$ rpki-client -vvf rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft File: fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft (raw, json) Hash identifier: 5kNWQejFbUerqd+oNjF/Z6QEam8068B38mhMzQYUJGg= Subject key identifier: FA:F6:C0:A1:41:32:6F:3F:87:5C:05:62:5E:4C:7D:14:F1:47:56:16 Authority key identifier: 7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9 Certificate issuer: /CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9 Certificate serial: 0611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft Manifest number: 060C Signing time: Sun 05 May 2024 00:01:12 +0000 Manifest this update: Sun 05 May 2024 00:01:12 +0000 Manifest next update: Sun 12 May 2024 00:01:12 +0000 Files and hashes: 1: fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl (hash: VAALALRz1BuxJcPiVpfNVzac3qt2kNMAOq3hKc6bWxg=) 2: 5AE4C7E2554C11EB87AB9070C4F9AE02.roa (hash: Or89czDxEvOmVhZzxW4eIqJ6wfH1q8wTK3ZnGTOYBjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9 Validity Not Before: May 5 00:01:12 2024 GMT Not After : May 12 00:01:12 2024 GMT Subject: CN=6636cc48-eb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:b4:72:76:85:6e:fb:11:3a:96:49:c1:af: 75:03:72:ff:be:35:4b:1a:31:91:03:5a:f6:1d:6c: d4:88:4b:ca:f8:3e:56:81:a0:5a:de:c8:db:a1:aa: 36:a6:de:2b:30:39:cd:58:07:e3:c6:0b:c7:5e:24: c1:1f:bf:80:06:ab:78:5a:55:30:a0:d3:96:2a:95: b2:13:b5:23:81:77:92:ca:bf:7d:04:97:f1:a0:85: e5:0a:63:1c:b4:38:49:15:95:95:b3:76:32:33:7e: b9:af:99:e9:a8:e2:d6:bb:1d:1c:57:fa:09:33:87: 71:7d:2a:97:cb:77:e9:9e:a1:6a:42:79:54:21:46: ab:7f:d5:99:b9:f8:7b:ae:fa:67:7d:91:4c:0a:c5: d2:f2:cb:1b:d6:66:b7:6f:2f:5c:00:3b:bb:c4:12: 4a:bb:d9:b2:5d:1e:a5:40:7c:b1:83:86:0a:17:21: 99:8d:4a:d0:01:24:67:a6:44:ba:e2:9a:8f:41:5a: cb:eb:df:d8:31:45:82:91:14:24:f3:49:e7:3a:48: 75:e3:25:c0:66:dc:fc:15:22:cc:af:18:f6:b9:91: f7:a5:98:27:55:68:b1:c9:5a:e6:3f:97:e0:fd:36: b1:4d:b0:5c:b2:07:6a:af:ce:12:ed:8d:ac:00:59: 70:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F6:C0:A1:41:32:6F:3F:87:5C:05:62:5E:4C:7D:14:F1:47:56:16 X509v3 Authority Key Identifier: keyid:7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:07:b3:ef:e7:4f:9e:df:04:32:5a:91:6c:dc:df:63:1d:96: bc:05:b2:cb:e9:ac:f4:ef:a7:24:15:da:39:90:e6:12:41:e3: 39:a2:26:a3:be:ed:df:82:42:16:26:65:df:07:d7:c0:74:59: c9:64:f8:02:9c:6c:e7:c7:34:f1:19:ff:cc:2b:b1:1c:69:17: 82:23:b9:93:07:e0:c9:63:4a:d2:a5:2c:e8:fd:1b:ea:4f:4e: d9:e2:3b:cc:91:82:f0:90:b2:1a:28:77:ae:ed:b4:97:4d:09: 83:5c:0e:b6:28:66:d4:6d:47:0f:23:7c:b3:a3:3e:38:7d:0e: c5:54:21:66:92:90:79:7c:10:fe:c5:37:11:f2:c3:b1:25:a2: 66:81:a1:57:6c:3a:e5:3b:13:13:c5:36:a0:a0:c5:7a:16:f1: 7a:9f:40:74:54:19:69:ad:d6:b9:08:6b:93:ef:14:18:60:0e: a2:06:bc:04:8e:b5:08:6f:52:b6:f2:17:d1:54:89:99:12:f2: de:5f:26:51:29:1f:78:80:87:bb:d6:ca:f1:f3:2d:57:21:c0: a1:d1:92:7b:f9:8c:6a:96:cc:85:91:e0:66:3c:2f:99:15:93: 3f:c6:e6:1d:84:dc:88:dd:33:a3:6f:ff:01:9b:97:5d:79:17: 29:90:8d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4QjExMTAvBgNVBAUTKDdDMzJFNjZGMzVDMDNCQzI3QkUwRENGN0NBNDZCOTY2 MTYwOTlFRTkwHhcNMjQwNTA1MDAwMTEyWhcNMjQwNTEyMDAwMTEyWjAYMRYwFAYD VQQDEw02NjM2Y2M0OC1lYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh+0cnaFbvsROpZJwa91A3L/vjVLGjGRA1r2HWzUiEvK+D5WgaBa3sjboao2 pt4rMDnNWAfjxgvHXiTBH7+ABqt4WlUwoNOWKpWyE7UjgXeSyr99BJfxoIXlCmMc tDhJFZWVs3YyM365r5npqOLWux0cV/oJM4dxfSqXy3fpnqFqQnlUIUarf9WZufh7 rvpnfZFMCsXS8ssb1ma3by9cADu7xBJKu9myXR6lQHyxg4YKFyGZjUrQASRnpkS6 4pqPQVrL69/YMUWCkRQk80nnOkh14yXAZtz8FSLMrxj2uZH3pZgnVWixyVrmP5fg /TaxTbBcsgdqr84S7Y2sAFlwvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr2wKFB Mm8/h1wFYl5MfRTxR1YWMB8GA1UdIwQYMBaAFHwy5m81wDvCe+Dc98pGuWYWCZ7p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThCMS80Nzc2M0JBQTU1 M0QxMUVCQTI2OUZCNzNDNEY5QUUwMi9mRExtYnpYQU84Sjc0TnozeWthNVpoWUpu dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZETG1ielhBTzhKNzROejN5a2E1WmhZSm51ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThCMS80Nzc2M0JBQTU1M0QxMUVCQTI2OUZCNzNDNEY5QUUwMi9mRExtYnpYQU84 Sjc0TnozeWthNVpoWUpudWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/B7Pv50+e3wQyWpFs3N9jHZa8BbLL6az076ckFdo5kOYSQeM5oiaj vu3fgkIWJmXfB9fAdFnJZPgCnGznxzTxGf/MK7EcaReCI7mTB+DJY0rSpSzo/Rvq T07Z4jvMkYLwkLIaKHeu7bSXTQmDXA62KGbUbUcPI3yzoz44fQ7FVCFmkpB5fBD+ xTcR8sOxJaJmgaFXbDrlOxMTxTagoMV6FvF6n0B0VBlprda5CGuT7xQYYA6iBrwE jrUIb1K28hfRVImZEvLeXyZRKR94gIe71srx8y1XIcCh0ZJ7+YxqlsyFkeBmPC+Z FZM/xuYdhNyI3TOjb/8Bm5ddeRcpkI2T -----END CERTIFICATE-----Generated at Sun May 5 01:22:21 2024 by rpki-client on console-fra.rpki-client.org