$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: 2ymImb8K+dIJRu5PCtjS4JKN87aRWOrZxKyzd8OeYSI= Subject key identifier: A0:8E:9D:60:08:53:80:EE:65:1C:12:D9:BC:D7:F8:19:BA:47:2C:BA Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0BC8 Signing time: Fri 26 Apr 2024 19:05:37 +0000 Manifest this update: Fri 26 Apr 2024 19:05:36 +0000 Manifest next update: Fri 03 May 2024 19:05:36 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: kGD8m16la6aUAfU7CmYOnBD90ejomZMgMOBYZedVccU=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: khKFj4HAGdLRYDfHw5jX325dFizeKy4xtsPTMmI3K0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Apr 26 19:05:36 2024 GMT Not After : May 3 19:05:36 2024 GMT Subject: CN=662bfb00-01d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:71:71:34:84:31:a2:99:f0:c2:b4:1e:3d:e0: 4e:9c:c6:1f:93:a3:2b:8a:33:65:24:9e:63:3d:f9: d0:e2:45:99:a7:f2:05:25:93:fa:ed:d5:21:98:77: a2:f8:a1:1c:d6:67:78:ca:0f:48:5c:5a:bd:71:73: 35:fe:5e:c4:26:a8:b0:a9:e7:68:20:c1:5a:7b:c3: 21:e0:f6:f4:fd:6b:b7:ed:29:d3:55:ac:ec:92:aa: aa:73:da:98:42:a3:76:76:63:1b:db:92:83:14:22: bd:6a:79:6e:a2:eb:24:4d:74:d5:6a:7c:fe:26:81: 32:65:40:06:7f:e7:ff:83:dd:b7:69:63:12:0f:a7: 76:72:62:60:2d:e8:a1:e4:ba:1a:20:09:bd:b8:c7: cc:bc:cc:b8:30:72:46:e3:a3:43:5f:55:11:75:ea: 5e:0a:bc:11:b8:79:59:df:e0:1f:b7:6b:7d:47:e8: 1f:1a:71:7b:ba:4c:77:8c:5e:61:05:d2:6e:df:f7: e9:48:12:25:55:8e:f3:f6:e0:5e:6e:dc:82:6c:42: d9:b4:9c:c2:5c:fb:8c:0d:df:9c:99:55:2b:e2:25: 4f:88:94:39:9d:2f:b0:b2:1f:19:0c:20:21:6d:33: 86:26:f1:1c:29:ba:29:fa:5c:35:86:c3:ff:3d:42: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8E:9D:60:08:53:80:EE:65:1C:12:D9:BC:D7:F8:19:BA:47:2C:BA X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:99:57:9f:33:a3:3d:16:b8:f0:cd:cb:54:1e:60:2d:4f:11: 9b:da:38:92:1f:27:04:81:1b:db:9b:82:65:ca:87:4c:44:3f: 63:76:6d:a1:c2:44:fb:98:c2:a7:35:40:7b:9c:b4:7e:4b:e3: c0:5c:39:b4:63:97:31:b0:f0:b7:1c:50:97:46:d2:df:d0:03: 9c:7d:9c:18:2b:bd:ef:e7:2c:f0:b2:e4:74:84:08:1e:d1:9c: 1b:7e:2b:bf:7a:fd:29:58:81:56:13:30:07:56:23:cf:8b:2d: c5:f7:5e:bd:bd:7e:ec:b8:99:a0:ac:d3:28:a4:78:6e:3c:59: 73:84:aa:44:84:05:82:aa:0f:5e:d9:4c:16:1e:a8:09:9b:0b: f6:b5:ad:46:52:6a:fb:0b:b2:48:3f:60:8c:b4:cb:c8:ce:ef: aa:b0:ba:a7:1e:29:d2:bc:f4:79:5f:e3:82:d5:6d:3e:67:d9: dd:2a:d3:ae:63:70:87:e5:57:3e:48:cd:7d:c9:d3:f8:ee:90: b3:ad:82:1f:97:cb:d7:d4:99:56:40:44:e5:95:16:59:32:cf: 95:08:c6:40:68:ae:30:b7:6c:70:6e:3b:e8:1c:e9:6d:c4:1b: 25:b5:2c:84:36:31:67:91:32:88:76:16:0f:ff:f4:d0:c1:11: ee:b8:0f:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjQwNDI2MTkwNTM2WhcNMjQwNTAzMTkwNTM2WjAYMRYwFAYD VQQDEw02NjJiZmIwMC0wMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+XFxNIQxopnwwrQePeBOnMYfk6MrijNlJJ5jPfnQ4kWZp/IFJZP67dUhmHei +KEc1md4yg9IXFq9cXM1/l7EJqiwqedoIMFae8Mh4Pb0/Wu37SnTVazskqqqc9qY QqN2dmMb25KDFCK9anluouskTXTVanz+JoEyZUAGf+f/g923aWMSD6d2cmJgLeih 5LoaIAm9uMfMvMy4MHJG46NDX1URdepeCrwRuHlZ3+Aft2t9R+gfGnF7ukx3jF5h BdJu3/fpSBIlVY7z9uBebtyCbELZtJzCXPuMDd+cmVUr4iVPiJQ5nS+wsh8ZDCAh bTOGJvEcKbop+lw1hsP/PUIc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCOnWAI U4DuZRwS2bzX+Bm6Ryy6MB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcmVefM6M9FrjwzctUHmAtTxGb2jiSHycEgRvbm4JlyodMRD9jdm2h wkT7mMKnNUB7nLR+S+PAXDm0Y5cxsPC3HFCXRtLf0AOcfZwYK73v5yzwsuR0hAge 0Zwbfiu/ev0pWIFWEzAHViPPiy3F9169vX7suJmgrNMopHhuPFlzhKpEhAWCqg9e 2UwWHqgJmwv2ta1GUmr7C7JIP2CMtMvIzu+qsLqnHinSvPR5X+OC1W0+Z9ndKtOu Y3CH5Vc+SM19ydP47pCzrYIfl8vX1JlWQETllRZZMs+VCMZAaK4wt2xwbjvoHOlt xBsltSyENjFnkTKIdhYP//TQwRHuuA/z -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:56 2024 by rpki-client on console-ams.rpki-client.org