$ rpki-client -vvf rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft File: f4zGhHEilLZfAYtxngcvRCoBW9E.mft (raw, json) Hash identifier: u/YhdB/t13amLlNzkBZqgn16x/275/MQqj7OYyaCbeQ= Subject key identifier: E0:43:9F:26:ED:2D:EF:0D:CF:12:9F:E9:72:61:AF:98:84:60:15:4F Authority key identifier: 7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1 Certificate issuer: /CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft Manifest number: E7 Signing time: Fri 31 May 2024 06:39:28 +0000 Manifest this update: Fri 31 May 2024 06:39:27 +0000 Manifest next update: Fri 07 Jun 2024 06:39:27 +0000 Files and hashes: 1: f4zGhHEilLZfAYtxngcvRCoBW9E.crl (hash: o7rl9pHt9WEPcSvuHrafYor/QZpeCzrsQVrmMBgTRTo=) 2: AC98F354BF3711ED8D820C0AC4F9AE02.roa (hash: rIXZUNADPz/ZzxU5UjwHuAFOjyepQR4f1rDPZOHAoTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.crl rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1 Validity Not Before: May 31 06:39:27 2024 GMT Not After : Jun 7 06:39:27 2024 GMT Subject: CN=6659709f-0496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:5f:3f:8b:85:a6:3a:28:76:0b:ad:10:2f: d4:ba:ba:ab:dc:f7:8a:7a:45:49:96:40:39:06:c9: d8:d2:67:86:66:1f:f9:6b:1c:1f:83:c9:3b:90:81: c3:e4:d0:58:d8:e7:d7:2a:5d:a7:ce:23:27:1e:7a: cf:39:40:9c:7f:88:f8:af:e7:11:0f:ad:a2:34:33: 5a:d0:bd:5e:4b:ba:6f:8b:26:9d:88:70:3e:06:58: 13:f8:72:64:68:6c:4c:09:5d:0d:bb:e3:7f:c5:8d: 87:25:67:3c:22:6d:4f:5a:ba:c1:fe:9d:3a:00:1d: 4d:d4:8a:90:39:92:59:3e:b2:18:ad:75:40:80:cd: ab:fb:a9:76:ec:04:a8:79:0b:da:de:90:32:78:5a: 30:40:9a:20:b5:2d:7c:dd:27:ae:f8:c5:22:7b:89: a6:cd:e5:ba:c2:33:ee:ae:26:fa:5b:4d:19:71:a1: e4:a3:47:f8:f0:3e:27:a4:60:d9:e1:81:93:54:47: 58:90:5e:78:c2:be:64:e5:f9:a5:29:36:57:51:6a: 9f:87:00:fb:24:3b:4e:b9:af:8b:d5:ea:5a:20:78: 4b:39:a0:b2:05:82:46:70:b1:94:65:6e:f9:4b:28: 93:ae:cb:d2:69:d8:96:59:15:0e:95:32:15:0c:4e: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:43:9F:26:ED:2D:EF:0D:CF:12:9F:E9:72:61:AF:98:84:60:15:4F X509v3 Authority Key Identifier: keyid:7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:66:34:3a:1e:d5:3a:b9:f4:a2:6e:49:d9:98:7c:7d:10:28: 77:f5:f9:d7:e2:ab:7f:c5:53:71:6f:b6:11:07:c0:2e:a1:6f: 06:f6:5e:f0:ae:df:54:38:1a:ae:ca:55:c8:73:b4:67:af:40: e1:c0:45:88:63:24:c8:e8:f9:36:93:dc:2d:31:a8:aa:75:0f: e9:97:01:f1:a2:57:31:fc:d1:86:42:a9:d6:fa:ed:21:00:44: 18:35:b5:96:49:bf:6c:a6:7f:67:05:8a:6d:19:78:5a:55:7e: 1f:16:61:bd:67:4c:0d:64:50:b8:c8:a9:43:06:50:8a:96:9a: 16:86:c3:e9:9e:5c:52:9a:b6:76:d4:7e:84:ed:ea:5f:86:7c: 08:38:79:2f:1e:31:85:7d:d5:4d:65:3c:6f:78:80:f5:b2:9d: 8a:6b:a2:e9:3b:1b:7e:f7:f5:4f:07:8e:9f:74:9f:74:8e:26: f1:80:f7:f0:f3:e0:40:b8:f1:e2:79:e4:ab:74:db:96:82:d0: b2:da:20:82:c1:c9:36:02:47:96:7c:82:40:75:a6:06:58:8c: 21:a1:e0:e7:c0:29:8b:7f:10:b2:5e:c3:a4:54:e0:16:c5:4b: c8:67:66:89:d2:65:81:7f:3e:b6:16:70:78:57:fa:8f:9c:3d: 77:ce:4d:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwRTIxMTAvBgNVBAUTKDdGOENDNjg0NzEyMjk0QjY1RjAxOEI3MTlFMDcyRjQ0 MkEwMTVCRDEwHhcNMjQwNTMxMDYzOTI3WhcNMjQwNjA3MDYzOTI3WjAYMRYwFAYD VQQDEw02NjU5NzA5Zi0wNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz5fP4uFpjoodgutEC/Uurqr3PeKekVJlkA5BsnY0meGZh/5axwfg8k7kIHD 5NBY2OfXKl2nziMnHnrPOUCcf4j4r+cRD62iNDNa0L1eS7pviyadiHA+BlgT+HJk aGxMCV0Nu+N/xY2HJWc8Im1PWrrB/p06AB1N1IqQOZJZPrIYrXVAgM2r+6l27ASo eQva3pAyeFowQJogtS183Seu+MUie4mmzeW6wjPurib6W00ZcaHko0f48D4npGDZ 4YGTVEdYkF54wr5k5fmlKTZXUWqfhwD7JDtOua+L1epaIHhLOaCyBYJGcLGUZW75 SyiTrsvSadiWWRUOlTIVDE7tZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBDnybt Le8NzxKf6XJhr5iEYBVPMB8GA1UdIwQYMBaAFH+MxoRxIpS2XwGLcZ4HL0QqAVvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBFMi83NkEwMTY0MEJG MzQxMUVEOUZDMDJFODdDNEY5QUUwMi9mNHpHaEhFaWxMWmZBWXR4bmdjdlJDb0JX OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0ekdoSEVpbExaZkFZdHhuZ2N2UkNvQlc5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBFMi83NkEwMTY0MEJGMzQxMUVEOUZDMDJFODdDNEY5QUUwMi9mNHpHaEhFaWxM WmZBWXR4bmdjdlJDb0JXOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyZjQ6HtU6ufSibknZmHx9ECh39fnX4qt/xVNxb7YRB8AuoW8G9l7w rt9UOBquylXIc7Rnr0DhwEWIYyTI6Pk2k9wtMaiqdQ/plwHxolcx/NGGQqnW+u0h AEQYNbWWSb9spn9nBYptGXhaVX4fFmG9Z0wNZFC4yKlDBlCKlpoWhsPpnlxSmrZ2 1H6E7epfhnwIOHkvHjGFfdVNZTxveID1sp2Ka6LpOxt+9/VPB46fdJ90jibxgPfw 8+BAuPHieeSrdNuWgtCy2iCCwck2AkeWfIJAdaYGWIwhoeDnwCmLfxCyXsOkVOAW xUvIZ2aJ0mWBfz62FnB4V/qPnD13zk2I -----END CERTIFICATE-----Generated at Fri May 31 08:38:32 2024 by rpki-client on console-fra.rpki-client.org