$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: gedynBLNmCBz9Nel2jyNIFuiiuAlnk/NHWTYNSZ8nPw= Subject key identifier: 3C:64:62:75:28:60:48:D6:6A:B9:85:93:78:A4:15:35:C6:56:DB:6B Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 03F3 Signing time: Sat 01 Jun 2024 03:18:39 +0000 Manifest this update: Sat 01 Jun 2024 03:18:39 +0000 Manifest next update: Sat 08 Jun 2024 03:18:39 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: RuAMe36mWE2ZCrX/Pjp8WzrtKM93MWFqdhjlK9baaAw=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: XQDeK+zuX4yZuNGxO76OLo/RR/Vf43HWk7l1+ErvsQc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: QdzbFvcmoCOklNgvm9AlMI67x/chhtGICIx1wK950zU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Jun 1 03:18:39 2024 GMT Not After : Jun 8 03:18:39 2024 GMT Subject: CN=665a930f-5a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b0:55:5f:0a:b3:7c:7a:b8:a1:0d:c5:d7:41: 5a:73:59:85:73:f4:26:63:20:62:af:b7:e4:5f:32: cc:76:e7:92:29:23:75:80:4b:b7:a1:69:6e:ad:b6: 6e:0b:a8:56:bb:22:67:12:f5:a4:68:12:4e:b9:ca: 85:ab:55:1b:4f:4e:df:4d:74:31:7b:d9:08:f2:f4: b7:83:1e:3c:ba:8a:51:49:b5:37:9b:b7:c6:cc:36: 21:19:34:8c:12:bb:67:9a:60:65:cf:dc:31:2c:e1: ce:80:4c:45:c2:3c:35:77:11:7b:47:93:a6:f4:57: d8:8a:ea:6b:2f:ae:ef:0e:1a:98:51:cc:7a:02:ab: 7d:7f:50:00:4b:f9:43:c1:4b:6b:e7:d7:31:2f:33: 9f:c9:9e:f3:a0:6f:62:91:83:67:a0:0c:18:31:76: f9:1b:dd:be:d2:57:98:c3:25:46:28:5a:35:80:19: 03:d4:11:76:09:39:05:08:48:f0:3e:00:ee:db:1f: 55:75:75:a3:c1:f4:39:44:22:aa:15:7e:00:68:24: d3:3b:97:27:0a:0d:eb:be:9b:ba:47:22:62:22:f3: b4:fd:73:e1:c4:d2:b9:14:e3:31:cb:64:7b:8e:97: a5:07:69:ba:82:dd:07:40:b6:9b:b1:c7:c2:87:66: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:64:62:75:28:60:48:D6:6A:B9:85:93:78:A4:15:35:C6:56:DB:6B X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1b:82:0e:c5:d9:45:3d:c5:3a:bc:55:df:b8:82:a0:87:11: 02:b1:7b:f4:0c:ae:a4:6b:c9:6a:45:89:52:c6:95:e0:a0:ed: 8a:5c:11:7e:5e:5c:67:de:28:63:2e:a2:ea:56:03:4d:88:b5: 50:cd:1f:bf:bd:59:1a:51:b1:85:c2:75:8b:ba:b1:e8:df:07: 1a:ca:27:69:92:69:35:02:8f:02:fa:4b:25:b5:7c:b1:7f:9e: bd:76:75:9d:ec:3b:43:20:ed:40:95:7d:5f:cd:20:5c:4e:5c: 5e:50:b5:d0:6b:d9:95:42:c7:03:38:36:b9:06:92:12:93:32: 40:f3:da:0b:a5:c3:1b:60:be:4b:a8:a3:ce:f4:05:fe:c6:5b: 51:2d:91:39:1e:5d:72:bb:a1:cd:82:90:50:92:74:5c:8c:f4: 2e:fa:3a:c1:99:de:4b:43:a8:9c:83:74:70:dc:41:30:98:62: 2c:72:41:db:48:d8:e8:8b:96:24:36:49:89:b0:a8:bd:4a:40: 4d:f5:cf:c9:1a:bb:85:59:32:ba:7b:44:97:2b:a7:5f:43:f6: 9b:6b:6d:8f:aa:a6:1b:d2:55:77:2a:0d:ad:c0:58:e7:7f:da: b7:0a:21:c5:ec:5a:6e:78:3f:b4:e1:a5:9b:b0:60:54:f1:5f: a9:a6:c2:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjQwNjAxMDMxODM5WhcNMjQwNjA4MDMxODM5WjAYMRYwFAYD VQQDEw02NjVhOTMwZi01YTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrBVXwqzfHq4oQ3F10Fac1mFc/QmYyBir7fkXzLMdueSKSN1gEu3oWlurbZu C6hWuyJnEvWkaBJOucqFq1UbT07fTXQxe9kI8vS3gx48uopRSbU3m7fGzDYhGTSM ErtnmmBlz9wxLOHOgExFwjw1dxF7R5Om9FfYiuprL67vDhqYUcx6Aqt9f1AAS/lD wUtr59cxLzOfyZ7zoG9ikYNnoAwYMXb5G92+0leYwyVGKFo1gBkD1BF2CTkFCEjw PgDu2x9VdXWjwfQ5RCKqFX4AaCTTO5cnCg3rvpu6RyJiIvO0/XPhxNK5FOMxy2R7 jpelB2m6gt0HQLabscfCh2bW9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxkYnUo YEjWarmFk3ikFTXGVttrMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXG4IOxdlFPcU6vFXfuIKghxECsXv0DK6ka8lqRYlSxpXgoO2KXBF+ Xlxn3ihjLqLqVgNNiLVQzR+/vVkaUbGFwnWLurHo3wcayidpkmk1Ao8C+ksltXyx f569dnWd7DtDIO1AlX1fzSBcTlxeULXQa9mVQscDODa5BpISkzJA89oLpcMbYL5L qKPO9AX+xltRLZE5Hl1yu6HNgpBQknRcjPQu+jrBmd5LQ6icg3Rw3EEwmGIsckHb SNjoi5YkNkmJsKi9SkBN9c/JGruFWTK6e0SXK6dfQ/aba22PqqYb0lV3Kg2twFjn f9q3CiHF7FpueD+04aWbsGBU8V+ppsL3 -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:30 2024 by rpki-client on console-ams.rpki-client.org