$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json) Hash identifier: n5Kgs7z5XQZ5U/MCf2QnNipaxZdglgEtIDSHbXo7F4s= Subject key identifier: 5E:87:31:09:27:1A:8C:92:12:C6:9D:89:C9:9F:AC:D7:00:C7:C0:E3 Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft Manifest number: 023D Signing time: Sat 01 Jun 2024 04:43:31 +0000 Manifest this update: Sat 01 Jun 2024 04:43:30 +0000 Manifest next update: Sat 08 Jun 2024 04:43:30 +0000 Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: kZO/BofIArocjFUHUta2GgJMDFrK4WbV2QAR4/PK15Q=) 2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: W4vLQsN0db4vrYc7K8qOJXeqeIzm3EuC93xYJrRcOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Validity Not Before: Jun 1 04:43:30 2024 GMT Not After : Jun 8 04:43:30 2024 GMT Subject: CN=665aa6f2-e74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:5e:38:65:58:84:ee:12:82:fd:5d:ec:33: 69:d7:39:8a:9c:ae:18:4c:5d:b5:01:6c:a3:63:ca: 6f:82:ee:fb:85:8c:83:dc:68:66:42:c5:e2:10:78: f0:e4:88:b3:17:a5:16:bf:ea:a3:98:c4:bb:d1:4e: 16:f3:23:02:fc:94:14:9a:ba:03:8e:10:88:ad:1e: 56:64:77:a0:d3:27:1a:26:56:6b:79:d3:db:3f:e1: fb:88:86:8d:e3:e4:dd:e2:f0:34:be:d3:83:a8:b5: 0c:5c:da:49:dd:5f:de:6c:f9:23:51:68:6f:f3:b3: 5b:46:74:3a:2b:dc:42:c5:d2:52:1f:3e:b3:28:11: 72:e2:3d:f0:db:17:9c:5f:72:a4:b2:e3:54:37:90: f4:13:3e:f7:95:6c:bc:69:0d:10:c7:b5:5d:37:75: b1:db:ff:2d:5f:9b:f3:22:e5:ea:f6:cf:eb:96:e2: 9f:bd:1b:cb:e7:16:58:6a:ad:e2:ea:3d:22:0f:34: b5:36:5f:f0:1f:f5:89:e3:e0:97:3f:03:e6:54:03: 2e:18:f7:72:09:59:49:66:0e:18:99:86:64:c7:e8: e2:e5:55:32:3f:98:4a:54:ae:87:d3:49:15:78:b8: 3a:e9:33:38:20:3f:fe:81:e4:fd:60:53:16:3f:5a: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:31:09:27:1A:8C:92:12:C6:9D:89:C9:9F:AC:D7:00:C7:C0:E3 X509v3 Authority Key Identifier: keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:df:95:79:09:d9:96:a1:3b:a7:37:7c:ab:97:3b:92:94:1a: 0b:3e:b9:1e:3b:41:f0:8c:16:bf:97:60:08:33:b5:fb:a0:8f: d4:36:03:aa:c2:c1:55:cb:c7:53:22:c4:4c:42:4a:5f:ed:4a: 57:35:e4:98:ae:cd:99:0e:c7:61:49:3f:37:94:6c:4f:bc:25: bc:ff:44:7c:9f:75:6a:37:4b:e8:cf:03:ec:94:95:07:4f:85: fb:82:76:17:28:1c:0e:2d:5c:8e:8b:80:0a:fd:5b:62:17:f2: 75:07:5d:bc:15:ed:a6:97:9e:61:cd:2b:af:a2:64:cd:c8:28: 91:46:a3:fb:ba:43:11:19:36:6c:0e:60:1c:3d:f5:a4:33:29: d9:e8:0f:88:7b:d8:b9:cd:a2:e0:44:40:4e:20:e3:e6:cb:07: 90:5c:49:88:73:5d:6e:2c:72:1f:bd:96:63:bc:f5:e2:72:20: a0:42:eb:8d:06:55:26:27:6f:a1:3c:94:12:09:26:87:ee:6a: d1:e1:7a:88:8d:02:19:39:84:50:6f:1e:02:27:1b:5e:84:62: 77:ed:2f:f4:eb:4e:9e:6a:48:c1:73:f5:69:f2:91:d7:6e:4c: 5d:19:45:f0:ff:21:59:b4:e8:ca:e3:07:f1:13:cb:55:cf:1f: 92:0d:8d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz NkY4NzE5MEIwHhcNMjQwNjAxMDQ0MzMwWhcNMjQwNjA4MDQ0MzMwWjAYMRYwFAYD VQQDEw02NjVhYTZmMi1lNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8NeOGVYhO4Sgv1d7DNp1zmKnK4YTF21AWyjY8pvgu77hYyD3GhmQsXiEHjw 5IizF6UWv+qjmMS70U4W8yMC/JQUmroDjhCIrR5WZHeg0ycaJlZredPbP+H7iIaN 4+Td4vA0vtODqLUMXNpJ3V/ebPkjUWhv87NbRnQ6K9xCxdJSHz6zKBFy4j3w2xec X3KksuNUN5D0Ez73lWy8aQ0Qx7VdN3Wx2/8tX5vzIuXq9s/rluKfvRvL5xZYaq3i 6j0iDzS1Nl/wH/WJ4+CXPwPmVAMuGPdyCVlJZg4YmYZkx+ji5VUyP5hKVK6H00kV eLg66TM4ID/+geT9YFMWP1rJsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6HMQkn GoySEsadicmfrNcAx8DjMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv TXhuTG1KNXJqSGcyLUhHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt35V5CdmWoTunN3yrlzuSlBoLPrkeO0HwjBa/l2AIM7X7oI/UNgOq wsFVy8dTIsRMQkpf7UpXNeSYrs2ZDsdhST83lGxPvCW8/0R8n3VqN0vozwPslJUH T4X7gnYXKBwOLVyOi4AK/VtiF/J1B128Fe2ml55hzSuvomTNyCiRRqP7ukMRGTZs DmAcPfWkMynZ6A+Ie9i5zaLgREBOIOPmyweQXEmIc11uLHIfvZZjvPXiciCgQuuN BlUmJ2+hPJQSCSaH7mrR4XqIjQIZOYRQbx4CJxtehGJ37S/0606eakjBc/Vp8pHX bkxdGUXw/yFZtOjK4wfxE8tVzx+SDY0C -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org