$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft File: 15_6dyN1rrQCGo_1GC_qqjJZKP0.mft (raw, json) Hash identifier: IgjRMQoNVpYk/yqch+Wh+rRK07m/aM5HHoKH0+aZbmY= Subject key identifier: 21:11:1F:0B:55:58:2B:6E:8F:8E:60:8A:7B:23:4E:DC:92:27:E1:D6 Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD Certificate issuer: /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Certificate serial: 0797 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft Manifest number: 3B5B Signing time: Sat 18 May 2024 15:26:26 +0000 Manifest this update: Sat 18 May 2024 15:26:25 +0000 Manifest next update: Sat 25 May 2024 15:26:25 +0000 Files and hashes: 1: 15_6dyN1rrQCGo_1GC_qqjJZKP0.crl (hash: bX+CmJFrb3P/CfFlc2QSrS1NVlPCuM8UCgrQ9+5go+c=) 2: 355A29B8D6CC11EE99534F6EC4F9AE02.roa (hash: 7XScGt+5Xh4t4lRJpA3T6ij1h1E2NJKftqBX/YrH1oo=) 3: D127B58CF8EF11EEA2537576C4F9AE02.roa (hash: USZSkKOpvRstAy6bGHIvH9iPNrUuZ7zTpn1HoGAIWzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Validity Not Before: May 18 15:26:25 2024 GMT Not After : May 25 15:26:25 2024 GMT Subject: CN=6648c8a2-9e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:a9:a8:1f:fa:50:1d:15:cc:bf:9b:3f:50: ff:40:0a:65:e8:bb:27:87:dd:14:d6:65:01:30:a0: 80:c4:7c:ec:e9:4a:48:d6:c0:bd:1a:e3:ff:32:9e: e5:d5:22:5f:c0:e8:70:a3:e4:e1:09:cd:7e:d0:b9: 82:90:17:84:ec:8d:54:4b:b8:64:4c:76:ca:77:6d: ad:90:81:f2:d5:07:fb:8c:59:59:a2:8c:fb:4d:18: a5:26:27:29:b9:c7:bf:60:8d:39:0c:f1:3f:1b:58: c9:99:ab:d2:c8:c6:37:2d:79:7d:fc:36:60:77:e2: cd:38:ef:88:37:e1:3f:b2:43:eb:33:86:e8:c7:db: a7:99:74:0f:06:cf:da:f0:92:57:c5:f9:65:3a:c5: 1b:5f:0e:9d:63:3e:a5:41:c7:a3:d4:8f:47:f5:da: 67:08:9a:19:95:4d:7a:e2:da:5c:57:a6:c9:f9:ee: 0e:4f:67:28:f5:a5:7b:ff:36:9d:07:3d:28:98:81: 9f:37:eb:29:d3:04:cf:88:54:c8:02:eb:c2:81:3d: 00:be:2f:f4:a8:bd:ca:6e:d4:de:50:0a:fa:38:24: e3:fb:eb:e4:a5:1f:0f:af:41:9c:51:78:e7:5b:56: 20:4f:b8:0a:55:cf:39:35:32:d4:e8:2b:1a:f1:c1: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:1F:0B:55:58:2B:6E:8F:8E:60:8A:7B:23:4E:DC:92:27:E1:D6 X509v3 Authority Key Identifier: keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:76:ce:b8:31:b5:2b:80:11:cd:fb:17:6d:d7:85:ea:6f:cb: 21:cc:40:55:a2:43:1c:71:7f:8a:fe:75:10:7f:0a:06:97:9e: 55:72:54:31:b4:d2:46:96:c0:fd:56:84:33:44:8a:c5:a3:67: a6:ca:81:4d:50:c2:01:39:20:b6:a9:2e:cb:91:a1:39:c8:12: 9e:d7:9c:74:9a:a4:af:b8:98:cc:3e:d4:79:f5:6d:4b:36:0f: 1f:9c:72:62:85:7b:ed:d3:3a:16:1c:48:0b:c4:17:92:87:e6: c7:23:f1:fc:ac:2d:3e:15:15:e3:74:0f:28:d8:50:5f:20:8f: 32:f8:5f:a8:3d:0d:3f:86:85:61:6c:6d:3e:71:24:1c:da:9c: 10:e4:90:5c:bc:a7:7e:50:e3:34:7c:60:d2:9c:17:a8:cb:c3: 17:fe:00:3c:1c:8c:d7:e2:d8:90:01:64:11:09:9e:60:c1:45: 6a:8b:bc:08:2e:ed:9a:c8:91:47:34:c5:42:21:f9:aa:df:57: f3:ae:fd:26:cd:d3:a1:c7:0c:a5:8a:39:a8:0a:32:20:9c:04: fd:99:16:be:c5:4c:2f:c9:6e:55:b7:20:b1:2d:c4:51:14:cb: 02:c8:26:8a:17:33:33:c0:67:5a:9f:a2:7b:12:84:06:db:ea: 85:59:c3:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEQ3OUZGQTc3MjM3NUFFQjQwMjFBOEZGNTE4MkZFQUFB MzI1OTI4RkQwHhcNMjQwNTE4MTUyNjI1WhcNMjQwNTI1MTUyNjI1WjAYMRYwFAYD VQQDEw02NjQ4YzhhMi05ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHapqB/6UB0VzL+bP1D/QApl6Lsnh90U1mUBMKCAxHzs6UpI1sC9GuP/Mp7l 1SJfwOhwo+ThCc1+0LmCkBeE7I1US7hkTHbKd22tkIHy1Qf7jFlZooz7TRilJicp uce/YI05DPE/G1jJmavSyMY3LXl9/DZgd+LNOO+IN+E/skPrM4box9unmXQPBs/a 8JJXxfllOsUbXw6dYz6lQcej1I9H9dpnCJoZlU164tpcV6bJ+e4OT2co9aV7/zad Bz0omIGfN+sp0wTPiFTIAuvCgT0Avi/0qL3KbtTeUAr6OCTj++vkpR8Pr0GcUXjn W1YgT7gKVc85NTLU6Csa8cFtQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCERHwtV WCtuj45ginsjTtySJ+HWMB8GA1UdIwQYMBaAFNef+ncjda60AhqP9Rgv6qoyWSj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJyUUNHb18xR0NfcXFqSlpL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1XzZkeU4xcnJRQ0dvXzFHQ19xcWpKWktQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJy UUNHb18xR0NfcXFqSlpLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCds64MbUrgBHN+xdt14Xqb8shzEBVokMccX+K/nUQfwoGl55VclQx tNJGlsD9VoQzRIrFo2emyoFNUMIBOSC2qS7LkaE5yBKe15x0mqSvuJjMPtR59W1L Ng8fnHJihXvt0zoWHEgLxBeSh+bHI/H8rC0+FRXjdA8o2FBfII8y+F+oPQ0/hoVh bG0+cSQc2pwQ5JBcvKd+UOM0fGDSnBeoy8MX/gA8HIzX4tiQAWQRCZ5gwUVqi7wI Lu2ayJFHNMVCIfmq31fzrv0mzdOhxwylijmoCjIgnAT9mRa+xUwvyW5VtyCxLcRR FMsCyCaKFzMzwGdan6J7EoQG2+qFWcNr -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org