$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: P8+gUV9EXgf6SJReHMXNFWXnLfMRVgwsoQx+2NN2mXk= Subject key identifier: BE:2D:67:C5:B6:E3:6F:22:EA:4E:29:08:C0:44:E3:CA:23:D1:CC:9F Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2AEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2ADE Signing time: Sat 18 May 2024 15:49:30 +0000 Manifest this update: Sat 18 May 2024 15:49:29 +0000 Manifest next update: Sat 25 May 2024 15:49:29 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: ejUZVk+d6LmkdO0ztxzJkmFnL0dM3usfhy8TWzVsgqY=) 2: E24AEB8CD58A11EE84F5B34AC4F9AE02.roa (hash: FR0QXIct0wobWa2L+Pzp/orKpgRspSooZ6TYlttdz3A=) 3: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: KDp7yXLQRucasOyaQ4PbwZ8ehU0bGG8x2NcGZC5rFL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10987 (0x2aeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: May 18 15:49:29 2024 GMT Not After : May 25 15:49:29 2024 GMT Subject: CN=6648ce09-727d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:90:9a:a8:60:3d:d4:e4:7c:5e:1b:42:5a:fb: 6b:15:08:fc:cd:6a:70:bf:6b:3b:46:21:eb:8d:85: 90:4b:ca:77:85:22:b4:a3:ae:8a:ba:6b:9a:58:c8: c5:f0:cd:30:d9:e4:09:96:81:b6:1b:e5:54:4a:8c: 05:c1:8a:13:b3:80:c7:4b:e8:c0:b9:56:e7:5c:3b: 19:a8:77:90:c6:23:6a:75:a5:07:d8:19:3f:e2:da: 3a:9a:e0:28:84:15:de:a1:47:4b:cf:11:b8:03:64: b3:d1:26:c9:2e:07:b0:3b:0b:64:0e:01:d4:a2:c3: 1c:f5:bb:66:72:e9:7b:e7:72:04:67:71:30:ff:7a: cf:2a:f1:33:4b:2d:18:10:ef:e3:24:22:f0:21:71: fd:20:b0:f5:26:fc:93:34:8e:46:93:30:cf:24:b1: 4a:47:24:63:19:c0:53:49:db:08:94:e2:18:0a:f6: 52:8e:23:40:76:40:6e:47:2c:bf:43:b7:d3:7b:cb: da:67:c6:f8:75:8f:b1:51:bb:3a:6c:d1:3f:bd:3c: 72:2a:d7:d1:91:18:7a:2e:6a:e9:6e:97:85:44:a8: 70:6f:ba:ee:cf:49:9e:04:7c:33:a6:99:bf:91:7b: e7:60:d1:46:86:52:d6:69:6a:45:03:6a:fe:12:9c: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2D:67:C5:B6:E3:6F:22:EA:4E:29:08:C0:44:E3:CA:23:D1:CC:9F X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4b:29:16:7c:38:aa:bf:85:48:7c:0d:f2:e3:af:1f:f7:0b: d5:0d:9d:f2:6a:d4:ef:e0:df:24:60:59:17:7e:5d:4e:37:4c: 8c:a7:cb:c0:7d:fa:e3:d6:d1:9d:7d:7e:56:71:8b:84:9d:69: 76:8e:d3:81:4a:76:76:e6:8d:c5:ae:59:bb:7b:80:e5:70:09: 5a:db:e9:6a:ea:53:88:97:9e:5c:58:18:d3:aa:eb:09:70:e8: 02:88:1f:3f:1c:76:ab:e4:76:91:65:72:4c:b5:bb:c8:c5:fd: 98:ea:de:5b:20:27:d6:eb:0e:82:59:a0:f5:58:ae:ec:31:a9: c8:ce:d2:f3:88:e2:91:e3:dc:74:63:0a:88:29:59:ea:49:6d: 95:5c:4b:6c:16:ae:a1:a6:ae:9e:a4:04:b3:2b:18:ac:8b:13: 02:b6:85:ee:25:27:90:ae:1c:05:9a:5b:0f:da:0f:f8:11:c4: 03:4b:a9:8b:f6:1b:c5:ea:5a:70:1e:53:86:50:68:a1:44:2a: 89:06:97:2b:85:bc:5e:b5:e1:b7:00:0e:a0:5b:1e:e7:ae:32: 18:53:86:18:7d:0d:a6:d0:ef:b7:cc:82:48:cb:e6:2e:02:cf: d8:12:c2:1f:2b:04:3b:cb:d7:19:2e:7a:2a:b7:25:19:09:8f: 63:db:66:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjQwNTE4MTU0OTI5WhcNMjQwNTI1MTU0OTI5WjAYMRYwFAYD VQQDEw02NjQ4Y2UwOS03MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pCaqGA91OR8XhtCWvtrFQj8zWpwv2s7RiHrjYWQS8p3hSK0o66KumuaWMjF 8M0w2eQJloG2G+VUSowFwYoTs4DHS+jAuVbnXDsZqHeQxiNqdaUH2Bk/4to6muAo hBXeoUdLzxG4A2Sz0SbJLgewOwtkDgHUosMc9btmcul753IEZ3Ew/3rPKvEzSy0Y EO/jJCLwIXH9ILD1JvyTNI5GkzDPJLFKRyRjGcBTSdsIlOIYCvZSjiNAdkBuRyy/ Q7fTe8vaZ8b4dY+xUbs6bNE/vTxyKtfRkRh6LmrpbpeFRKhwb7ruz0meBHwzppm/ kXvnYNFGhlLWaWpFA2r+EpwMsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4tZ8W2 428i6k4pCMBE48oj0cyfMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+SykWfDiqv4VIfA3y468f9wvVDZ3yatTv4N8kYFkXfl1ON0yMp8vA ffrj1tGdfX5WcYuEnWl2jtOBSnZ25o3Frlm7e4DlcAla2+lq6lOIl55cWBjTqusJ cOgCiB8/HHar5HaRZXJMtbvIxf2Y6t5bICfW6w6CWaD1WK7sManIztLziOKR49x0 YwqIKVnqSW2VXEtsFq6hpq6epASzKxisixMCtoXuJSeQrhwFmlsP2g/4EcQDS6mL 9hvF6lpwHlOGUGihRCqJBpcrhbxeteG3AA6gWx7nrjIYU4YYfQ2m0O+3zIJIy+Yu As/YEsIfKwQ7y9cZLnoqtyUZCY9j22bA -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org