$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: xSrEISlctiprXne+hfa2YWeNFAseWHB9T2DN5vL9g6M= Subject key identifier: 58:A5:9D:E5:BB:FD:57:AB:8E:AF:6B:52:82:14:EE:FB:CC:6A:1F:5D Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 03F2 Signing time: Sun 19 May 2024 02:18:04 +0000 Manifest this update: Sun 19 May 2024 02:18:04 +0000 Manifest next update: Sun 26 May 2024 02:18:04 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: MJii7xQi4NnSVj7JpE76Ha6Ayuhxh+mzyPkEd5xSR+A=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: +3KNpzTdNbBGuAb/O1+0M7X3qgZTGQ5GyAX8Dez5WeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: May 19 02:18:04 2024 GMT Not After : May 26 02:18:04 2024 GMT Subject: CN=6649615c-ff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:1e:52:25:c1:b8:bb:68:1a:da:a4:4a:55: ca:20:3b:42:98:a1:e5:28:b2:65:03:7b:3b:87:b8: 2d:d6:52:38:fc:7b:c3:13:ea:b9:6c:70:2e:ab:93: ab:6f:0f:4f:f7:65:0e:4a:10:68:57:cc:21:c7:47: 31:52:99:fb:a5:b9:7d:c1:e9:c4:fb:21:b5:e4:5d: 6f:81:86:77:2a:67:be:c8:ce:a7:92:90:18:cf:58: 47:26:04:9d:d0:af:be:f6:5a:50:4f:50:69:60:d6: b3:3a:d3:84:ee:6c:4d:59:b1:43:ec:fb:12:cb:78: d7:e6:08:bf:bd:93:49:76:6e:66:d2:43:e3:b8:09: fa:42:23:9c:a9:1c:21:44:bc:23:bb:53:de:ab:5d: 33:c7:a5:8b:5f:d4:fe:df:b0:47:c5:04:68:98:a5: ab:45:0b:6a:66:62:b5:39:8a:bb:68:78:bf:01:3b: 25:83:5c:30:07:dd:b8:b8:ca:dd:f5:2b:4f:d7:69: 66:48:1b:10:77:58:6a:8b:4d:01:8a:5b:dd:22:2d: d7:ff:03:97:84:e8:b8:06:e8:90:d3:e4:9b:d3:4d: c7:fa:5b:98:8b:b2:ea:fe:36:34:6d:3e:74:f2:51: 7a:fe:24:f5:08:32:8e:c1:97:2e:fa:21:fa:8a:25: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A5:9D:E5:BB:FD:57:AB:8E:AF:6B:52:82:14:EE:FB:CC:6A:1F:5D X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:56:f9:ce:9f:cf:21:a0:f0:07:50:cd:74:65:40:4f:6c:09: b4:69:6b:55:c9:78:bc:d2:03:52:24:8a:3e:ea:62:bc:30:76: 1e:3a:6c:40:f2:f6:1d:c8:e9:d1:b9:01:e6:0e:28:fa:17:61: 7a:f6:cc:5d:ab:21:66:84:73:e1:fa:66:cd:57:fe:c0:6d:71: a9:64:be:33:78:61:9c:ef:3e:7b:41:21:1f:57:2f:d1:56:b7: 30:ba:a5:68:db:2b:ed:1d:34:23:a9:89:3e:d8:21:74:39:2b: ea:28:7a:d4:85:55:64:1c:65:32:e4:4f:b5:42:d0:53:77:79: 84:b5:a2:9d:1e:70:2f:25:7c:ac:d8:c1:a4:4a:c1:67:58:0a: 51:61:72:6d:d4:dc:37:4d:5c:08:93:bc:86:07:f9:f2:d1:4d: 7b:91:b1:55:b7:60:b0:2c:88:ba:ad:b0:a4:ed:82:80:0a:b1: 3a:82:7b:d8:bf:72:0a:0f:c9:76:88:d2:5f:fc:86:01:df:5d: 5b:3c:9f:66:ba:c6:26:2b:06:11:6a:bc:26:8a:21:7d:48:7c: a6:ac:28:3a:c1:34:52:b7:64:f4:ec:dc:45:ae:1e:66:5f:88: 85:a9:07:4c:82:31:18:d7:1c:ec:bd:84:21:bd:57:6d:2c:00: 8b:cd:81:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjQwNTE5MDIxODA0WhcNMjQwNTI2MDIxODA0WjAYMRYwFAYD VQQDEw02NjQ5NjE1Yy1mZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse4eUiXBuLtoGtqkSlXKIDtCmKHlKLJlA3s7h7gt1lI4/HvDE+q5bHAuq5Or bw9P92UOShBoV8whx0cxUpn7pbl9wenE+yG15F1vgYZ3Kme+yM6nkpAYz1hHJgSd 0K++9lpQT1BpYNazOtOE7mxNWbFD7PsSy3jX5gi/vZNJdm5m0kPjuAn6QiOcqRwh RLwju1Peq10zx6WLX9T+37BHxQRomKWrRQtqZmK1OYq7aHi/ATslg1wwB924uMrd 9StP12lmSBsQd1hqi00BilvdIi3X/wOXhOi4BuiQ0+Sb003H+luYi7Lq/jY0bT50 8lF6/iT1CDKOwZcu+iH6iiVdmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFilneW7 /Verjq9rUoIU7vvMah9dMB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUVvnOn88hoPAHUM10ZUBPbAm0aWtVyXi80gNSJIo+6mK8MHYeOmxA 8vYdyOnRuQHmDij6F2F69sxdqyFmhHPh+mbNV/7AbXGpZL4zeGGc7z57QSEfVy/R VrcwuqVo2yvtHTQjqYk+2CF0OSvqKHrUhVVkHGUy5E+1QtBTd3mEtaKdHnAvJXys 2MGkSsFnWApRYXJt1Nw3TVwIk7yGB/ny0U17kbFVt2CwLIi6rbCk7YKACrE6gnvY v3IKD8l2iNJf/IYB311bPJ9musYmKwYRarwmiiF9SHymrCg6wTRSt2T07NxFrh5m X4iFqQdMgjEY1xzsvYQhvVdtLACLzYHZ -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org