$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json) Hash identifier: J6hbPT+PWNN0Wz8OLY2nH8J9zyJU90TxRNjl+MYbn7g= Subject key identifier: 93:F8:C6:D0:79:73:CA:BF:CE:39:E3:9B:E0:8A:AE:DD:36:52:26:8D Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft Manifest number: 0701 Signing time: Fri 31 May 2024 23:32:08 +0000 Manifest this update: Fri 31 May 2024 23:32:08 +0000 Manifest next update: Fri 07 Jun 2024 23:32:08 +0000 Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: kfMPAR4GLzzk/cgvIKcbXrQ6NPUW8YCRl017X+lM/D8=) 2: 353932A29B3111EEAFB64748C4F9AE02.roa (hash: dA+75XZYfIv7FHA9mDv4EvyHN1uJI7D+ikYpjPHNzzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: May 31 23:32:08 2024 GMT Not After : Jun 7 23:32:08 2024 GMT Subject: CN=665a5df8-b988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:d1:f9:2d:e8:a8:2b:12:0d:d1:fa:63:f5: 34:ce:59:a0:dc:d0:93:2d:d9:7e:0e:68:b5:3a:7a: 63:4d:52:1d:2c:6d:aa:93:dd:66:ce:c6:cd:39:66: d4:04:a1:04:74:62:74:28:9b:99:d5:4a:cf:db:da: ac:92:c2:c0:8b:11:fd:34:e4:92:41:b7:89:38:4d: c5:f1:cb:1f:79:18:cb:a8:b9:40:28:04:7f:56:fd: 3b:8f:f5:7e:3b:d0:5d:e5:fd:23:62:b5:7d:9e:8a: 6f:c7:35:1d:ff:e9:66:e6:e1:e0:b0:01:d3:a0:bc: a7:2d:09:a7:5b:a8:31:b9:31:09:d6:b9:6a:c4:1e: 2f:d4:26:c7:9f:38:8f:ba:b3:81:fc:2c:a8:80:26: b7:18:9d:5f:2b:b8:dc:58:15:77:58:fc:0f:26:47: 87:43:f8:dd:09:13:40:b4:b6:e8:41:12:36:d8:83: 87:f5:1f:fc:8b:5b:6c:52:b8:ff:2b:52:02:21:07: 9e:6e:19:ab:4a:87:02:96:61:8e:16:d9:02:6f:51: 8e:92:93:b2:0b:66:07:cd:49:20:de:9f:a0:90:12: df:42:a7:e8:55:63:0f:5c:4d:f3:68:e3:14:49:c1: 6d:a9:6e:1d:e4:33:00:49:e8:22:3c:7e:9b:b0:08: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F8:C6:D0:79:73:CA:BF:CE:39:E3:9B:E0:8A:AE:DD:36:52:26:8D X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:65:a6:b3:6a:7e:b5:5c:81:04:0c:b9:f6:97:5e:69:b6:10: 5c:91:00:8b:61:b0:cf:66:89:2b:4c:a1:84:e2:61:2e:65:77: 50:9c:df:85:5f:81:7f:57:75:94:f0:f0:57:56:28:13:e1:a9: 9c:80:0e:4c:d3:b0:12:f3:6a:86:6d:be:e3:0d:05:c2:d3:8c: 26:af:0e:46:75:34:c9:a3:a0:87:cd:ff:c9:bf:95:83:5d:33: 3a:3a:6f:19:a5:2b:c3:f9:bd:e9:96:b0:70:ea:d4:aa:42:53: cc:31:89:0d:5f:e5:5b:41:b1:2f:93:97:f8:18:22:14:b4:e3: bf:5c:4f:74:37:71:9b:d6:06:f9:e3:1f:b5:a2:a7:67:a0:17: fd:07:f8:43:87:99:99:74:88:ee:43:57:1a:5e:a7:46:e8:94: 6e:6c:96:78:32:be:fd:34:d2:da:ca:8b:03:ff:6b:70:bb:93: ee:ec:4f:69:e5:4f:60:83:62:c9:fa:3a:ac:8f:ff:82:c6:aa: c6:3e:7f:5b:ae:2e:30:82:db:e2:69:30:54:63:6a:86:4a:3f: 70:7f:06:2b:62:56:b9:81:93:d8:ed:fe:22:39:17:37:7a:33: 3a:63:ed:61:c1:de:df:d1:30:81:d1:a6:76:b9:eb:ce:61:6e: 27:cd:51:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjQwNTMxMjMzMjA4WhcNMjQwNjA3MjMzMjA4WjAYMRYwFAYD VQQDEw02NjVhNWRmOC1iOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiTR+S3oqCsSDdH6Y/U0zlmg3NCTLdl+Dmi1OnpjTVIdLG2qk91mzsbNOWbU BKEEdGJ0KJuZ1UrP29qsksLAixH9NOSSQbeJOE3F8csfeRjLqLlAKAR/Vv07j/V+ O9Bd5f0jYrV9nopvxzUd/+lm5uHgsAHToLynLQmnW6gxuTEJ1rlqxB4v1CbHnziP urOB/CyogCa3GJ1fK7jcWBV3WPwPJkeHQ/jdCRNAtLboQRI22IOH9R/8i1tsUrj/ K1ICIQeebhmrSocClmGOFtkCb1GOkpOyC2YHzUkg3p+gkBLfQqfoVWMPXE3zaOMU ScFtqW4d5DMASegiPH6bsAi42QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJP4xtB5 c8q/zjnjm+CKrt02UiaNMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ Yy16dWRkWjFnMVJsT0NOSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbZaazan61XIEEDLn2l15pthBckQCLYbDPZokrTKGE4mEuZXdQnN+F X4F/V3WU8PBXVigT4amcgA5M07AS82qGbb7jDQXC04wmrw5GdTTJo6CHzf/Jv5WD XTM6Om8ZpSvD+b3plrBw6tSqQlPMMYkNX+VbQbEvk5f4GCIUtOO/XE90N3Gb1gb5 4x+1oqdnoBf9B/hDh5mZdIjuQ1caXqdG6JRubJZ4Mr79NNLayosD/2twu5Pu7E9p 5U9gg2LJ+jqsj/+CxqrGPn9bri4wgtviaTBUY2qGSj9wfwYrYla5gZPY7f4iORc3 ejM6Y+1hwd7f0TCB0aZ2uevOYW4nzVHR -----END CERTIFICATE-----Generated at Sat Jun 1 00:33:00 2024 by rpki-client on console-fra.rpki-client.org