$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: wgKyBQFWJj3iUNV/2PnFAH6uzBHUZa9w01sB7vPRWpQ= Subject key identifier: 82:2D:05:23:6E:67:F0:FA:FB:F8:8D:5A:7C:44:79:FA:61:6D:1A:4D Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: F3 Signing time: Fri 31 May 2024 06:33:43 +0000 Manifest this update: Fri 31 May 2024 06:33:42 +0000 Manifest next update: Fri 07 Jun 2024 06:33:42 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: iawZFUjVgz4v0kuIyrP5IERuztYf+BABgBIl2gVUcMc=) 2: 9E1B3044EFF611EEA7028633C4F9AE02.roa (hash: p104F6H4fv0309D1Y5ZFFdpPPi6wToz8E4FclT5Wnmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: May 31 06:33:42 2024 GMT Not After : Jun 7 06:33:42 2024 GMT Subject: CN=66596f46-26fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3c:c5:e0:77:58:6e:09:19:f6:eb:72:16:b6: 62:85:d9:13:6d:c8:97:af:24:14:ec:0e:3c:70:4c: 74:ef:9a:eb:2d:55:ca:09:8e:a5:e2:7a:63:59:c1: 25:55:1b:6d:55:70:be:67:ff:9c:39:3d:84:76:e5: 0d:d2:aa:f9:5a:48:ca:79:da:69:a3:5a:5d:c3:76: 60:0a:5f:37:c3:a4:0f:a1:b9:2b:7d:8c:71:84:e3: cc:ca:8d:b4:a1:39:b8:28:6f:e5:96:7b:dc:cb:a9: 41:0d:50:e5:70:cd:4b:4a:e2:e8:57:c0:d1:3e:4a: d2:3f:c7:a6:3f:36:01:5e:05:0a:3a:17:01:84:96: 01:2a:ac:6d:c0:5f:2c:4d:a3:63:b7:39:ff:1b:11: 12:8d:95:4f:24:85:60:72:d8:55:4a:fb:cd:89:c0: 90:7d:7a:20:35:57:f7:c5:2d:73:7a:55:29:cd:2d: 34:53:dc:02:6d:10:98:bc:b8:85:66:79:b2:7e:70: df:df:80:ca:e8:e8:2a:63:99:b4:de:de:43:11:b0: 2f:54:1f:3b:e7:91:ad:d5:b9:ef:24:ee:27:ae:41: 50:93:4f:4a:c8:4b:4b:2f:ac:68:f0:d2:d1:88:c0: 93:31:0f:a3:a2:bd:e2:07:b5:78:c3:6b:76:72:3f: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2D:05:23:6E:67:F0:FA:FB:F8:8D:5A:7C:44:79:FA:61:6D:1A:4D X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:55:ca:3e:be:0c:3a:5d:a0:c4:ff:8b:12:d0:3c:af:74:be: 4d:09:20:23:00:79:f5:63:6c:d3:a7:a3:56:73:3a:aa:dc:d3: 0d:0b:13:9d:90:ea:67:6e:7b:20:de:14:c8:74:97:4c:4d:a5: d2:37:16:f2:a7:53:dc:75:27:8e:f4:db:03:d3:87:d5:30:db: be:45:87:21:ea:69:ae:6e:64:5a:bc:9e:6c:63:d5:5b:91:9d: f2:da:6d:6f:89:f3:0d:49:1c:77:8c:eb:9b:53:ff:90:29:87: 13:79:e1:d3:61:ca:6b:8c:e9:7b:dc:95:2c:3b:3e:65:3b:d1: 6c:ab:30:8d:de:f6:9f:13:3a:8e:f3:f8:b7:af:6c:46:15:7f: 52:52:dd:d0:08:34:04:1c:db:08:da:3f:35:19:9d:e1:ee:0e: 33:c9:eb:02:17:d7:d0:de:73:66:e7:a4:56:b3:92:6e:ab:08: ba:65:93:81:c8:c5:8a:1f:0b:46:94:82:4f:93:16:28:c6:09: 82:85:28:a2:8d:07:71:d5:c3:dc:58:7a:a6:70:5f:3b:c0:17: ae:56:9c:f3:8a:9c:a8:75:75:a7:23:1c:40:09:7c:d3:c3:fd: 80:76:85:2f:b8:f9:77:e9:2f:07:f9:54:37:71:65:76:a8:18: 98:cb:13:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjQwNTMxMDYzMzQyWhcNMjQwNjA3MDYzMzQyWjAYMRYwFAYD VQQDEw02NjU5NmY0Ni0yNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TzF4HdYbgkZ9utyFrZihdkTbciXryQU7A48cEx075rrLVXKCY6l4npjWcEl VRttVXC+Z/+cOT2EduUN0qr5WkjKedppo1pdw3ZgCl83w6QPobkrfYxxhOPMyo20 oTm4KG/llnvcy6lBDVDlcM1LSuLoV8DRPkrSP8emPzYBXgUKOhcBhJYBKqxtwF8s TaNjtzn/GxESjZVPJIVgcthVSvvNicCQfXogNVf3xS1zelUpzS00U9wCbRCYvLiF ZnmyfnDf34DK6OgqY5m03t5DEbAvVB8755Gt1bnvJO4nrkFQk09KyEtLL6xo8NLR iMCTMQ+jor3iB7V4w2t2cj8krwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIItBSNu Z/D6+/iNWnxEefphbRpNMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOVco+vgw6XaDE/4sS0DyvdL5NCSAjAHn1Y2zTp6NWczqq3NMNCxOd kOpnbnsg3hTIdJdMTaXSNxbyp1PcdSeO9NsD04fVMNu+RYch6mmubmRavJ5sY9Vb kZ3y2m1vifMNSRx3jOubU/+QKYcTeeHTYcprjOl73JUsOz5lO9FsqzCN3vafEzqO 8/i3r2xGFX9SUt3QCDQEHNsI2j81GZ3h7g4zyesCF9fQ3nNm56RWs5Juqwi6ZZOB yMWKHwtGlIJPkxYoxgmChSiijQdx1cPcWHqmcF87wBeuVpzzipyodXWnIxxACXzT w/2AdoUvuPl36S8H+VQ3cWV2qBiYyxMr -----END CERTIFICATE-----Generated at Fri May 31 10:01:44 2024 by rpki-client on console-ams.rpki-client.org