$ rpki-client -vvf rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft File: StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft (raw, json) Hash identifier: Fod+byc9w7n6/SwTbqRg5U8lOl9rQidY3nbL287mDBg= Subject key identifier: 46:D5:BB:F1:23:12:1A:73:DE:F2:43:8F:92:36:92:76:DB:58:52:F1 Authority key identifier: 4A:D6:6F:8D:FC:DE:A1:7F:25:67:CA:38:14:54:20:5F:38:06:8F:60 Certificate issuer: /CN=A91E756E/serialNumber=4AD66F8DFCDEA17F2567CA381454205F38068F60 Certificate serial: 0618 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft Manifest number: 0613 Signing time: Sat 18 May 2024 23:51:00 +0000 Manifest this update: Sat 18 May 2024 23:50:59 +0000 Manifest next update: Sat 25 May 2024 23:50:59 +0000 Files and hashes: 1: StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl (hash: tcdWeDUVZKDMyhOv8/5od7bhSe+EUfexpsfNOV8zEno=) 2: F515761C554311EBAAB65382C4F9AE02.roa (hash: Lo7ST7msAw+VbXSq/mG+XAyKJromzHBAr6bVZJIuUi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1560 (0x618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E756E/serialNumber=4AD66F8DFCDEA17F2567CA381454205F38068F60 Validity Not Before: May 18 23:50:59 2024 GMT Not After : May 25 23:50:59 2024 GMT Subject: CN=66493ee3-b39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:58:b7:d2:c6:d5:80:91:2e:9b:0a:ee:c1: e6:97:5d:4c:9f:67:d7:d3:8c:01:a9:52:89:c7:a3: 34:70:9f:f7:b3:89:a8:c3:f5:6b:5b:b8:c5:a5:f6: b6:fc:ad:53:8f:5c:ec:1c:3e:4e:d6:de:28:d0:f1: 09:9c:3b:e3:85:ef:34:fb:f6:7e:c8:09:aa:34:5c: 02:f5:f0:a2:de:27:e0:28:99:54:7c:c2:34:68:ea: cf:64:6c:ab:b0:4d:c1:21:37:30:bc:f4:97:2d:b1: e2:f9:99:3b:4f:ba:d5:91:a8:11:e1:79:b2:b4:24: da:d0:89:a3:36:46:f3:ba:2c:5a:36:10:dd:01:f1: c8:54:d8:21:41:9d:a9:67:1d:24:cb:7e:49:7b:39: ee:56:e0:18:a5:6b:99:de:20:a7:3d:1d:cd:a0:8d: 69:11:62:12:d1:19:34:4e:bd:72:9a:d7:59:38:d0: c5:92:61:53:cb:6f:77:87:d2:61:b0:4e:78:ba:9b: 8a:76:12:55:f0:a7:20:dd:4d:d8:65:4b:5f:e2:2d: a1:ca:0c:ec:25:2c:a8:16:51:cf:c4:ec:4d:cd:4d: ae:0a:10:c4:c4:23:1f:89:a2:53:4c:a9:da:96:ed: 2e:ca:f5:50:f2:1c:23:5e:d6:64:46:ed:92:d7:37: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D5:BB:F1:23:12:1A:73:DE:F2:43:8F:92:36:92:76:DB:58:52:F1 X509v3 Authority Key Identifier: keyid:4A:D6:6F:8D:FC:DE:A1:7F:25:67:CA:38:14:54:20:5F:38:06:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:97:47:ac:45:1f:6d:5c:d9:89:14:8c:60:bf:df:14:41:af: 9c:e7:c7:8a:9d:86:7d:c2:1a:6c:23:03:c1:34:59:78:4b:87: 8a:59:cd:06:93:64:fd:c1:98:c1:5b:dd:2e:93:23:95:57:a1: 11:f0:e9:db:e6:26:fd:83:c0:87:35:5b:76:90:ab:3d:e0:40: 00:ba:23:47:40:e9:51:0e:1f:4f:cf:3a:1f:2c:37:56:11:05: 00:c1:a5:d4:4f:f4:0c:ad:3c:d0:cc:86:63:24:25:ce:62:aa: 2c:a5:3d:cc:64:94:d2:e8:7b:3f:16:53:52:39:66:91:27:d3: 12:0b:c9:28:67:e2:1e:7b:df:77:4e:02:96:67:09:97:9c:5e: 5c:ea:07:76:cd:c8:b6:eb:4c:6c:3b:86:33:c3:c5:98:cb:c7: ca:48:1f:4f:bc:0e:f6:2b:c3:16:67:6d:af:85:97:f6:75:9b: 4a:18:42:12:d5:12:08:2d:ed:ca:0f:56:53:42:11:a5:03:34: 3a:a0:a8:4e:5e:d3:b0:68:88:0b:50:58:11:e3:ae:81:5c:63: 43:5b:25:8c:69:a1:e8:cf:a0:d5:8e:23:54:a3:d0:89:34:6f: a6:e3:f5:02:de:24:ae:69:44:61:bf:86:41:76:2f:38:ad:c6: 74:c0:83:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NkUxMTAvBgNVBAUTKDRBRDY2RjhERkNERUExN0YyNTY3Q0EzODE0NTQyMDVG MzgwNjhGNjAwHhcNMjQwNTE4MjM1MDU5WhcNMjQwNTI1MjM1MDU5WjAYMRYwFAYD VQQDEw02NjQ5M2VlMy1iMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXJYt9LG1YCRLpsK7sHml11Mn2fX04wBqVKJx6M0cJ/3s4mow/VrW7jFpfa2 /K1Tj1zsHD5O1t4o0PEJnDvjhe80+/Z+yAmqNFwC9fCi3ifgKJlUfMI0aOrPZGyr sE3BITcwvPSXLbHi+Zk7T7rVkagR4XmytCTa0ImjNkbzuixaNhDdAfHIVNghQZ2p Zx0ky35JeznuVuAYpWuZ3iCnPR3NoI1pEWIS0Rk0Tr1ymtdZONDFkmFTy293h9Jh sE54upuKdhJV8Kcg3U3YZUtf4i2hygzsJSyoFlHPxOxNzU2uChDExCMfiaJTTKna lu0uyvVQ8hwjXtZkRu2S1zce8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbVu/Ej Ehpz3vJDj5I2knbbWFLxMB8GA1UdIwQYMBaAFErWb4383qF/JWfKOBRUIF84Bo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2RS9BRDg2Q0FBQTU1 NDExMUVCODY0Q0I4N0RDNEY5QUUwMi9TdFp2amZ6ZW9YOGxaOG80RkZRZ1h6Z0dq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N0WnZqZnplb1g4bFo4bzRGRlFnWHpnR2oyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzU2RS9BRDg2Q0FBQTU1NDExMUVCODY0Q0I4N0RDNEY5QUUwMi9TdFp2amZ6ZW9Y OGxaOG80RkZRZ1h6Z0dqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6l0esRR9tXNmJFIxgv98UQa+c58eKnYZ9whpsIwPBNFl4S4eKWc0G k2T9wZjBW90ukyOVV6ER8Onb5ib9g8CHNVt2kKs94EAAuiNHQOlRDh9PzzofLDdW EQUAwaXUT/QMrTzQzIZjJCXOYqospT3MZJTS6Hs/FlNSOWaRJ9MSC8koZ+Iee993 TgKWZwmXnF5c6gd2zci260xsO4Yzw8WYy8fKSB9PvA72K8MWZ22vhZf2dZtKGEIS 1RIILe3KD1ZTQhGlAzQ6oKhOXtOwaIgLUFgR466BXGNDWyWMaaHoz6DVjiNUo9CJ NG+m4/UC3iSuaURhv4ZBdi84rcZ0wIOL -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org