$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: jXyVtrdNn34AtlVFRy1lwv37FelhwVcrBYw/NOAm7Gw= Subject key identifier: 67:2C:5D:51:40:FC:7A:16:1E:FE:34:45:DE:3D:B6:E4:00:45:91:23 Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 33F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 33E1 Signing time: Sat 18 May 2024 15:26:10 +0000 Manifest this update: Sat 18 May 2024 15:26:10 +0000 Manifest next update: Sat 25 May 2024 15:26:10 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: Wk7Byns8OU9kMG0/hdAbHjUXTheKjTKzwGn0jQw4rRc=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: HLTePiU4urymQI4+1hTlyJoCh3/oP2VQ7PHFtXnFIXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13303 (0x33f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: May 18 15:26:10 2024 GMT Not After : May 25 15:26:10 2024 GMT Subject: CN=6648c892-9571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6d:0b:cd:3a:15:ea:83:e4:3c:40:9b:e5:62: b7:6a:d1:77:7a:c4:f7:c0:b9:ec:89:5d:91:63:de: 04:b4:4b:d3:46:0e:e9:23:88:ce:a8:19:8b:7d:51: 1b:21:7e:e5:68:e8:55:39:5b:0e:66:29:53:d5:2b: 00:2d:a6:57:1b:b8:1f:37:8f:90:0d:bb:d3:d5:9a: 10:74:5e:7c:71:b8:e3:56:f6:e5:77:ab:c1:fb:03: e8:ed:72:af:07:ed:3c:56:88:b4:f8:fb:26:f6:b6: aa:51:39:42:a3:8c:3a:b8:81:5b:66:6e:e2:74:37: 1c:9d:44:68:4e:5f:ff:ab:25:79:25:cd:e3:68:89: f4:7f:db:a9:64:98:47:1c:b5:0a:7a:6f:cb:d1:3b: 98:87:9d:6d:db:9b:78:24:82:ca:9c:e0:a7:f9:bd: 2c:86:79:5c:02:e9:c9:6e:ca:45:42:6d:22:c3:3e: 77:0d:ca:02:49:bb:43:3b:4a:82:21:b1:a7:15:14: be:66:ea:31:3a:5c:83:bf:87:50:ee:9d:70:4e:bf: d5:ef:cc:c3:d1:c5:8e:ef:f9:7b:be:42:41:99:a2: 2b:90:01:df:ba:a4:50:c8:a4:7c:75:e5:a5:6b:17: 4c:18:6a:44:d0:eb:0b:18:b6:69:25:54:27:41:28: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2C:5D:51:40:FC:7A:16:1E:FE:34:45:DE:3D:B6:E4:00:45:91:23 X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:54:dd:d6:49:99:43:3d:7e:81:2e:db:45:c7:b9:a8:a1:63: fb:63:e5:36:fc:51:a2:45:18:44:f0:a3:ff:ef:02:3f:29:6d: 23:9e:ae:33:27:ef:68:c0:d7:d5:48:f0:40:71:7c:f8:87:a0: 3e:0c:29:62:fa:70:19:26:4e:89:c9:ee:5d:14:19:84:d6:b9: 61:58:46:b1:10:9e:07:d3:af:a5:63:32:7c:e1:46:ac:85:db: 37:52:13:80:37:b9:3f:81:bf:4b:86:a9:27:cd:ae:b5:7c:60: f5:42:5b:91:e1:2d:e2:76:91:9b:05:1f:42:67:2f:79:81:44: 66:d1:b2:71:f4:74:6c:bd:04:55:17:65:1b:95:8d:70:8c:35: 89:fb:dc:5e:a8:3f:16:58:00:02:17:12:5e:2b:59:94:19:3c: 74:f2:ed:30:00:81:3b:ef:28:fe:25:cd:0e:ab:4b:fd:b8:0b: 6a:dd:6a:bf:47:e3:02:c9:36:6d:7f:02:47:a7:72:28:96:e1: 2f:c1:9b:3c:bb:d1:ac:15:69:de:3b:85:b2:ea:30:b5:8c:64: 2d:60:5d:97:38:89:68:42:1e:25:c2:3c:5c:10:46:e4:00:b6: 02:a3:20:70:c3:c6:33:7e:d8:ee:22:6d:4f:3f:a0:52:4e:42: 19:66:3a:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjQwNTE4MTUyNjEwWhcNMjQwNTI1MTUyNjEwWjAYMRYwFAYD VQQDEw02NjQ4Yzg5Mi05NTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5W0LzToV6oPkPECb5WK3atF3esT3wLnsiV2RY94EtEvTRg7pI4jOqBmLfVEb IX7laOhVOVsOZilT1SsALaZXG7gfN4+QDbvT1ZoQdF58cbjjVvbld6vB+wPo7XKv B+08Voi0+Psm9raqUTlCo4w6uIFbZm7idDccnURoTl//qyV5Jc3jaIn0f9upZJhH HLUKem/L0TuYh51t25t4JILKnOCn+b0shnlcAunJbspFQm0iwz53DcoCSbtDO0qC IbGnFRS+ZuoxOlyDv4dQ7p1wTr/V78zD0cWO7/l7vkJBmaIrkAHfuqRQyKR8deWl axdMGGpE0OsLGLZpJVQnQSiL+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcsXVFA /HoWHv40Rd49tuQARZEjMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkVN3WSZlDPX6BLttFx7mooWP7Y+U2/FGiRRhE8KP/7wI/KW0jnq4z J+9owNfVSPBAcXz4h6A+DCli+nAZJk6Jye5dFBmE1rlhWEaxEJ4H06+lYzJ84Uas hds3UhOAN7k/gb9Lhqknza61fGD1QluR4S3idpGbBR9CZy95gURm0bJx9HRsvQRV F2UblY1wjDWJ+9xeqD8WWAACFxJeK1mUGTx08u0wAIE77yj+Jc0Oq0v9uAtq3Wq/ R+MCyTZtfwJHp3IoluEvwZs8u9GsFWneO4Wy6jC1jGQtYF2XOIloQh4lwjxcEEbk ALYCoyBww8YzftjuIm1PP6BSTkIZZjpL -----END CERTIFICATE-----Generated at Sat May 18 16:20:15 2024 by rpki-client on console-fra.rpki-client.org