$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: vf/nAArIiRHtpbKo8rT3Z+J71fGVI/STHLyPOViZqJg= Subject key identifier: B7:99:57:D2:15:26:D4:BE:BC:67:20:23:9E:92:2E:67:B2:3E:95:AD Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 03EB Signing time: Sun 05 May 2024 02:27:10 +0000 Manifest this update: Sun 05 May 2024 02:27:09 +0000 Manifest next update: Sun 12 May 2024 02:27:09 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: P48pJaYFSDlgzCmHs5tBa0jCPhPFvG7X9EI6jF1IOYA=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: +3KNpzTdNbBGuAb/O1+0M7X3qgZTGQ5GyAX8Dez5WeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: May 5 02:27:09 2024 GMT Not After : May 12 02:27:09 2024 GMT Subject: CN=6636ee7d-4400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:f5:ef:cd:83:2b:8a:4b:05:04:94:2c:02: fd:49:8f:cb:2e:02:90:a9:b4:7c:2e:aa:ba:70:e7: 62:bf:16:d8:51:4c:4c:fc:db:cb:c5:44:5f:7c:0c: 80:a9:f4:0c:71:f8:38:26:9e:0b:3d:70:a5:0c:2b: 10:4a:0e:b8:67:5f:0c:23:8e:29:90:ce:be:c1:f0: 04:d2:99:ed:31:b7:e8:23:d6:0f:a3:46:4d:a0:00: 1a:f5:93:4a:41:74:4d:72:81:09:61:49:95:f6:09: a1:05:82:74:5d:61:d4:48:84:b1:b6:4d:20:aa:8f: 5e:fe:db:98:34:9b:c8:69:0e:ab:4a:eb:36:af:f8: c6:5b:42:af:18:e4:71:77:05:27:6a:73:e8:5a:cf: 35:bb:4b:9b:ea:60:56:c0:0a:81:00:87:62:6d:d6: 74:b3:34:79:fb:f5:f8:80:c1:9f:ae:ef:a5:bf:55: d4:a4:e7:f3:8f:5e:c2:a7:46:d8:b6:75:71:02:fb: e3:1c:9f:5c:2c:26:04:bc:35:22:2d:43:f6:9a:d5: 19:35:e3:4f:fd:1d:67:b3:1c:34:eb:e4:0e:ea:58: 13:e4:be:2b:1a:00:dc:47:a3:52:61:5b:9e:8e:2a: d3:7a:33:94:dd:7e:e5:0e:4d:ad:da:11:00:8f:70: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:99:57:D2:15:26:D4:BE:BC:67:20:23:9E:92:2E:67:B2:3E:95:AD X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:39:09:53:62:48:c9:d2:ad:e8:8c:5e:64:e1:27:2e:1e:2e: a5:6d:eb:78:7d:79:8a:de:5e:39:a4:01:74:ee:cd:fa:da:79: 25:f8:78:8a:b8:ab:7b:58:9c:ab:d5:78:b3:b5:14:12:ce:f5: e8:10:73:68:6b:01:26:95:db:ec:12:f5:d2:c2:a6:ca:17:a9: 65:25:9c:2c:22:41:7f:05:6f:ef:0a:50:d3:a8:79:5a:45:2c: 54:19:3c:81:08:71:84:9c:03:7f:ac:e3:f9:cb:c7:c4:93:d3: 3e:9c:d3:4b:f5:3c:8d:ad:8a:3b:ad:d5:6c:e1:64:fe:5e:5b: 6c:ab:af:5d:04:22:57:65:53:4b:68:0b:14:0c:92:b8:b4:33: 42:ec:e1:e4:24:22:dd:ae:7f:dd:ff:e5:cf:a0:25:3b:0a:56: 4a:ef:ba:ae:be:7c:81:20:78:09:05:d6:28:59:58:b2:d3:88: bb:f3:f6:f4:e1:f9:de:67:3f:cb:dc:58:15:db:50:72:00:de: b5:ce:a0:52:fc:8e:82:3d:54:e2:99:6f:99:a9:bc:d8:96:99: c7:0c:7b:63:7e:36:f4:8d:19:0f:37:2a:19:b2:8f:35:8b:0a: d4:c0:25:3c:2c:5f:3c:9c:7c:cf:1e:46:32:4d:92:05:51:f2: 88:39:8d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjQwNTA1MDIyNzA5WhcNMjQwNTEyMDIyNzA5WjAYMRYwFAYD VQQDEw02NjM2ZWU3ZC00NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4w/1782DK4pLBQSULAL9SY/LLgKQqbR8Lqq6cOdivxbYUUxM/NvLxURffAyA qfQMcfg4Jp4LPXClDCsQSg64Z18MI44pkM6+wfAE0pntMbfoI9YPo0ZNoAAa9ZNK QXRNcoEJYUmV9gmhBYJ0XWHUSISxtk0gqo9e/tuYNJvIaQ6rSus2r/jGW0KvGORx dwUnanPoWs81u0ub6mBWwAqBAIdibdZ0szR5+/X4gMGfru+lv1XUpOfzj17Cp0bY tnVxAvvjHJ9cLCYEvDUiLUP2mtUZNeNP/R1nsxw06+QO6lgT5L4rGgDcR6NSYVue jirTejOU3X7lDk2t2hEAj3BXHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeZV9IV JtS+vGcgI56SLmeyPpWtMB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcOQlTYkjJ0q3ojF5k4ScuHi6lbet4fXmK3l45pAF07s362nkl+HiK uKt7WJyr1XiztRQSzvXoEHNoawEmldvsEvXSwqbKF6llJZwsIkF/BW/vClDTqHla RSxUGTyBCHGEnAN/rOP5y8fEk9M+nNNL9TyNrYo7rdVs4WT+Xltsq69dBCJXZVNL aAsUDJK4tDNC7OHkJCLdrn/d/+XPoCU7ClZK77quvnyBIHgJBdYoWViy04i78/b0 4fneZz/L3FgV21ByAN61zqBS/I6CPVTimW+ZqbzYlpnHDHtjfjb0jRkPNyoZso81 iwrUwCU8LF88nHzPHkYyTZIFUfKIOY1Q -----END CERTIFICATE-----Generated at Sun May 5 03:47:46 2024 by rpki-client on console-fra.rpki-client.org