$ rpki-client -vvf rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft File: 6UOWsst_yPtsQcUvVcybKV4ZL9o.mft (raw, json) Hash identifier: DNUZJucOVSsjVicyQBO2H5NlMXqrzoqV2Ra6SDpd7cc= Subject key identifier: 20:4B:FB:FF:B3:66:F1:AE:75:D1:10:40:31:E4:BA:F0:5B:83:0D:6F Authority key identifier: E9:43:96:B2:CB:7F:C8:FB:6C:41:C5:2F:55:CC:9B:29:5E:19:2F:DA Certificate issuer: /CN=A917000C/serialNumber=E94396B2CB7FC8FB6C41C52F55CC9B295E192FDA Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft Manifest number: 0612 Signing time: Sat 18 May 2024 23:50:51 +0000 Manifest this update: Sat 18 May 2024 23:50:50 +0000 Manifest next update: Sat 25 May 2024 23:50:50 +0000 Files and hashes: 1: 6UOWsst_yPtsQcUvVcybKV4ZL9o.crl (hash: mRCrdKP8avBDGd/oTOelv9LFsqlCtKEcrhodhNnqtWY=) 2: 37303BC0554111EBAE1AA47BC4F9AE02.roa (hash: Kvg4tPhVoW6NrVk+7NPtj3VAC+IGX1fnXHqvIED30BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.crl rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917000C/serialNumber=E94396B2CB7FC8FB6C41C52F55CC9B295E192FDA Validity Not Before: May 18 23:50:50 2024 GMT Not After : May 25 23:50:50 2024 GMT Subject: CN=66493eda-24bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f5:e1:7a:6b:b0:2d:0c:b6:38:5f:8e:c7:6f: cc:1a:b0:4c:4f:17:24:5a:a3:db:45:f4:f5:ca:44: 75:99:b3:41:f9:77:6e:d5:a7:60:78:97:1d:a7:ed: fb:23:f9:cc:28:96:e8:09:76:7b:cc:70:c9:f8:b4: 3e:f8:b0:ad:9d:e4:ba:59:77:20:ee:7e:84:0b:5c: 3e:80:38:92:58:a9:27:37:f2:89:22:8b:8f:89:64: 65:59:bb:93:e9:33:eb:d7:06:d2:41:7a:e2:df:ad: 06:d2:d7:65:c9:45:76:35:d2:08:c6:a1:40:f8:e4: 46:05:ae:ab:5c:8a:fa:36:ab:29:5d:2a:6c:24:76: b3:93:b5:3d:d8:f5:38:66:27:47:d8:cd:f0:72:f0: 5a:51:00:53:6c:3b:27:aa:85:36:9c:f8:da:4b:56: f4:da:a0:0f:3f:82:a1:05:e5:71:bb:45:a6:f3:54: 89:75:f2:d2:2a:11:fe:07:8d:8c:71:c3:89:98:77: 4f:9c:82:6d:a5:fb:77:3f:82:c2:f6:70:ac:a5:80: 0c:a9:92:c5:47:3b:24:cb:63:8d:35:38:47:fd:da: a6:30:77:f6:94:11:3a:61:cf:cf:24:84:89:09:e1: fd:52:41:ee:4d:c9:cd:7c:fe:b6:f6:7d:b2:cf:8b: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4B:FB:FF:B3:66:F1:AE:75:D1:10:40:31:E4:BA:F0:5B:83:0D:6F X509v3 Authority Key Identifier: keyid:E9:43:96:B2:CB:7F:C8:FB:6C:41:C5:2F:55:CC:9B:29:5E:19:2F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:ed:82:0f:ca:3f:df:e4:33:16:5b:d8:26:b6:4c:ef:9b: ec:61:64:b3:ff:cd:eb:82:bd:86:ea:0f:2f:51:ee:eb:90:e7: f7:08:b7:53:c0:65:16:b9:b2:a7:7c:29:82:56:0d:22:c3:80: 87:af:07:09:c7:6b:5b:1d:cb:85:ec:39:a8:4c:87:59:5f:b3: 6f:96:cb:78:64:af:7f:d7:44:30:73:ff:5d:4f:da:65:a6:95: f3:79:3b:7c:e5:35:cf:9e:ea:f5:15:28:3e:24:e9:67:b8:b5: a7:5a:c4:67:91:33:44:9c:34:a9:17:7f:e4:cc:8d:3d:1f:58: 52:da:db:34:de:52:a5:33:1d:d0:c8:57:f7:09:13:8e:d5:bf: a4:11:56:c8:7f:54:54:da:11:c1:40:f9:8f:33:9a:a0:39:10: d6:4f:a3:a5:3e:31:a9:50:3a:f4:97:e4:51:53:b5:eb:56:7a: 67:b0:4c:ab:f9:59:6d:7b:19:98:3e:a4:63:12:f3:e4:c8:a7: 1e:b1:95:e4:80:fc:b4:12:97:87:66:95:75:ac:28:5e:e8:c0: fa:68:15:06:0a:8b:ca:17:01:a2:d8:63:a0:74:4a:bc:35:c0: df:c0:bb:23:87:2a:be:20:09:3d:fb:c3:5a:86:a4:b2:93:18: a9:29:cf:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAwMEMxMTAvBgNVBAUTKEU5NDM5NkIyQ0I3RkM4RkI2QzQxQzUyRjU1Q0M5QjI5 NUUxOTJGREEwHhcNMjQwNTE4MjM1MDUwWhcNMjQwNTI1MjM1MDUwWjAYMRYwFAYD VQQDEw02NjQ5M2VkYS0yNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PXhemuwLQy2OF+Ox2/MGrBMTxckWqPbRfT1ykR1mbNB+Xdu1adgeJcdp+37 I/nMKJboCXZ7zHDJ+LQ++LCtneS6WXcg7n6EC1w+gDiSWKknN/KJIouPiWRlWbuT 6TPr1wbSQXri360G0tdlyUV2NdIIxqFA+ORGBa6rXIr6NqspXSpsJHazk7U92PU4 ZidH2M3wcvBaUQBTbDsnqoU2nPjaS1b02qAPP4KhBeVxu0Wm81SJdfLSKhH+B42M ccOJmHdPnIJtpft3P4LC9nCspYAMqZLFRzsky2ONNThH/dqmMHf2lBE6Yc/PJISJ CeH9UkHuTcnNfP629n2yz4vFNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBL+/+z ZvGuddEQQDHkuvBbgw1vMB8GA1UdIwQYMBaAFOlDlrLLf8j7bEHFL1XMmyleGS/a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDAwQy9GM0ZBQjY1NjU1 M0YxMUVCQkNDNzFDN0JDNEY5QUUwMi82VU9Xc3N0X3lQdHNRY1V2VmN5YktWNFpM OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZVT1dzc3RfeVB0c1FjVXZWY3liS1Y0Wkw5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDAwQy9GM0ZBQjY1NjU1M0YxMUVCQkNDNzFDN0JDNEY5QUUwMi82VU9Xc3N0X3lQ dHNRY1V2VmN5YktWNFpMOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTB+2CD8o/3+QzFlvYJrZM75vsYWSz/83rgr2G6g8vUe7rkOf3CLdT wGUWubKnfCmCVg0iw4CHrwcJx2tbHcuF7DmoTIdZX7Nvlst4ZK9/10Qwc/9dT9pl ppXzeTt85TXPnur1FSg+JOlnuLWnWsRnkTNEnDSpF3/kzI09H1hS2ts03lKlMx3Q yFf3CROO1b+kEVbIf1RU2hHBQPmPM5qgORDWT6OlPjGpUDr0l+RRU7XrVnpnsEyr +VltexmYPqRjEvPkyKcesZXkgPy0EpeHZpV1rChe6MD6aBUGCovKFwGi2GOgdEq8 NcDfwLsjhyq+IAk9+8NahqSykxipKc9q -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org