$ rpki-client -vvf rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft File: F_lRhEBRRIyJBhQEz7QequBHOno.mft (raw, json) Hash identifier: LVTM3RcXm4Me4iUxKMklevEPsL0j7cMB3D+07ytptkI= Subject key identifier: 66:55:F6:D5:2B:10:10:C7:69:FD:80:76:69:1B:E5:5B:B0:B7:42:55 Authority key identifier: 17:F9:51:84:40:51:44:8C:89:06:14:04:CF:B4:1E:AA:E0:47:3A:7A Certificate issuer: /CN=A91602BE/serialNumber=17F951844051448C89061404CFB41EAAE0473A7A Certificate serial: 0D99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_lRhEBRRIyJBhQEz7QequBHOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft Manifest number: 0D87 Signing time: Sat 18 May 2024 18:35:07 +0000 Manifest this update: Sat 18 May 2024 18:35:06 +0000 Manifest next update: Sat 25 May 2024 18:35:06 +0000 Files and hashes: 1: F_lRhEBRRIyJBhQEz7QequBHOno.crl (hash: 0sWoOxWHP/zb4sf/aQJDBU5c/gbfxniOlh3b0fCoX34=) 2: 2A00F51ACDC411EBA2B42F4FC4F9AE02.roa (hash: ++G/F+Ju6AF3FX4wXdMvAYNt02d1NK+Z51nDXZBl5jo=) 3: 17A3A4D8C98611E9AC175947C4F9AE02.roa (hash: AKxNurzM1xAwUrb36jFvjKVvg5QaA9UU2hF5r3BYTK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.crl rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_lRhEBRRIyJBhQEz7QequBHOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3481 (0xd99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602BE/serialNumber=17F951844051448C89061404CFB41EAAE0473A7A Validity Not Before: May 18 18:35:06 2024 GMT Not After : May 25 18:35:06 2024 GMT Subject: CN=6648f4db-dca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:74:23:13:bb:85:0b:f6:f9:ca:d4:9e:1f: 20:fa:44:86:78:34:ee:a5:61:3f:12:cd:0c:67:48: 56:12:82:3a:97:1f:97:23:de:a6:50:aa:cf:95:4b: a6:e6:40:79:e4:84:77:5a:59:01:da:bb:3a:0c:fe: dd:c9:2a:e4:98:48:d6:1e:04:0b:01:b1:c4:61:0e: fa:1f:30:14:c7:31:66:03:93:cc:ae:96:be:15:be: 06:ba:f7:ca:b2:01:7d:52:7a:94:fb:a8:3d:1c:ce: 34:33:ff:51:fe:58:c9:05:26:ae:22:d8:0b:82:64: ce:db:0a:f4:7e:66:93:1f:f4:1d:4f:2d:98:a7:d1: 2a:39:71:d3:df:e7:17:9f:04:1c:de:16:22:ac:0b: 55:ed:57:25:e2:7c:e1:46:e8:4c:38:00:03:6c:20: a6:f1:a2:11:c2:18:ab:d5:70:da:69:0e:a7:77:bd: 9d:8b:10:22:22:9e:59:5b:d9:9e:fc:35:5b:b9:f1: b1:eb:a3:65:0d:89:27:fe:5b:ae:29:f0:41:64:ba: 7b:35:69:4c:6e:1b:e5:8a:32:a7:65:56:5a:03:8d: f3:3c:c1:33:f8:a2:78:55:2d:45:3c:d7:4f:83:b8: 53:ac:c8:ac:89:2c:d1:2d:10:2e:c8:2a:ea:d8:de: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:55:F6:D5:2B:10:10:C7:69:FD:80:76:69:1B:E5:5B:B0:B7:42:55 X509v3 Authority Key Identifier: keyid:17:F9:51:84:40:51:44:8C:89:06:14:04:CF:B4:1E:AA:E0:47:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_lRhEBRRIyJBhQEz7QequBHOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c0:a7:14:f8:ff:5e:00:35:ea:74:7d:10:d2:c1:44:1d:dd: 35:24:36:e1:b5:99:69:a3:c2:1b:e3:8e:04:0d:1a:5b:bd:8d: 4d:53:b2:ba:c8:7d:61:c3:14:91:f2:3a:25:87:b4:5e:3d:79: b8:9e:c5:90:0d:60:06:f0:48:e1:e2:13:ef:4a:7b:c4:a8:f9: 87:16:d0:49:5f:49:9b:07:6d:93:92:e2:76:93:17:a4:84:5f: c1:de:2e:15:82:80:70:1d:0d:d8:26:cd:c5:df:cb:36:11:7b: cc:54:47:60:2c:25:d5:59:75:a5:e7:20:82:0b:e7:d7:8b:06: 1e:5c:62:eb:d8:c5:44:9b:31:1d:66:d7:e1:ed:99:69:fc:12: f4:97:63:6b:27:9f:ad:6e:fc:02:a6:c5:86:90:cf:fb:2b:b4: cd:c5:e2:06:2d:95:7a:dc:d6:e8:b7:12:fb:a8:77:33:1a:01: 37:30:fc:fa:a7:88:c1:85:4c:54:97:75:e8:ed:88:17:56:1f: fa:60:b8:16:82:7c:80:55:5d:ba:7a:67:48:cf:6f:67:c6:71: 22:91:1a:1e:1d:fa:dc:6c:3a:21:1a:b0:e2:8d:48:b0:85:b8: 0b:bf:32:c5:9b:f1:8d:57:b4:f2:42:62:49:80:c5:d4:90:71: de:54:af:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyQkUxMTAvBgNVBAUTKDE3Rjk1MTg0NDA1MTQ0OEM4OTA2MTQwNENGQjQxRUFB RTA0NzNBN0EwHhcNMjQwNTE4MTgzNTA2WhcNMjQwNTI1MTgzNTA2WjAYMRYwFAYD VQQDEw02NjQ4ZjRkYi1kY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN90IxO7hQv2+crUnh8g+kSGeDTupWE/Es0MZ0hWEoI6lx+XI96mUKrPlUum 5kB55IR3WlkB2rs6DP7dySrkmEjWHgQLAbHEYQ76HzAUxzFmA5PMrpa+Fb4GuvfK sgF9UnqU+6g9HM40M/9R/ljJBSauItgLgmTO2wr0fmaTH/QdTy2Yp9EqOXHT3+cX nwQc3hYirAtV7Vcl4nzhRuhMOAADbCCm8aIRwhir1XDaaQ6nd72dixAiIp5ZW9me /DVbufGx66NlDYkn/luuKfBBZLp7NWlMbhvlijKnZVZaA43zPMEz+KJ4VS1FPNdP g7hTrMisiSzRLRAuyCrq2N6T4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZV9tUr EBDHaf2Admkb5Vuwt0JVMB8GA1UdIwQYMBaAFBf5UYRAUUSMiQYUBM+0HqrgRzp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJCRS8zODIxODMzMkEy MUQxMUU5OUM5REM3N0RDNEY5QUUwMi9GX2xSaEVCUlJJeUpCaFFFejdRZXF1QkhP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfbFJoRUJSUkl5SkJoUUV6N1FlcXVCSE9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJCRS8zODIxODMzMkEyMUQxMUU5OUM5REM3N0RDNEY5QUUwMi9GX2xSaEVCUlJJ eUpCaFFFejdRZXF1QkhPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbwKcU+P9eADXqdH0Q0sFEHd01JDbhtZlpo8Ib444EDRpbvY1NU7K6 yH1hwxSR8jolh7RePXm4nsWQDWAG8Ejh4hPvSnvEqPmHFtBJX0mbB22TkuJ2kxek hF/B3i4VgoBwHQ3YJs3F38s2EXvMVEdgLCXVWXWl5yCCC+fXiwYeXGLr2MVEmzEd Ztfh7Zlp/BL0l2NrJ5+tbvwCpsWGkM/7K7TNxeIGLZV63NbotxL7qHczGgE3MPz6 p4jBhUxUl3Xo7YgXVh/6YLgWgnyAVV26emdIz29nxnEikRoeHfrcbDohGrDijUiw hbgLvzLFm/GNV7TyQmJJgMXUkHHeVK8E -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org