$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: 3d1yMI435njC1KYO8DwVGHdL+WMIwFQj1qVtktpW5+g= Subject key identifier: 0B:47:7D:AB:C0:B4:B0:FE:3B:96:C6:0A:8A:11:BD:62:FF:CB:1C:88 Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 05B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 05B1 Signing time: Sat 01 Jun 2024 01:08:05 +0000 Manifest this update: Sat 01 Jun 2024 01:08:04 +0000 Manifest next update: Sat 08 Jun 2024 01:08:04 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: 22eT6ASbwyeijvF31z5qQZxv4ieh7qxji2gzPYICwP8=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: KcSLME++BOQMBTRQC+XSqkvXAXvHcehRuDs7Bz3m1H8=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: h5Ff8XljvqUKSB781O/sZuQPJjFa3auq7G53KGvGsSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1465 (0x5b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Jun 1 01:08:04 2024 GMT Not After : Jun 8 01:08:04 2024 GMT Subject: CN=665a7475-4df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:29:3d:36:ff:f5:7e:37:6c:b9:e3:dc:f6: e2:e2:1d:e6:4d:af:bd:34:89:f6:87:f4:64:f6:85: 77:1e:b8:4a:ff:e7:26:0f:f1:2f:62:03:0f:56:6b: 7c:8f:f0:df:48:13:bb:37:3a:b0:00:ec:44:4a:e4: 87:c1:7d:04:dc:17:99:43:ba:cd:01:96:7b:71:79: e2:42:7b:ea:4f:1c:e0:37:76:b6:67:31:a1:e9:74: fd:38:2b:1e:8d:96:fb:3c:89:75:cc:3c:8b:4a:18: 67:de:25:64:60:1a:09:e7:2e:c8:27:b0:b9:46:6c: 1b:7e:95:a6:ea:c2:bd:11:be:c3:ba:e3:5d:c5:29: 97:3b:71:1a:12:7c:4b:95:d2:51:06:f3:48:f3:bf: a4:9c:c5:35:76:1f:ac:af:a4:9a:2a:99:dc:61:e4: f8:f5:40:cb:79:04:10:de:22:7b:90:70:de:15:7b: 71:e4:5d:46:cb:c0:df:bb:2b:0d:94:b5:d9:dd:a6: d6:3e:05:67:13:c6:a5:b4:78:70:b6:50:9d:46:ff: c1:93:48:73:e9:e3:62:d6:9c:c1:c0:7e:0e:d0:f3: 25:ec:5b:66:dc:03:94:2c:e3:93:63:8d:d7:e4:cc: a5:f5:22:c5:1e:56:0d:36:87:75:98:a9:cb:8d:f7: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:47:7D:AB:C0:B4:B0:FE:3B:96:C6:0A:8A:11:BD:62:FF:CB:1C:88 X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7d:29:5d:b7:8d:53:69:44:4c:51:c1:a4:4b:ef:28:50:e0: 6f:2f:67:1f:28:4b:98:2f:fe:98:30:e9:0e:15:e0:b5:b2:ac: 46:49:fc:e1:f1:4b:f9:ba:cc:89:9c:60:5b:54:30:ac:5d:8b: 58:eb:6a:14:64:47:21:cc:f8:a0:8e:2a:8e:ef:07:81:51:e6: b8:3a:af:f6:9c:c2:09:16:ee:19:9c:58:2f:3c:ed:14:c0:f8: 90:59:ae:25:10:6b:04:b8:c4:a0:af:56:ef:6a:0c:44:e0:82: 23:db:56:6e:ec:c1:5d:11:2a:64:19:86:b2:46:51:d6:dd:20: ec:be:58:dd:fa:88:96:94:93:87:78:3a:c1:d5:a8:4d:26:72: dc:19:1c:d9:4f:a5:76:c4:a6:d0:5b:19:88:43:b9:b7:f0:fa: b6:15:9c:f2:39:3b:50:b4:11:c9:1e:21:c7:87:cb:66:77:26: 6f:fe:82:01:cc:81:7f:3c:30:a1:04:1d:7e:d0:86:e2:52:f4: 33:c5:28:bd:88:db:3f:d1:1b:81:04:8b:62:75:86:3d:37:2e: 71:a4:49:48:a9:7d:98:ce:a7:cc:4a:9c:eb:e9:93:40:c5:0b: b7:ea:67:bd:4d:1d:38:f6:3e:d3:04:76:5f:33:57:ea:53:7f: 8a:4e:45:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjQwNjAxMDEwODA0WhcNMjQwNjA4MDEwODA0WjAYMRYwFAYD VQQDEw02NjVhNzQ3NS00ZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24IpPTb/9X43bLnj3Pbi4h3mTa+9NIn2h/Rk9oV3HrhK/+cmD/EvYgMPVmt8 j/DfSBO7NzqwAOxESuSHwX0E3BeZQ7rNAZZ7cXniQnvqTxzgN3a2ZzGh6XT9OCse jZb7PIl1zDyLShhn3iVkYBoJ5y7IJ7C5RmwbfpWm6sK9Eb7DuuNdxSmXO3EaEnxL ldJRBvNI87+knMU1dh+sr6SaKpncYeT49UDLeQQQ3iJ7kHDeFXtx5F1Gy8DfuysN lLXZ3abWPgVnE8altHhwtlCdRv/Bk0hz6eNi1pzBwH4O0PMl7Ftm3AOULOOTY43X 5Myl9SLFHlYNNod1mKnLjfdwaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtHfavA tLD+O5bGCooRvWL/yxyIMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVfSldt41TaURMUcGkS+8oUOBvL2cfKEuYL/6YMOkOFeC1sqxGSfzh 8Uv5usyJnGBbVDCsXYtY62oUZEchzPigjiqO7weBUea4Oq/2nMIJFu4ZnFgvPO0U wPiQWa4lEGsEuMSgr1bvagxE4IIj21Zu7MFdESpkGYayRlHW3SDsvljd+oiWlJOH eDrB1ahNJnLcGRzZT6V2xKbQWxmIQ7m38Pq2FZzyOTtQtBHJHiHHh8tmdyZv/oIB zIF/PDChBB1+0IbiUvQzxSi9iNs/0RuBBItidYY9Ny5xpElIqX2YzqfMSpzr6ZNA xQu36me9TR049j7TBHZfM1fqU3+KTkXM -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org