$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json) Hash identifier: HFp6LIUf0j/y/ofaEU06Cz0AcgIhhHpjTJHHhk1SU+8= Subject key identifier: 9D:2C:08:D8:1B:5B:EF:79:7C:B6:C2:9F:CC:40:06:5B:79:1D:4B:98 Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft Manifest number: 0AEE Signing time: Sat 18 May 2024 20:00:15 +0000 Manifest this update: Sat 18 May 2024 20:00:15 +0000 Manifest next update: Sat 25 May 2024 20:00:15 +0000 Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: K8zs6gB/KicgvZcjWkzNkyI0xnwuay4FWUa8+1Eqgo4=) 2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: hz7JujBPhWg7oUnjV7Ikxd7ut5BtUg3hGIQE+2Imghk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: May 18 20:00:15 2024 GMT Not After : May 25 20:00:15 2024 GMT Subject: CN=664908cf-b6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:40:40:b6:9e:b8:a2:ea:87:4d:4a:98:c7: ba:fb:25:c6:d8:ce:ab:ba:be:e6:f7:e2:07:36:b1: e7:ca:92:16:4a:08:9a:39:ff:78:2f:70:6a:b0:93: c7:48:e1:b3:eb:08:11:24:46:da:b7:a7:f7:61:f7: bb:eb:0c:d6:df:ae:ed:da:3f:77:ab:29:b8:9f:a8: 70:a6:9c:bf:78:0f:62:cb:6d:9b:c7:fa:1b:f2:7f: f2:cd:8b:bf:08:e0:51:44:d8:00:48:9d:7b:7a:40: 78:b6:ea:1f:9d:78:ba:6f:d5:38:09:fa:31:bb:0c: 35:ae:5a:29:7e:d6:07:23:5d:06:c1:2c:23:3d:31: 35:d7:fb:ba:73:9f:39:f6:97:33:43:dc:c2:7b:93: f0:21:bd:84:4b:01:5d:88:92:f5:fd:62:a3:8f:8b: 35:cc:89:f1:12:0f:74:01:39:bd:8b:b6:1c:d3:32: ae:4e:45:4c:b3:00:45:ef:bf:ac:af:b8:7c:84:28: 6c:1e:f8:70:5b:9e:bb:41:6f:8a:01:84:80:8c:5f: e3:77:a4:fa:af:f9:8b:ea:76:39:28:14:8a:1c:ad: 76:54:85:f6:f7:e8:19:20:ca:50:4c:77:45:45:06: 69:4f:78:e2:df:c1:bc:42:78:5c:26:57:4b:1e:ce: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2C:08:D8:1B:5B:EF:79:7C:B6:C2:9F:CC:40:06:5B:79:1D:4B:98 X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:eb:25:2e:82:0f:91:a3:4f:81:45:00:30:1f:56:a3:a3:34: 05:59:62:3f:5e:78:c1:39:b9:50:73:23:6f:77:4c:90:52:30: 9f:e5:36:79:ab:31:c8:5d:4a:c1:d6:99:b1:07:2d:1d:a9:6d: 27:70:22:89:81:61:68:5a:d6:e4:0a:80:11:d9:4a:03:e5:a2: 41:c2:85:58:c5:ce:e3:34:6a:eb:9d:7c:dc:0d:1e:f8:18:fb: 13:cd:5d:ba:fd:5e:f9:16:d1:c5:4f:40:44:2c:bd:d7:65:55: 9b:23:aa:86:f5:5b:ba:3c:92:92:99:ee:51:8b:64:10:75:fd: b0:0f:c2:61:d3:c1:ae:cd:05:81:96:6e:bf:04:67:75:6c:79: 8c:ff:4f:6a:ad:93:87:8b:d5:e8:b8:2b:3e:d4:db:e6:21:ed: 86:fe:f4:ed:fb:b7:ab:0b:4c:5d:bb:e8:0a:c4:69:f3:4d:d9: 4a:09:26:6a:17:f3:a0:5b:6e:81:6c:2c:52:d1:42:79:1a:ed: f8:66:53:e8:ee:b7:23:b7:94:c7:e2:89:f9:e6:d3:4f:ce:2a: 5f:c3:e7:a4:c9:7d:d0:01:5b:fb:08:87:09:d1:25:ab:6e:70: 32:16:cd:a3:44:f2:79:20:1c:17:a8:3d:9f:09:5b:61:f9:51: 03:92:1f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjQwNTE4MjAwMDE1WhcNMjQwNTI1MjAwMDE1WjAYMRYwFAYD VQQDEw02NjQ5MDhjZi1iNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLRAQLaeuKLqh01KmMe6+yXG2M6rur7m9+IHNrHnypIWSgiaOf94L3BqsJPH SOGz6wgRJEbat6f3Yfe76wzW367t2j93qym4n6hwppy/eA9iy22bx/ob8n/yzYu/ COBRRNgASJ17ekB4tuofnXi6b9U4Cfoxuww1rlopftYHI10GwSwjPTE11/u6c585 9pczQ9zCe5PwIb2ESwFdiJL1/WKjj4s1zInxEg90ATm9i7Yc0zKuTkVMswBF77+s r7h8hChsHvhwW567QW+KAYSAjF/jd6T6r/mL6nY5KBSKHK12VIX29+gZIMpQTHdF RQZpT3ji38G8QnhcJldLHs7tlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0sCNgb W+95fLbCn8xABlt5HUuYMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU6yUugg+Ro0+BRQAwH1ajozQFWWI/XnjBOblQcyNvd0yQUjCf5TZ5 qzHIXUrB1pmxBy0dqW0ncCKJgWFoWtbkCoAR2UoD5aJBwoVYxc7jNGrrnXzcDR74 GPsTzV26/V75FtHFT0BELL3XZVWbI6qG9Vu6PJKSme5Ri2QQdf2wD8Jh08GuzQWB lm6/BGd1bHmM/09qrZOHi9XouCs+1NvmIe2G/vTt+7erC0xdu+gKxGnzTdlKCSZq F/OgW26BbCxS0UJ5Gu34ZlPo7rcjt5TH4on55tNPzipfw+ekyX3QAVv7CIcJ0SWr bnAyFs2jRPJ5IBwXqD2fCVth+VEDkh8E -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org