K5I13ROwXGIWTQg5x/9BSbWQsg1oG4jfzAbugkED +0SwafCpykj8mNT/3/Ag6lTYjaNXS0/X -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org