$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft File: fH06qZRpRKT9iR5GspbjygcKOF4.mft (raw, json) Hash identifier: HHn6YMFkJD5+MWoQAUb1hN9K0tGoXuAQKCVrVIv0gko= Subject key identifier: B0:C8:03:19:DA:86:06:5C:B8:C6:A7:D0:C9:8C:1D:22:AF:F2:F1:82 Authority key identifier: 7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E Certificate issuer: /CN=A91FE449/serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E Certificate serial: 057D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft Manifest number: 057D Signing time: Sat 01 Jun 2024 01:28:24 +0000 Manifest this update: Sat 01 Jun 2024 01:28:24 +0000 Manifest next update: Sat 08 Jun 2024 01:28:24 +0000 Files and hashes: 1: fH06qZRpRKT9iR5GspbjygcKOF4.crl (hash: 08cMJB52Rll6erAZ60fVXFGXKpwytTY6LrQ4Em7Txwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE449/serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E Validity Not Before: Jun 1 01:28:24 2024 GMT Not After : Jun 8 01:28:24 2024 GMT Subject: CN=665a7938-1b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:c2:ed:f0:b5:eb:d4:12:26:46:16:2c:f6: a0:0f:9b:12:df:4a:39:71:95:09:14:bb:a3:78:92: f5:4a:4f:d3:7c:b8:ba:3c:bc:d6:a6:78:16:07:a0: 57:29:46:3f:a5:ea:da:f8:ae:d0:57:04:8c:ad:d5: ab:55:0a:d9:29:45:b2:04:24:1a:dc:1e:9d:44:21: 73:29:e1:93:f6:bc:bf:d0:57:75:b3:94:22:e2:6b: a7:85:bd:76:bc:48:54:15:2e:3d:a6:bd:02:95:43: db:ca:dd:11:21:f1:07:c1:84:cd:96:e1:9e:05:3d: c3:df:4c:2e:e0:4f:8f:ed:78:84:11:2c:1c:90:ed: e2:be:07:42:ca:5e:40:57:f4:97:06:b0:40:2c:bf: ec:3c:74:0f:ec:07:a2:6c:3f:3b:53:73:ef:e5:9c: d8:f9:31:0e:8b:46:11:fa:70:3d:73:55:3e:0f:8b: 17:60:bb:2d:4a:20:f7:2c:c4:9f:e6:1b:3a:74:74: 6b:c8:1e:ae:68:cf:d3:eb:f6:9f:fc:4c:be:2d:c1: 72:e7:4e:58:3e:46:29:26:63:0a:7b:26:aa:69:f0: cc:e9:a6:30:41:50:aa:11:24:6a:e6:55:54:14:be: fd:9c:52:1f:7a:1e:7d:96:6d:e0:37:a5:9e:71:f7: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C8:03:19:DA:86:06:5C:B8:C6:A7:D0:C9:8C:1D:22:AF:F2:F1:82 X509v3 Authority Key Identifier: keyid:7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4e:27:2e:91:a8:84:e1:d2:89:2c:35:55:be:bc:fe:cd:57: 4b:e1:6a:72:66:60:a8:6b:a3:13:fb:f4:65:98:d7:14:e9:2c: b1:f0:76:6c:f0:62:b9:97:60:8c:f0:a2:23:f3:53:81:b5:b7: 66:64:3d:7d:8b:cc:3a:68:51:e1:7b:63:57:c8:e2:2b:46:bf: db:7e:a7:6b:77:93:d6:5b:b4:df:ae:6e:a2:9a:02:41:3f:7c: fb:29:90:eb:a8:a6:ff:d7:54:fd:e4:db:5b:74:99:a7:df:f7: f1:57:1d:0f:c4:2b:f8:ac:c4:4b:b7:d2:06:19:ce:85:9b:89: 20:d7:69:a9:02:01:fc:88:ca:f9:1d:50:83:d4:99:60:93:ed: a8:48:8e:3b:75:45:fb:4e:ec:b4:84:cc:a7:86:5a:3e:98:46: aa:63:fd:ee:f6:a3:f2:1e:32:8c:fb:cc:e6:30:51:22:90:a6: 0b:f3:ad:b1:f8:63:b5:14:2b:e9:af:88:f8:78:14:c8:90:fb: 45:a3:62:9e:77:0f:24:dc:9c:0d:4f:7b:c2:c9:2c:4f:d9:bd: 7d:55:d6:91:31:0d:7f:85:c3:29:c3:06:3d:0e:e5:25:5d:f0: a9:9b:51:19:fe:c3:6e:88:80:39:1c:3a:6f:48:95:f1:18:cc: d7:a0:bf:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0NDkxMTAvBgNVBAUTKDdDN0QzQUE5OTQ2OTQ0QTRGRDg5MUU0NkIyOTZFM0NB MDcwQTM4NUUwHhcNMjQwNjAxMDEyODI0WhcNMjQwNjA4MDEyODI0WjAYMRYwFAYD VQQDEw02NjVhNzkzOC0xYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs63C7fC169QSJkYWLPagD5sS30o5cZUJFLujeJL1Sk/TfLi6PLzWpngWB6BX KUY/pera+K7QVwSMrdWrVQrZKUWyBCQa3B6dRCFzKeGT9ry/0Fd1s5Qi4munhb12 vEhUFS49pr0ClUPbyt0RIfEHwYTNluGeBT3D30wu4E+P7XiEESwckO3ivgdCyl5A V/SXBrBALL/sPHQP7AeibD87U3Pv5ZzY+TEOi0YR+nA9c1U+D4sXYLstSiD3LMSf 5hs6dHRryB6uaM/T6/af/Ey+LcFy505YPkYpJmMKeyaqafDM6aYwQVCqESRq5lVU FL79nFIfeh59lm3gN6WecfdpgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDIAxna hgZcuMan0MmMHSKv8vGCMB8GA1UdIwQYMBaAFHx9OqmUaUSk/YkeRrKW48oHCjhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQ0OS83M0NCOTMwNDkx MDAxMUVCQUQ1RjdFNURDNEY5QUUwMi9mSDA2cVpScFJLVDlpUjVHc3BianlnY0tP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIMDZxWlJwUktUOWlSNUdzcGJqeWdjS09GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQ0OS83M0NCOTMwNDkxMDAxMUVCQUQ1RjdFNURDNEY5QUUwMi9mSDA2cVpScFJL VDlpUjVHc3BianlnY0tPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlTicukaiE4dKJLDVVvrz+zVdL4WpyZmCoa6MT+/RlmNcU6Syx8HZs 8GK5l2CM8KIj81OBtbdmZD19i8w6aFHhe2NXyOIrRr/bfqdrd5PWW7Tfrm6imgJB P3z7KZDrqKb/11T95NtbdJmn3/fxVx0PxCv4rMRLt9IGGc6Fm4kg12mpAgH8iMr5 HVCD1Jlgk+2oSI47dUX7Tuy0hMynhlo+mEaqY/3u9qPyHjKM+8zmMFEikKYL862x +GO1FCvpr4j4eBTIkPtFo2Kedw8k3JwNT3vCySxP2b19VdaRMQ1/hcMpwwY9DuUl XfCpm1EZ/sNuiIA5HDpvSJXxGMzXoL/f -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:33 2024 by rpki-client on console-ams.rpki-client.org