$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: xXq9WHd6Uf3F10FvjKeyAcW46umi2vngDCNH1Rhqukg= Subject key identifier: 9B:63:CC:C4:68:04:E3:12:87:C0:C7:B0:E7:59:2A:B3:51:DF:FB:26 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0BE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0BDF Signing time: Thu 30 May 2024 19:30:06 +0000 Manifest this update: Thu 30 May 2024 19:30:06 +0000 Manifest next update: Thu 06 Jun 2024 19:30:05 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: QUKbi+6HspP9OGVHt0Be2ON3EulEk8bL+TyAgmlAaDc=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: AyIZpaJ2i1i8R1crKWBIR6woIu6M2B2RqE63428OvuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3046 (0xbe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: May 30 19:30:06 2024 GMT Not After : Jun 6 19:30:05 2024 GMT Subject: CN=6658d3be-64f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:93:61:98:44:57:ea:b1:26:2f:dc:05:10: e3:45:33:39:53:86:c1:5f:8d:6f:95:79:15:b8:a5: 8e:79:32:7a:ad:b7:7a:d4:68:ed:e8:ef:96:4e:e3: 11:31:8a:71:0d:e3:e2:79:44:a0:a3:3f:5a:47:07: cc:b8:f0:2c:d2:d6:0d:0f:dc:c7:8f:32:2b:0a:7b: 1d:5b:10:b3:dc:6d:16:78:94:3e:de:01:03:34:cb: 23:cc:52:a4:3b:9d:d4:e8:f4:cb:5e:4f:15:5e:42: f4:40:58:c6:e3:7d:40:f9:72:49:8e:48:2a:f5:7f: bb:55:1d:80:e2:d0:89:af:19:96:ba:d7:91:f1:2c: 44:c9:b1:00:bb:72:a7:be:1e:6b:ed:c6:8c:25:ed: b9:36:21:29:5d:e8:34:2e:bd:d7:37:3e:bf:8e:85: 9d:9a:3a:98:e9:30:1a:a0:61:2e:10:c3:10:7d:0c: e7:a4:b5:10:1f:f0:6f:37:9f:69:57:ad:96:2c:e6: 2a:a2:c2:fd:81:55:21:42:05:01:a1:b0:c4:67:77: 81:b9:6c:ea:db:4f:38:f5:f3:51:79:e3:e3:8c:a4: 3e:c9:97:91:d8:cd:2f:c3:a7:7b:4a:64:55:85:2a: 35:fa:16:43:15:39:6a:a5:0e:7b:81:bb:65:23:02: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:CC:C4:68:04:E3:12:87:C0:C7:B0:E7:59:2A:B3:51:DF:FB:26 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:41:91:c6:67:09:96:33:28:6d:fd:0d:43:1d:04:df:38:3a: df:0c:35:08:ff:1e:4c:76:c8:c0:ed:78:8b:b5:c8:69:4f:c3: 2b:5c:0e:f1:d5:5c:ad:36:94:c0:d8:d0:ab:6f:b0:15:a6:9e: fd:c8:bc:4a:5c:67:66:99:a8:75:17:21:b1:ce:8e:ac:e9:95: 5f:31:59:f0:30:eb:5d:6f:f2:c6:fb:32:23:15:5f:9d:6d:32: 39:38:cd:49:9b:f4:18:95:f5:c9:3a:c4:35:a0:a4:d4:c4:eb: 28:34:64:4a:6a:a5:b4:a8:0e:21:0b:a1:2e:93:28:20:9e:67: 6f:61:dc:6b:a6:fd:1b:01:65:7f:f5:3f:7b:68:05:78:b9:78: 25:55:d3:4a:de:bd:c3:67:11:f5:5f:5a:4e:59:34:7b:b7:36: be:fd:a9:75:bc:99:cd:32:5f:15:2b:7e:72:2a:53:f2:d4:64: 16:a9:c8:9c:47:77:ba:18:e4:b7:ac:98:eb:49:5a:23:8f:0f: fd:68:68:25:17:c3:dc:27:49:87:4f:ab:d8:57:f4:3f:89:c8: b4:c2:0a:41:6a:76:7b:15:bb:40:5e:53:a2:46:97:24:7c:91: 9c:9d:6d:84:3e:13:a0:79:19:52:e1:af:b0:3f:a5:60:3e:81: a0:6a:c1:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjQwNTMwMTkzMDA2WhcNMjQwNjA2MTkzMDA1WjAYMRYwFAYD VQQDEw02NjU4ZDNiZS02NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2eTYZhEV+qxJi/cBRDjRTM5U4bBX41vlXkVuKWOeTJ6rbd61Gjt6O+WTuMR MYpxDePieUSgoz9aRwfMuPAs0tYND9zHjzIrCnsdWxCz3G0WeJQ+3gEDNMsjzFKk O53U6PTLXk8VXkL0QFjG431A+XJJjkgq9X+7VR2A4tCJrxmWuteR8SxEybEAu3Kn vh5r7caMJe25NiEpXeg0Lr3XNz6/joWdmjqY6TAaoGEuEMMQfQznpLUQH/BvN59p V62WLOYqosL9gVUhQgUBobDEZ3eBuWzq20849fNReePjjKQ+yZeR2M0vw6d7SmRV hSo1+hZDFTlqpQ57gbtlIwKjYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtjzMRo BOMSh8DHsOdZKrNR3/smMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbQZHGZwmWMyht/Q1DHQTfODrfDDUI/x5MdsjA7XiLtchpT8MrXA7x 1VytNpTA2NCrb7AVpp79yLxKXGdmmah1FyGxzo6s6ZVfMVnwMOtdb/LG+zIjFV+d bTI5OM1Jm/QYlfXJOsQ1oKTUxOsoNGRKaqW0qA4hC6EukyggnmdvYdxrpv0bAWV/ 9T97aAV4uXglVdNK3r3DZxH1X1pOWTR7tza+/al1vJnNMl8VK35yKlPy1GQWqcic R3e6GOS3rJjrSVojjw/9aGglF8PcJ0mHT6vYV/Q/ici0wgpBanZ7FbtAXlOiRpck fJGcnW2EPhOgeRlS4a+wP6VgPoGgasGs -----END CERTIFICATE-----Generated at Thu May 30 20:35:35 2024 by rpki-client on console-fra.rpki-client.org