$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: vu9//8/pZAkDU/uqf0qSZKpx7ZqRJ+0HjYZaw96GsuA= Subject key identifier: 37:10:66:A0:90:87:44:9F:0F:B8:AA:61:62:F3:1B:A6:92:AA:19:74 Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: A6 Signing time: Fri 31 May 2024 07:36:34 +0000 Manifest this update: Fri 31 May 2024 07:36:34 +0000 Manifest next update: Fri 07 Jun 2024 07:36:34 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: a4SYtOQI8qmI7MpGvwPfArdFa2odD8Q8llD+Em3euG0=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: 9CpIxhJpqpZgP/T3ieG0/C13phYUk5BrcepNwd47BAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: May 31 07:36:34 2024 GMT Not After : Jun 7 07:36:34 2024 GMT Subject: CN=66597e02-695a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:90:72:23:31:3e:52:69:40:e9:19:9b:9a: 78:2d:d7:a0:09:72:d5:29:cb:96:77:59:7f:1e:0f: 74:f8:75:c3:1e:db:17:a1:67:10:c9:b3:de:9c:9e: a1:7c:cc:ff:7d:16:37:fa:f8:39:30:ae:58:60:26: 8f:89:ae:6f:c7:ca:1c:47:2e:57:b7:cd:5c:14:96: 37:30:8b:52:65:d1:26:d5:2d:e9:d3:9c:81:37:06: 99:06:77:9a:89:39:4a:7a:d7:b7:96:e2:e6:99:b8: 46:14:10:6c:bb:dd:34:51:30:14:89:0f:ae:47:66: 8d:ea:68:27:c6:e8:71:01:48:91:9b:4b:f7:09:38: 44:10:56:ae:0f:a8:ed:89:ae:ce:2f:66:2f:dc:d4: 4a:ba:fe:2b:d6:f0:da:f2:dc:d4:bf:b9:6a:66:26: 92:7a:5a:d3:29:33:af:e8:63:94:03:bc:73:5e:9b: 6b:bc:33:c1:dd:82:02:ac:16:3d:34:40:a4:8e:e1: dd:b9:39:00:18:71:ab:4f:c5:4b:70:c0:6b:71:79: 2e:3b:7e:67:c0:cf:8a:2a:2b:0e:95:6b:5c:c7:18: 33:bc:02:cf:29:b7:9b:c7:a3:5b:08:07:01:94:83: 6b:4f:62:fa:19:db:2a:9a:68:d6:02:49:ba:f8:10: b9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:10:66:A0:90:87:44:9F:0F:B8:AA:61:62:F3:1B:A6:92:AA:19:74 X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:66:14:5d:4e:21:45:70:a9:f2:fa:1d:94:34:18:e0:70:bb: 16:f2:09:da:67:11:98:e2:6e:d6:63:37:a7:73:89:ac:04:ba: fa:73:0f:00:40:fe:85:7f:ad:f6:24:e4:08:ce:27:35:4b:c9: 3f:2b:7d:57:ca:c0:b4:76:af:47:7b:82:df:4e:54:0d:f0:f2: 83:da:dd:d2:cd:21:9f:90:ca:6a:92:a8:74:ef:d4:83:e0:46: 98:ee:d8:db:01:1a:30:c9:29:2f:97:69:dc:41:15:01:4f:1b: af:0e:b6:23:cc:47:0a:cf:a1:50:3e:d7:f5:e7:f3:51:91:d7: 5a:14:31:95:10:10:9c:56:ec:4d:05:1d:2b:91:e3:99:1a:2a: 41:f7:ec:ba:76:ac:81:d5:cc:de:04:e3:d4:98:75:d4:3f:13: e0:f8:60:a5:13:d1:9c:92:98:e0:3d:ac:1b:a7:18:99:bf:86: 5e:41:26:b7:02:1f:60:ce:f0:e8:46:2f:e9:7a:1e:dd:0b:25: b1:c3:c2:5e:34:a2:9a:51:7a:a0:e3:2e:ec:0b:82:08:c2:0f: 3e:5e:7c:e6:0f:42:5f:99:2d:e8:1d:b8:1a:fe:10:c5:61:b2: dd:de:4b:75:ec:40:a6:4c:14:ad:f6:80:e8:a1:75:94:ac:39: 27:bb:c7:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjQwNTMxMDczNjM0WhcNMjQwNjA3MDczNjM0WjAYMRYwFAYD VQQDEw02NjU5N2UwMi02OTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhGQciMxPlJpQOkZm5p4LdegCXLVKcuWd1l/Hg90+HXDHtsXoWcQybPenJ6h fMz/fRY3+vg5MK5YYCaPia5vx8ocRy5Xt81cFJY3MItSZdEm1S3p05yBNwaZBnea iTlKete3luLmmbhGFBBsu900UTAUiQ+uR2aN6mgnxuhxAUiRm0v3CThEEFauD6jt ia7OL2Yv3NRKuv4r1vDa8tzUv7lqZiaSelrTKTOv6GOUA7xzXptrvDPB3YICrBY9 NECkjuHduTkAGHGrT8VLcMBrcXkuO35nwM+KKisOlWtcxxgzvALPKbebx6NbCAcB lINrT2L6GdsqmmjWAkm6+BC5awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcQZqCQ h0SfD7iqYWLzG6aSqhl0MB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaZhRdTiFFcKny+h2UNBjgcLsW8gnaZxGY4m7WYzenc4msBLr6cw8A QP6Ff632JOQIzic1S8k/K31XysC0dq9He4LfTlQN8PKD2t3SzSGfkMpqkqh079SD 4EaY7tjbARowySkvl2ncQRUBTxuvDrYjzEcKz6FQPtf15/NRkddaFDGVEBCcVuxN BR0rkeOZGipB9+y6dqyB1czeBOPUmHXUPxPg+GClE9GckpjgPawbpxiZv4ZeQSa3 Ah9gzvDoRi/peh7dCyWxw8JeNKKaUXqg4y7sC4IIwg8+XnzmD0JfmS3oHbga/hDF YbLd3kt17ECmTBSt9oDooXWUrDknu8fy -----END CERTIFICATE-----Generated at Fri May 31 08:38:30 2024 by rpki-client on console-fra.rpki-client.org