$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: PtspZ8wQNSQiGnIKmZ77BrxhIvQRiRY3y+ha4AqQDok= Subject key identifier: CA:DE:3E:D1:B8:E9:2A:65:FE:9C:08:0C:AA:A5:61:CA:25:4C:A2:B4 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 04E2 Signing time: Fri 17 May 2024 01:29:57 +0000 Manifest this update: Fri 17 May 2024 01:29:56 +0000 Manifest next update: Fri 24 May 2024 01:29:56 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: Fy3HVnesc8fOCqB6VlCKlEDlHL4jvcppMJby1i03R+A=) 2: 73E21BB0FB3D11EEB154B874C4F9AE02.roa (hash: L2lFX/TKaoo1uEZIGBl9DhdWD1gxmTpZRKuATSCNm/M=) 3: D0E99D44FBF411EE80C07F6BC4F9AE02.roa (hash: LzHRBFwHNMqoyqX8EEjV5F4NR+GXJ46NKhcjvslEZzI=) 4: 68F716A2BDD911EE9CAAD86BC4F9AE02.roa (hash: kF1XvzuGHjvmT5QIZi2JWJHOyUqpHVTvvJ/VrRzmG90=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: FU4aJFxj8CoUjnkiDQB/hpo0mTt04SzDs8mb97d7XQI=) 6: D05B0C5AFBF411EE80C07F6BC4F9AE02.roa (hash: eoQQcNEMzAZDQPI33PYM4D3oxb13IG85U6gKb4hywOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: May 17 01:29:56 2024 GMT Not After : May 24 01:29:56 2024 GMT Subject: CN=6646b314-2149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:d9:75:5c:57:ca:c9:46:65:f2:2e:f5:02: c5:e5:0a:34:52:ad:1c:12:fb:26:38:34:4d:1e:a9: 96:d4:ab:01:77:01:70:fa:05:04:32:c8:b6:63:39: f0:9b:d8:2c:91:99:48:8f:31:5e:9f:d3:51:a4:66: b6:63:a4:a7:98:87:4b:5d:b0:6e:1a:80:fe:10:c8: ec:1e:bd:55:ce:70:6b:f3:92:2e:af:f8:b0:36:75: 23:f2:8f:4e:91:e5:d2:55:cb:20:65:3e:ca:fc:15: 92:e4:83:4c:09:a9:97:c1:f0:a7:9e:00:c9:43:b7: 54:d3:e2:33:77:fb:3b:2a:67:84:34:2d:63:ea:4a: 54:43:ca:16:22:a5:18:27:c1:97:4b:7d:79:bb:a8: 70:aa:95:7c:ca:8f:c6:8d:52:d7:4d:ab:bb:f9:1a: 7f:40:af:73:1a:1d:9f:54:07:ec:12:19:3b:dd:f7: db:18:db:35:5e:22:22:9b:1d:ca:61:a6:23:f5:03: b4:12:38:e9:14:26:e6:d9:cd:e2:86:4b:48:17:fe: a5:b4:fc:84:08:9a:7d:38:db:39:97:2e:4f:55:77: b7:61:01:be:10:1e:fe:72:3f:83:5a:2d:74:95:88: 66:00:2c:c1:6a:76:1f:53:dc:59:b0:5b:31:87:d6: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:3E:D1:B8:E9:2A:65:FE:9C:08:0C:AA:A5:61:CA:25:4C:A2:B4 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:12:e1:4c:2f:8e:5d:44:39:77:c3:05:27:14:a0:9f:14:19: 90:4d:b8:63:5c:1c:10:f5:97:d8:41:1f:17:3e:ef:79:b9:6a: 84:4e:06:da:b6:29:30:90:35:c6:d1:2b:71:4b:ef:8a:99:e8: 46:a6:0a:4d:13:ae:25:6c:4c:f5:b8:46:55:a4:9c:98:6b:cd: 42:38:d5:87:e3:67:ee:e5:16:ce:c1:c1:9e:9f:9b:0a:d8:2c: dd:0e:56:5b:81:15:a9:dd:49:d2:62:61:0c:88:3a:be:88:68: 54:9a:a3:01:33:5e:83:10:4b:b0:81:c8:93:5b:0e:05:66:61: 25:c6:db:b9:6c:95:23:58:ce:00:5e:7c:56:a9:c2:cb:61:c4: 44:b4:88:1b:f0:a7:53:d9:90:a8:d5:86:38:ea:9a:a6:cb:fb: 42:7c:aa:f8:b5:ec:dc:68:74:7e:97:9b:07:ff:c5:a4:da:61: b4:22:6d:1b:c3:f1:c6:05:3c:27:6a:1c:3f:e3:df:60:ac:0b: ec:48:8e:93:73:96:9b:08:d3:6b:e1:90:81:dc:69:e1:85:c1: e9:05:85:54:8f:dd:47:0b:aa:47:03:6c:0f:21:6a:e6:62:ea: dd:10:f4:5d:1d:82:f8:b2:9a:5c:a6:40:84:44:d4:74:50:5e: f2:bf:43:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjQwNTE3MDEyOTU2WhcNMjQwNTI0MDEyOTU2WjAYMRYwFAYD VQQDEw02NjQ2YjMxNC0yMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SzZdVxXyslGZfIu9QLF5Qo0Uq0cEvsmODRNHqmW1KsBdwFw+gUEMsi2Yznw m9gskZlIjzFen9NRpGa2Y6SnmIdLXbBuGoD+EMjsHr1VznBr85Iur/iwNnUj8o9O keXSVcsgZT7K/BWS5INMCamXwfCnngDJQ7dU0+Izd/s7KmeENC1j6kpUQ8oWIqUY J8GXS315u6hwqpV8yo/GjVLXTau7+Rp/QK9zGh2fVAfsEhk73ffbGNs1XiIimx3K YaYj9QO0EjjpFCbm2c3ihktIF/6ltPyECJp9ONs5ly5PVXe3YQG+EB7+cj+DWi10 lYhmACzBanYfU9xZsFsxh9YnewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrePtG4 6Spl/pwIDKqlYcolTKK0MB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoEuFML45dRDl3wwUnFKCfFBmQTbhjXBwQ9ZfYQR8XPu95uWqETgba tikwkDXG0StxS++KmehGpgpNE64lbEz1uEZVpJyYa81CONWH42fu5RbOwcGen5sK 2CzdDlZbgRWp3UnSYmEMiDq+iGhUmqMBM16DEEuwgciTWw4FZmElxtu5bJUjWM4A XnxWqcLLYcREtIgb8KdT2ZCo1YY46pqmy/tCfKr4tezcaHR+l5sH/8Wk2mG0Im0b w/HGBTwnahw/499grAvsSI6Tc5abCNNr4ZCB3GnhhcHpBYVUj91HC6pHA2wPIWrm YurdEPRdHYL4sppcpkCERNR0UF7yv0Nc -----END CERTIFICATE-----Generated at Fri May 17 02:38:40 2024 by rpki-client on console-fra.rpki-client.org