$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: VtjfS3LfWZPIIxqWdfF9Jp8iCsDKPLdA6XYOf8bPKkI= Subject key identifier: 3C:EA:73:6B:86:54:74:CF:4F:D3:4B:DC:5C:98:A1:9D:8A:C3:43:7F Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1A43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1A1E Signing time: Sun 02 Jun 2024 16:57:19 +0000 Manifest this update: Sun 02 Jun 2024 16:57:19 +0000 Manifest next update: Sun 09 Jun 2024 16:57:19 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: wczKXOqbGLrBIKeCXENEwsnVwVUEa7xnMJX1GE7F+uk=) 2: DC3B90E4520011ECA6088714C4F9AE02.roa (hash: K5vX3/pfInzYJQMjnl6onnxbmvYpmQCUe18iHRzsIMI=) 3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: 4zbXGA1HyqHDY7edoWPP/N+Qt3x+ZxhB3yodtRRSg98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 16:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6723 (0x1a43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Jun 2 16:57:19 2024 GMT Not After : Jun 9 16:57:19 2024 GMT Subject: CN=665ca46f-d620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:9f:8b:d2:5f:e8:be:89:6b:cc:ac:27:3f: 92:39:e7:9e:c6:b2:9f:df:78:eb:00:44:eb:cd:db: d0:db:a3:8c:e0:2c:f4:a1:3b:e9:44:cc:66:c5:67: 82:75:5f:7a:ca:73:53:d5:79:0a:bf:f0:45:02:ec: c5:0c:b3:86:cf:18:32:d2:01:6d:b4:b4:fd:89:06: e2:a5:54:db:9a:66:c4:96:ab:63:19:61:7e:29:3b: ef:3b:95:9e:d1:fc:be:ba:23:79:96:c0:f6:07:13: 70:a4:fb:b5:9c:38:46:13:2e:87:cf:24:5e:92:b3: 16:60:22:4c:38:52:86:73:b0:cc:96:29:e2:b9:5c: f0:f2:8d:f3:46:de:52:9a:97:f9:d2:bd:7f:de:3f: 8c:67:c7:89:22:d6:aa:db:ea:8c:9a:9e:52:54:5b: a5:9b:90:e5:38:af:ec:79:4f:3b:22:9e:0b:3e:71: 8d:d8:2d:47:59:e3:c8:b0:59:02:bc:78:3a:6b:77: d2:2d:ef:54:32:25:58:52:c0:56:a2:ff:00:35:48: 32:dc:b0:01:30:a3:c1:ed:b0:f5:0f:9e:6f:59:9f: 6f:96:f2:de:92:2d:b5:33:fe:ca:cd:d5:2e:a6:bc: 80:4f:b7:5e:93:6f:e0:1f:98:0e:e4:c8:b0:9c:ee: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:73:6B:86:54:74:CF:4F:D3:4B:DC:5C:98:A1:9D:8A:C3:43:7F X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bb:19:9c:9d:7e:e7:89:26:ce:bd:18:d5:b6:e9:92:ac:d7: d7:37:ea:ec:8e:b0:b1:e5:65:40:1c:89:7f:f2:d0:1e:69:16: cd:29:c2:ab:6a:2b:66:87:72:85:d7:3b:36:8d:01:3e:b5:1d: d4:75:10:38:8f:dc:c1:12:27:4d:4b:44:f3:a3:93:b9:0c:c5: 56:9c:e5:bf:dd:04:4b:eb:d9:a4:c0:47:19:53:cd:e2:c3:d8: 06:6d:45:de:7e:aa:b4:54:09:1a:a0:de:c7:3e:b9:55:97:fe: 57:d6:af:d8:ab:43:9b:53:a1:81:68:05:bc:1a:07:a7:a4:93: 42:90:3a:92:42:3e:2a:a2:9c:f7:c3:ff:30:be:e8:bd:1b:d1: 7b:45:b8:2b:6b:1c:26:12:48:f2:68:42:1d:b9:80:d5:eb:b8: ce:81:5d:c7:94:0a:5b:33:23:22:c1:b6:69:f5:db:2a:48:fd: 5f:6c:e0:2b:ff:e5:6b:6e:e5:39:38:b1:32:b0:66:38:81:2f: 20:27:98:95:af:a2:93:01:48:d2:9a:d3:19:2d:ce:a8:12:d9: 6d:5b:96:fe:b1:b8:24:dc:d5:e4:6d:4b:f7:3a:bd:21:25:32: 17:ce:e5:36:3a:50:85:5d:1a:9d:5f:45:c8:db:a0:80:ab:76: 77:7b:62:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjQwNjAyMTY1NzE5WhcNMjQwNjA5MTY1NzE5WjAYMRYwFAYD VQQDEw02NjVjYTQ2Zi1kNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrCfi9Jf6L6Ja8ysJz+SOeeexrKf33jrAETrzdvQ26OM4Cz0oTvpRMxmxWeC dV96ynNT1XkKv/BFAuzFDLOGzxgy0gFttLT9iQbipVTbmmbElqtjGWF+KTvvO5We 0fy+uiN5lsD2BxNwpPu1nDhGEy6HzyRekrMWYCJMOFKGc7DMliniuVzw8o3zRt5S mpf50r1/3j+MZ8eJItaq2+qMmp5SVFulm5DlOK/seU87Ip4LPnGN2C1HWePIsFkC vHg6a3fSLe9UMiVYUsBWov8ANUgy3LABMKPB7bD1D55vWZ9vlvLeki21M/7KzdUu pryAT7dek2/gH5gO5MiwnO5y8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzqc2uG VHTPT9NL3FyYoZ2Kw0N/MB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJuxmcnX7niSbOvRjVtumSrNfXN+rsjrCx5WVAHIl/8tAeaRbNKcKr aitmh3KF1zs2jQE+tR3UdRA4j9zBEidNS0Tzo5O5DMVWnOW/3QRL69mkwEcZU83i w9gGbUXefqq0VAkaoN7HPrlVl/5X1q/Yq0ObU6GBaAW8GgenpJNCkDqSQj4qopz3 w/8wvui9G9F7RbgraxwmEkjyaEIduYDV67jOgV3HlApbMyMiwbZp9dsqSP1fbOAr /+VrbuU5OLEysGY4gS8gJ5iVr6KTAUjSmtMZLc6oEtltW5b+sbgk3NXkbUv3Or0h JTIXzuU2OlCFXRqdX0XI26CAq3Z3e2JH -----END CERTIFICATE-----Generated at Sun Jun 2 17:59:46 2024 by rpki-client on console-fra.rpki-client.org