$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: 3jSGQ+JDESNBP9ShMmWsoojpbXCituE3pOLkH6EnhMc= Subject key identifier: ED:A7:11:C3:27:31:E6:F1:2C:43:57:0F:1B:C8:A8:F1:29:96:7C:33 Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 09F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 09DE Signing time: Fri 31 May 2024 21:25:19 +0000 Manifest this update: Fri 31 May 2024 21:25:19 +0000 Manifest next update: Fri 07 Jun 2024 21:25:19 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: Z90Avvk7qYP0RPaun3pquDAlBqPFzB/9JbOf/odD/l0=) 2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: WUQ9oV5ylba1WYvMvi8YcfDIyI4Ea0WkGe2gC4D2+pc=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: L9FXc866DgpJUjP8X+4KuPnyfrF1JFS1NUYDRCmwLNQ=) 4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: WzZq3RkznJMH5nxTQuLLQSDrsNKq3jGJzyKHb8w1naI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: May 31 21:25:19 2024 GMT Not After : Jun 7 21:25:19 2024 GMT Subject: CN=665a403f-0113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:8c:ca:bf:28:81:bd:f7:71:e6:e1:2d:ce: 25:03:98:c1:08:46:ac:04:9a:c4:6b:51:56:9e:9c: 58:d2:f4:1c:4f:87:aa:f1:df:b6:7b:ad:b2:1c:24: 87:d1:e8:0d:24:73:b0:76:dd:d8:43:25:79:ad:de: 85:7d:92:ac:7e:73:8a:02:74:db:c4:6c:69:ae:f1: 97:65:28:9e:41:2a:dc:4f:f6:67:4b:73:f9:ff:35: a7:25:d4:34:a6:e9:71:b2:6d:a4:24:a0:d8:98:ec: 1b:55:25:bc:0b:64:93:16:75:42:58:2c:bb:e3:2d: 8e:87:1e:7b:f6:41:8a:70:b2:a4:c2:a8:ea:1e:09: a7:74:c5:11:de:85:f1:01:09:7b:e6:09:71:98:44: 3d:81:4c:3e:73:aa:4e:75:b6:67:89:b6:7d:aa:46: fd:9c:ea:41:2e:f6:55:b5:f5:d7:bf:da:7b:a8:34: de:33:fa:5e:80:ab:d5:7d:73:20:60:df:56:71:6e: 7c:35:87:59:22:25:3c:b7:fd:6f:c9:08:b5:58:22: 85:83:9e:0d:05:e4:eb:6e:84:32:17:1a:a5:a1:08: 33:f0:f1:ba:74:34:37:81:9d:ac:41:9c:b4:47:c5: e5:33:b7:77:a5:09:76:9c:88:59:45:ee:d5:ec:30: 1f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A7:11:C3:27:31:E6:F1:2C:43:57:0F:1B:C8:A8:F1:29:96:7C:33 X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5d:f0:f8:b9:82:7e:c4:14:7b:59:5d:4c:48:5a:62:09:cb: 50:8b:a0:33:1b:d2:2f:05:5e:b3:ef:fe:82:10:f5:6e:89:e6: 57:d5:f8:cb:4c:b9:82:c4:c4:30:0e:10:dc:73:1c:59:e0:98: d4:15:a9:a6:4c:ec:b4:4e:45:f6:15:e3:8e:8a:3a:10:65:6e: d8:d5:13:4a:97:67:1f:2f:f5:ff:1b:a9:b9:bd:e9:47:21:67: 2c:97:25:61:8f:7c:0f:50:09:f3:74:91:b6:c8:b6:8e:3c:0f: e2:f8:78:20:99:f9:74:21:c6:c9:24:36:aa:ed:56:71:64:e0: 83:5b:ca:6c:d4:de:55:93:29:d4:59:fb:47:00:7a:d9:33:10: 5e:e5:d8:09:ab:77:09:33:e4:48:50:df:f0:5c:1e:5e:ff:ce: 74:66:24:c0:9d:34:7e:d2:df:f3:fe:8f:27:53:f1:a7:35:9c: cc:74:5e:dc:c8:13:b7:4d:43:e1:64:85:5b:50:d4:8f:93:c1: 1d:95:9e:ba:1f:06:8f:e4:e1:80:ba:70:fd:ba:b3:1d:86:6b: aa:89:05:50:37:9f:27:8a:ee:64:63:bb:19:aa:50:e3:76:52: 7d:c2:8f:32:05:1b:cf:24:6c:ab:1f:cd:c6:43:26:e8:e1:6b: 40:f0:a8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjQwNTMxMjEyNTE5WhcNMjQwNjA3MjEyNTE5WjAYMRYwFAYD VQQDEw02NjVhNDAzZi0wMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gSMyr8ogb33cebhLc4lA5jBCEasBJrEa1FWnpxY0vQcT4eq8d+2e62yHCSH 0egNJHOwdt3YQyV5rd6FfZKsfnOKAnTbxGxprvGXZSieQSrcT/ZnS3P5/zWnJdQ0 pulxsm2kJKDYmOwbVSW8C2STFnVCWCy74y2Ohx579kGKcLKkwqjqHgmndMUR3oXx AQl75glxmEQ9gUw+c6pOdbZnibZ9qkb9nOpBLvZVtfXXv9p7qDTeM/pegKvVfXMg YN9WcW58NYdZIiU8t/1vyQi1WCKFg54NBeTrboQyFxqloQgz8PG6dDQ3gZ2sQZy0 R8XlM7d3pQl2nIhZRe7V7DAfEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2nEcMn MebxLENXDxvIqPEplnwzMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGXfD4uYJ+xBR7WV1MSFpiCctQi6AzG9IvBV6z7/6CEPVuieZX1fjL TLmCxMQwDhDccxxZ4JjUFammTOy0TkX2FeOOijoQZW7Y1RNKl2cfL/X/G6m5velH IWcslyVhj3wPUAnzdJG2yLaOPA/i+Hggmfl0IcbJJDaq7VZxZOCDW8ps1N5VkynU WftHAHrZMxBe5dgJq3cJM+RIUN/wXB5e/850ZiTAnTR+0t/z/o8nU/GnNZzMdF7c yBO3TUPhZIVbUNSPk8EdlZ66HwaP5OGAunD9urMdhmuqiQVQN58niu5kY7sZqlDj dlJ9wo8yBRvPJGyrH83GQybo4WtA8Kiu -----END CERTIFICATE-----Generated at Fri May 31 22:13:04 2024 by rpki-client on console-fra.rpki-client.org