$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: xdRmLr1hZ2c8EoYOgNpX8/sqOerjXXNSoKbwh6TTZ64= Subject key identifier: C8:7E:BF:39:25:DD:EC:BD:46:5A:4C:F8:E0:E8:21:B8:D2:F7:2B:71 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0C1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0C16 Signing time: Sat 18 May 2024 19:00:38 +0000 Manifest this update: Sat 18 May 2024 19:00:37 +0000 Manifest next update: Sat 25 May 2024 19:00:37 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: f0Dfx3MbEa6s1Ph6+VhVj0X/8tvku5GWyNnJsKBmN6M=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: gRtbtx7+NLh7HmTzJrXeicr/pJospSjUi6ir5lypouc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3102 (0xc1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: May 18 19:00:37 2024 GMT Not After : May 25 19:00:37 2024 GMT Subject: CN=6648fad5-f17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:00:8e:f0:d4:7e:25:68:0b:f5:81:85:ca: a1:13:b5:71:54:eb:83:f2:a0:3e:09:b9:c3:9a:f1: 00:7a:5e:8d:09:0f:a7:08:93:21:85:1b:5b:6c:f9: ef:6e:38:59:a7:de:fd:e3:65:0d:4c:d8:6c:1a:ac: f1:37:ae:5a:b0:96:13:ca:5a:01:ae:23:cc:07:fd: f7:c3:7f:83:a6:5d:ae:ec:b9:a3:5e:b5:8e:83:3f: d4:77:1d:57:5b:6b:6c:5f:a1:95:70:45:dd:86:ce: 38:e2:c9:d0:6a:8d:e2:41:33:b8:c8:a7:3e:d9:34: 9a:60:63:a3:ab:45:51:fc:31:6e:6c:a2:25:2f:e3: 95:75:da:6f:ff:11:1f:8e:59:0c:24:99:43:2d:84: a1:be:7f:fb:62:3a:c1:1e:ee:7c:a5:de:74:4a:0c: d2:d7:22:9f:14:1e:3b:eb:97:cc:06:93:04:84:44: 59:21:02:be:40:ef:c4:23:cd:cb:e4:20:5c:89:68: bd:e3:82:f6:6f:5b:ea:70:0e:8b:47:a1:4c:20:6e: c9:c5:f3:1f:5d:b5:75:33:b5:11:4d:38:cb:da:6f: ed:7f:d8:9c:bf:53:fa:40:fc:27:f8:cd:07:e0:23: 64:38:33:ff:33:79:cc:5f:4a:05:2a:a5:fe:dc:ee: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:BF:39:25:DD:EC:BD:46:5A:4C:F8:E0:E8:21:B8:D2:F7:2B:71 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:84:1a:3a:54:7c:27:8d:a9:3d:b7:64:cb:7a:d8:e2:c1:f2: bf:af:f4:99:af:a1:fa:24:36:47:e6:f9:bd:33:2c:10:23:6f: b6:cc:08:64:00:6b:b8:40:88:b2:b4:20:6a:73:2c:aa:2f:27: a6:ca:df:bf:8e:be:74:aa:78:8f:a6:30:aa:40:59:75:ef:87: 62:44:33:d8:55:ac:3c:f7:bf:0d:9a:3a:13:48:36:1f:02:c4: e3:19:b0:e7:83:ac:4d:16:96:7b:6a:a8:b2:51:14:a8:c1:b7: be:15:f3:b7:e1:3c:0b:96:10:9b:a6:98:e4:bf:b9:3b:7b:ce: df:36:9f:03:ab:f1:29:97:b3:0e:cd:07:03:13:7a:bb:4b:dc: 43:92:4c:49:27:be:99:12:20:17:83:2a:44:64:e2:de:1d:67: 95:27:68:ab:a2:5f:74:e2:0a:09:26:c8:67:34:97:f1:df:e7: b2:0e:29:bf:01:34:c4:b8:6e:43:e7:60:ca:ed:b2:dc:a9:05: 99:bf:fc:5f:f4:e7:4f:ed:30:ed:80:68:9d:ba:7c:23:a1:b3: b4:47:ad:90:72:ca:9e:ad:19:29:d4:b2:4f:fa:4f:eb:19:81: 65:0b:2b:42:7b:60:0d:ff:79:34:52:c6:94:97:52:28:6c:fb: 9d:a3:d5:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjQwNTE4MTkwMDM3WhcNMjQwNTI1MTkwMDM3WjAYMRYwFAYD VQQDEw02NjQ4ZmFkNS1mMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz28AjvDUfiVoC/WBhcqhE7VxVOuD8qA+CbnDmvEAel6NCQ+nCJMhhRtbbPnv bjhZp97942UNTNhsGqzxN65asJYTyloBriPMB/33w3+Dpl2u7LmjXrWOgz/Udx1X W2tsX6GVcEXdhs444snQao3iQTO4yKc+2TSaYGOjq0VR/DFubKIlL+OVddpv/xEf jlkMJJlDLYShvn/7YjrBHu58pd50SgzS1yKfFB4765fMBpMEhERZIQK+QO/EI83L 5CBciWi944L2b1vqcA6LR6FMIG7JxfMfXbV1M7URTTjL2m/tf9icv1P6QPwn+M0H 4CNkODP/M3nMX0oFKqX+3O4DyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh+vzkl 3ey9RlpM+ODoIbjS9ytxMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfhBo6VHwnjak9t2TLetjiwfK/r/SZr6H6JDZH5vm9MywQI2+2zAhk AGu4QIiytCBqcyyqLyemyt+/jr50qniPpjCqQFl174diRDPYVaw8978NmjoTSDYf AsTjGbDng6xNFpZ7aqiyURSowbe+FfO34TwLlhCbppjkv7k7e87fNp8Dq/Epl7MO zQcDE3q7S9xDkkxJJ76ZEiAXgypEZOLeHWeVJ2irol904goJJshnNJfx3+eyDim/ ATTEuG5D52DK7bLcqQWZv/xf9OdP7TDtgGidunwjobO0R62QcsqerRkp1LJP+k/r GYFlCytCe2AN/3k0UsaUl1IobPudo9XQ -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org