$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json) Hash identifier: JNPTvQNCAeVhRTtVpEPEAwpRFRwXsmPvBMo6kfdmIsc= Subject key identifier: 3E:58:56:C2:B2:40:11:B4:50:EC:69:EE:A7:53:81:8A:56:B7:65:34 Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft Manifest number: 03FF Signing time: Wed 29 May 2024 02:30:36 +0000 Manifest this update: Wed 29 May 2024 02:30:35 +0000 Manifest next update: Wed 05 Jun 2024 02:30:35 +0000 Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: LRUl70zNaMB2HroeWgFovORSH667Sxx+Onv+SnlMgvs=) 2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: Z2yy802j+BnUWjHnyzkSwccTe9na+Hx4eWQsC6nuncs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Validity Not Before: May 29 02:30:35 2024 GMT Not After : Jun 5 02:30:35 2024 GMT Subject: CN=6656934c-a2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:d0:64:c4:ac:9d:73:2c:79:bc:96:c0:d8: d6:0d:83:4a:a9:50:49:a1:0e:17:89:51:1c:42:6b: 61:3f:2f:0e:71:23:37:7d:fe:c2:f1:64:4f:69:bb: a2:91:f2:4f:fa:e5:77:9b:b0:10:0a:0a:a2:8c:15: f5:e2:6e:d3:3d:80:f3:7b:08:95:9f:28:5d:73:7b: 92:db:c5:f4:3b:b4:47:13:a2:ab:af:f9:b7:c4:3a: d2:4a:17:f9:d9:fe:42:72:76:94:58:ab:39:53:0a: af:66:0c:f5:fd:b8:e9:c2:7d:83:a6:93:78:a1:60: cf:cb:03:40:f5:db:4d:db:df:5e:df:7a:18:98:4f: 13:72:2d:91:e0:c0:cd:c0:ff:44:08:50:75:9c:58: c4:a0:f3:80:50:a4:2f:2d:e1:13:d0:22:a2:1f:d0: 20:7c:e5:ea:cb:24:2a:68:99:38:31:64:b7:a5:b1: 4f:51:ff:ec:3d:a3:4d:08:75:e0:39:29:20:13:0b: 0a:51:52:3c:ab:52:2f:18:1f:3d:53:ac:af:79:48: 80:87:c2:b0:64:ab:26:48:b6:42:cb:f2:7a:4c:84: 9b:33:99:e2:31:60:4e:85:c8:5c:04:a4:56:63:6d: 09:99:4b:16:eb:1f:b2:6d:45:e0:66:04:f0:7b:7c: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:58:56:C2:B2:40:11:B4:50:EC:69:EE:A7:53:81:8A:56:B7:65:34 X509v3 Authority Key Identifier: keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:97:d9:40:e8:9a:10:35:2a:b6:b1:f4:ff:2a:fe:40:36:c1: dd:38:b9:35:2d:18:72:d9:3f:7e:f0:0c:0f:88:54:d1:4f:0e: f9:a5:49:ab:09:e6:1b:5c:03:a1:3d:ba:fb:09:ca:69:d0:8e: c0:f7:17:87:12:f3:14:75:e5:9f:0e:7e:b7:66:5a:fe:cf:00: 55:fe:07:f5:39:a8:2c:0a:3c:d1:0d:11:fe:79:a4:16:59:80: df:16:50:a2:d8:1c:24:a4:60:d2:f0:c6:01:f9:a2:20:b9:a3: ad:4d:87:87:01:7a:38:2f:5c:34:3f:ba:2d:74:91:31:5c:2f: d3:96:a7:b1:4b:25:ad:19:58:c5:cd:72:e1:0d:db:17:56:c1: 9c:fd:74:bc:8c:70:a9:23:37:8a:6c:f6:6b:77:e0:5f:cd:7e: a3:f1:90:08:24:e8:11:9c:24:bc:17:af:9c:7f:06:03:58:72: 4b:e3:49:38:ab:2c:ae:84:8d:1b:df:a0:f2:cf:7f:d7:f2:b8: 4e:b3:6a:cb:17:2d:da:3b:56:44:f2:ab:66:c3:f8:66:a4:65: 54:ba:da:4e:58:ec:d1:2a:ab:95:43:ab:1f:29:4e:9c:61:2c: 71:eb:f9:74:f0:8c:ef:34:00:5b:4e:fb:1e:f5:45:26:e6:1e: 0c:73:47:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE NzdGQjkyN0YwHhcNMjQwNTI5MDIzMDM1WhcNMjQwNjA1MDIzMDM1WjAYMRYwFAYD VQQDEw02NjU2OTM0Yy1hMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq33QZMSsnXMsebyWwNjWDYNKqVBJoQ4XiVEcQmthPy8OcSM3ff7C8WRPabui kfJP+uV3m7AQCgqijBX14m7TPYDzewiVnyhdc3uS28X0O7RHE6Krr/m3xDrSShf5 2f5CcnaUWKs5UwqvZgz1/bjpwn2DppN4oWDPywNA9dtN299e33oYmE8Tci2R4MDN wP9ECFB1nFjEoPOAUKQvLeET0CKiH9AgfOXqyyQqaJk4MWS3pbFPUf/sPaNNCHXg OSkgEwsKUVI8q1IvGB89U6yveUiAh8KwZKsmSLZCy/J6TISbM5niMWBOhchcBKRW Y20JmUsW6x+ybUXgZgTwe3zsDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5YVsKy QBG0UOxp7qdTgYpWt2U0MB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYl9lA6JoQNSq2sfT/Kv5ANsHdOLk1LRhy2T9+8AwPiFTRTw75pUmr CeYbXAOhPbr7Ccpp0I7A9xeHEvMUdeWfDn63Zlr+zwBV/gf1OagsCjzRDRH+eaQW WYDfFlCi2BwkpGDS8MYB+aIguaOtTYeHAXo4L1w0P7otdJExXC/TlqexSyWtGVjF zXLhDdsXVsGc/XS8jHCpIzeKbPZrd+BfzX6j8ZAIJOgRnCS8F6+cfwYDWHJL40k4 qyyuhI0b36Dyz3/X8rhOs2rLFy3aO1ZE8qtmw/hmpGVUutpOWOzRKquVQ6sfKU6c YSxx6/l08IzvNABbTvse9UUm5h4Mc0dx -----END CERTIFICATE-----Generated at Wed May 29 04:02:10 2024 by rpki-client on console-fra.rpki-client.org