$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json) Hash identifier: haRuoRocPY7nGAIdpmez+zhrFPNq+043bf1H03FQB70= Subject key identifier: 22:8C:76:97:8D:0F:9C:62:D3:D1:ED:70:B6:18:E9:AC:67:CE:95:AE Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft Manifest number: 06C8 Signing time: Sat 18 May 2024 23:01:20 +0000 Manifest this update: Sat 18 May 2024 23:01:19 +0000 Manifest next update: Sat 25 May 2024 23:01:19 +0000 Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: T5pbRJw4lDCnN7eBermLiR0rEqCmPOluNOnW0kc5WgI=) 2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: RHlwfDUxOMQtT5bp81t+fsaYo8+wSgQW+csj9NkKOFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Validity Not Before: May 18 23:01:19 2024 GMT Not After : May 25 23:01:19 2024 GMT Subject: CN=66493340-c881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:3e:e1:82:18:be:53:46:6c:22:9c:88:b5: 16:fc:a1:3e:41:05:7d:2d:dc:26:0c:89:6f:f9:fd: 7d:24:31:4e:50:80:96:b9:e2:a5:53:8b:fd:ac:ae: 02:91:cb:7c:84:4e:b2:49:d3:1c:96:12:86:f5:84: a3:b3:f5:f0:ab:43:6f:5d:07:1f:0d:f8:25:3a:dc: 19:35:b6:b1:a6:37:15:a6:a7:03:a4:6d:89:cd:37: 3f:a4:38:a7:99:74:4a:43:7b:39:ba:de:22:2c:e9: 92:ba:13:23:7f:1b:ba:cc:33:9c:9c:d6:c0:f2:15: 2a:79:e9:07:96:e4:2b:14:a6:b2:5b:4f:54:20:bd: 42:6e:c7:4f:c1:ce:89:d5:1a:df:a0:28:3a:ee:1e: 97:e6:15:7c:a2:11:d6:e2:63:78:f2:04:21:98:aa: 05:58:3d:5d:c8:84:4a:f9:a6:e8:d8:88:e1:7b:ab: d9:be:51:cb:7e:dd:fe:2c:2e:76:8c:ee:01:b6:90: 41:07:db:24:95:db:cb:70:fd:a6:b5:19:07:fb:e7: a9:6d:30:e8:c4:6d:de:ad:ac:98:34:a9:5d:97:43: 64:66:16:e4:f5:ea:a0:6b:8d:78:80:38:78:0c:35: 33:54:e0:f7:26:4c:ef:f7:ac:28:10:0a:12:22:da: 80:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8C:76:97:8D:0F:9C:62:D3:D1:ED:70:B6:18:E9:AC:67:CE:95:AE X509v3 Authority Key Identifier: keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:02:c9:3e:1a:ad:5a:63:b1:99:9e:af:7a:d0:7a:ae:2e:5a: f1:97:8f:b5:94:7a:a6:8d:3b:f0:48:a4:4e:22:bd:46:7f:6c: d2:59:e4:29:50:47:bd:31:65:10:bd:93:ef:61:01:9e:db:66: 69:98:a4:16:d8:87:d3:77:68:a9:d0:a0:0f:2f:7b:b6:ab:57: 7b:96:45:4f:b8:b1:00:cf:6e:43:d5:84:05:5c:72:b1:0f:46: f8:5c:41:17:2b:8d:4f:dc:17:7c:f5:e3:24:7c:ee:21:69:66: 4a:2d:10:cf:8b:05:8e:c8:76:0b:6e:c4:9d:20:33:e2:a1:fc: 79:2f:d8:52:c8:33:05:61:5b:18:11:e9:c2:fb:a1:8a:01:f8: 49:a3:54:56:a5:67:6b:19:87:91:af:5e:01:9d:b7:65:2b:a6: 65:4c:5a:b4:dd:22:a4:3d:47:9d:cc:ee:3c:46:dc:f8:e8:00: 17:2a:dd:9c:21:b1:3d:35:dc:87:89:cd:7c:7f:72:80:2f:3f: f7:99:c7:b9:1e:7c:d0:1b:13:94:42:94:0e:7d:e7:3b:ae:50: be:c0:bf:56:b9:33:cc:43:95:bf:c2:3d:47:c2:35:db:ee:ef: 6b:09:f0:be:c0:85:23:bc:bc:c6:19:56:2b:a4:be:00:24:99: 62:66:8d:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx NTVBOTA3RDgwHhcNMjQwNTE4MjMwMTE5WhcNMjQwNTI1MjMwMTE5WjAYMRYwFAYD VQQDEw02NjQ5MzM0MC1jODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcU+4YIYvlNGbCKciLUW/KE+QQV9LdwmDIlv+f19JDFOUICWueKlU4v9rK4C kct8hE6ySdMclhKG9YSjs/Xwq0NvXQcfDfglOtwZNbaxpjcVpqcDpG2JzTc/pDin mXRKQ3s5ut4iLOmSuhMjfxu6zDOcnNbA8hUqeekHluQrFKayW09UIL1CbsdPwc6J 1RrfoCg67h6X5hV8ohHW4mN48gQhmKoFWD1dyIRK+abo2Ijhe6vZvlHLft3+LC52 jO4BtpBBB9skldvLcP2mtRkH++epbTDoxG3erayYNKldl0NkZhbk9eqga414gDh4 DDUzVOD3Jkzv96woEAoSItqAbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKMdpeN D5xi09HtcLYY6axnzpWuMB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f cUxNZl93cGp5OFVWV3BCOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Ask+Gq1aY7GZnq960HquLlrxl4+1lHqmjTvwSKROIr1Gf2zSWeQp UEe9MWUQvZPvYQGe22ZpmKQW2IfTd2ip0KAPL3u2q1d7lkVPuLEAz25D1YQFXHKx D0b4XEEXK41P3Bd89eMkfO4haWZKLRDPiwWOyHYLbsSdIDPiofx5L9hSyDMFYVsY EenC+6GKAfhJo1RWpWdrGYeRr14BnbdlK6ZlTFq03SKkPUedzO48Rtz46AAXKt2c IbE9NdyHic18f3KALz/3mce5HnzQGxOUQpQOfec7rlC+wL9WuTPMQ5W/wj1HwjXb 7u9rCfC+wIUjvLzGGVYrpL4AJJliZo0I -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org