$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft File: _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json) Hash identifier: 1nq4jryggEuVa4LPJicxQIKxhMGKJXnz4sO3JNSl50M= Subject key identifier: 1B:67:D6:F8:1B:63:E8:6F:46:6F:E5:69:C2:7C:2E:E7:D3:14:AD:B9 Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 Certificate issuer: /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Certificate serial: 05A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft Manifest number: 05A1 Signing time: Sun 19 May 2024 00:20:23 +0000 Manifest this update: Sun 19 May 2024 00:20:23 +0000 Manifest next update: Sun 26 May 2024 00:20:23 +0000 Files and hashes: 1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: /y5O8s02nI+Kjgodv1TB+9PgIAgYcUVFUlIXOLQHKmc=) 2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: HcCfcVBoj1/K3ZOCmOE1jjmUzFp6uT3H1sA4ECMTllM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Validity Not Before: May 19 00:20:23 2024 GMT Not After : May 26 00:20:23 2024 GMT Subject: CN=664945c7-5460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:e2:2f:dd:bf:92:41:13:8b:52:17:7c:b1: 68:66:1e:3c:c7:87:61:43:49:dd:91:d5:16:5e:34: a4:e0:63:dc:cd:03:74:74:05:e0:06:74:91:61:1c: b3:f1:1a:e5:c9:0d:5e:87:32:3f:11:e2:47:f6:f8: 90:72:d3:7d:2b:0d:b1:18:e3:2e:13:47:fc:92:62: 88:08:dd:48:a7:bb:8f:d0:be:82:63:e4:91:f9:69: b7:83:eb:f4:c1:09:75:13:5d:85:14:41:8b:1f:e2: 3c:29:88:52:68:ed:95:46:f6:b2:71:9d:bf:df:da: af:99:2f:7c:65:df:ed:c5:3a:52:28:b3:11:52:1c: c6:6f:b8:70:bc:d9:14:fe:36:7b:fd:96:f5:88:f8: 78:46:42:cc:6e:c1:a0:f2:a8:75:19:5a:59:c5:a8: 33:a3:90:80:fd:af:38:0d:bd:bb:f8:ce:40:58:af: d7:ae:be:dc:63:96:6f:00:ef:09:cc:19:6d:85:35: af:4f:fc:05:f6:1c:56:a0:5f:9a:41:ad:f2:fe:65: 88:2c:8f:90:00:ca:f5:24:c9:23:e6:1d:4a:67:75: 06:76:17:87:1d:48:2b:1f:d3:cf:66:65:43:8e:ae: e1:b7:d4:f1:27:0b:fa:94:fd:a0:76:a1:6f:6f:be: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:67:D6:F8:1B:63:E8:6F:46:6F:E5:69:C2:7C:2E:E7:D3:14:AD:B9 X509v3 Authority Key Identifier: keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:76:59:82:4b:49:d5:ad:db:bf:9e:fb:b0:b6:52:6d:c8:b4: ea:31:50:92:a7:7c:b2:f6:23:46:3a:ba:54:16:54:9e:17:43: 3f:f9:e8:1d:90:39:bd:b7:7d:6c:73:2f:ee:b4:23:40:0a:59: d1:cd:84:0f:3e:8f:cf:38:01:84:c4:50:7e:91:26:81:69:95: 1b:dd:0b:ab:60:b5:51:06:96:bc:ed:f7:8c:6a:28:3f:17:80: 39:6f:4c:05:4b:9f:1f:18:ac:f3:8d:fb:0b:09:29:60:46:ec: c6:c2:03:01:69:d5:67:43:7e:30:6e:d8:a4:fd:e3:2b:49:f5: 2f:f0:67:66:55:c0:61:a5:f7:ed:ad:b6:39:b4:dd:d7:11:0c: fc:ec:72:07:b7:43:cc:74:48:fb:24:09:b7:b1:30:49:5d:d9: 9e:d0:e3:2c:8b:26:9c:73:2c:bd:fe:b7:cf:db:ca:28:d5:cb: 93:06:60:5b:f5:07:d0:15:aa:3a:d0:1f:11:4f:2f:8d:56:4a: dc:2d:7b:22:9a:7d:ff:1a:02:8f:97:eb:7a:da:94:1a:38:be: cd:e6:a8:0a:17:6f:7a:2e:06:80:1a:59:5a:04:14:1a:f0:9a: c9:51:f8:77:8f:e5:26:c8:98:37:02:8d:a5:5b:7c:2a:d2:d1: fd:1b:b4:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NzMxMTAvBgNVBAUTKEZFRTlGREQ0QjBFODMxMzE4OEEwODlGN0E4N0ZCN0Qw MTUzMjUzODgwHhcNMjQwNTE5MDAyMDIzWhcNMjQwNTI2MDAyMDIzWjAYMRYwFAYD VQQDEw02NjQ5NDVjNy01NDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7PiL92/kkETi1IXfLFoZh48x4dhQ0ndkdUWXjSk4GPczQN0dAXgBnSRYRyz 8RrlyQ1ehzI/EeJH9viQctN9Kw2xGOMuE0f8kmKICN1Ip7uP0L6CY+SR+Wm3g+v0 wQl1E12FFEGLH+I8KYhSaO2VRvaycZ2/39qvmS98Zd/txTpSKLMRUhzGb7hwvNkU /jZ7/Zb1iPh4RkLMbsGg8qh1GVpZxagzo5CA/a84Db27+M5AWK/Xrr7cY5ZvAO8J zBlthTWvT/wF9hxWoF+aQa3y/mWILI+QAMr1JMkj5h1KZ3UGdheHHUgrH9PPZmVD jq7ht9TxJwv6lP2gdqFvb74rqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtn1vgb Y+hvRm/lacJ8LufTFK25MB8GA1UdIwQYMBaAFP7p/dSw6DExiKCJ96h/t9AVMlOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY3My9BRTVGQjEwMjgw Q0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01UR0lvSW4zcUgtMzBCVXlV NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191bjkxTERvTVRHSW9JbjNxSC0zMEJVeVU0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY3My9BRTVGQjEwMjgwQ0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01U R0lvSW4zcUgtMzBCVXlVNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2dlmCS0nVrdu/nvuwtlJtyLTqMVCSp3yy9iNGOrpUFlSeF0M/+egd kDm9t31scy/utCNAClnRzYQPPo/POAGExFB+kSaBaZUb3QurYLVRBpa87feMaig/ F4A5b0wFS58fGKzzjfsLCSlgRuzGwgMBadVnQ34wbtik/eMrSfUv8GdmVcBhpfft rbY5tN3XEQz87HIHt0PMdEj7JAm3sTBJXdme0OMsiyaccyy9/rfP28oo1cuTBmBb 9QfQFao60B8RTy+NVkrcLXsimn3/GgKPl+t62pQaOL7N5qgKF296LgaAGllaBBQa 8JrJUfh3j+UmyJg3Ao2lW3wq0tH9G7RG -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org