$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json) Hash identifier: buVqAJJyne6Qg+b0vDS+7BH4ylcSAteVC+B/At0FNu0= Subject key identifier: 9E:C1:A2:CE:21:97:B7:D3:2E:FE:42:CA:7C:A5:95:1A:85:6F:1C:99 Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft Manifest number: 065E Signing time: Mon 06 May 2024 23:42:05 +0000 Manifest this update: Mon 06 May 2024 23:42:04 +0000 Manifest next update: Mon 13 May 2024 23:42:04 +0000 Files and hashes: 1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: cXykHOLe/O1n/Ir+W1B8glLmJ5C6Y0BjWS8hPD0gwZw=) 2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: yDhuA4Ob5DnwqrR8L0ZR9FkfFA5Nm0serWGqFaLGioc=) 3: C56E8DD2724511EEBCA61115C4F9AE02.roa (hash: lBEkbAlFSk7ypsIUZlbpBzceU+j5r3wvvBgizdC1PAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Validity Not Before: May 6 23:42:04 2024 GMT Not After : May 13 23:42:04 2024 GMT Subject: CN=66396acd-17ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:25:ec:cc:1b:64:70:b1:98:69:3b:86:eb: 1a:71:ea:ce:5e:14:be:3b:b0:79:25:28:a3:f8:a5: 31:c5:17:e7:25:81:ca:be:29:33:57:a5:93:d7:0b: 86:db:06:8e:b1:24:ed:95:45:e8:c4:cb:96:74:23: 93:e1:ac:e9:dc:e7:0d:89:d1:6c:37:c1:29:82:ed: dc:83:c0:e1:97:77:7d:4c:c7:f3:a9:99:c4:8c:a2: 8e:b9:25:26:05:fe:e5:26:33:79:79:a1:5f:35:e8: 61:fd:85:9d:9a:b7:ac:17:ea:3a:3a:55:8d:65:30: 3d:e6:e0:4c:b8:00:ed:85:ae:78:0a:eb:ca:98:d4: b6:d3:4d:14:0b:e8:e7:fb:a4:3d:2e:b7:81:e6:1e: d9:7f:ad:3a:a9:52:24:43:36:d9:33:81:1a:66:5f: 9f:24:4a:80:13:47:0b:c7:79:1e:d5:f3:ab:50:65: d6:f6:f9:81:4e:34:1b:fc:50:d0:29:72:5a:ad:51: af:28:6e:82:ef:53:81:3a:d1:8a:75:41:92:0e:37: 48:b6:cb:29:21:b0:35:99:bd:d6:26:c8:1e:c6:a2: 69:92:fc:ad:d8:29:c5:8d:4b:25:07:9e:53:f4:63: cc:ca:c3:be:0a:4c:51:6c:1f:c9:7b:73:a0:75:9c: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C1:A2:CE:21:97:B7:D3:2E:FE:42:CA:7C:A5:95:1A:85:6F:1C:99 X509v3 Authority Key Identifier: keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:67:c7:65:ad:73:aa:8b:45:be:cb:ae:25:01:be:62:f0:ba: 18:c6:cc:75:3b:0a:00:02:59:b3:17:dd:05:2c:82:52:9d:14: fd:b5:78:c9:74:32:fa:3c:3c:10:b5:25:70:45:f9:19:ae:dc: d7:9f:10:ec:0c:f7:bd:2f:5c:63:58:5e:d0:40:79:3f:66:7c: 51:54:0d:28:87:ea:d2:16:ac:a0:09:0f:f6:7d:73:e0:9d:47: 98:be:d6:8d:33:df:3d:19:f5:75:87:8d:a1:d7:60:83:f6:b1: f3:23:9d:36:b0:75:40:c0:56:50:00:c8:b8:25:05:22:db:03: c4:2b:e0:ab:44:b0:29:7a:01:c7:32:24:44:8d:21:da:bc:13: 25:6e:49:c0:e7:d2:c9:d1:93:63:10:46:17:ea:3c:d1:f4:42: 78:38:57:16:fc:2e:6f:29:c6:1f:bf:ba:63:c0:e1:b5:42:26: e1:db:dc:cc:f9:3b:7b:b0:2c:54:b4:87:b1:65:82:1f:11:74: 25:e4:3e:05:b9:8e:b0:e0:47:17:d4:80:6b:0b:d1:c2:63:5e: a2:49:4d:ae:80:45:15:e1:90:ae:e3:36:f5:fd:5a:84:3b:93: 57:c1:90:63:e0:88:4a:c0:08:37:7d:cb:22:d5:3c:95:1f:51: ac:d8:9a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC RTM0OTBFNzAwHhcNMjQwNTA2MjM0MjA0WhcNMjQwNTEzMjM0MjA0WjAYMRYwFAYD VQQDEw02NjM5NmFjZC0xN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVQl7MwbZHCxmGk7husacerOXhS+O7B5JSij+KUxxRfnJYHKvikzV6WT1wuG 2waOsSTtlUXoxMuWdCOT4azp3OcNidFsN8Epgu3cg8Dhl3d9TMfzqZnEjKKOuSUm Bf7lJjN5eaFfNehh/YWdmresF+o6OlWNZTA95uBMuADtha54CuvKmNS2000UC+jn +6Q9LreB5h7Zf606qVIkQzbZM4EaZl+fJEqAE0cLx3ke1fOrUGXW9vmBTjQb/FDQ KXJarVGvKG6C71OBOtGKdUGSDjdItsspIbA1mb3WJsgexqJpkvyt2CnFjUslB55T 9GPMysO+CkxRbB/Je3OgdZy/mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7Bos4h l7fTLv5CynyllRqFbxyZMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVp bDBkYlNFdmQwUHUtTkpEbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Z8dlrXOqi0W+y64lAb5i8LoYxsx1OwoAAlmzF90FLIJSnRT9tXjJ dDL6PDwQtSVwRfkZrtzXnxDsDPe9L1xjWF7QQHk/ZnxRVA0oh+rSFqygCQ/2fXPg nUeYvtaNM989GfV1h42h12CD9rHzI502sHVAwFZQAMi4JQUi2wPEK+CrRLApegHH MiREjSHavBMlbknA59LJ0ZNjEEYX6jzR9EJ4OFcW/C5vKcYfv7pjwOG1Qibh29zM +Tt7sCxUtIexZYIfEXQl5D4FuY6w4EcX1IBrC9HCY16iSU2ugEUV4ZCu4zb1/VqE O5NXwZBj4IhKwAg3fcsi1TyVH1Gs2JoA -----END CERTIFICATE-----Generated at Tue May 7 01:58:18 2024 by rpki-client on console-fra.rpki-client.org