$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft File: t9SqT11yMa9OdH93IkWsA3ECEPA.mft (raw, json) Hash identifier: C/Qoc8nqdtLouAlSQNYOJZsRJSN7AcL1p9Bl2eZtpIM= Subject key identifier: 0B:EB:74:BB:48:43:C7:72:7C:89:CC:89:00:57:74:8B:A4:27:95:7A Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 Certificate issuer: /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft Manifest number: 015C Signing time: Fri 31 May 2024 05:32:58 +0000 Manifest this update: Fri 31 May 2024 05:32:57 +0000 Manifest next update: Fri 07 Jun 2024 05:32:57 +0000 Files and hashes: 1: t9SqT11yMa9OdH93IkWsA3ECEPA.crl (hash: Z4BK/uLjahRw3aFtSHMflQOL5dhxZOXVbOzlgxX7aeE=) 2: 5D5B0F7C34CA11EDA301482BC4F9AE02.roa (hash: QdE82JCa+rzN4wKDDSZqFCcZCfWColrn6QaXFC11S4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Validity Not Before: May 31 05:32:57 2024 GMT Not After : Jun 7 05:32:57 2024 GMT Subject: CN=6659610a-57f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:98:e3:89:a8:9f:8d:69:9e:e7:de:ef:ad:1b: be:1b:d9:a3:ff:53:37:e7:13:f0:00:e3:54:48:e3: c4:f0:b0:f8:34:a2:87:f3:2b:78:42:30:53:29:a4: 3f:df:58:6d:23:fb:f8:7a:84:f7:42:60:01:65:31: 99:54:4c:b8:91:ff:a3:b7:10:62:b3:2a:bb:ec:10: 79:ff:ef:0c:6f:81:95:77:47:e2:5d:4a:ea:39:cc: 0c:06:62:c5:62:12:c4:94:e6:e3:05:2e:f8:0b:c6: 47:bc:75:6c:e2:40:1a:bd:b6:e4:39:09:ef:de:b7: ad:d7:77:23:2a:1e:05:dd:ce:cf:01:79:86:48:06: 95:c4:29:ff:e7:fa:30:e5:61:e4:c3:97:28:11:73: fc:c2:5d:84:36:74:d7:92:7a:40:01:3b:fb:6e:15: d2:27:d2:2f:a1:02:a9:2e:d1:5d:ba:8c:b1:16:08: 6c:dd:35:cb:b4:07:95:bc:d2:04:17:b2:26:cc:cd: eb:29:36:3d:a1:b9:7d:d0:91:6a:73:21:a8:84:cb: 6c:69:94:e7:b1:0c:35:41:79:45:f8:54:cb:c4:b2: 67:e5:f6:8a:7a:88:91:40:d3:92:b1:ce:f0:98:5d: 34:f4:67:36:8e:8d:22:f3:e0:ea:bf:f5:9f:5a:ca: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:74:BB:48:43:C7:72:7C:89:CC:89:00:57:74:8B:A4:27:95:7A X509v3 Authority Key Identifier: keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:76:03:55:21:bc:b7:6f:ab:b7:18:8e:d7:cb:8e:86:8e:36: c2:69:87:16:d9:2e:4c:0a:df:80:3e:16:2e:05:b2:00:82:52: 77:0d:4e:87:b3:43:32:a0:8a:26:7f:89:82:f6:d8:cd:50:d9: 83:20:9a:f6:7b:0c:af:51:5a:42:69:fc:63:4d:fe:5d:61:d8: bb:84:7b:a8:c2:54:bb:c3:a4:c7:32:6f:91:85:1a:bc:38:36: 5d:f5:ea:24:7e:45:4c:5f:39:6c:dc:cf:05:95:aa:f3:5c:94: 0a:da:5a:cc:b8:7f:87:25:86:09:69:a9:70:b9:53:ea:66:ce: 51:58:c7:17:84:d3:85:2a:86:2e:dc:5d:9a:c4:a6:87:bb:1a: 3d:99:cf:a0:fa:af:0a:a9:73:51:21:7a:a7:d8:19:65:8b:07: 17:3f:06:87:5b:04:d4:0d:0b:88:54:c1:88:2d:6e:69:96:80: 3b:ad:ac:fe:8c:4c:aa:2d:25:ab:8a:31:92:2a:1c:a4:ee:83: d3:98:f6:63:06:07:05:bd:7a:03:0b:33:d0:26:83:d0:66:78: c6:ea:a8:7c:bc:64:6e:48:8a:60:7a:58:e9:fa:c5:0b:fb:ad: 92:b1:a6:3e:8a:00:ba:4e:0d:b2:a8:72:d8:cf:7f:4f:2c:9f: d1:72:c2:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RjYxMTAvBgNVBAUTKEI3RDRBQTRGNUQ3MjMxQUY0RTc0N0Y3NzIyNDVBQzAz NzEwMjEwRjAwHhcNMjQwNTMxMDUzMjU3WhcNMjQwNjA3MDUzMjU3WjAYMRYwFAYD VQQDEw02NjU5NjEwYS01N2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55jjiaifjWme597vrRu+G9mj/1M35xPwAONUSOPE8LD4NKKH8yt4QjBTKaQ/ 31htI/v4eoT3QmABZTGZVEy4kf+jtxBisyq77BB5/+8Mb4GVd0fiXUrqOcwMBmLF YhLElObjBS74C8ZHvHVs4kAavbbkOQnv3ret13cjKh4F3c7PAXmGSAaVxCn/5/ow 5WHkw5coEXP8wl2ENnTXknpAATv7bhXSJ9IvoQKpLtFduoyxFghs3TXLtAeVvNIE F7ImzM3rKTY9obl90JFqcyGohMtsaZTnsQw1QXlF+FTLxLJn5faKeoiRQNOSsc7w mF009Gc2jo0i8+Dqv/WfWsoHFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvrdLtI Q8dyfInMiQBXdIukJ5V6MB8GA1UdIwQYMBaAFLfUqk9dcjGvTnR/dyJFrANxAhDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGNi8xM0E0MjBBODM0 MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1hOU9kSDkzSWtXc0EzRUNF UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5U3FUMTF5TWE5T2RIOTNJa1dzQTNFQ0VQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGNi8xM0E0MjBBODM0MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1h OU9kSDkzSWtXc0EzRUNFUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYdgNVIby3b6u3GI7Xy46GjjbCaYcW2S5MCt+APhYuBbIAglJ3DU6H s0MyoIomf4mC9tjNUNmDIJr2ewyvUVpCafxjTf5dYdi7hHuowlS7w6THMm+RhRq8 ODZd9eokfkVMXzls3M8FlarzXJQK2lrMuH+HJYYJaalwuVPqZs5RWMcXhNOFKoYu 3F2axKaHuxo9mc+g+q8KqXNRIXqn2BlliwcXPwaHWwTUDQuIVMGILW5ploA7raz+ jEyqLSWrijGSKhyk7oPTmPZjBgcFvXoDCzPQJoPQZnjG6qh8vGRuSIpgeljp+sUL +62SsaY+igC6Tg2yqHLYz39PLJ/RcsLZ -----END CERTIFICATE-----Generated at Fri May 31 06:33:57 2024 by rpki-client on console-fra.rpki-client.org