$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: zLxsgY5k+NDmp1Dm/FGBtKCyMCB9jFOaUy5bPHPjel0= Subject key identifier: F7:8B:F3:8D:53:78:2C:01:FA:46:65:19:FF:24:A6:7B:43:C8:AA:06 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 33E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 33D1 Signing time: Sat 18 May 2024 15:31:28 +0000 Manifest this update: Sat 18 May 2024 15:31:28 +0000 Manifest next update: Sat 25 May 2024 15:31:28 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: JToO5HqHRfJNJ7N5eCBZnECwOpX++f2jRa6MajFTOIk=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: Uiye7cqZlanXJWgI4AXX+yyZ4vhsuuEZPw69WEAiEn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13284 (0x33e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: May 18 15:31:28 2024 GMT Not After : May 25 15:31:28 2024 GMT Subject: CN=6648c9d0-2eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:83:38:c1:87:9b:11:7d:b9:70:0f:a3:46: 3e:f9:39:6c:f2:4e:22:c6:f5:75:b6:9a:a0:5e:d4: 51:ed:c9:c3:4d:6d:b6:c5:91:2d:86:c1:e7:fd:9b: 9b:d7:53:ed:db:3e:c3:03:4c:d5:ef:a5:51:68:b3: a4:05:e3:25:44:38:38:a1:29:fd:fa:54:9a:67:4f: f9:9a:95:a6:45:b8:bc:13:18:0c:05:37:da:49:b0: 7e:e3:af:6f:0b:fd:f1:2e:c9:4b:b5:ab:fb:3f:c5: a2:92:e9:11:4e:33:e3:22:64:1b:d8:7d:94:53:f3: 69:c6:54:34:ee:6f:c2:d7:91:88:49:44:ae:aa:5a: b4:f4:74:8d:9e:85:07:ab:55:42:f9:85:43:49:fa: cb:6b:fe:1f:4f:ae:3e:7b:af:08:69:a1:2e:71:29: 7b:d2:cc:e0:15:f4:3f:98:b7:fc:b3:6c:a3:2a:32: c3:c7:d1:61:a1:87:15:b4:72:cf:cd:da:8b:9b:f2: 3f:3d:ca:8c:38:8b:1a:63:94:c4:d1:08:3d:b2:b4: db:75:d4:00:11:6c:67:b0:3b:88:38:50:94:24:02: 90:41:f2:72:97:b8:a5:fa:b5:db:35:41:9e:14:5b: 31:30:ab:f1:99:f6:3d:8f:90:73:4b:aa:00:06:94: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8B:F3:8D:53:78:2C:01:FA:46:65:19:FF:24:A6:7B:43:C8:AA:06 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:bb:43:a1:54:2d:30:03:ee:39:7e:8c:25:4f:48:a6:e2:7f: 22:f4:43:7d:06:fc:61:8f:01:64:27:be:20:97:0a:22:2d:60: a8:ef:aa:7b:c8:4e:6e:64:1e:2a:88:62:64:a5:54:c7:1f:87: 70:62:e7:1c:f2:87:48:59:24:b8:11:03:d3:a8:90:15:8c:43: 2e:56:23:51:73:5d:ac:9f:77:e2:11:9e:fa:d9:fa:3a:06:59: a3:3d:73:00:36:79:57:7c:70:44:c5:be:c0:3c:28:87:9b:88: 59:11:c6:9a:f2:8d:6d:1b:46:54:14:a7:4a:fa:7e:ba:1f:df: 6c:29:36:23:5e:0f:ec:50:7c:c3:59:0e:ec:a1:59:90:6e:a9: a7:5e:a7:5a:a8:71:73:36:40:87:35:61:93:6f:b2:68:1c:92: f8:09:15:fd:d1:e8:56:5b:7f:67:c3:bd:e5:58:20:5f:e7:ad: e7:75:a0:79:eb:2e:f4:85:a9:1a:b9:0d:4b:0b:37:80:79:45: ea:ee:fb:24:12:f2:15:f1:bb:84:45:7e:d8:2d:9a:d1:b9:07: f9:66:d9:2f:20:8f:5a:00:c1:f2:6a:2a:63:da:f2:db:4b:45: 03:4a:0f:36:b2:08:1f:a1:12:2a:28:36:b3:6d:9e:d7:71:0e: 79:e6:85:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjQwNTE4MTUzMTI4WhcNMjQwNTI1MTUzMTI4WjAYMRYwFAYD VQQDEw02NjQ4YzlkMC0yZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZWDOMGHmxF9uXAPo0Y++Tls8k4ixvV1tpqgXtRR7cnDTW22xZEthsHn/Zub 11Pt2z7DA0zV76VRaLOkBeMlRDg4oSn9+lSaZ0/5mpWmRbi8ExgMBTfaSbB+469v C/3xLslLtav7P8WikukRTjPjImQb2H2UU/NpxlQ07m/C15GISUSuqlq09HSNnoUH q1VC+YVDSfrLa/4fT64+e68IaaEucSl70szgFfQ/mLf8s2yjKjLDx9FhoYcVtHLP zdqLm/I/PcqMOIsaY5TE0Qg9srTbddQAEWxnsDuIOFCUJAKQQfJyl7il+rXbNUGe FFsxMKvxmfY9j5BzS6oABpTxwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeL841T eCwB+kZlGf8kpntDyKoGMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5u0OhVC0wA+45fowlT0im4n8i9EN9BvxhjwFkJ74glwoiLWCo76p7 yE5uZB4qiGJkpVTHH4dwYucc8odIWSS4EQPTqJAVjEMuViNRc12sn3fiEZ762fo6 BlmjPXMANnlXfHBExb7APCiHm4hZEcaa8o1tG0ZUFKdK+n66H99sKTYjXg/sUHzD WQ7soVmQbqmnXqdaqHFzNkCHNWGTb7JoHJL4CRX90ehWW39nw73lWCBf563ndaB5 6y70hakauQ1LCzeAeUXq7vskEvIV8buERX7YLZrRuQf5ZtkvII9aAMHyaipj2vLb S0UDSg82sggfoRIqKDazbZ7XcQ555oW5 -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org