$ rpki-client -vvf rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft File: StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft (raw, json) Hash identifier: WjdPf3+EuyEBC6ewPnGhfTOXOxaZY0JRJpTHjkF4eA0= Subject key identifier: BF:E3:DF:43:04:CB:99:99:6A:B4:3F:57:12:7A:64:05:0D:DF:AD:89 Authority key identifier: 4A:D6:6F:8D:FC:DE:A1:7F:25:67:CA:38:14:54:20:5F:38:06:8F:60 Certificate issuer: /CN=A91E756E/serialNumber=4AD66F8DFCDEA17F2567CA381454205F38068F60 Certificate serial: 0611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft Manifest number: 060C Signing time: Fri 03 May 2024 00:01:03 +0000 Manifest this update: Fri 03 May 2024 00:01:03 +0000 Manifest next update: Fri 10 May 2024 00:01:03 +0000 Files and hashes: 1: StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl (hash: mK8IKq9c7n1wDKWpmtGdA0Cjta5qGxbLtPgEMYQz6aw=) 2: F515761C554311EBAAB65382C4F9AE02.roa (hash: Lo7ST7msAw+VbXSq/mG+XAyKJromzHBAr6bVZJIuUi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E756E/serialNumber=4AD66F8DFCDEA17F2567CA381454205F38068F60 Validity Not Before: May 3 00:01:03 2024 GMT Not After : May 10 00:01:03 2024 GMT Subject: CN=6634293f-3e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:05:cc:cf:4d:13:fa:ac:ad:0b:a2:80:62: 0a:30:f2:ae:64:c1:d0:1d:1d:d5:e9:b8:a3:10:c5: c9:5d:46:c6:a7:fb:78:ea:4e:93:55:b0:e5:f0:65: c3:85:60:88:c4:2a:e1:a4:d2:10:a0:47:4a:fb:b3: 4e:40:19:79:78:03:bf:a8:0b:72:99:89:21:c3:64: 68:d8:1c:c7:68:e7:7d:ce:80:c0:98:61:d5:0d:fe: 91:c4:f0:d9:ef:ca:a7:6f:56:25:66:ac:d7:75:9e: d7:2a:93:2b:29:96:63:b1:e7:ae:69:a9:19:30:c5: 97:80:ed:5e:1a:c2:64:46:bd:ab:0a:5c:49:78:cb: 6b:f4:8f:e3:0d:f8:e9:6f:ca:99:5e:dd:3b:cf:08: 21:03:04:54:34:35:41:69:a2:5a:fe:d0:95:ca:71: 74:3d:e3:7f:49:32:4b:9d:e7:b4:81:f9:f5:bf:b9: 13:c0:43:d6:3f:a5:63:af:b2:91:35:a0:74:f3:a5: 25:e5:2d:c6:5c:70:92:23:e3:a8:93:68:b9:1e:a0: 98:20:c8:a5:0a:62:9a:c8:7a:da:8e:3a:5b:cc:dd: d6:31:df:30:8f:f4:df:dd:d9:f5:af:8f:d5:6c:09: a2:e4:e7:0d:01:8b:e8:e0:e1:7a:65:11:53:d1:dc: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E3:DF:43:04:CB:99:99:6A:B4:3F:57:12:7A:64:05:0D:DF:AD:89 X509v3 Authority Key Identifier: keyid:4A:D6:6F:8D:FC:DE:A1:7F:25:67:CA:38:14:54:20:5F:38:06:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b5:21:09:62:b3:1c:01:24:94:b6:76:c0:08:a9:2a:bc:2a: a3:91:ac:4d:6b:39:9f:f0:aa:b7:6a:77:5e:b9:e0:98:b6:9b: 0c:ff:28:ef:54:ef:25:a3:4a:dc:d3:77:fd:5c:55:f7:e1:7b: df:eb:a4:44:5f:31:4f:18:8e:8b:c2:d0:0e:37:3d:52:08:30: c8:d9:0d:b1:fc:59:79:87:90:07:f2:5a:88:51:9a:cf:7c:9b: a9:52:5f:55:d6:35:31:67:e1:ce:ed:f6:2c:12:5c:fa:9b:93: 3c:0d:75:b3:c1:25:cc:89:26:37:cf:63:d4:8d:bb:28:16:12: 28:fe:c5:0e:fa:bd:4b:87:61:01:a7:3a:cf:32:7f:2e:8c:47: 89:dd:d2:a9:70:49:50:fa:75:76:b7:54:bd:91:6f:72:3b:63: 7a:d6:b3:46:03:bf:d6:a2:23:97:ec:8b:4b:3f:05:51:d6:0d: 13:a7:8a:aa:53:3b:e0:26:d8:23:3c:82:90:2e:65:a2:ff:61: 83:19:43:53:3e:c5:1e:fa:31:7b:fd:b1:5d:17:14:c5:65:16: 3c:87:77:1c:53:7e:18:5c:9f:99:ce:57:fe:5b:3d:16:36:3d: 65:b4:4c:52:79:63:2a:45:22:66:46:41:dd:1e:43:ac:d0:8c: 0c:7b:70:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NkUxMTAvBgNVBAUTKDRBRDY2RjhERkNERUExN0YyNTY3Q0EzODE0NTQyMDVG MzgwNjhGNjAwHhcNMjQwNTAzMDAwMTAzWhcNMjQwNTEwMDAwMTAzWjAYMRYwFAYD VQQDEw02NjM0MjkzZi0zZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1wFzM9NE/qsrQuigGIKMPKuZMHQHR3V6bijEMXJXUbGp/t46k6TVbDl8GXD hWCIxCrhpNIQoEdK+7NOQBl5eAO/qAtymYkhw2Ro2BzHaOd9zoDAmGHVDf6RxPDZ 78qnb1YlZqzXdZ7XKpMrKZZjseeuaakZMMWXgO1eGsJkRr2rClxJeMtr9I/jDfjp b8qZXt07zwghAwRUNDVBaaJa/tCVynF0PeN/STJLnee0gfn1v7kTwEPWP6Vjr7KR NaB086Ul5S3GXHCSI+Ook2i5HqCYIMilCmKayHrajjpbzN3WMd8wj/Tf3dn1r4/V bAmi5OcNAYvo4OF6ZRFT0dyVOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/j30ME y5mZarQ/VxJ6ZAUN362JMB8GA1UdIwQYMBaAFErWb4383qF/JWfKOBRUIF84Bo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2RS9BRDg2Q0FBQTU1 NDExMUVCODY0Q0I4N0RDNEY5QUUwMi9TdFp2amZ6ZW9YOGxaOG80RkZRZ1h6Z0dq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N0WnZqZnplb1g4bFo4bzRGRlFnWHpnR2oyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzU2RS9BRDg2Q0FBQTU1NDExMUVCODY0Q0I4N0RDNEY5QUUwMi9TdFp2amZ6ZW9Y OGxaOG80RkZRZ1h6Z0dqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1tSEJYrMcASSUtnbACKkqvCqjkaxNazmf8Kq3andeueCYtpsM/yjv VO8lo0rc03f9XFX34Xvf66REXzFPGI6LwtAONz1SCDDI2Q2x/Fl5h5AH8lqIUZrP fJupUl9V1jUxZ+HO7fYsElz6m5M8DXWzwSXMiSY3z2PUjbsoFhIo/sUO+r1Lh2EB pzrPMn8ujEeJ3dKpcElQ+nV2t1S9kW9yO2N61rNGA7/WoiOX7ItLPwVR1g0Tp4qq UzvgJtgjPIKQLmWi/2GDGUNTPsUe+jF7/bFdFxTFZRY8h3ccU34YXJ+Zzlf+Wz0W Nj1ltExSeWMqRSJmRkHdHkOs0IwMe3BW -----END CERTIFICATE-----Generated at Fri May 3 00:28:41 2024 by rpki-client on console-fra.rpki-client.org