$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft File: b2FOWP6Tat901zb1OS3tX9FrdYc.mft (raw, json) Hash identifier: NMmsadDYOBx71ICNbBpbrUL47EOsgNUFTk7jjrq2wCo= Subject key identifier: 15:F5:35:4A:C7:2C:E5:13:29:6A:0B:7E:87:D8:81:5D:26:40:38:85 Authority key identifier: 6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 Certificate issuer: /CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft Manifest number: 059A Signing time: Fri 31 May 2024 00:59:31 +0000 Manifest this update: Fri 31 May 2024 00:59:31 +0000 Manifest next update: Fri 07 Jun 2024 00:59:31 +0000 Files and hashes: 1: b2FOWP6Tat901zb1OS3tX9FrdYc.crl (hash: KbUjiiDlhAOnunxEm6QjRe7bjhVFwyYJRulb/hoJJVA=) 2: 00D8BE5286FC11EB8A95642DC4F9AE02.roa (hash: 4KhK9kqJTGDPAJOYCa4lEtI9t9APEbxN6UmdidYEYgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 00:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Validity Not Before: May 31 00:59:31 2024 GMT Not After : Jun 7 00:59:31 2024 GMT Subject: CN=665920f3-3b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:2a:64:43:61:75:24:e1:f7:0b:9b:0b:06: bf:69:c9:1e:7a:6b:bd:30:bb:98:1b:a9:e9:98:16: fb:a1:5a:d0:5e:10:20:60:f6:29:38:5c:55:b4:15: ad:81:3e:41:8a:52:55:c3:70:37:85:5b:99:fe:b3: 8b:1a:04:d4:a1:15:33:84:21:82:6c:61:18:52:fd: f7:25:c0:92:88:16:19:4a:a8:29:ab:e0:24:d5:41: c1:97:40:48:0a:2d:c9:7b:20:eb:e6:68:7c:49:d2: a3:8b:3a:a4:30:31:ec:bd:70:fb:2f:c5:f2:62:ca: b3:fa:c2:8e:41:03:e0:5c:a0:5a:85:16:07:38:40: 31:86:a3:f3:94:ab:86:e1:de:f8:79:83:18:a5:f3: c2:cb:39:b1:f7:b0:ce:96:39:cb:ec:4f:fa:b2:0e: 8f:dc:c9:62:8f:33:bc:56:85:df:05:1b:43:a7:22: 6a:51:8e:5e:fa:75:05:63:dc:3d:fe:4a:a8:87:36: 45:81:24:6a:f0:1c:93:43:d3:f2:20:f5:f2:62:f5: f1:f7:7d:00:46:bc:1b:b5:27:ce:15:7e:14:e1:e3: d7:f7:62:7b:c1:fd:66:73:08:82:1f:a3:5b:1b:6b: e8:06:6f:8b:20:b2:b7:8b:65:83:3c:84:c4:67:d4: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F5:35:4A:C7:2C:E5:13:29:6A:0B:7E:87:D8:81:5D:26:40:38:85 X509v3 Authority Key Identifier: keyid:6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:54:50:0c:04:92:c5:02:cd:b9:d4:17:13:b5:65:c3:af:0d: 30:a6:9a:4f:5c:cc:05:14:58:5a:fb:9a:b6:44:b7:23:cf:f7: 34:02:ff:41:d7:ca:33:9c:ae:86:65:d9:3f:40:19:94:87:12: a2:30:40:ca:3f:16:d2:c5:bd:bc:90:93:79:67:a2:48:2b:33: 36:fd:8e:4a:26:b4:e8:60:31:05:29:2e:0b:7a:4e:c7:97:4a: 04:9e:e7:c5:29:f9:5c:f1:d7:32:4d:a3:22:41:61:83:a9:b6: 2d:fa:95:da:8f:5b:3d:29:48:23:54:48:7f:34:cc:51:b3:f4: f5:7a:3f:1d:94:9b:c7:81:a8:68:3e:c2:8f:ab:3e:8d:6e:04: 67:6f:ee:78:e8:8d:2e:50:65:f3:b3:7a:b0:94:ec:b6:83:47: 80:df:3e:13:56:6d:96:83:4b:66:a9:4c:ff:1f:d7:78:13:f9: 44:79:3f:29:f5:1a:0c:8a:6a:22:99:79:65:cd:84:7b:bf:57: b3:b0:b5:9d:15:95:42:18:e8:49:8f:bc:d1:db:34:b5:5b:fb: 26:af:95:bb:a5:e3:e2:4d:cb:28:09:25:f2:7c:7d:d8:99:2a: 75:2f:fd:7b:70:06:ce:3e:50:2a:22:2d:88:72:5b:d8:1c:89: 04:7e:cf:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0MxMTAvBgNVBAUTKDZGNjE0RTU4RkU5MzZBREY3NEQ3MzZGNTM5MkRFRDVG RDE2Qjc1ODcwHhcNMjQwNTMxMDA1OTMxWhcNMjQwNjA3MDA1OTMxWjAYMRYwFAYD VQQDEw02NjU5MjBmMy0zYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoUqZENhdSTh9wubCwa/ackeemu9MLuYG6npmBb7oVrQXhAgYPYpOFxVtBWt gT5BilJVw3A3hVuZ/rOLGgTUoRUzhCGCbGEYUv33JcCSiBYZSqgpq+Ak1UHBl0BI Ci3JeyDr5mh8SdKjizqkMDHsvXD7L8XyYsqz+sKOQQPgXKBahRYHOEAxhqPzlKuG 4d74eYMYpfPCyzmx97DOljnL7E/6sg6P3MlijzO8VoXfBRtDpyJqUY5e+nUFY9w9 /kqohzZFgSRq8ByTQ9PyIPXyYvXx930ARrwbtSfOFX4U4ePX92J7wf1mcwiCH6Nb G2voBm+LILK3i2WDPITEZ9SzxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBX1NUrH LOUTKWoLfofYgV0mQDiFMB8GA1UdIwQYMBaAFG9hTlj+k2rfdNc29Tkt7V/Ra3WH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzQy8zRjMzNjJEQTg2 RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0OTAxemIxT1MzdFg5RnJk WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyRk9XUDZUYXQ5MDF6YjFPUzN0WDlGcmRZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzQy8zRjMzNjJEQTg2RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0 OTAxemIxT1MzdFg5RnJkWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/VFAMBJLFAs251BcTtWXDrw0wpppPXMwFFFha+5q2RLcjz/c0Av9B 18oznK6GZdk/QBmUhxKiMEDKPxbSxb28kJN5Z6JIKzM2/Y5KJrToYDEFKS4Lek7H l0oEnufFKflc8dcyTaMiQWGDqbYt+pXaj1s9KUgjVEh/NMxRs/T1ej8dlJvHgaho PsKPqz6NbgRnb+546I0uUGXzs3qwlOy2g0eA3z4TVm2Wg0tmqUz/H9d4E/lEeT8p 9RoMimoimXllzYR7v1ezsLWdFZVCGOhJj7zR2zS1W/smr5W7pePiTcsoCSXyfH3Y mSp1L/17cAbOPlAqIi2IclvYHIkEfs/L -----END CERTIFICATE-----Generated at Fri May 31 01:36:44 2024 by rpki-client on console-fra.rpki-client.org