$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: QLAhYr94uwIRrT+GAqJWav0kC1sMnpMvUWNYtGqcpAE= Subject key identifier: AA:FD:3C:26:16:05:E5:A9:51:8C:64:9E:3A:8A:7E:E7:41:AC:3F:B3 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0BD3 Signing time: Sat 18 May 2024 19:05:20 +0000 Manifest this update: Sat 18 May 2024 19:05:20 +0000 Manifest next update: Sat 25 May 2024 19:05:20 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: PzOS0RJMG6c2KPWE9zCAKe9CLwjsOaeV1e+DK+tWkVs=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: khKFj4HAGdLRYDfHw5jX325dFizeKy4xtsPTMmI3K0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: May 18 19:05:20 2024 GMT Not After : May 25 19:05:20 2024 GMT Subject: CN=6648fbf0-a43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:9b:88:22:bb:84:1e:3b:01:6f:0f:87:da: 4a:ce:fb:fe:ad:c6:06:37:ef:f4:cd:44:2d:e1:77: ab:d5:93:5e:45:8a:da:ef:78:40:42:67:67:4f:a0: 8a:8f:a0:c6:34:45:b3:cf:f0:b1:56:3a:f2:37:9c: d4:0d:d6:75:39:05:8c:3e:a4:66:97:e0:1a:fe:d5: 5c:e0:01:e4:7d:c9:03:16:97:60:4c:0a:de:7d:18: 49:bc:e9:49:aa:7e:73:6e:81:6d:26:0c:66:9b:f6: 1d:93:3a:a4:89:f2:4b:87:95:20:b5:70:b6:25:da: 4c:65:5c:bb:25:d8:57:d4:93:b6:70:0a:b3:ce:9e: c5:fb:9d:09:88:bf:ea:ed:fc:bf:10:79:a5:14:9d: 4f:d4:8f:a7:25:6a:37:68:1e:79:70:5a:46:f9:28: cf:9a:77:cb:fe:ca:e4:b2:1e:73:cc:4b:f7:5f:dd: 6c:54:6e:55:1d:eb:f3:8a:81:47:c2:f9:2f:77:9a: 5e:67:99:95:fe:9f:18:26:47:e2:d0:e6:5f:2d:e3: fe:44:e9:96:d2:7c:9d:6e:a7:93:a0:ac:c6:43:fa: bb:6d:86:ff:c3:ff:6e:a8:20:31:50:ea:e6:38:f2: 47:74:fd:0d:ac:8f:a4:59:74:6a:02:b7:03:e6:0b: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FD:3C:26:16:05:E5:A9:51:8C:64:9E:3A:8A:7E:E7:41:AC:3F:B3 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ff:b3:e1:5f:45:1f:ec:2c:23:72:3b:d4:86:0e:56:b3:f6: 30:7b:ff:9b:d0:50:39:94:95:9d:95:04:8c:63:19:e9:50:43: 97:12:f4:8b:c0:b0:be:83:c5:23:ee:df:60:dd:6f:63:6b:98: 29:a5:5e:cb:77:da:97:5f:20:c7:75:44:4d:1a:3e:34:71:92: 0d:5f:11:87:2c:d3:43:4f:aa:ff:86:53:50:89:7d:bc:f9:99: 62:79:81:10:54:52:f0:ed:cd:b4:ed:a2:d6:5e:93:1d:30:d4: 39:f2:b2:d9:e7:0f:29:6c:4a:c2:bb:6a:99:0e:c9:1d:42:92: 80:89:d2:c3:71:3a:97:6b:66:36:00:26:5d:52:d4:da:c7:98: f1:0e:8c:77:18:af:e5:8b:0a:fb:89:24:eb:2e:d5:80:12:b8: be:a2:fd:f7:97:32:0f:f8:7f:52:81:1f:33:ef:92:03:92:f9: b7:cf:1a:06:39:0c:b1:e6:1c:7e:5e:11:b1:f1:53:d1:3f:be: fb:5e:17:d6:b9:ca:59:65:0d:64:c4:96:fb:49:7b:fc:39:b9: e5:f1:3c:6a:c8:b5:12:fa:3b:8a:c4:f2:b7:4e:ad:62:09:21: 99:4b:a6:1d:52:3d:3f:0e:46:ab:86:1f:9d:cf:6e:58:5c:48: 87:2b:13:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjQwNTE4MTkwNTIwWhcNMjQwNTI1MTkwNTIwWjAYMRYwFAYD VQQDEw02NjQ4ZmJmMC1hNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVabiCK7hB47AW8Ph9pKzvv+rcYGN+/0zUQt4Xer1ZNeRYra73hAQmdnT6CK j6DGNEWzz/CxVjryN5zUDdZ1OQWMPqRml+Aa/tVc4AHkfckDFpdgTArefRhJvOlJ qn5zboFtJgxmm/YdkzqkifJLh5UgtXC2JdpMZVy7JdhX1JO2cAqzzp7F+50JiL/q 7fy/EHmlFJ1P1I+nJWo3aB55cFpG+SjPmnfL/srksh5zzEv3X91sVG5VHevzioFH wvkvd5peZ5mV/p8YJkfi0OZfLeP+ROmW0nydbqeToKzGQ/q7bYb/w/9uqCAxUOrm OPJHdP0NrI+kWXRqArcD5gtqrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKr9PCYW BeWpUYxknjqKfudBrD+zMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX/7PhX0Uf7CwjcjvUhg5Ws/Ywe/+b0FA5lJWdlQSMYxnpUEOXEvSL wLC+g8Uj7t9g3W9ja5gppV7Ld9qXXyDHdURNGj40cZINXxGHLNNDT6r/hlNQiX28 +ZlieYEQVFLw7c207aLWXpMdMNQ58rLZ5w8pbErCu2qZDskdQpKAidLDcTqXa2Y2 ACZdUtTax5jxDox3GK/liwr7iSTrLtWAEri+ov33lzIP+H9SgR8z75IDkvm3zxoG OQyx5hx+XhGx8VPRP777XhfWucpZZQ1kxJb7SXv8Obnl8TxqyLUS+juKxPK3Tq1i CSGZS6YdUj0/Dkarhh+dz25YXEiHKxMQ -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org