$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json) Hash identifier: 0RkhLAruIxyvmD8yMABUnLCefZ+6wXU5YGa9a2EsKB8= Subject key identifier: 66:B0:C3:ED:2C:F3:CA:A3:C1:0C:8F:29:E6:F3:7B:BC:14:24:A9:A1 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft Manifest number: 0279 Signing time: Wed 01 May 2024 04:02:21 +0000 Manifest this update: Wed 01 May 2024 04:02:21 +0000 Manifest next update: Wed 08 May 2024 04:02:21 +0000 Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: 6FvzYZgDqi8o0506DlrpsmPcTTUd3iCSPe85Ho6+vmA=) 2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: TnhvZ0VFGTx0Tr/xnOEZWoxZ1LhtDqsEDoaY/RfN4rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: May 1 04:02:21 2024 GMT Not After : May 8 04:02:21 2024 GMT Subject: CN=6631becd-0015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:ef:44:44:bd:7b:22:da:c4:7a:50:4e:78: 75:f4:1b:81:6e:ee:68:9a:d9:7e:fb:47:b8:24:c2: bf:84:88:c1:03:f0:77:69:69:3f:b8:39:6d:f8:d9: 9a:77:f8:35:da:11:55:66:cd:82:b9:3c:86:ca:0b: ad:3e:6e:0a:8b:e5:2f:13:84:0e:24:76:08:cb:d9: 4c:5b:3f:6e:18:bb:df:a7:75:20:64:7a:a5:a5:d6: 6e:2b:cd:7d:24:4e:43:49:d2:b3:ec:e2:85:52:7b: 20:8c:85:30:3d:59:a6:67:a9:bc:f4:bf:90:c4:5e: 5b:ab:7e:ff:ca:c4:9e:3d:d0:6b:7b:0c:32:9b:85: 4c:31:bc:22:4f:ad:80:ac:5e:1e:b0:2d:ae:3a:63: 4e:b0:64:13:05:bc:8c:f8:b2:e9:79:59:de:29:30: 78:82:1b:71:39:d7:ba:bd:60:99:3e:6b:41:e3:ee: 65:0d:c4:d2:ee:c1:31:7f:32:f0:84:e6:aa:2f:9e: 4e:23:69:84:26:65:07:2f:4f:ee:57:9b:a7:3a:4c: 64:c8:1b:d9:e1:cb:15:25:cf:a7:4f:a7:ba:1f:36: 97:cc:c6:26:86:5d:a9:78:c8:ba:c1:06:f1:cb:6b: 74:da:c0:b2:78:93:f2:9a:23:c7:d9:09:d2:61:0c: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:C3:ED:2C:F3:CA:A3:C1:0C:8F:29:E6:F3:7B:BC:14:24:A9:A1 X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:93:28:6f:fb:3c:6f:0d:a1:0c:8f:61:d0:24:1c:3e:f8:4b: 61:24:f0:56:61:c8:25:dd:c0:6d:4b:3f:5d:40:90:fb:6d:aa: 67:91:82:69:63:95:f4:46:a2:75:09:a4:b6:8f:b6:0e:1d:bc: 92:d2:8b:1f:9f:f6:7f:8c:3f:fb:0e:28:25:f9:65:c3:7a:4c: 14:ac:dd:81:e1:e1:d1:71:dd:44:29:42:ca:31:e6:10:dd:81: c2:f9:00:4b:d2:31:4c:e2:82:7a:c8:7c:9c:d0:7f:37:b7:d7: 88:a3:1a:67:d5:cd:dd:5d:f3:86:23:2b:e8:55:cd:bf:3f:79: e8:53:6a:74:30:b8:7a:71:a2:09:e0:15:92:11:f6:d6:06:ab: c1:dc:8a:22:ca:84:77:fb:ec:95:9b:bc:2f:4c:a4:e6:38:17: c5:2c:62:44:77:41:85:fc:f1:50:86:ea:34:74:e5:b5:27:5e: e4:87:12:88:36:ac:e1:07:c2:0b:48:bf:85:b9:27:52:45:0f: 08:e6:a4:cc:ff:cf:7b:f1:85:fe:a7:6b:39:c2:7c:98:aa:ca: 55:37:74:d7:89:20:27:a9:4a:3d:53:b1:09:4b:b3:71:f9:0e: c4:0f:d0:36:af:a8:22:d1:a5:9b:a3:2c:89:7b:86:e1:1d:22: 29:96:31:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjQwNTAxMDQwMjIxWhcNMjQwNTA4MDQwMjIxWjAYMRYwFAYD VQQDEw02NjMxYmVjZC0wMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/3vRES9eyLaxHpQTnh19BuBbu5omtl++0e4JMK/hIjBA/B3aWk/uDlt+Nma d/g12hFVZs2CuTyGygutPm4Ki+UvE4QOJHYIy9lMWz9uGLvfp3UgZHqlpdZuK819 JE5DSdKz7OKFUnsgjIUwPVmmZ6m89L+QxF5bq37/ysSePdBrewwym4VMMbwiT62A rF4esC2uOmNOsGQTBbyM+LLpeVneKTB4ghtxOde6vWCZPmtB4+5lDcTS7sExfzLw hOaqL55OI2mEJmUHL0/uV5unOkxkyBvZ4csVJc+nT6e6HzaXzMYmhl2peMi6wQbx y2t02sCyeJPymiPH2QnSYQxLhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaww+0s 88qjwQyPKebze7wUJKmhMB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU LUZyUjRiQ2xEX1A0dldEQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEkyhv+zxvDaEMj2HQJBw++EthJPBWYcgl3cBtSz9dQJD7bapnkYJp Y5X0RqJ1CaS2j7YOHbyS0osfn/Z/jD/7Digl+WXDekwUrN2B4eHRcd1EKULKMeYQ 3YHC+QBL0jFM4oJ6yHyc0H83t9eIoxpn1c3dXfOGIyvoVc2/P3noU2p0MLh6caIJ 4BWSEfbWBqvB3IoiyoR3++yVm7wvTKTmOBfFLGJEd0GF/PFQhuo0dOW1J17khxKI NqzhB8ILSL+FuSdSRQ8I5qTM/8978YX+p2s5wnyYqspVN3TXiSAnqUo9U7EJS7Nx +Q7ED9A2r6gi0aWboyyJe4bhHSIpljHN -----END CERTIFICATE-----Generated at Wed May 1 05:58:59 2024 by rpki-client on console-fra.rpki-client.org