$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft File: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json) Hash identifier: +r7bMbwdqWJhO43WrebfQwd0xJTgFnWjTnaHnD/mxYk= Subject key identifier: BD:29:6A:00:F8:6A:85:80:9A:3B:7E:6B:FD:F0:A0:04:E3:17:DE:54 Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 Certificate issuer: /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Certificate serial: 058C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft Manifest number: 0588 Signing time: Sat 01 Jun 2024 01:25:35 +0000 Manifest this update: Sat 01 Jun 2024 01:25:34 +0000 Manifest next update: Sat 08 Jun 2024 01:25:34 +0000 Files and hashes: 1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: fR1Ulzn2tWCjpANppfWlIvtIKJlx4oUbagpx8ph9BtA=) 2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: FDlRZzoWo79m79XBTnQpXsXy3nIixEsxv+JRVGqVcRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1420 (0x58c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Validity Not Before: Jun 1 01:25:34 2024 GMT Not After : Jun 8 01:25:34 2024 GMT Subject: CN=665a788f-1b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:6c:a1:35:fe:25:1c:84:9c:d7:f6:37:42: 22:3b:c2:52:bf:d3:9e:18:e3:f9:e2:07:7f:ed:32: 8f:2f:a2:cf:6b:df:f1:ce:6d:db:ae:f4:01:69:36: 83:4f:bd:f3:b6:58:d9:6b:09:15:29:16:03:00:45: 6f:55:88:7a:e5:b1:33:c1:9e:a1:78:cc:b8:97:34: 69:6a:be:b2:12:2d:3b:12:42:6c:db:b4:76:26:ea: c6:68:85:80:3a:6a:53:95:f2:64:a5:67:f7:8f:2d: ad:85:0c:28:ae:a9:85:7c:09:64:32:28:bc:be:01: 3e:68:61:33:95:df:a0:c2:e2:46:bc:06:45:c6:a7: 13:e9:88:38:8f:1d:51:14:8a:a1:0d:e8:f9:b4:f4: 8f:05:ed:86:aa:e2:6b:ca:69:b0:04:a4:43:7d:bb: 51:02:3b:e6:41:6e:5d:8c:d3:e5:86:36:dc:c1:33: b9:14:b0:cd:db:0f:7c:f6:ed:5f:b9:71:ca:95:18: c3:b0:6a:3b:f7:b1:f8:63:84:4c:f9:e7:63:44:df: 0d:5f:7c:c6:d8:1e:90:ff:26:de:af:f1:5c:65:fa: 92:5e:bf:62:47:24:bd:81:77:d6:54:41:66:b7:12: 32:00:7e:b5:0e:6a:1d:63:f6:83:83:c0:1e:17:10: 6b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:29:6A:00:F8:6A:85:80:9A:3B:7E:6B:FD:F0:A0:04:E3:17:DE:54 X509v3 Authority Key Identifier: keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cf:dd:3c:dd:68:65:23:46:52:d7:cb:29:6e:4e:63:19:a2: 20:2d:9b:f6:15:f3:bf:0e:8c:55:ec:0e:8b:3e:5b:51:7f:92: ac:5d:48:9d:09:9b:47:97:86:07:1a:f9:87:0f:46:84:e7:d0: 31:1a:54:ed:4f:e9:ae:6a:72:a2:98:c9:78:d6:4a:c3:75:93: 53:40:f2:25:a4:1e:44:af:d9:e5:8c:a1:7e:01:2c:e7:33:69: 71:48:27:bc:3e:25:d7:b4:a6:33:f3:f0:b8:59:57:f2:34:c9: 68:7b:de:5d:f2:01:01:7b:c2:77:7f:b5:d4:2f:72:26:b9:ca: a4:cb:ec:a2:42:14:5d:2f:7c:24:b6:fa:33:1f:19:5f:82:df: 2e:bd:19:9f:10:75:d0:42:db:9a:2e:f8:92:93:89:ba:7b:e8: 54:85:34:a7:e8:85:60:1e:e6:ec:88:66:20:3d:aa:ac:fb:b1: 88:0a:90:7b:2a:52:31:1c:ad:0a:c5:6f:a3:64:84:87:fe:0d: 4e:49:ef:67:ed:65:a6:d1:1a:de:f8:37:0d:e0:ee:c0:0f:b6: 0c:20:17:31:7b:0d:49:ae:9e:41:7a:84:05:b4:96:e3:88:64: b1:42:a8:96:8d:8f:90:73:29:86:c0:37:b6:f0:43:2c:db:05: 12:17:4e:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDUxMTAvBgNVBAUTKEYwNUJCRDI2RDRERTA4RjY1ODhDQjdGQUZGQjE4MzBG QUJDMzcxNjcwHhcNMjQwNjAxMDEyNTM0WhcNMjQwNjA4MDEyNTM0WjAYMRYwFAYD VQQDEw02NjVhNzg4Zi0xYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOFsoTX+JRyEnNf2N0IiO8JSv9OeGOP54gd/7TKPL6LPa9/xzm3brvQBaTaD T73ztljZawkVKRYDAEVvVYh65bEzwZ6heMy4lzRpar6yEi07EkJs27R2JurGaIWA OmpTlfJkpWf3jy2thQworqmFfAlkMii8vgE+aGEzld+gwuJGvAZFxqcT6Yg4jx1R FIqhDej5tPSPBe2GquJrymmwBKRDfbtRAjvmQW5djNPlhjbcwTO5FLDN2w989u1f uXHKlRjDsGo797H4Y4RM+edjRN8NX3zG2B6Q/yber/FcZfqSXr9iRyS9gXfWVEFm txIyAH61DmodY/aDg8AeFxBrRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0pagD4 aoWAmjt+a/3woATjF95UMB8GA1UdIwQYMBaAFPBbvSbU3gj2WIy3+v+xgw+rw3Fn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJENS8wRDI2RDRBMDhF NTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQWllqTGY2XzdHREQ2dkRj V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhGdTlKdFRlQ1BaWWpMZjZfN0dERDZ2RGNXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJENS8wRDI2RDRBMDhFNTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQ WllqTGY2XzdHREQ2dkRjV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmz9083WhlI0ZS18spbk5jGaIgLZv2FfO/DoxV7A6LPltRf5KsXUid CZtHl4YHGvmHD0aE59AxGlTtT+muanKimMl41krDdZNTQPIlpB5Er9nljKF+ASzn M2lxSCe8PiXXtKYz8/C4WVfyNMloe95d8gEBe8J3f7XUL3Imucqky+yiQhRdL3wk tvozHxlfgt8uvRmfEHXQQtuaLviSk4m6e+hUhTSn6IVgHubsiGYgPaqs+7GICpB7 KlIxHK0KxW+jZISH/g1OSe9n7WWm0Rre+DcN4O7AD7YMIBcxew1Jrp5BeoQFtJbj iGSxQqiWjY+QcymGwDe28EMs2wUSF05x -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:15 2024 by rpki-client on console-fra.rpki-client.org