$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: 8z7v5uXaS/XtCM0jNrt8RRgwONxilV3FY2AmHRXQ7tc= Subject key identifier: 8C:EC:6E:4B:2C:3D:29:9E:65:DE:E2:39:A2:E5:4E:81:24:35:F3:55 Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 07FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 179C Signing time: Fri 31 May 2024 18:28:42 +0000 Manifest this update: Fri 31 May 2024 18:28:42 +0000 Manifest next update: Fri 07 Jun 2024 18:28:42 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: aUMBSo+NMHa9NY/J2CjGKcHgja7o3G83ZSChIoHIVjo=) 2: 2FF45F2A3A7E11EDA75E2E49C4F9AE02.roa (hash: Cfo5eHFqFHymPEFxBsPivlJKda+i/j/nkyQNRr+wROs=) 3: 6308A9A8618E11EC80A05E34C4F9AE02.roa (hash: eXmR8bVyYJl7/HZGI5zaP9+gG9XOzJWc+DWEUi3P0fc=) 4: EE1D8CD2458D11ED9EA9AB43C4F9AE02.roa (hash: TmU7Xz6MFoTHxH4C+3H/MaWLM4eqH+ViLbFJPll1evg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: May 31 18:28:42 2024 GMT Not After : Jun 7 18:28:42 2024 GMT Subject: CN=665a16da-d375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:26:e4:9f:d9:a2:50:69:ac:79:a6:d0:75: 90:09:38:f3:26:98:a3:d0:fb:f1:a8:fa:6c:ad:92: 80:f9:50:7e:28:1b:ec:a7:74:3b:bb:04:14:63:b6: 1f:83:fe:bd:6b:11:61:da:9b:39:64:8c:15:6f:4a: 81:30:06:e2:6f:af:71:05:b7:67:74:cb:d0:64:8f: 45:85:40:4f:81:34:c0:58:1a:2b:d2:c1:f3:8d:49: f0:04:77:64:9f:54:28:a6:a2:8d:e2:3f:d4:6c:33: e2:76:14:03:2b:26:ec:24:ab:cb:f6:36:b8:06:96: 05:a6:5b:9a:26:eb:4f:ac:97:3c:1a:1c:46:94:03: 06:68:29:9b:c7:29:55:89:96:23:d2:20:a0:41:df: ad:d1:34:ff:42:76:61:db:52:d5:09:18:09:e1:13: 7f:fd:94:bb:3b:85:ef:24:56:10:30:72:51:f5:f8: 60:67:fb:ae:b7:44:9d:69:9f:a2:8a:42:68:57:11: 88:32:81:66:ba:24:45:7c:f7:70:63:76:d1:20:c2: a9:53:de:d6:bd:ae:c0:24:45:53:e6:21:6c:98:01: 15:92:eb:12:68:0e:30:b1:58:81:94:07:7d:64:63: d1:dd:2e:a2:96:1d:7c:fa:4b:55:ac:8f:ae:71:68: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EC:6E:4B:2C:3D:29:9E:65:DE:E2:39:A2:E5:4E:81:24:35:F3:55 X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:11:5f:c6:03:31:10:60:96:af:c1:2d:b8:94:13:c1:1d:3a: 32:50:b4:70:5e:64:9f:27:4a:ce:b4:91:33:83:75:aa:04:21: 94:18:ae:b3:75:af:30:47:67:13:78:de:53:14:9f:71:17:e6: c1:3b:3e:ed:99:41:10:4b:02:64:e6:4f:93:1b:dc:6c:95:f0: 19:e5:72:2d:d7:1a:58:a1:d1:49:30:5e:05:08:2e:a2:26:4d: e9:2f:88:f1:db:d9:c8:04:61:7a:71:15:da:73:d0:d4:4a:b0: 42:be:48:7e:35:d2:ad:49:d5:61:e0:17:8f:d6:f6:eb:51:6f: 6a:62:8b:9f:dc:68:b6:ce:11:0a:7e:71:00:43:11:ed:49:58: 30:61:75:0e:df:cb:31:bc:34:ab:81:b4:66:d4:27:da:cb:79: d0:6e:69:62:90:22:dd:d7:7d:6a:0d:0f:a1:45:11:b7:83:d4: de:08:94:66:0c:82:56:26:75:8b:aa:17:57:0e:b0:26:34:1f: bd:ad:ce:1e:ec:fb:ad:90:95:6d:aa:18:dc:82:10:54:ad:2e: 58:5d:14:d3:e2:48:22:3d:0c:b6:0d:ff:66:18:84:2e:ab:bb: cc:31:8e:af:da:24:95:3b:57:4e:05:91:42:eb:ce:ad:f4:18: e5:42:6f:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjQwNTMxMTgyODQyWhcNMjQwNjA3MTgyODQyWjAYMRYwFAYD VQQDEw02NjVhMTZkYS1kMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA448m5J/ZolBprHmm0HWQCTjzJpij0PvxqPpsrZKA+VB+KBvsp3Q7uwQUY7Yf g/69axFh2ps5ZIwVb0qBMAbib69xBbdndMvQZI9FhUBPgTTAWBor0sHzjUnwBHdk n1QopqKN4j/UbDPidhQDKybsJKvL9ja4BpYFpluaJutPrJc8GhxGlAMGaCmbxylV iZYj0iCgQd+t0TT/QnZh21LVCRgJ4RN//ZS7O4XvJFYQMHJR9fhgZ/uut0SdaZ+i ikJoVxGIMoFmuiRFfPdwY3bRIMKpU97Wva7AJEVT5iFsmAEVkusSaA4wsViBlAd9 ZGPR3S6ilh18+ktVrI+ucWhbQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzsbkss PSmeZd7iOaLlToEkNfNVMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLEV/GAzEQYJavwS24lBPBHToyULRwXmSfJ0rOtJEzg3WqBCGUGK6z da8wR2cTeN5TFJ9xF+bBOz7tmUEQSwJk5k+TG9xslfAZ5XIt1xpYodFJMF4FCC6i Jk3pL4jx29nIBGF6cRXac9DUSrBCvkh+NdKtSdVh4BeP1vbrUW9qYouf3Gi2zhEK fnEAQxHtSVgwYXUO38sxvDSrgbRm1Cfay3nQbmlikCLd131qDQ+hRRG3g9TeCJRm DIJWJnWLqhdXDrAmNB+9rc4e7PutkJVtqhjcghBUrS5YXRTT4kgiPQy2Df9mGIQu q7vMMY6v2iSVO1dOBZFC686t9BjlQm+3 -----END CERTIFICATE-----Generated at Fri May 31 19:47:52 2024 by rpki-client on console-fra.rpki-client.org