$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: czR/TbsmLs/W6juqF/d8xkp0t1nlloNjLjeYJAkeREY= Subject key identifier: 4D:5F:BD:92:40:C4:1A:26:D5:36:1A:05:F3:A5:CC:66:A7:07:F5:34 Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 06DD Signing time: Thu 30 May 2024 23:25:32 +0000 Manifest this update: Thu 30 May 2024 23:25:31 +0000 Manifest next update: Thu 06 Jun 2024 23:25:31 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: 6CA2cO6DPsTfDSjl+jQoAIHo7PrUHB7tanNWnFCkwQY=) 2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: qHyXplaPWxV3w6nvE9Bh+bgvczpUjCPTnTShI/PE1fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: May 30 23:25:31 2024 GMT Not After : Jun 6 23:25:31 2024 GMT Subject: CN=66590aec-d42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:a6:f0:bc:75:1d:ee:65:ad:ba:33:62:89: 81:fd:7d:34:62:94:70:ab:34:8b:62:c4:4a:67:18: 22:fa:46:ac:b5:0b:04:64:17:a5:c6:9a:00:1c:7e: 64:32:ea:b7:a5:26:b5:17:cb:38:82:8d:5f:5e:3a: 33:e5:7b:3b:f0:9d:20:11:db:3c:d4:dd:b6:ab:65: 25:65:aa:73:16:24:ee:12:1f:a7:73:a0:d0:f2:2c: 45:94:fa:e9:7f:1c:00:70:40:6c:f4:85:e6:e0:7a: 55:50:8f:81:0e:21:ac:b6:c2:eb:06:1a:71:df:a2: 47:60:78:6d:7d:c2:90:df:63:42:c9:ba:0b:db:b4: 65:f1:e7:a8:5d:41:52:3f:c3:e1:c4:8f:be:6e:d8: 24:2b:b1:a1:8d:ee:80:1b:43:6b:0a:45:6d:c6:f2: a3:f1:4d:b4:fa:21:94:44:16:ec:62:21:32:06:ea: a9:4c:01:58:ac:a6:f6:83:16:58:f2:6b:e2:22:17: 56:12:e5:87:fa:fd:0f:a3:9d:94:ca:00:7a:74:de: 69:5d:27:d4:cb:1f:67:45:3c:75:fb:a3:42:f2:b3: 85:e7:aa:71:b0:3a:90:fd:d3:21:84:9c:a6:b5:8a: f0:f7:e7:b0:c2:be:4a:ad:72:58:3f:7a:a6:81:dc: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5F:BD:92:40:C4:1A:26:D5:36:1A:05:F3:A5:CC:66:A7:07:F5:34 X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:08:ae:2e:55:79:15:78:9e:42:8f:8a:eb:5b:0e:53:a6:1d: f4:7c:9d:a4:af:60:28:e4:f9:14:a5:bc:b3:f1:47:a8:be:13: 09:c6:a0:75:e1:68:a5:f6:5e:25:be:d0:17:52:5a:1e:e5:17: 52:4a:64:98:d0:3a:d4:26:8a:e0:16:99:6a:3a:a2:a6:eb:8b: 2a:a8:63:ea:d4:f5:23:9d:f5:7a:66:37:70:a0:21:ab:c4:a5: e9:0f:87:9e:40:b1:65:24:95:26:36:9a:75:46:15:d0:4c:92: d4:cf:be:44:c5:f6:87:57:7f:ab:c1:c0:6a:5c:ec:6f:67:3e: c1:e7:ec:28:2d:43:35:d5:72:18:3b:27:ed:33:09:b4:af:45: dd:ec:a6:93:67:d3:a4:3e:a0:0f:c6:d4:c2:b6:f2:e0:d4:51: 5f:f0:90:2e:31:a0:e8:fa:98:52:e7:06:78:4d:c3:d4:97:43: 85:b5:9c:06:e0:dc:b5:74:f0:f6:ef:c4:53:e5:5b:da:b4:a9: 3c:66:98:53:77:b2:0a:a1:6b:c9:8a:81:9d:e9:24:38:db:2b: 56:f7:e3:62:a7:90:93:6f:ba:e5:06:d2:f2:c0:e5:e5:d5:67: ae:0b:a8:77:4f:30:49:51:54:19:fc:3f:8d:3f:cf:cd:7a:5e: e4:c9:78:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjQwNTMwMjMyNTMxWhcNMjQwNjA2MjMyNTMxWjAYMRYwFAYD VQQDEw02NjU5MGFlYy1kNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCum8Lx1He5lrbozYomB/X00YpRwqzSLYsRKZxgi+kastQsEZBelxpoAHH5k Muq3pSa1F8s4go1fXjoz5Xs78J0gEds81N22q2UlZapzFiTuEh+nc6DQ8ixFlPrp fxwAcEBs9IXm4HpVUI+BDiGstsLrBhpx36JHYHhtfcKQ32NCyboL27Rl8eeoXUFS P8PhxI++btgkK7Ghje6AG0NrCkVtxvKj8U20+iGURBbsYiEyBuqpTAFYrKb2gxZY 8mviIhdWEuWH+v0Po52UygB6dN5pXSfUyx9nRTx1+6NC8rOF56pxsDqQ/dMhhJym tYrw9+ewwr5KrXJYP3qmgdxlcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1fvZJA xBom1TYaBfOlzGanB/U0MB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCACK4uVXkVeJ5Cj4rrWw5Tph30fJ2kr2Ao5PkUpbyz8UeovhMJxqB1 4Wil9l4lvtAXUloe5RdSSmSY0DrUJorgFplqOqKm64sqqGPq1PUjnfV6ZjdwoCGr xKXpD4eeQLFlJJUmNpp1RhXQTJLUz75ExfaHV3+rwcBqXOxvZz7B5+woLUM11XIY OyftMwm0r0Xd7KaTZ9OkPqAPxtTCtvLg1FFf8JAuMaDo+phS5wZ4TcPUl0OFtZwG 4Ny1dPD278RT5VvatKk8ZphTd7IKoWvJioGd6SQ42ytW9+Nip5CTb7rlBtLywOXl 1WeuC6h3TzBJUVQZ/D+NP8/Nel7kyXjF -----END CERTIFICATE-----Generated at Fri May 31 00:28:35 2024 by rpki-client on console-ams.rpki-client.org