$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft File: rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft (raw, json) Hash identifier: thClhIk6dXNsK+hStfjKp1TsgvBvKBZ48R79CbxgY8M= Subject key identifier: A0:0C:C6:AD:28:6C:0B:8E:55:D6:92:C1:31:31:BA:9A:0F:42:1A:6D Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE Certificate issuer: /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft Manifest number: 05A5 Signing time: Sun 19 May 2024 00:18:05 +0000 Manifest this update: Sun 19 May 2024 00:18:05 +0000 Manifest next update: Sun 26 May 2024 00:18:05 +0000 Files and hashes: 1: rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl (hash: vJrOJ8T1uSqZSoxeLMeFfc1LtRHVCZPwrFRG1xzZ8UY=) 2: 6AC62B967FD711EBA2ECB43BC4F9AE02.roa (hash: lf2fZu+kzi68qsiVImQ67iSYP92BmTFnTbXCqKHalTc=) 3: 517F49AA822611EB8990276EC4F9AE02.roa (hash: aKEU87qAcncu/BJ6gK9tToyu/o+XFeqBoVn46I9z2OQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE Validity Not Before: May 19 00:18:05 2024 GMT Not After : May 26 00:18:05 2024 GMT Subject: CN=6649453d-d6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:67:fc:78:af:2a:1a:b7:39:26:63:76:a7: 30:fe:ed:58:18:68:4f:4c:d2:26:c2:d3:1c:0f:fe: 72:ae:bc:ae:cc:c6:c4:5f:b8:aa:aa:25:5e:df:c6: 8a:72:25:31:e7:43:75:b5:49:12:6c:de:99:6f:a7: f1:47:64:ef:d0:9c:4e:f8:0d:22:d0:e8:32:ae:c5: 36:06:96:82:5a:ae:8f:54:94:3d:fa:46:61:68:d9: 8f:d0:ef:02:12:20:94:29:b8:cb:02:32:07:44:51: 35:89:d9:97:ed:ca:cd:b4:f7:91:a1:84:e5:6c:b6: 36:bc:8a:a4:7f:c7:2e:78:4d:ed:a0:b6:59:ce:47: 8f:60:2d:a9:77:d0:b1:ed:06:5b:f4:3b:11:d2:4a: 2a:58:a1:88:81:e3:8d:6f:d9:b3:a8:08:47:57:dc: ba:aa:e8:5c:23:ef:e2:d7:54:44:6f:48:1c:92:2f: 32:ab:3f:f7:06:ab:65:56:f8:b0:3f:01:82:5d:dc: da:7f:66:7c:61:1e:c2:ce:fa:65:65:8d:48:ae:b8: 7a:81:0d:9c:4d:62:91:2c:7c:ab:25:64:d5:16:f6: 0a:bd:57:9a:95:08:6d:aa:37:1e:bf:ae:dc:de:f7: a0:5c:0b:6c:e6:5c:fb:67:13:12:68:19:fd:2c:02: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0C:C6:AD:28:6C:0B:8E:55:D6:92:C1:31:31:BA:9A:0F:42:1A:6D X509v3 Authority Key Identifier: keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:31:a2:f3:fd:ce:c9:02:fe:47:da:80:78:48:42:5f:43:c4: 2c:4b:6b:fb:28:04:78:b7:3a:7d:db:48:80:68:ae:8a:a3:95: e8:b3:de:4a:42:d0:4d:32:29:3e:ff:d0:9a:eb:7a:98:a1:14: bd:ca:58:2e:9a:3a:7a:bf:75:6e:c9:1a:22:bc:85:9d:16:02: e9:bf:3f:11:3e:fe:40:47:4d:8c:db:2d:42:fe:84:f2:6f:6f: 23:94:a2:1e:e8:45:d6:8f:16:a8:bb:7e:1e:04:50:66:65:10: a9:8c:ef:d2:71:cf:43:b5:05:8a:ef:58:13:0f:ea:b5:bf:51: 52:be:a7:99:76:72:4f:5c:3d:eb:f1:b4:88:c3:66:df:0c:81: 72:e6:93:cd:c2:b8:06:c9:aa:c8:16:24:be:8a:71:e0:3c:51: f4:1b:e6:3d:33:05:34:bc:04:96:9f:51:72:1e:88:3c:16:32: 2b:f8:12:47:6a:12:b3:12:7d:f7:0b:f2:07:3f:9f:de:9f:7a: 6e:7f:77:fe:31:86:9a:b6:7b:5a:ae:62:6d:2e:e6:d0:7a:3b: e3:c2:04:5e:27:0e:e3:5a:5f:d3:8b:63:18:3c:cb:dc:3f:4c: 18:ea:43:f3:76:8f:fa:ce:34:7f:cd:5d:7d:31:2f:79:96:9f: f5:41:82:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5OUUxMTAvBgNVBAUTKEFDNTVGQjc1QkZFMzQzRTQ5NDg3RDg1MUMwMTM5QzEz NjRDQUU5Q0UwHhcNMjQwNTE5MDAxODA1WhcNMjQwNTI2MDAxODA1WjAYMRYwFAYD VQQDEw02NjQ5NDUzZC1kNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzJn/HivKhq3OSZjdqcw/u1YGGhPTNImwtMcD/5yrryuzMbEX7iqqiVe38aK ciUx50N1tUkSbN6Zb6fxR2Tv0JxO+A0i0OgyrsU2BpaCWq6PVJQ9+kZhaNmP0O8C EiCUKbjLAjIHRFE1idmX7crNtPeRoYTlbLY2vIqkf8cueE3toLZZzkePYC2pd9Cx 7QZb9DsR0koqWKGIgeONb9mzqAhHV9y6quhcI+/i11REb0gcki8yqz/3BqtlVviw PwGCXdzaf2Z8YR7CzvplZY1Irrh6gQ2cTWKRLHyrJWTVFvYKvVealQhtqjcev67c 3vegXAts5lz7ZxMSaBn9LAJlDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAMxq0o bAuOVdaSwTExupoPQhptMB8GA1UdIwQYMBaAFKxV+3W/40PklIfYUcATnBNkyunO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk5RS8yNTVDRTgzNDdG RDYxMUVCOUZEMTIzM0JDNEY5QUUwMi9yRlg3ZGJfalEtU1VoOWhSd0JPY0UyVEs2 YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWDdkYl9qUS1TVWg5aFJ3Qk9jRTJUSzZjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzk5RS8yNTVDRTgzNDdGRDYxMUVCOUZEMTIzM0JDNEY5QUUwMi9yRlg3ZGJfalEt U1VoOWhSd0JPY0UyVEs2YzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWMaLz/c7JAv5H2oB4SEJfQ8QsS2v7KAR4tzp920iAaK6Ko5Xos95K QtBNMik+/9Ca63qYoRS9ylgumjp6v3VuyRoivIWdFgLpvz8RPv5AR02M2y1C/oTy b28jlKIe6EXWjxaou34eBFBmZRCpjO/Scc9DtQWK71gTD+q1v1FSvqeZdnJPXD3r 8bSIw2bfDIFy5pPNwrgGyarIFiS+inHgPFH0G+Y9MwU0vASWn1FyHog8FjIr+BJH ahKzEn33C/IHP5/en3puf3f+MYaatntarmJtLubQejvjwgReJw7jWl/Ti2MYPMvc P0wY6kPzdo/6zjR/zV19MS95lp/1QYKE -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org