$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft File: F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json) Hash identifier: C4t5B9xOVZncHnBtLSybdWlTtTaSm/deliaE7FB9WW0= Subject key identifier: 38:0F:88:94:2F:AC:9A:39:FB:61:61:21:A3:B0:F3:1D:6D:CC:C5:85 Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2 Certificate issuer: /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft Manifest number: 032A Signing time: Sat 01 Jun 2024 04:08:37 +0000 Manifest this update: Sat 01 Jun 2024 04:08:36 +0000 Manifest next update: Sat 08 Jun 2024 04:08:36 +0000 Files and hashes: 1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: VG/WsgzX9s0k9ydwHdPZCUnd0T+zaH8xoJKoniG+TF8=) 2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: Uq0y6YVjnczZgmf/DpzS9jV0pq/xNI52A3uzE+KCUEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2 Validity Not Before: Jun 1 04:08:36 2024 GMT Not After : Jun 8 04:08:36 2024 GMT Subject: CN=665a9ec5-9975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:21:b5:7f:bd:bc:22:21:9b:78:61:ac:8e:8d: df:28:e4:b9:cf:a6:3f:49:d4:06:04:97:e6:b9:3b: f8:0a:7b:46:c9:75:d5:97:29:7f:a2:c5:97:41:c1: 4f:39:89:01:03:14:cb:d1:4d:6e:30:93:8a:20:c8: e8:c9:3d:2c:55:d1:10:4e:5a:7e:8c:d4:d6:c2:4b: d5:c8:51:bf:3e:19:b6:6e:34:41:9d:90:99:17:8c: 1d:c1:99:80:a5:3d:80:a6:ee:94:df:02:62:f3:d9: 92:f3:bf:99:69:73:ec:4d:f6:34:8a:ed:07:2a:48: 65:2d:a7:f7:79:17:2a:93:88:1f:63:4d:a5:5f:cd: 23:1b:b1:c2:c8:98:97:b8:e1:cd:2b:ac:0c:6d:93: a2:44:09:1d:88:0a:d5:f2:e4:90:00:4b:7b:8f:e8: de:59:99:7b:84:43:05:ad:bf:b0:76:51:02:13:cf: be:3c:c1:39:a3:37:09:b7:8f:e6:10:9b:75:42:71: 59:66:8d:0c:6a:2e:ae:05:83:d6:99:a6:e4:40:46: 8a:a4:f9:bf:20:2a:2a:3d:bb:ad:d7:89:d9:ae:e2: c9:08:37:3a:64:78:06:da:3c:ab:57:ea:46:01:05: 35:45:aa:d4:4f:69:d2:82:ac:41:65:90:84:eb:27: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0F:88:94:2F:AC:9A:39:FB:61:61:21:A3:B0:F3:1D:6D:CC:C5:85 X509v3 Authority Key Identifier: keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:cb:81:ca:2a:81:15:bb:ae:d1:a7:91:12:38:18:04:3b:8f: 2c:a3:39:a6:9c:9a:b7:41:74:1e:c6:42:f9:f0:b5:b2:2a:77: c2:56:ee:98:18:74:f6:94:ab:b2:6e:5b:2d:55:ce:f8:43:64: 35:64:db:a6:83:88:d0:c0:8b:6d:22:0e:8e:7c:34:8e:6e:7d: 1f:3a:e6:45:74:7c:0a:09:c7:eb:24:4b:66:df:58:4f:85:70: eb:4f:d5:72:3c:71:b3:66:fb:44:ac:56:02:be:4c:ad:28:a3: 4b:78:ab:73:c7:85:de:72:7e:fc:7b:6a:95:00:1d:8c:fe:3e: ae:92:bc:5f:2e:e7:87:21:be:c1:d7:58:88:8b:ec:ba:0d:a2: eb:6e:7e:d0:ef:b8:f4:e2:55:29:0d:3b:17:89:ff:00:24:52: 77:a1:6c:7b:34:aa:36:4a:33:e2:5b:ca:be:e8:b4:0b:33:76: b9:b0:12:07:5d:4f:86:af:a8:30:96:f8:9b:85:f9:33:61:47: fb:77:85:99:ae:e8:33:94:18:b1:90:58:0d:3e:c8:23:0e:3c: 62:38:5c:15:8f:38:5c:f8:be:15:eb:3f:27:ea:9f:12:d6:01: e7:65:20:0e:24:13:4b:be:a6:fa:d5:b4:dd:18:4d:75:49:95: 35:75:de:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY4MEUxMTAvBgNVBAUTKDE3NUY3MzJFNDZEQkFCRTlBQTcxODFERjgzQzcyNkVG NkY2RjVCQzIwHhcNMjQwNjAxMDQwODM2WhcNMjQwNjA4MDQwODM2WjAYMRYwFAYD VQQDEw02NjVhOWVjNS05OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CG1f728IiGbeGGsjo3fKOS5z6Y/SdQGBJfmuTv4CntGyXXVlyl/osWXQcFP OYkBAxTL0U1uMJOKIMjoyT0sVdEQTlp+jNTWwkvVyFG/Phm2bjRBnZCZF4wdwZmA pT2Apu6U3wJi89mS87+ZaXPsTfY0iu0HKkhlLaf3eRcqk4gfY02lX80jG7HCyJiX uOHNK6wMbZOiRAkdiArV8uSQAEt7j+jeWZl7hEMFrb+wdlECE8++PME5ozcJt4/m EJt1QnFZZo0Mai6uBYPWmabkQEaKpPm/ICoqPbut14nZruLJCDc6ZHgG2jyrV+pG AQU1RarUT2nSgqxBZZCE6ydPlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgPiJQv rJo5+2FhIaOw8x1tzMWFMB8GA1UdIwQYMBaAFBdfcy5G26vpqnGB34PHJu9vb1vC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjgwRS9ENkY3QkFEODdF RTUxMUVDOTRFQjVENkNDNEY5QUUwMi9GMTl6TGtiYnEtbXFjWUhmZzhjbTcyOXZX OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxOXpMa2JicS1tcWNZSGZnOGNtNzI5dlc4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjgwRS9ENkY3QkFEODdFRTUxMUVDOTRFQjVENkNDNEY5QUUwMi9GMTl6TGtiYnEt bXFjWUhmZzhjbTcyOXZXOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoy4HKKoEVu67Rp5ESOBgEO48sozmmnJq3QXQexkL58LWyKnfCVu6Y GHT2lKuyblstVc74Q2Q1ZNumg4jQwIttIg6OfDSObn0fOuZFdHwKCcfrJEtm31hP hXDrT9VyPHGzZvtErFYCvkytKKNLeKtzx4Xecn78e2qVAB2M/j6ukrxfLueHIb7B 11iIi+y6DaLrbn7Q77j04lUpDTsXif8AJFJ3oWx7NKo2SjPiW8q+6LQLM3a5sBIH XU+Gr6gwlvibhfkzYUf7d4WZrugzlBixkFgNPsgjDjxiOFwVjzhc+L4V6z8n6p8S 1gHnZSAOJBNLvqb61bTdGE11SZU1dd5i -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:08 2024 by rpki-client on console-fra.rpki-client.org