$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft File: rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json) Hash identifier: NA29XPqVDgtlvFVC/Rwlkj7ZW/Gvx30/J8kUAwANPGc= Subject key identifier: A3:1C:2D:75:85:43:00:85:3B:D6:A5:5B:F8:D9:7D:F3:F5:9C:AA:1E Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft Manifest number: 07E0 Signing time: Sun 02 Jun 2024 22:22:15 +0000 Manifest this update: Sun 02 Jun 2024 22:22:15 +0000 Manifest next update: Sun 09 Jun 2024 22:22:15 +0000 Files and hashes: 1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: ftikiGtMyqoNU64LFccVuYS/onvVGCNKysuDvbAX2Zk=) 2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: RwQwosRhz2AHGPwLeWu416NxaFDqzVxgnklEup4iGUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 22:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Validity Not Before: Jun 2 22:22:15 2024 GMT Not After : Jun 9 22:22:15 2024 GMT Subject: CN=665cf097-701e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:d4:9f:2a:6a:82:5a:c2:31:99:46:5d:b9: 98:49:17:f7:0a:43:f4:21:2b:50:bf:82:f6:dc:3f: 1a:00:6e:0c:71:48:56:cb:2e:c0:bc:b1:58:3e:3a: 81:6b:b9:61:54:38:c4:77:26:f0:37:e8:87:ab:a0: e8:53:d9:3a:eb:b7:c5:03:25:b1:bd:65:b6:72:f7: 06:0e:32:04:09:19:73:bb:03:59:7b:92:b3:bd:23: 87:5f:fc:d8:ef:91:c5:54:36:69:e5:44:d0:fa:e6: 97:f1:6d:6d:c5:88:87:9d:08:a5:41:0f:19:3d:6f: 5c:4b:fd:93:19:c3:a2:03:ad:c7:e2:c4:6c:ce:f9: 4d:3b:dd:77:e8:06:1f:49:d7:19:ec:7c:d5:2c:85: 06:f8:e7:9f:65:6b:09:25:79:e7:02:c3:0b:90:2f: 04:89:6a:dc:21:73:0a:4b:d8:e1:48:16:6b:86:58: 7f:92:00:9e:2e:e0:8f:54:82:7f:ee:6d:29:ab:65: ad:1e:9a:8b:3c:38:b3:fa:bb:ca:82:94:5b:cb:10: c9:79:e5:4c:2c:dc:ea:12:19:f4:21:bc:36:8f:86: ba:22:8c:4d:b5:49:b9:ee:f9:7a:27:87:65:84:fe: fd:9e:7d:b0:9a:04:36:75:6a:68:f3:79:41:8d:70: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1C:2D:75:85:43:00:85:3B:D6:A5:5B:F8:D9:7D:F3:F5:9C:AA:1E X509v3 Authority Key Identifier: keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c0:7c:ac:1f:39:2a:7d:ab:84:85:3d:be:84:00:2e:1f:93: 35:6b:3d:93:40:53:26:27:74:72:4d:52:21:ed:6b:87:51:bd: c7:2e:60:d6:5f:2e:ad:0d:84:6a:cc:63:88:c3:99:81:93:6e: f7:fe:e4:fc:61:0d:3b:85:67:97:8c:4a:57:5d:82:fd:5a:f0: 87:99:92:1f:19:7e:20:ca:dc:62:68:0c:2b:a7:b5:46:c0:06: 63:76:dd:d5:98:51:51:55:d4:62:40:8c:89:dc:da:52:f0:f5: 14:90:1e:13:ff:0e:66:c5:ae:84:98:a7:5e:d1:df:c1:b7:d2: 00:9c:0f:f8:0a:b4:6f:67:ee:46:82:fe:69:74:d9:14:bf:07: 62:0f:9f:a5:07:31:bf:c7:56:0d:69:18:06:ab:3c:e0:59:b2: f7:ce:18:f0:fc:9d:f0:a1:7f:33:e1:a7:80:d5:db:d7:4f:b0: f1:fb:eb:fe:64:70:f2:2c:c3:ae:65:63:6e:56:65:60:ea:90: 4d:8b:e8:4d:6d:3b:34:c0:86:36:61:42:53:22:a6:18:99:0a: 58:0b:a4:9b:04:0d:0b:ed:81:e1:aa:26:df:a4:d6:94:7d:b4: db:c5:c5:39:4b:fd:83:66:df:5c:33:c5:17:12:7e:52:b4:64: 9f:9f:71:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RTExMTAvBgNVBAUTKEFDMkUwRDNGNDI3MjIxN0ZFRkI5RDMyRENFMUEzMzJE RTk2QTM4NUUwHhcNMjQwNjAyMjIyMjE1WhcNMjQwNjA5MjIyMjE1WjAYMRYwFAYD VQQDEw02NjVjZjA5Ny03MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDnUnypqglrCMZlGXbmYSRf3CkP0IStQv4L23D8aAG4McUhWyy7AvLFYPjqB a7lhVDjEdybwN+iHq6DoU9k667fFAyWxvWW2cvcGDjIECRlzuwNZe5KzvSOHX/zY 75HFVDZp5UTQ+uaX8W1txYiHnQilQQ8ZPW9cS/2TGcOiA63H4sRszvlNO9136AYf SdcZ7HzVLIUG+OefZWsJJXnnAsMLkC8EiWrcIXMKS9jhSBZrhlh/kgCeLuCPVIJ/ 7m0pq2WtHpqLPDiz+rvKgpRbyxDJeeVMLNzqEhn0Ibw2j4a6IoxNtUm57vl6J4dl hP79nn2wmgQ2dWpo83lBjXBRzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMcLXWF QwCFO9alW/jZffP1nKoeMB8GA1UdIwQYMBaAFKwuDT9CciF/77nTLc4aMy3pajhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFMS8xNjVCN0JGNkJD NkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlYX3Z1ZE10emhvekxlbHFP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDNE5QMEp5SVhfdnVkTXR6aG96TGVscU9GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDVFMS8xNjVCN0JGNkJDNkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlY X3Z1ZE10emhvekxlbHFPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHwHysHzkqfauEhT2+hAAuH5M1az2TQFMmJ3RyTVIh7WuHUb3HLmDW Xy6tDYRqzGOIw5mBk273/uT8YQ07hWeXjEpXXYL9WvCHmZIfGX4gytxiaAwrp7VG wAZjdt3VmFFRVdRiQIyJ3NpS8PUUkB4T/w5mxa6EmKde0d/Bt9IAnA/4CrRvZ+5G gv5pdNkUvwdiD5+lBzG/x1YNaRgGqzzgWbL3zhjw/J3woX8z4aeA1dvXT7Dx++v+ ZHDyLMOuZWNuVmVg6pBNi+hNbTs0wIY2YUJTIqYYmQpYC6SbBA0L7YHhqibfpNaU fbTbxcU5S/2DZt9cM8UXEn5StGSfn3Hk -----END CERTIFICATE-----Generated at Sun Jun 2 23:05:09 2024 by rpki-client on console-fra.rpki-client.org