$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft File: 6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json) Hash identifier: 4qwfeYkYXfhET4sXCSVHIR2zKjRG70E8hkL7cCIoegk= Subject key identifier: C0:C4:E6:A9:BF:26:D0:FA:9A:10:6C:F7:0A:47:75:A6:15:48:90:5B Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 Certificate issuer: /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft Manifest number: 0695 Signing time: Sat 18 May 2024 23:18:54 +0000 Manifest this update: Sat 18 May 2024 23:18:54 +0000 Manifest next update: Sat 25 May 2024 23:18:54 +0000 Files and hashes: 1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: P/90/bAUiV58kKYqFCuxWzi+auYB/LkO0jptccBRu0I=) 2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: y+/QvZaI9S/VrYWnw4Ys9NMkJuCnHc3LdE91YGctBkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Validity Not Before: May 18 23:18:54 2024 GMT Not After : May 25 23:18:54 2024 GMT Subject: CN=6649375e-c21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:4e:05:fd:bf:bf:df:84:74:c9:b8:ee:71: 70:ba:de:79:2b:8b:52:63:5e:26:78:2f:4f:0d:48: 79:5f:33:bd:35:20:a6:59:09:5e:01:b6:60:9f:ef: 98:1a:35:4c:9e:de:20:8c:4e:e5:07:6b:41:b8:17: ed:e3:d9:39:b1:c8:f6:ea:34:eb:2e:e4:14:c5:1c: a4:1b:74:5e:20:f0:ab:f9:0d:0a:16:a4:60:ab:89: 4e:63:e1:b4:d9:c1:e6:42:9c:b8:d3:ae:af:cc:09: 14:c3:27:ae:b2:46:50:ec:10:75:74:b4:b9:df:e0: fd:da:d5:c7:d4:b6:3d:22:7d:f4:35:57:fa:f6:95: ba:0d:e1:6b:d9:5e:53:f2:16:65:c4:37:77:f7:73: 5b:59:67:3c:51:70:25:08:e5:df:97:3e:38:d4:ef: ff:43:b7:f2:34:aa:3f:ed:9d:81:20:ab:d7:a3:41: d2:b4:ea:37:19:8b:87:21:5b:09:26:81:91:d6:c1: 72:d8:46:0b:b0:3c:ad:07:68:9c:26:eb:4a:9e:fb: f6:9b:58:a2:06:53:66:be:9b:22:94:48:a9:ba:92: 2d:05:ab:b9:ac:60:14:5d:f6:0e:7d:01:90:fa:c7: 18:af:b9:4c:b9:d5:6c:d4:a9:6b:05:2d:3b:65:ce: 3d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C4:E6:A9:BF:26:D0:FA:9A:10:6C:F7:0A:47:75:A6:15:48:90:5B X509v3 Authority Key Identifier: keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b9:5f:29:f9:a8:06:a3:a0:a9:ed:21:78:c4:13:02:f5:7c: 30:7a:7d:36:25:a6:d9:ae:77:c2:1e:a4:90:44:e5:17:6d:06: 49:40:2e:72:fd:e4:53:31:9a:c2:2f:70:82:2a:23:38:44:d0: 4c:53:0b:ed:fb:8e:f7:bc:83:9b:c8:12:2e:2d:09:f4:7f:59: fc:3d:95:e4:6f:d9:32:4d:e1:a8:42:50:2f:7f:8b:67:e2:a7: a1:97:c2:ac:81:47:4d:98:16:99:fc:c4:47:a7:6c:1a:71:37: 83:36:99:bd:d1:19:b6:96:b2:61:e2:4d:5b:df:41:3b:12:5b: 7b:21:c2:9f:52:db:9e:24:b8:35:74:48:e8:31:ba:d3:a1:e6: c8:0d:43:17:8a:1f:7b:7d:ad:6e:8d:9d:cc:b2:83:51:e1:ce: 8c:87:ea:52:a1:ff:39:53:24:c1:73:53:b6:3c:fc:2d:8e:ed: 02:9c:7b:06:b4:51:d0:0a:53:bd:76:cd:5d:0c:1c:0b:f6:64: 9f:bf:2f:13:3b:de:d6:b1:b7:e4:d3:cf:82:80:00:aa:e3:eb: 38:56:5c:41:5d:6a:d9:9a:0d:6e:5d:b0:fb:53:d8:b9:1f:37: f6:86:79:b0:9d:64:73:83:d8:1a:ed:d4:2a:3e:a9:36:ee:1f: c8:7a:6a:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGQ0IxMTAvBgNVBAUTKEU5NTEzNzFERTREQ0IxMDAyNTQ4NEQyRjE0RkRDREEy QzY0NTVCOTEwHhcNMjQwNTE4MjMxODU0WhcNMjQwNTI1MjMxODU0WjAYMRYwFAYD VQQDEw02NjQ5Mzc1ZS1jMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI9OBf2/v9+EdMm47nFwut55K4tSY14meC9PDUh5XzO9NSCmWQleAbZgn++Y GjVMnt4gjE7lB2tBuBft49k5scj26jTrLuQUxRykG3ReIPCr+Q0KFqRgq4lOY+G0 2cHmQpy4066vzAkUwyeuskZQ7BB1dLS53+D92tXH1LY9In30NVf69pW6DeFr2V5T 8hZlxDd393NbWWc8UXAlCOXflz441O//Q7fyNKo/7Z2BIKvXo0HStOo3GYuHIVsJ JoGR1sFy2EYLsDytB2icJutKnvv2m1iiBlNmvpsilEipupItBau5rGAUXfYOfQGQ +scYr7lMudVs1KlrBS07Zc49xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDE5qm/ JtD6mhBs9wpHdaYVSJBbMB8GA1UdIwQYMBaAFOlRNx3k3LEAJUhNLxT9zaLGRVuR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUZDQi84ODBFNjM0MDIy QTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NRQWxTRTB2RlAzTm9zWkZX NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZWRTNIZVRjc1FBbFNFMHZGUDNOb3NaRlc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUZDQi84ODBFNjM0MDIyQTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NR QWxTRTB2RlAzTm9zWkZXNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQuV8p+agGo6Cp7SF4xBMC9Xwwen02JabZrnfCHqSQROUXbQZJQC5y /eRTMZrCL3CCKiM4RNBMUwvt+473vIObyBIuLQn0f1n8PZXkb9kyTeGoQlAvf4tn 4qehl8KsgUdNmBaZ/MRHp2wacTeDNpm90Rm2lrJh4k1b30E7Elt7IcKfUtueJLg1 dEjoMbrToebIDUMXih97fa1ujZ3MsoNR4c6Mh+pSof85UyTBc1O2PPwtju0CnHsG tFHQClO9ds1dDBwL9mSfvy8TO97Wsbfk08+CgACq4+s4VlxBXWrZmg1uXbD7U9i5 Hzf2hnmwnWRzg9ga7dQqPqk27h/Iemp5 -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org