$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: mbbedUgE6gAZE3tzQNOclI30Muk+DC8wB2Su+1HxXAE= Subject key identifier: 0E:E2:D9:86:B3:0D:BE:6E:C7:3A:5E:80:32:25:3A:02:94:D4:87:F6 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0C55 Signing time: Sat 18 May 2024 18:55:51 +0000 Manifest this update: Sat 18 May 2024 18:55:50 +0000 Manifest next update: Sat 25 May 2024 18:55:50 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: gNhB4OkYdR3cifggNN9xJapXvblQY0Cebi2L8Bif49o=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: ArQ1ORDWsDyRxk4p5UeJSOByQW+/BB9aVTm3Uow8Jyk=) 3: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: CaGe0AHcQubCu6O3M8q6AVpJO4E7E++RqJexbr/jygs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: May 18 18:55:50 2024 GMT Not After : May 25 18:55:50 2024 GMT Subject: CN=6648f9b7-5d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:f8:c5:85:b5:49:d6:b5:a2:c5:e1:da:1a: ed:4a:ff:04:be:28:27:c4:d0:29:c6:03:42:eb:db: c2:ea:3c:af:8b:98:cc:ac:04:95:07:07:2f:d5:09: 71:7d:1f:d2:60:5d:d6:28:af:5e:e5:45:83:85:ff: 01:b3:df:70:3f:cc:e5:0d:5b:2c:13:08:c5:45:14: 5e:8a:d6:e7:6b:86:61:1f:98:fc:a8:9c:68:4b:d5: ae:b7:ce:37:48:59:44:16:09:a0:c4:65:64:10:8b: 45:b0:ca:de:11:78:ca:5d:01:d2:98:b3:6f:21:f8: a6:d2:87:2c:28:70:87:d7:59:eb:19:40:b2:04:17: 6e:77:39:dc:b2:82:1e:a5:f2:51:38:a8:74:66:9a: 10:93:28:fc:f3:66:da:3b:54:25:af:47:46:ef:d7: 63:d0:79:14:f9:59:90:67:45:ff:7a:65:d8:1f:70: 6c:76:7a:91:46:d1:f3:44:01:33:97:3c:d6:4a:e3: d0:0d:15:c0:e1:f0:3f:c7:cc:41:51:2e:fc:85:cc: 64:ba:f9:ef:3a:28:59:b8:6a:25:51:db:3b:26:84: 29:b2:8f:76:02:14:c5:1b:93:0e:3e:ec:ba:e9:8c: 53:2b:46:43:08:21:33:4b:04:32:51:ee:8a:31:1f: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E2:D9:86:B3:0D:BE:6E:C7:3A:5E:80:32:25:3A:02:94:D4:87:F6 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:07:ab:72:55:bc:fd:70:df:f5:81:ef:f0:75:55:7b:2f:4e: 35:30:f4:91:cc:08:68:72:85:e8:ef:dc:e3:5c:f3:aa:fb:c7: 88:4b:77:5b:22:e5:c5:81:3b:7c:81:0a:1f:b4:0c:a4:41:03: 0f:56:31:17:66:ed:59:45:8a:9a:56:5a:d4:f1:12:d4:f5:45: a0:af:10:37:d6:a4:b5:44:42:fd:b6:f6:24:c2:b6:b7:d3:ab: 8a:c1:34:34:46:32:bd:b6:9e:b8:b6:45:1c:89:6d:91:a0:4f: ec:6d:f4:39:b2:b0:63:b8:25:50:09:ed:12:04:56:19:6e:45: 90:72:d8:fc:47:96:95:a1:96:31:31:f0:24:6f:4b:f1:8a:cb: 7d:e6:55:5d:b5:4b:1c:32:ec:ea:1f:66:76:96:ea:2e:fd:c6: 7d:95:e8:80:c4:c9:a2:04:43:2d:a2:16:3d:cc:74:0a:d1:cc: 61:ad:b3:1a:3c:8f:78:89:db:c2:8c:58:1c:05:38:09:3f:fe: 48:bd:18:d8:af:7a:d2:34:32:d9:04:16:57:30:82:49:c2:31: 35:6a:bb:28:c6:7e:83:66:24:76:ed:dc:75:82:d4:37:c1:f4: a7:3b:81:8f:5e:0a:8f:c1:a0:15:aa:c1:2e:2b:66:6d:d2:4a: cf:c8:d3:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjQwNTE4MTg1NTUwWhcNMjQwNTI1MTg1NTUwWjAYMRYwFAYD VQQDEw02NjQ4ZjliNy01ZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk74xYW1Sda1osXh2hrtSv8EvignxNApxgNC69vC6jyvi5jMrASVBwcv1Qlx fR/SYF3WKK9e5UWDhf8Bs99wP8zlDVssEwjFRRReitbna4ZhH5j8qJxoS9Wut843 SFlEFgmgxGVkEItFsMreEXjKXQHSmLNvIfim0ocsKHCH11nrGUCyBBdudzncsoIe pfJROKh0ZpoQkyj882baO1Qlr0dG79dj0HkU+VmQZ0X/emXYH3BsdnqRRtHzRAEz lzzWSuPQDRXA4fA/x8xBUS78hcxkuvnvOihZuGolUds7JoQpso92AhTFG5MOPuy6 6YxTK0ZDCCEzSwQyUe6KMR+ovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7i2Yaz Db5uxzpegDIlOgKU1If2MB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtB6tyVbz9cN/1ge/wdVV7L041MPSRzAhocoXo79zjXPOq+8eIS3db IuXFgTt8gQoftAykQQMPVjEXZu1ZRYqaVlrU8RLU9UWgrxA31qS1REL9tvYkwra3 06uKwTQ0RjK9tp64tkUciW2RoE/sbfQ5srBjuCVQCe0SBFYZbkWQctj8R5aVoZYx MfAkb0vxist95lVdtUscMuzqH2Z2luou/cZ9leiAxMmiBEMtohY9zHQK0cxhrbMa PI94idvCjFgcBTgJP/5IvRjYr3rSNDLZBBZXMIJJwjE1arsoxn6DZiR27dx1gtQ3 wfSnO4GPXgqPwaAVqsEuK2Zt0krPyNPv -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org