$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json) Hash identifier: ugv8D1lMGHFh8lgPtylq1IPT/78ljGUjPcNNtakFE3o= Subject key identifier: F3:1D:F2:60:5E:BB:07:58:48:43:D1:8B:54:EA:55:EC:FD:69:13:DF Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Certificate serial: 0B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft Manifest number: 0B14 Signing time: Fri 31 May 2024 20:30:39 +0000 Manifest this update: Fri 31 May 2024 20:30:39 +0000 Manifest next update: Fri 07 Jun 2024 20:30:39 +0000 Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: ie9+nSYh9An+ykRPqVABJ58FzKMY3H69/xwaMeDdUmM=) 2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: 3wfHJkQJq7BbqeUmywofZ0MsnnQpJ3mY5CnT0Sqh690=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2842 (0xb1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Validity Not Before: May 31 20:30:39 2024 GMT Not After : Jun 7 20:30:39 2024 GMT Subject: CN=665a336f-8360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:83:cc:1e:48:97:d6:0c:d5:ca:48:06:50: e0:9b:9c:61:ea:d5:68:19:dc:f5:b8:d7:84:dd:7f: 47:b6:23:5c:8d:6e:02:92:4b:ea:7c:59:12:d4:aa: b9:0c:03:27:07:9e:9c:0a:67:20:08:29:7c:64:9e: a3:b3:b0:01:d0:d1:96:7e:b1:63:67:32:7b:99:9f: 1d:75:18:8e:04:fe:49:3e:76:73:a8:c0:e4:14:d3: 56:04:1d:b4:a0:d4:3d:eb:b8:bb:01:e5:03:69:04: 00:bc:59:d7:dc:c3:4a:5f:b0:52:70:46:ba:5b:ee: ac:fa:3a:19:d9:0b:de:e8:14:3b:1f:e9:4d:c7:4a: e6:e4:24:f9:de:ec:df:7f:28:74:c0:f1:0d:d6:9e: 8f:bb:24:a8:e3:db:28:2d:8d:4a:f2:0c:70:52:c6: a5:63:05:0e:67:da:9c:38:17:87:7e:4a:3a:09:cd: 5f:a3:9f:5c:d2:ad:bc:d5:bd:af:27:20:68:4a:a5: 27:78:a8:85:55:47:16:cb:2f:e5:10:68:58:7c:12: 8b:a6:ad:7c:72:5c:c7:16:35:d9:af:5f:d3:0a:0d: e6:a4:39:d2:47:3c:c5:4f:d1:ce:b5:46:09:0e:67: 69:c7:38:fe:81:f0:0b:42:21:49:70:06:a2:35:ba: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1D:F2:60:5E:BB:07:58:48:43:D1:8B:54:EA:55:EC:FD:69:13:DF X509v3 Authority Key Identifier: keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:43:43:e0:68:ab:c2:b2:a7:ce:de:42:f5:12:05:3a:13:25: 6a:d6:b1:0c:be:ea:92:d3:f2:9e:25:88:ba:d1:63:40:3b:4e: fe:4d:1d:2b:93:ed:54:70:d3:a5:26:cf:8e:1f:98:8c:2b:31: 85:cf:b4:80:98:a2:0e:fa:aa:58:ee:73:87:e5:c1:d4:0c:b9: 20:75:b0:25:8a:96:66:95:d4:fe:d2:46:93:1a:71:45:4a:77: 9c:98:af:25:e5:34:0d:8a:75:1c:d8:bf:07:61:c7:8a:9a:4b: a1:5e:4c:9e:da:e8:ac:95:06:06:94:1e:60:13:3c:e6:5b:71: d7:ea:b3:84:36:2e:51:5d:6e:00:e7:a5:f7:4a:63:71:51:09: 84:b1:b6:81:61:a5:82:a2:54:f2:08:3b:5c:8d:18:8c:23:0e: ca:9b:4d:11:24:be:8f:b3:ad:2a:9f:02:30:6b:5f:4c:a0:30: 2d:6d:fc:9d:89:8c:c3:1a:e8:27:f0:10:c7:61:c6:69:ce:27: b2:46:36:76:73:06:f1:a7:23:75:7e:bf:93:9f:8d:1a:a2:c7: 13:b5:cb:13:01:b8:00:81:68:36:22:5a:7f:cd:07:ca:9c:4b: 2c:77:f6:41:26:88:22:10:56:ba:d4:a3:38:1c:e8:c2:9b:45: a1:02:9d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix NTU1RDJCRDQwHhcNMjQwNTMxMjAzMDM5WhcNMjQwNjA3MjAzMDM5WjAYMRYwFAYD VQQDEw02NjVhMzM2Zi04MzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiuDzB5Il9YM1cpIBlDgm5xh6tVoGdz1uNeE3X9HtiNcjW4CkkvqfFkS1Kq5 DAMnB56cCmcgCCl8ZJ6js7AB0NGWfrFjZzJ7mZ8ddRiOBP5JPnZzqMDkFNNWBB20 oNQ967i7AeUDaQQAvFnX3MNKX7BScEa6W+6s+joZ2Qve6BQ7H+lNx0rm5CT53uzf fyh0wPEN1p6PuySo49soLY1K8gxwUsalYwUOZ9qcOBeHfko6Cc1fo59c0q281b2v JyBoSqUneKiFVUcWyy/lEGhYfBKLpq18clzHFjXZr1/TCg3mpDnSRzzFT9HOtUYJ Dmdpxzj+gfALQiFJcAaiNboBRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMd8mBe uwdYSEPRi1TqVez9aRPfMB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjJCRi8xMDM5QkM0MDFBREIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIw YWFXUnRNVXRKTXNWVmRLOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUQ0PgaKvCsqfO3kL1EgU6EyVq1rEMvuqS0/KeJYi60WNAO07+TR0r k+1UcNOlJs+OH5iMKzGFz7SAmKIO+qpY7nOH5cHUDLkgdbAlipZmldT+0kaTGnFF SnecmK8l5TQNinUc2L8HYceKmkuhXkye2uislQYGlB5gEzzmW3HX6rOENi5RXW4A 56X3SmNxUQmEsbaBYaWColTyCDtcjRiMIw7Km00RJL6Ps60qnwIwa19MoDAtbfyd iYzDGugn8BDHYcZpzieyRjZ2cwbxpyN1fr+Tn40aoscTtcsTAbgAgWg2Ilp/zQfK nEssd/ZBJogiEFa61KM4HOjCm0WhAp3q -----END CERTIFICATE-----Generated at Fri May 31 22:13:07 2024 by rpki-client on console-fra.rpki-client.org