$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: MX+2yan1oPman2mfk4kHBLk1flObUCVzOuMwrXcd2/I= Subject key identifier: 7C:88:08:18:76:08:E2:AC:50:1F:B5:FE:C5:A1:D0:1D:50:EF:8C:67 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 144C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 1445 Signing time: Sat 04 May 2024 17:31:10 +0000 Manifest this update: Sat 04 May 2024 17:31:10 +0000 Manifest next update: Sat 11 May 2024 17:31:10 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: TF5WKO2+Kee/Dx+TLJ8tR3OT7s0Q9GsbyuFWlSkCm/A=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: q+1s6n0nvvvzY2lsXHxfSdzsEmNaz8tOfMeKBxpnQYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5196 (0x144c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: May 4 17:31:10 2024 GMT Not After : May 11 17:31:10 2024 GMT Subject: CN=663670de-769a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a2:a2:48:6d:cb:6f:8c:ac:a3:9e:e9:5f:bb: 11:61:de:cc:84:dc:fe:e0:a5:69:94:80:3f:2c:b4: 9c:1e:8a:d7:14:c9:29:2b:d3:85:f3:cb:8b:d8:fe: c0:03:65:eb:ac:32:06:7a:a0:bc:8c:91:b7:46:17: 33:ba:ec:7a:47:ea:21:ae:59:06:64:ca:de:04:a5: 0d:69:5d:34:1d:fe:77:58:72:51:a9:ba:d2:b7:31: 06:a8:b4:66:6d:45:d6:5b:f4:7d:b7:f5:e7:a2:0a: 78:8f:75:76:4e:c2:62:dc:35:43:d9:18:94:83:2b: 87:16:20:ba:44:4d:0f:c2:ca:31:94:fb:e6:98:10: b1:72:7a:8b:7c:63:05:c7:48:5c:03:fb:c0:a2:62: 9d:e5:25:f6:81:a0:70:3b:0f:59:57:0b:a8:39:b4: 35:b0:84:ed:a9:60:11:ac:ed:c8:93:0f:f2:e0:e5: 2b:a6:9b:f3:d0:f0:25:32:20:43:6d:84:54:e1:2d: eb:65:20:c9:9b:02:97:23:f9:76:3d:52:95:bb:a6: e3:2b:b5:85:ae:10:9f:f1:ba:95:28:22:89:e3:eb: 9b:07:ec:20:31:6e:26:45:2d:49:95:6b:92:8b:9b: 16:aa:be:8e:97:ca:cf:e5:c2:74:0e:7a:ed:f9:fe: d1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:88:08:18:76:08:E2:AC:50:1F:B5:FE:C5:A1:D0:1D:50:EF:8C:67 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:08:70:d2:28:d2:4f:7f:ee:a0:a3:36:eb:90:7a:17:60:65: e1:04:59:e9:95:de:e4:84:4a:63:3f:bd:17:2f:3a:d0:5b:d4: d5:8d:3d:1e:94:b9:2a:d0:3e:e1:8d:f9:fd:00:5c:4a:aa:18: 27:be:5a:70:a0:7d:ff:41:13:05:16:f0:77:35:cb:f1:31:6c: fe:b7:24:c4:b8:57:37:62:a6:42:cc:03:3b:e1:83:eb:7f:57: 63:8e:cd:84:75:67:ab:6c:60:6b:74:9a:fe:bd:0a:7f:03:9b: e5:9a:1b:65:09:e1:d5:cd:ea:df:4b:3b:13:92:35:66:43:b3: 78:3a:09:75:26:55:96:8a:e3:cd:8b:11:1f:7e:1e:48:dc:79: b6:00:93:3b:88:26:a2:c6:83:bb:4d:65:ce:14:37:c7:79:41: 81:8d:33:0a:cc:8b:46:6a:8b:d8:78:35:67:4b:5a:a5:56:f0: 90:60:3f:ad:59:4e:a3:a3:c7:66:ef:45:ed:6e:a3:80:8d:92: 82:cb:42:59:d2:6e:71:9a:7d:ac:cc:d8:34:06:c8:4e:40:88: 42:8b:1e:63:27:8c:30:f8:27:f6:7b:66:18:f8:5f:d3:f1:14: f1:f4:aa:35:2a:f6:95:96:59:0c:3d:bf:81:52:24:35:a9:2d: 25:a8:46:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjQwNTA0MTczMTEwWhcNMjQwNTExMTczMTEwWjAYMRYwFAYD VQQDEw02NjM2NzBkZS03NjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkqKiSG3Lb4yso57pX7sRYd7MhNz+4KVplIA/LLScHorXFMkpK9OF88uL2P7A A2XrrDIGeqC8jJG3Rhczuux6R+ohrlkGZMreBKUNaV00Hf53WHJRqbrStzEGqLRm bUXWW/R9t/Xnogp4j3V2TsJi3DVD2RiUgyuHFiC6RE0PwsoxlPvmmBCxcnqLfGMF x0hcA/vAomKd5SX2gaBwOw9ZVwuoObQ1sITtqWARrO3Ikw/y4OUrppvz0PAlMiBD bYRU4S3rZSDJmwKXI/l2PVKVu6bjK7WFrhCf8bqVKCKJ4+ubB+wgMW4mRS1JlWuS i5sWqr6Ol8rP5cJ0Dnrt+f7ROwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyICBh2 COKsUB+1/sWh0B1Q74xnMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3CHDSKNJPf+6gozbrkHoXYGXhBFnpld7khEpjP70XLzrQW9TVjT0e lLkq0D7hjfn9AFxKqhgnvlpwoH3/QRMFFvB3NcvxMWz+tyTEuFc3YqZCzAM74YPr f1djjs2EdWerbGBrdJr+vQp/A5vlmhtlCeHVzerfSzsTkjVmQ7N4Ogl1JlWWiuPN ixEffh5I3Hm2AJM7iCaixoO7TWXOFDfHeUGBjTMKzItGaovYeDVnS1qlVvCQYD+t WU6jo8dm70XtbqOAjZKCy0JZ0m5xmn2szNg0BshOQIhCix5jJ4ww+Cf2e2YY+F/T 8RTx9Ko1KvaVllkMPb+BUiQ1qS0lqEad -----END CERTIFICATE-----Generated at Sat May 4 18:00:10 2024 by rpki-client on console-fra.rpki-client.org