$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: RqynFqwCekSZnIzC6dRrJ2CIHcApU6zeeNiXUj0VgY8= Subject key identifier: 9D:95:FF:29:A4:B5:38:1C:31:B9:54:9B:D6:D2:52:81:B2:DA:A5:24 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 1453 Signing time: Fri 24 May 2024 17:30:00 +0000 Manifest this update: Fri 24 May 2024 17:29:59 +0000 Manifest next update: Fri 31 May 2024 17:29:59 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: IwmpWFH28EArW0dF8XBPtabKIOUnhbA+2MwH4Nu/ZQk=) 2: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: A4LpXw3tE6LtFJwAxqSanLcmZLfbY18U0yu4iIEqyks=) 3: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: Kp7JQHpvsFVUlwVn2Rd475yiWHy2VFRWMrKOyE7B2hQ=) 4: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: uHEsCfSpAd9ylZUKc41Dt6NLe/VdfDzbHJRLh0Az/n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5223 (0x1467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: May 24 17:29:59 2024 GMT Not After : May 31 17:29:59 2024 GMT Subject: CN=6650ce98-1309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2a:6d:b2:b9:85:f0:bf:db:8b:07:17:35:d7: ca:71:6c:53:c0:b1:e8:7c:6b:c3:08:b5:10:af:ac: 87:a0:33:49:81:9c:e8:59:75:08:65:89:33:ec:21: 0a:0c:50:da:ce:18:8e:56:03:67:ec:f4:91:0d:2a: 0d:89:65:77:0c:ea:33:a3:1c:3f:5f:ca:27:72:23: 4f:e6:69:62:ec:92:31:a2:01:d8:8c:ad:8c:9c:69: 47:08:81:d9:54:16:d7:e2:3a:a0:cc:26:45:98:6b: bc:2a:68:2b:01:c5:d0:53:5c:8b:9d:8a:03:d5:8e: ce:a5:ac:cb:8c:bf:54:f0:fa:52:d9:5d:42:ff:54: 54:24:10:32:84:fb:87:31:7f:f3:1b:ea:39:d4:ff: 75:c5:c2:3c:20:7e:24:ce:e2:2c:5b:39:9c:59:7b: c0:0b:2d:48:ed:5d:72:9e:d7:aa:91:4b:7e:b2:37: 31:43:57:3f:13:cb:7b:f2:af:48:5e:f5:99:45:dd: d4:26:5c:79:74:56:05:15:aa:5d:9b:80:3b:93:3d: 93:7f:70:0b:b8:95:33:17:af:54:91:1d:2a:94:57: 21:5c:6b:91:3a:00:c5:c9:0f:4a:8a:ca:ca:f7:b8: 53:4c:39:c6:b7:a1:44:09:10:f7:ba:71:c8:51:58: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:FF:29:A4:B5:38:1C:31:B9:54:9B:D6:D2:52:81:B2:DA:A5:24 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:4e:76:a4:32:62:89:4a:ea:38:f9:e2:b8:50:44:3d:15:57: 8c:8c:e3:5a:c2:29:81:f2:b7:a9:40:40:51:93:43:76:e7:63: e0:d7:e4:72:f2:45:00:29:89:33:c5:4e:d9:b4:7c:39:bc:d9: b0:b3:9d:d6:c4:3d:6b:65:bd:9d:36:35:7d:26:c9:24:93:40: b7:7b:67:68:ee:b2:4b:a2:f2:21:e4:db:1b:b7:45:15:c1:e2: 3a:ea:3d:b3:40:38:82:1a:ac:15:94:3a:d8:52:e3:23:bc:9d: 6e:30:22:8e:8f:29:5e:7a:0e:92:47:70:f5:66:d7:80:d8:4e: fe:3c:c9:fb:a4:6c:4e:7b:a1:b3:a9:6c:6f:61:4b:a4:26:6c: fd:f6:a8:92:fb:d2:06:7e:1b:9b:5f:64:39:83:fd:bd:f7:52: 83:d2:99:7f:f9:c5:17:d9:eb:c9:ba:fd:8a:06:1d:87:71:d6: eb:5a:ac:82:43:07:79:21:17:73:66:29:d8:5e:d6:0c:61:9f: 14:77:c5:a5:32:b6:04:c8:05:18:dd:09:6a:8f:3b:73:46:e1: 29:bf:d7:8d:c0:43:06:71:6d:62:14:15:85:cf:8c:df:18:28: 9c:f1:10:bd:c6:6b:bb:03:3e:9e:1e:d8:d0:e0:0b:a7:a1:ff: 68:c6:cc:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjQwNTI0MTcyOTU5WhcNMjQwNTMxMTcyOTU5WjAYMRYwFAYD VQQDEw02NjUwY2U5OC0xMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SptsrmF8L/biwcXNdfKcWxTwLHofGvDCLUQr6yHoDNJgZzoWXUIZYkz7CEK DFDazhiOVgNn7PSRDSoNiWV3DOozoxw/X8onciNP5mli7JIxogHYjK2MnGlHCIHZ VBbX4jqgzCZFmGu8KmgrAcXQU1yLnYoD1Y7OpazLjL9U8PpS2V1C/1RUJBAyhPuH MX/zG+o51P91xcI8IH4kzuIsWzmcWXvACy1I7V1ynteqkUt+sjcxQ1c/E8t78q9I XvWZRd3UJlx5dFYFFapdm4A7kz2Tf3ALuJUzF69UkR0qlFchXGuROgDFyQ9KisrK 97hTTDnGt6FECRD3unHIUVjJmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2V/ymk tTgcMblUm9bSUoGy2qUkMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDITnakMmKJSuo4+eK4UEQ9FVeMjONawimB8repQEBRk0N252Pg1+Ry 8kUAKYkzxU7ZtHw5vNmws53WxD1rZb2dNjV9Jskkk0C3e2do7rJLovIh5Nsbt0UV weI66j2zQDiCGqwVlDrYUuMjvJ1uMCKOjyleeg6SR3D1ZteA2E7+PMn7pGxOe6Gz qWxvYUukJmz99qiS+9IGfhubX2Q5g/2991KD0pl/+cUX2evJuv2KBh2HcdbrWqyC Qwd5IRdzZinYXtYMYZ8Ud8WlMrYEyAUY3QlqjztzRuEpv9eNwEMGcW1iFBWFz4zf GCic8RC9xmu7Az6eHtjQ4Aunof9oxszV -----END CERTIFICATE-----Generated at Fri May 24 18:40:28 2024 by rpki-client on console-fra.rpki-client.org