$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json) Hash identifier: Q4Q76lNVd0EZSRPjiYHWDdqHnoKSj/MmOG/fB50AIvk= Subject key identifier: D1:8A:80:5C:C4:13:38:57:E5:2E:26:46:A7:7F:DF:E5:8D:76:70:67 Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Certificate serial: 3430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft Manifest number: 33FF Signing time: Sun 02 Jun 2024 14:16:05 +0000 Manifest this update: Sun 02 Jun 2024 14:16:05 +0000 Manifest next update: Sun 09 Jun 2024 14:16:05 +0000 Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: NmIesFlZMqeBc63KbnYng8Ej0jqm2M+Gq/hfenzQiDA=) 2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: 8zyQQoG0fbSI1PJ2EFeZExPugAzzJVAxYFpHGxOY+w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13360 (0x3430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Validity Not Before: Jun 2 14:16:05 2024 GMT Not After : Jun 9 14:16:05 2024 GMT Subject: CN=665c7ea5-4974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:93:68:bf:63:94:3f:93:50:1b:67:7e:7f: 9f:1a:8a:96:63:63:4c:6b:10:da:51:6a:dd:cc:61: 9f:27:08:c2:93:97:2a:57:ad:c1:64:46:14:a3:f9: bc:ba:a1:4d:08:b2:58:08:26:98:45:2b:9f:a3:ee: 56:78:42:1b:89:eb:cd:39:7b:fb:76:2f:98:82:f7: a4:4b:62:0d:6c:2a:65:f5:e8:1a:26:c0:d9:c0:97: 6a:98:5e:5b:91:e2:13:aa:ee:f9:34:17:5f:82:5b: 73:0c:38:2e:cd:79:4a:73:6a:00:b3:7a:4b:37:56: 2c:a2:b3:58:09:87:0b:71:56:67:f0:17:f5:17:36: 87:4a:92:e1:6b:95:c3:cd:fa:76:c3:2c:25:18:38: be:5c:df:b3:27:b2:a6:5d:e1:55:7e:0c:5e:2d:a1: cb:f4:68:e9:88:55:cc:e2:d6:b7:51:4a:42:3f:a5: cb:09:4a:3b:94:3d:a1:26:26:f5:49:55:6e:aa:04: df:40:db:fe:ab:e8:3e:0d:e2:b3:8c:42:37:d0:fb: 16:28:43:44:54:ca:44:65:8f:d8:87:86:6a:f7:72: 33:a3:e9:13:93:0a:21:e9:21:15:ac:26:3d:46:fa: af:a9:39:ae:ca:55:2d:dd:1f:25:4e:72:09:6a:30: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8A:80:5C:C4:13:38:57:E5:2E:26:46:A7:7F:DF:E5:8D:76:70:67 X509v3 Authority Key Identifier: keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:8d:3d:53:47:3e:15:a5:33:25:8e:49:a9:b3:df:3a:ca:f5: dc:3d:93:fd:79:86:c9:c7:26:14:1e:9b:de:ac:46:6f:b6:46: 26:54:b1:ac:02:2f:35:20:52:0b:7b:a6:b8:1d:34:a6:45:7a: 3e:bb:1d:07:4a:07:dd:7f:2f:0f:31:2e:64:5e:66:8c:56:4a: ec:d8:7a:ef:86:fb:96:19:c3:db:50:66:22:6c:3a:c0:fd:d0: e2:00:40:51:c4:69:63:3a:08:c1:12:e2:c9:32:18:c5:66:ef: 14:0d:51:57:84:eb:db:01:26:4f:88:4d:e5:55:70:8b:78:1e: d8:24:71:ed:80:10:a3:ae:36:b1:41:ea:74:f2:db:9b:24:f5: 14:f4:f2:d0:70:82:f9:20:e3:a5:14:c7:95:d5:6f:93:45:68: 26:65:c5:9b:e5:24:9d:46:36:15:e5:d5:14:e3:cc:73:d1:b4: 4c:c3:d1:81:ad:18:44:42:c5:be:54:d8:19:eb:9a:9f:a5:48: 6d:e4:17:61:6e:f8:56:b7:3c:fe:ac:fa:54:03:7a:70:3c:cf: 90:86:58:39:9c:dc:68:e4:4b:4d:68:c2:68:73:df:3c:2c:3f: dd:31:12:81:46:86:fe:95:a7:d6:17:e1:de:48:da:1c:76:2a: b0:2a:9b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAxQzQxMTAvBgNVBAUTKEJGN0JDQUYxOTA5QzEwQkNGRUEwRDhFN0Q0NUQ4MjU0 RjI2OUM2QkYwHhcNMjQwNjAyMTQxNjA1WhcNMjQwNjA5MTQxNjA1WjAYMRYwFAYD VQQDEw02NjVjN2VhNS00OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2uTaL9jlD+TUBtnfn+fGoqWY2NMaxDaUWrdzGGfJwjCk5cqV63BZEYUo/m8 uqFNCLJYCCaYRSufo+5WeEIbievNOXv7di+YgvekS2INbCpl9egaJsDZwJdqmF5b keITqu75NBdfgltzDDguzXlKc2oAs3pLN1YsorNYCYcLcVZn8Bf1FzaHSpLha5XD zfp2wywlGDi+XN+zJ7KmXeFVfgxeLaHL9GjpiFXM4ta3UUpCP6XLCUo7lD2hJib1 SVVuqgTfQNv+q+g+DeKzjEI30PsWKENEVMpEZY/Yh4Zq93Izo+kTkwoh6SEVrCY9 RvqvqTmuylUt3R8lTnIJajAqcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGKgFzE EzhX5S4mRqd/3+WNdnBnMB8GA1UdIwQYMBaAFL97yvGQnBC8/qDY59RdglTyaca/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDFDNC8yQjJCM0M5RTFE NjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VMei1vTmpuMUYyQ1ZQSnB4 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Yzdks4WkNjRUx6LW9Oam4xRjJDVlBKcHhyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDFDNC8yQjJCM0M5RTFENjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VM ei1vTmpuMUYyQ1ZQSnB4cjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyjT1TRz4VpTMljkmps986yvXcPZP9eYbJxyYUHpverEZvtkYmVLGs Ai81IFILe6a4HTSmRXo+ux0HSgfdfy8PMS5kXmaMVkrs2HrvhvuWGcPbUGYibDrA /dDiAEBRxGljOgjBEuLJMhjFZu8UDVFXhOvbASZPiE3lVXCLeB7YJHHtgBCjrjax Qep08tubJPUU9PLQcIL5IOOlFMeV1W+TRWgmZcWb5SSdRjYV5dUU48xz0bRMw9GB rRhEQsW+VNgZ65qfpUht5BdhbvhWtzz+rPpUA3pwPM+Qhlg5nNxo5EtNaMJoc988 LD/dMRKBRob+lafWF+HeSNocdiqwKpvk -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:14 2024 by rpki-client on console-fra.rpki-client.org