$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: UccEmqxTc04sy2hq9drphvvtcP/NDI4J4IM9OR+G6SM= Subject key identifier: AD:99:1C:20:C8:10:F6:E2:81:F7:99:C7:36:EC:61:C6:2A:29:B4:25 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 030F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 0309 Signing time: Mon 27 May 2024 03:17:08 +0000 Manifest this update: Mon 27 May 2024 03:17:07 +0000 Manifest next update: Mon 03 Jun 2024 03:17:07 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: Cd5T+YO+5boM4mpedOWXJU/jj2ghaiG3NxMKnXqerRU=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: erdVNwH0UzA72sptu4dShBZKcXvsv4fNLD5eVyRL2JU=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: 1MM8LiFKd98y99R7RjtnSTphmbUq66PI+63QYocbpck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: May 27 03:17:07 2024 GMT Not After : Jun 3 03:17:07 2024 GMT Subject: CN=6653fb34-db28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:a8:96:21:88:a3:4c:e4:8e:bd:d9:b9:53: 46:0d:f2:a1:17:7b:32:82:69:cc:61:93:15:5a:3f: 15:e9:9c:4d:36:0d:4a:25:d5:48:1d:12:29:d5:bf: 0a:56:7c:ff:90:73:7b:a7:6f:9c:83:63:01:f8:5a: 6a:f1:c1:c2:3d:61:c2:5d:5e:70:8f:b4:c9:ae:10: 23:6c:7c:38:3d:4d:d7:07:7f:31:cc:da:75:41:8c: 0e:5b:de:76:e6:09:0a:e5:d9:1d:8e:6a:a5:a1:33: 96:c7:27:fa:3a:d3:a6:b7:26:f4:db:df:9c:a4:23: a0:d5:98:f6:42:02:9b:a7:74:7b:c5:50:1c:6f:a2: 01:ca:17:96:28:cf:db:d5:ee:ca:07:64:3d:34:3d: ff:ca:53:57:af:fd:5d:cf:c6:79:69:b5:de:4d:9c: 6f:a2:12:3a:51:ec:6e:33:86:b1:56:fa:d4:b4:66: b9:1f:50:ca:12:fb:b7:ec:39:d6:53:07:8f:27:a9: fb:91:9c:9a:ae:c7:88:b0:83:e0:8b:38:13:d4:f8: df:7d:0a:e2:9f:62:a1:65:c5:e3:4d:d7:f4:bb:75: 4c:43:c7:ac:11:66:78:f2:66:32:9c:8e:7d:eb:03: 9a:e0:5f:dd:f6:53:8e:d0:ab:f0:7e:d4:a7:cc:b5: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:99:1C:20:C8:10:F6:E2:81:F7:99:C7:36:EC:61:C6:2A:29:B4:25 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:0f:83:67:4b:68:f8:e3:3f:b6:80:54:60:0a:1c:de:f7: 46:5a:22:ea:23:60:07:61:59:ab:bc:a0:83:69:b5:24:1b:b6: 70:38:a8:41:90:7f:8f:49:a3:ff:b3:12:af:bc:57:83:26:a4: 22:b8:eb:cf:75:30:ce:ac:87:6e:32:9c:1e:a6:c7:13:32:43: d4:6f:6f:70:95:99:72:29:21:a4:7e:da:d9:b9:39:65:37:d7: 6d:53:77:36:ca:c7:31:51:8c:f6:c7:c7:f8:72:dc:95:f0:8d: 96:59:57:7a:66:73:d5:43:b0:89:6d:2d:1c:30:b1:e0:4c:3f: f2:3b:72:0a:6f:eb:f5:9f:c4:5d:13:09:e0:7e:84:a9:a7:8e: 41:0d:23:8c:0a:d5:3b:15:77:ba:04:ae:19:48:3f:2e:1d:c3: 70:d1:45:b7:87:9b:0e:31:15:84:95:c3:6f:e4:a7:69:b9:df: 5e:83:ec:ec:23:40:1d:ba:d6:ea:55:bc:87:f8:16:53:b0:b6: de:12:b4:bd:d5:63:4f:7d:93:54:54:da:b3:42:62:82:b5:25: 39:d3:75:59:2c:5b:9e:87:54:f0:fa:ab:ba:9d:9a:b0:09:01: a8:f1:37:1a:5b:a8:95:7e:a3:15:31:74:fd:c0:f2:d3:ea:6d: 2e:70:b2:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjQwNTI3MDMxNzA3WhcNMjQwNjAzMDMxNzA3WjAYMRYwFAYD VQQDEw02NjUzZmIzNC1kYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAre+oliGIo0zkjr3ZuVNGDfKhF3sygmnMYZMVWj8V6ZxNNg1KJdVIHRIp1b8K Vnz/kHN7p2+cg2MB+Fpq8cHCPWHCXV5wj7TJrhAjbHw4PU3XB38xzNp1QYwOW952 5gkK5dkdjmqloTOWxyf6OtOmtyb029+cpCOg1Zj2QgKbp3R7xVAcb6IByheWKM/b 1e7KB2Q9ND3/ylNXr/1dz8Z5abXeTZxvohI6UexuM4axVvrUtGa5H1DKEvu37DnW UwePJ6n7kZyarseIsIPgizgT1PjffQrin2KhZcXjTdf0u3VMQ8esEWZ48mYynI59 6wOa4F/d9lOO0KvwftSnzLWHNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2ZHCDI EPbigfeZxzbsYcYqKbQlMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2g+DZ0to+OM/toBUYAoc3vdGWiLqI2AHYVmrvKCDabUkG7ZwOKhB kH+PSaP/sxKvvFeDJqQiuOvPdTDOrIduMpwepscTMkPUb29wlZlyKSGkftrZuTll N9dtU3c2yscxUYz2x8f4ctyV8I2WWVd6ZnPVQ7CJbS0cMLHgTD/yO3IKb+v1n8Rd EwngfoSpp45BDSOMCtU7FXe6BK4ZSD8uHcNw0UW3h5sOMRWElcNv5Kdpud9eg+zs I0AdutbqVbyH+BZTsLbeErS91WNPfZNUVNqzQmKCtSU503VZLFueh1Tw+qu6nZqw CQGo8TcaW6iVfqMVMXT9wPLT6m0ucLLo -----END CERTIFICATE-----Generated at Mon May 27 04:53:43 2024 by rpki-client on console-fra.rpki-client.org