$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: gSxjanj4KW3DzyC+67YWoFEuaZEX9M/PVdpS6WiXUmE= Subject key identifier: 3B:82:83:9B:B2:6F:AA:F8:58:64:3B:FD:37:1E:82:57:52:DF:7E:2D Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 013A Signing time: Sat 01 Jun 2024 06:17:43 +0000 Manifest this update: Sat 01 Jun 2024 06:17:43 +0000 Manifest next update: Sat 08 Jun 2024 06:17:43 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: iJl3/aWEpxFON025GHt2AY1OfpVJZPY8EscctLCWnzM=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: PmfbaoHvU/qXLbta2paypuXbKvL6PMIjEc6Ef19DWCE=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: CVJKmajOEqiUUSBkudExAdBPL7vUeTji19yjsLM2lHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Jun 1 06:17:43 2024 GMT Not After : Jun 8 06:17:43 2024 GMT Subject: CN=665abd07-251d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:7a:e0:3c:60:2c:7e:f1:5f:9a:03:6f:90: 2f:75:96:e8:56:a6:8f:35:27:04:a6:c6:7f:33:6f: d5:8a:b4:56:6b:b2:d9:45:30:1b:9d:fe:6e:46:47: b2:6f:28:2a:0f:e9:c1:1a:1f:4c:53:a4:44:ef:36: 6a:8a:8c:4e:34:bc:73:ee:f1:1c:f4:48:0a:3e:84: 69:42:af:c3:94:b3:c7:af:84:55:a7:5e:b2:48:7b: 5c:02:54:77:37:d8:15:1e:fb:24:e6:a5:a7:cb:10: 66:45:bb:d4:ce:c2:66:18:d9:6a:44:2e:44:7c:69: e9:df:79:99:85:88:2f:82:aa:21:5f:a3:76:70:d7: 34:7c:b5:54:78:87:c8:9e:09:69:86:a1:cc:42:64: 33:43:ff:25:00:ac:2a:5d:b1:a6:62:65:32:e8:8e: 89:66:ae:23:23:e6:3f:63:90:5f:43:be:43:8d:26: 89:f3:eb:a8:e0:23:76:71:a9:b5:9a:00:1b:ac:e0: a6:b3:e3:5e:5d:ed:92:2f:b5:8a:a3:b8:21:53:13: af:28:0b:7e:4f:5c:8b:1c:30:6e:a0:d9:3b:c6:bd: b7:d8:6b:ab:1c:c9:f0:63:7e:1e:f6:e3:1c:21:b9: 42:44:13:df:4e:86:38:5f:d4:f2:51:4a:88:ae:29: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:82:83:9B:B2:6F:AA:F8:58:64:3B:FD:37:1E:82:57:52:DF:7E:2D X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5e:cd:46:49:df:a4:e8:15:ca:58:20:8c:72:8b:91:32:01: 92:1b:0a:db:bf:33:64:c2:8f:bb:7f:12:3d:8c:b9:8f:cc:b9: c6:c8:87:5d:ed:6d:d6:09:70:e6:f1:a2:07:08:c1:65:a0:d0: 04:a5:5c:c7:fb:b8:1d:8f:be:80:7b:7d:82:75:3b:24:86:80: be:16:4e:95:43:68:3b:5e:d2:87:46:37:b5:f2:5b:67:39:18: 14:fb:36:fc:e4:c4:f6:f0:51:c1:ac:c5:82:d7:cb:52:f2:86: 8f:74:42:8d:80:6a:fb:3e:80:a9:9f:68:a3:e7:9d:d2:d9:dc: 2a:f8:ad:f1:49:a5:19:3d:81:8b:95:d3:51:7b:e4:e9:a1:e2: c6:64:7d:6f:f3:04:74:e0:b1:dd:32:38:4f:1e:aa:09:ee:4c: 03:b0:ec:62:de:c1:d2:c6:e9:8b:ca:27:2a:c8:26:fc:c3:6e: fa:c3:57:f9:18:45:88:ae:e5:99:5b:11:26:45:49:7f:9f:b7: b1:f9:a8:9d:69:d3:c4:2d:95:70:05:b4:42:fd:34:bc:8a:93: 39:a0:4f:98:5d:9b:68:91:70:79:0b:94:da:a7:4f:1f:40:b5: 36:b0:88:31:80:ec:d1:2c:9d:2d:7b:20:29:c6:74:b4:e5:df: db:8e:97:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjQwNjAxMDYxNzQzWhcNMjQwNjA4MDYxNzQzWjAYMRYwFAYD VQQDEw02NjVhYmQwNy0yNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOV64DxgLH7xX5oDb5AvdZboVqaPNScEpsZ/M2/VirRWa7LZRTAbnf5uRkey bygqD+nBGh9MU6RE7zZqioxONLxz7vEc9EgKPoRpQq/DlLPHr4RVp16ySHtcAlR3 N9gVHvsk5qWnyxBmRbvUzsJmGNlqRC5EfGnp33mZhYgvgqohX6N2cNc0fLVUeIfI nglphqHMQmQzQ/8lAKwqXbGmYmUy6I6JZq4jI+Y/Y5BfQ75DjSaJ8+uo4CN2cam1 mgAbrOCms+NeXe2SL7WKo7ghUxOvKAt+T1yLHDBuoNk7xr232GurHMnwY34e9uMc IblCRBPfToY4X9TyUUqIrimzzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuCg5uy b6r4WGQ7/TcegldS334tMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsXs1GSd+k6BXKWCCMcouRMgGSGwrbvzNkwo+7fxI9jLmPzLnGyIdd 7W3WCXDm8aIHCMFloNAEpVzH+7gdj76Ae32CdTskhoC+Fk6VQ2g7XtKHRje18ltn ORgU+zb85MT28FHBrMWC18tS8oaPdEKNgGr7PoCpn2ij553S2dwq+K3xSaUZPYGL ldNRe+TpoeLGZH1v8wR04LHdMjhPHqoJ7kwDsOxi3sHSxumLyicqyCb8w276w1f5 GEWIruWZWxEmRUl/n7ex+aidadPELZVwBbRC/TS8ipM5oE+YXZtokXB5C5Tap08f QLU2sIgxgOzRLJ0teyApxnS05d/bjpfJ -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:20 2024 by rpki-client on console-fra.rpki-client.org