$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft File: 79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json) Hash identifier: tf0JLnCr4BVv07zf3dCvrx1VvuwpgnmXUODIBNGEc/8= Subject key identifier: E2:32:B0:3C:94:EB:4C:D0:67:7F:84:72:91:AB:5E:EC:93:E7:55:0E Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3 Certificate issuer: /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft Manifest number: 05BD Signing time: Sun 19 May 2024 00:09:03 +0000 Manifest this update: Sun 19 May 2024 00:09:02 +0000 Manifest next update: Sun 26 May 2024 00:09:02 +0000 Files and hashes: 1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: UuJ1ejHL+6YXkTbrNV4/FkEN8OhIV4SCDH5N7owhz6o=) 2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: hP2GY5TbvIePFM2Gruw4AvuPItxUBBDRop1kzhr8RNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3 Validity Not Before: May 19 00:09:02 2024 GMT Not After : May 26 00:09:02 2024 GMT Subject: CN=6649431e-27f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:27:83:ec:d3:bf:f7:a6:e2:9b:38:11:84: e8:cb:e7:ff:21:12:4b:77:e4:01:8e:2e:a6:4c:82: 46:5f:b1:f5:da:50:8c:e5:a0:b4:f0:19:ee:d2:8e: 1d:e9:66:4f:d2:50:f1:7c:df:af:3b:f3:75:09:d4: 2f:0d:93:cf:b6:43:47:4d:c0:6e:a8:23:df:85:c3: a0:a5:51:b3:7e:af:3a:35:c6:b8:c8:f2:17:9d:16: da:75:71:dd:56:7c:17:8d:c7:69:09:a7:b4:58:7f: 5e:03:c3:19:9e:6f:22:ca:21:f9:99:5d:e4:2e:7c: ca:79:aa:11:3e:00:34:ac:cc:d4:b6:c0:ad:24:69: 7c:43:22:08:55:f3:4c:bb:72:69:c2:26:cd:d0:3c: 18:32:ee:22:0b:a0:dd:73:43:b4:f9:51:5f:8d:7d: bf:a2:6c:c6:b7:37:0b:d1:b7:be:f1:8f:fe:ed:c0: e8:70:b2:df:93:0b:8e:8d:6f:4f:fb:10:2e:58:92: 47:de:a2:4f:71:e4:5b:2b:1d:a7:0c:df:9e:86:89: 52:a1:14:ec:cf:7b:da:ae:ad:38:47:10:0c:4f:34: 77:b6:45:d0:af:39:99:a4:34:97:af:9e:5c:97:aa: 60:9c:f3:ac:22:3c:53:f9:de:d9:9d:2c:78:91:d1: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:32:B0:3C:94:EB:4C:D0:67:7F:84:72:91:AB:5E:EC:93:E7:55:0E X509v3 Authority Key Identifier: keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:36:fd:82:c7:fb:ef:0c:1d:00:52:39:56:9a:34:ec:10:c7: 07:53:81:dc:e8:c2:4a:35:ab:e7:83:0e:32:a4:60:08:a2:b4: da:fd:ef:c1:f0:2e:27:2c:35:ac:fe:c5:61:de:6d:75:84:df: e7:ed:8c:78:13:01:e1:fe:f3:ad:09:8f:b8:5f:1c:b3:5e:ac: 5a:7e:eb:7f:1b:3b:79:1d:d1:5d:b2:de:01:7e:73:6e:0f:75: 42:34:4e:e5:77:89:1e:9d:4a:f7:e7:78:cf:77:97:a7:22:d3: 70:38:6f:da:06:46:eb:c6:fa:79:21:97:54:70:e6:40:d8:0b: b2:86:19:c8:b4:c0:c1:10:dd:9e:0b:b7:bd:6e:65:87:6e:e7: c9:3e:85:d2:97:06:be:b4:78:d3:ed:21:02:bd:2f:5c:b0:61: 12:3d:a0:73:92:99:0d:8b:5b:70:2a:50:c2:55:b1:a7:7f:59: de:29:f0:0e:de:8b:11:ed:2b:ea:a3:24:e8:9c:cd:f6:ff:d1: 33:18:47:08:b2:95:d4:6f:65:42:82:3d:5e:2b:ae:fe:0e:4a: 26:c5:8a:00:4a:e0:3c:09:59:2c:b9:52:e4:4f:98:ef:50:ee: 0b:c6:fa:b8:28:8a:62:42:b8:c2:6e:90:03:92:de:69:b6:2c: 22:2a:54:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJFMzcxMTAvBgNVBAUTKEVGRDcwNzY5RjdFODU1RDI1N0EyNEQ2QTFENDkwMzk1 MEFCMzY5RDMwHhcNMjQwNTE5MDAwOTAyWhcNMjQwNTI2MDAwOTAyWjAYMRYwFAYD VQQDEw02NjQ5NDMxZS0yN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzMng+zTv/em4ps4EYToy+f/IRJLd+QBji6mTIJGX7H12lCM5aC08Bnu0o4d 6WZP0lDxfN+vO/N1CdQvDZPPtkNHTcBuqCPfhcOgpVGzfq86Nca4yPIXnRbadXHd VnwXjcdpCae0WH9eA8MZnm8iyiH5mV3kLnzKeaoRPgA0rMzUtsCtJGl8QyIIVfNM u3JpwibN0DwYMu4iC6Ddc0O0+VFfjX2/omzGtzcL0be+8Y/+7cDocLLfkwuOjW9P +xAuWJJH3qJPceRbKx2nDN+eholSoRTsz3varq04RxAMTzR3tkXQrzmZpDSXr55c l6pgnPOsIjxT+d7ZnSx4kdGmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIysDyU 60zQZ3+EcpGrXuyT51UOMB8GA1UdIwQYMBaAFO/XB2n36FXSV6JNah1JA5UKs2nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkUzNy82QTM1RTNEMDc2 NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1ZkSlhvazFxSFVrRGxRcXph ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5Y0hhZmZvVmRKWG9rMXFIVWtEbFFxemFkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkUzNy82QTM1RTNEMDc2NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1Zk SlhvazFxSFVrRGxRcXphZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvNv2Cx/vvDB0AUjlWmjTsEMcHU4Hc6MJKNavngw4ypGAIorTa/e/B 8C4nLDWs/sVh3m11hN/n7Yx4EwHh/vOtCY+4XxyzXqxafut/Gzt5HdFdst4BfnNu D3VCNE7ld4kenUr353jPd5enItNwOG/aBkbrxvp5IZdUcOZA2AuyhhnItMDBEN2e C7e9bmWHbufJPoXSlwa+tHjT7SECvS9csGESPaBzkpkNi1twKlDCVbGnf1neKfAO 3osR7SvqoyTonM32/9EzGEcIspXUb2VCgj1eK67+DkomxYoASuA8CVksuVLkT5jv UO4Lxvq4KIpiQrjCbpADkt5ptiwiKlTZ -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org