$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft File: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft (raw, json) Hash identifier: 0IWWu0ulpgkxMg4BDIbvVtRBQfwMGqyu8Ul1NFZ7ZQ4= Subject key identifier: 8C:F9:10:8C:EE:E5:5B:2C:37:81:26:71:8F:F4:7C:12:55:02:B8:29 Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34 Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft Manifest number: A5 Signing time: Mon 27 May 2024 07:09:38 +0000 Manifest this update: Mon 27 May 2024 07:09:37 +0000 Manifest next update: Mon 03 Jun 2024 07:09:37 +0000 Files and hashes: 1: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl (hash: R+pq0As1S0C5w17zdnFl9Xx0Ff+3e79USu65UJq36Fc=) 2: 7478D3DEA2FF11EEAACCC277C4F9AE02.roa (hash: JzOHHnqh2iFvLCgx6cvkHyQUjlkaRWCgHvLm4r8uUlQ=) 3: 9AADC284366311EEB376DC3AC4F9AE02.roa (hash: 9uYX3CjXEJqlYPj/6CiDNmBoJORhrNpMXVGB4tpOtL4=) 4: 986FD2A0366311EEB376DC3AC4F9AE02.roa (hash: yM7FXdWuE2UZnTW+65FKFTdQqIxzSI3FpvRpWCAIcFk=) 5: 9767C3CC366311EEB376DC3AC4F9AE02.roa (hash: DtRh6oPmZohJvG9a52rK88idIKJiZ7rdxujP02iF2rA=) 6: 97F664EC366311EEB376DC3AC4F9AE02.roa (hash: stWnGqaqYbdAXWFnccM0Jl5xRwMIg1g93WPDr+HfaPY=) 7: 9663A3B0366311EEB376DC3AC4F9AE02.roa (hash: 47n11BUnYXFyOgdnag0cP1y39/QEOnkaJIpqDBKwDfU=) 8: 99B68AAA366311EEB376DC3AC4F9AE02.roa (hash: GV1XN0BKMLWB+MldTetajMD4JzpNFN2l0QJLhkSXL1o=) 9: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (hash: nKAYyKucul0PyVEQSP4KtKeozkeHS/TQ29ApmSMXdwE=) 10: 95EA48DA366311EEB376DC3AC4F9AE02.roa (hash: 6CMQR3cG9JcRQR8RqiR5Zj2qiNnRvB6d0Qoa5aZiBnw=) 11: 993E65A2366311EEB376DC3AC4F9AE02.roa (hash: ZUQvJch1+9PvdkPgm3kBouJISRLjzQw/rqvDQg45F1Q=) 12: 957D5E14366311EEB376DC3AC4F9AE02.roa (hash: uiHVl0sNi8hL/AdpbAq2BttOlid0JIt346wOqBTE4Ic=) 13: 9B616A50366311EEB376DC3AC4F9AE02.roa (hash: raCB88uan7GyzL5N9z9Gid1Sn1stTp+VOERfyeVGjrA=) 14: 9C62F7D4366311EEB376DC3AC4F9AE02.roa (hash: ZoMmpRY4g9G3GG9YFdq+XHn4uq91HXfA018ctJF/a88=) 15: 9BDF5D70366311EEB376DC3AC4F9AE02.roa (hash: SjWjQVS+EoRNlHr9bf3K2RwXAi3UrFve0b6hxDfJ+go=) 16: 9A3920B4366311EEB376DC3AC4F9AE02.roa (hash: mfxovs5RaqtMJrFFNnLHbwx01sFaovFquwuHcKcifGc=) 17: 7584425EA2FF11EEAACCC277C4F9AE02.roa (hash: WFX3rJgdiL4agtAVlnDUWV3z1ZsATefSMxzR4hDZhfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934 Validity Not Before: May 27 07:09:37 2024 GMT Not After : Jun 3 07:09:37 2024 GMT Subject: CN=665431b1-be5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:7d:e9:b4:a3:f9:62:7f:2e:85:54:be:1f: 53:13:98:8a:7c:ab:50:47:5b:ba:94:72:ba:79:89: 16:42:e9:14:33:3b:03:a2:b6:87:17:a8:59:73:d8: 98:b8:d4:cf:2c:99:54:3a:0c:df:2b:2a:7c:15:85: 19:1c:d1:72:df:58:57:07:75:79:16:34:60:55:ef: f3:24:1b:38:fe:d6:44:af:c1:d5:9a:13:4b:97:13: 6d:39:ea:d1:83:5a:25:34:15:a7:4e:1b:b9:49:8d: aa:f5:4e:3a:eb:7d:75:b3:21:e4:f7:3b:c4:61:0b: 8d:d9:f8:1d:0d:98:89:7c:6a:e2:0c:4a:f9:13:46: 4e:69:34:c4:a2:43:ee:a1:b2:d3:83:55:44:e1:3a: 4f:ea:36:6a:2a:ff:26:a7:6e:a5:cb:91:79:cd:f3: 2d:f9:f3:42:9a:b6:05:6b:fe:6c:30:58:7a:ee:7c: 36:0f:99:4e:26:c9:2e:8c:38:dd:3b:bb:c3:88:89: 2a:19:3e:0f:a8:11:f5:a5:8e:e9:4b:23:6b:ba:c3: 31:6b:0d:bf:cf:ae:0f:5e:3e:a3:d7:cd:b1:b5:a1: 79:7b:51:a7:44:33:9e:3e:23:d1:77:b1:73:bb:67: 12:fe:b9:07:bb:72:3b:35:a9:90:bc:49:d9:bc:f2: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F9:10:8C:EE:E5:5B:2C:37:81:26:71:8F:F4:7C:12:55:02:B8:29 X509v3 Authority Key Identifier: keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:a7:3c:a2:8f:9d:7b:13:8d:78:f7:2b:c4:98:03:e5:24:76: 1c:7f:69:6c:d1:13:46:91:32:3b:51:a7:94:d6:d4:b3:42:a7: 9c:d3:88:71:26:10:aa:81:bd:ef:37:68:1c:d3:61:63:1b:12: 52:cd:85:ae:16:60:e0:22:22:68:db:03:cc:79:03:7b:54:61: 57:2b:29:87:49:ad:e5:f1:c5:eb:45:0a:86:9d:ec:16:9a:ea: 95:49:61:5e:92:6b:3c:e1:7e:cf:75:ed:59:9f:ff:d8:b1:84: 1d:cf:0c:d7:97:2e:42:b4:ff:0d:9d:c6:28:51:13:a8:ce:cc: c5:c5:4e:39:0d:6d:84:e4:a6:9f:a0:d9:87:ee:e0:92:2b:4a: 58:96:a0:7a:b4:e4:1b:93:9d:3e:d6:bf:a5:b3:d4:df:f5:aa: df:47:ae:eb:c1:31:79:de:ea:97:3e:17:ac:92:a4:6c:f1:7b: 1c:db:d1:66:5a:b9:2d:ec:63:8c:00:7c:ab:83:c5:97:ad:f2: 7b:60:01:ce:ac:8b:e2:f1:33:1a:6d:9a:94:de:d3:84:d3:0b: 46:84:34:9d:22:c2:e6:b0:68:f1:5c:a9:e0:19:d5:a1:a3:47: c0:a7:c0:2e:51:7d:fe:30:90:e7:23:7d:49:45:6c:67:41:a2: 92:4f:4b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF NEMzMkM5MzQwHhcNMjQwNTI3MDcwOTM3WhcNMjQwNjAzMDcwOTM3WjAYMRYwFAYD VQQDEw02NjU0MzFiMS1iZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaV96bSj+WJ/LoVUvh9TE5iKfKtQR1u6lHK6eYkWQukUMzsDoraHF6hZc9iY uNTPLJlUOgzfKyp8FYUZHNFy31hXB3V5FjRgVe/zJBs4/tZEr8HVmhNLlxNtOerR g1olNBWnThu5SY2q9U466311syHk9zvEYQuN2fgdDZiJfGriDEr5E0ZOaTTEokPu obLTg1VE4TpP6jZqKv8mp26ly5F5zfMt+fNCmrYFa/5sMFh67nw2D5lOJskujDjd O7vDiIkqGT4PqBH1pY7pSyNrusMxaw2/z64PXj6j182xtaF5e1GnRDOePiPRd7Fz u2cS/rkHu3I7NamQvEnZvPJPzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz5EIzu 5VssN4EmcY/0fBJVArgpMB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM2Qy82REUzQ0U3QzM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4 WHBrNklhS3lrb1Rrd3l5VFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3pzyij517E4149yvEmAPlJHYcf2ls0RNGkTI7UaeU1tSzQqec04hx JhCqgb3vN2gc02FjGxJSzYWuFmDgIiJo2wPMeQN7VGFXKymHSa3l8cXrRQqGnewW muqVSWFekms84X7Pde1Zn//YsYQdzwzXly5CtP8NncYoUROozszFxU45DW2E5Kaf oNmH7uCSK0pYlqB6tOQbk50+1r+ls9Tf9arfR67rwTF53uqXPheskqRs8Xsc29Fm Wrkt7GOMAHyrg8WXrfJ7YAHOrIvi8TMabZqU3tOE0wtGhDSdIsLmsGjxXKngGdWh o0fAp8AuUX3+MJDnI31JRWxnQaKST0sn -----END CERTIFICATE-----Generated at Mon May 27 07:39:39 2024 by rpki-client on console-fra.rpki-client.org