$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: Dv6CBxKJRwGLgMSZJbdU3kLQCiUKwtOc51YO/DpNBqs= Subject key identifier: D8:10:07:56:4B:42:CD:9E:A6:E7:1B:A7:A4:56:15:66:24:95:B7:9B Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0C21 Signing time: Sat 18 May 2024 19:03:31 +0000 Manifest this update: Sat 18 May 2024 19:03:31 +0000 Manifest next update: Sat 25 May 2024 19:03:31 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: sqpVQg+Q52keLyytRjdbY5U+Qzgcqna5PXl/tfyGfoI=) 2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: D1fGMN2cSahpF/ku+zEEUcLgv2SGq3ZJu7KAeIrSvfs=) 3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: lPjSc60rQtsbO9RyH0lPrXJlccLeB9Qt5mjRqz6SUuk=) 4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: yeHG1kxMnb3frjv9cxAjbOfdyL7AWuUw8STMy6MQRNo=) 5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: xauhUxQAlRpApB1Jh66cBppkUInGl6bYhK2vyq9MndE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: May 18 19:03:31 2024 GMT Not After : May 25 19:03:31 2024 GMT Subject: CN=6648fb83-483b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:c5:d0:b6:34:fb:d0:66:7d:32:e2:07:c5: 0c:e9:55:48:25:f5:7b:fa:e5:ea:d6:d5:76:8d:b2: 68:bd:5e:11:d6:71:72:db:6d:ba:72:1a:c1:49:51: 67:bc:80:f2:a0:26:00:0d:1b:db:7e:5b:18:da:16: 82:eb:0c:95:7c:c1:13:4b:0d:c8:13:04:c3:ec:1f: 31:45:72:56:2b:6f:74:14:68:e6:85:7c:31:e8:f5: 4b:d0:ce:f8:5b:8b:88:7a:cd:3b:a5:ab:da:fe:46: f3:f0:bf:1f:c8:e9:ea:bd:d7:73:11:21:77:e0:60: ae:00:39:34:68:42:a7:72:83:15:c3:d8:f6:48:28: 9b:8e:f2:47:42:88:11:97:ed:a7:48:d5:1a:fd:b8: 02:5a:f8:7d:7d:a3:d1:c6:a8:e8:e6:26:dd:7a:36: 48:51:5f:93:aa:fe:bd:8d:52:5b:f6:37:67:e8:4e: 7c:c2:4a:cb:82:c1:fc:31:2c:25:38:c3:4f:7a:6e: af:b2:cc:d4:e3:80:a8:59:8a:f5:60:e9:47:d9:14: b4:20:34:2f:14:54:19:39:b2:74:09:00:93:ea:e5: d6:a7:3f:ca:81:8f:73:d8:0d:aa:c3:6e:67:52:67: 88:9e:a0:05:cf:eb:bf:e9:f3:bc:94:10:8d:14:e9: c2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:10:07:56:4B:42:CD:9E:A6:E7:1B:A7:A4:56:15:66:24:95:B7:9B X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ea:81:1b:af:d1:d0:4f:fb:49:b0:28:12:ba:53:d6:77:bb: 21:c0:12:84:82:07:d9:47:4a:eb:a5:53:73:41:a1:fb:2f:67: bc:71:6a:05:91:80:fe:b8:e9:a9:03:e5:c0:ee:e6:3d:47:df: 6b:78:f9:1b:49:ac:ce:13:43:14:d9:56:a6:69:87:d5:52:d4: bf:a4:2f:ed:45:0e:81:d4:4f:46:21:ed:1d:16:d2:9a:9d:00: a3:84:25:e0:b9:c9:d5:78:d7:a6:2e:38:85:fc:da:d1:8a:b1: 51:ed:99:cb:0e:ee:f4:b9:02:95:01:e9:14:c4:62:31:66:e7: af:a4:83:ac:a7:37:03:65:34:07:87:aa:ed:5d:8a:d7:09:3b: 93:a3:72:f1:a4:da:11:52:36:f1:7e:3c:7d:0a:04:7d:85:9e: 61:0c:e3:d8:83:66:0c:1b:01:9c:db:49:86:29:fd:a8:14:6c: 31:75:d6:10:c2:41:d0:f0:bf:c9:c9:d1:13:1d:c6:37:07:67: 84:c1:a8:54:12:20:66:9f:93:6c:08:2a:f1:31:9d:d1:dc:4c: cc:51:38:16:43:ed:da:88:00:54:5e:4a:a3:7e:29:f4:e8:2b: 56:c8:6b:10:b0:f1:5a:b1:77:22:58:37:4d:a9:8d:66:3c:b5: d0:c6:49:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjQwNTE4MTkwMzMxWhcNMjQwNTI1MTkwMzMxWjAYMRYwFAYD VQQDEw02NjQ4ZmI4My00ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4obF0LY0+9BmfTLiB8UM6VVIJfV7+uXq1tV2jbJovV4R1nFy2226chrBSVFn vIDyoCYADRvbflsY2haC6wyVfMETSw3IEwTD7B8xRXJWK290FGjmhXwx6PVL0M74 W4uIes07pava/kbz8L8fyOnqvddzESF34GCuADk0aEKncoMVw9j2SCibjvJHQogR l+2nSNUa/bgCWvh9faPRxqjo5ibdejZIUV+Tqv69jVJb9jdn6E58wkrLgsH8MSwl OMNPem6vsszU44CoWYr1YOlH2RS0IDQvFFQZObJ0CQCT6uXWpz/KgY9z2A2qw25n UmeInqAFz+u/6fO8lBCNFOnC0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgQB1ZL Qs2epucbp6RWFWYklbebMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM6oEbr9HQT/tJsCgSulPWd7shwBKEggfZR0rrpVNzQaH7L2e8cWoF kYD+uOmpA+XA7uY9R99rePkbSazOE0MU2VamaYfVUtS/pC/tRQ6B1E9GIe0dFtKa nQCjhCXgucnVeNemLjiF/NrRirFR7ZnLDu70uQKVAekUxGIxZuevpIOspzcDZTQH h6rtXYrXCTuTo3LxpNoRUjbxfjx9CgR9hZ5hDOPYg2YMGwGc20mGKf2oFGwxddYQ wkHQ8L/JydETHcY3B2eEwahUEiBmn5NsCCrxMZ3R3EzMUTgWQ+3aiABUXkqjfin0 6CtWyGsQsPFasXciWDdNqY1mPLXQxknL -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org