$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: Zqx/XGc85SFFDcjkmfyYDb314tfqBaLIkvy/6w2tfZo= Subject key identifier: ED:36:69:2A:3B:B1:4D:BA:02:B7:C9:60:9E:CA:F5:37:26:48:68:84 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 17D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 17CD Signing time: Thu 30 May 2024 16:23:39 +0000 Manifest this update: Thu 30 May 2024 16:23:39 +0000 Manifest next update: Thu 06 Jun 2024 16:23:39 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: 6C9fegftz+F7rUHAn/EHCZdcZwsS6uq7tEZ0iyJSRIE=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: DNT/34XAbGmFn+OFYFCM+fQUbu9lF38oPOg62WMGaks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 16:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6098 (0x17d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: May 30 16:23:39 2024 GMT Not After : Jun 6 16:23:39 2024 GMT Subject: CN=6658a80b-8194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:c4:bf:ad:b3:49:e2:66:35:b8:02:11:98: 00:89:f4:8f:42:df:4e:e3:e3:1f:da:e1:56:63:dc: 30:fa:33:16:f3:be:84:18:d1:df:da:30:b6:dc:0c: 47:9b:f9:5f:a3:1d:7e:bf:cc:67:6d:4c:a8:f2:cc: 55:64:44:1a:d2:9e:c1:ba:bd:07:1c:99:24:f1:66: 68:d6:0b:97:77:0e:2d:cb:98:0e:bf:7b:e0:82:04: a4:76:c6:39:19:07:01:50:c8:d4:d2:75:0f:1c:33: 55:ec:f1:9b:8f:61:ef:cf:d2:cc:b3:4a:67:f9:55: cd:3e:81:9c:cf:46:81:59:d6:35:05:0d:7f:f8:5f: 04:ac:f0:51:c6:8c:36:c4:48:7f:1b:33:57:b8:8c: 82:de:44:ba:06:ca:30:40:c9:e5:95:21:dd:9e:30: a8:ca:9f:ca:b7:0c:79:b7:bd:96:42:a8:32:95:7e: 91:0f:7e:b8:05:82:ca:a8:99:8d:16:5f:c3:4d:b0: 0d:15:b3:54:a1:5d:31:df:b1:cf:30:75:1c:e6:58: f1:47:ec:8f:eb:83:14:2a:fe:1f:75:49:e6:8e:81: a4:5f:7b:24:6b:46:cc:e1:59:53:43:c5:b3:f4:d3: 3a:be:ca:c0:bd:6f:f6:9a:b4:98:43:0d:9a:d5:ae: fd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:69:2A:3B:B1:4D:BA:02:B7:C9:60:9E:CA:F5:37:26:48:68:84 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ff:de:99:2a:e9:4b:43:42:a9:65:50:33:90:d2:09:c5:61: 06:4f:7e:b5:3a:5f:fc:f3:69:81:a4:1b:f4:8b:4e:b8:c1:67: 71:a6:75:09:b0:82:fb:7f:78:e9:42:c8:b1:a9:18:d9:cd:14: be:b9:15:57:e1:97:ec:ae:98:0a:26:21:6b:4c:5f:34:ec:2c: ef:c2:0c:e9:15:8a:c1:5d:ef:37:b3:b9:05:4e:76:7a:70:03: 77:7b:53:3d:54:d7:22:6d:42:46:41:34:dd:29:59:b7:fe:d0: 82:17:a2:c6:e5:56:82:d1:39:9b:84:6a:72:7c:2a:1d:37:cc: 1c:f2:83:90:0d:71:49:65:13:f4:ea:fe:a3:dc:78:94:c8:72: 5a:d1:2a:4f:c1:3b:ff:a4:26:21:38:9f:dd:60:a6:df:42:31: 3b:92:11:49:2e:8f:72:5e:41:bf:77:b6:78:bb:69:24:d2:97: b8:79:b9:b7:6d:e6:e5:3b:73:cf:58:72:7e:ee:92:6a:27:cf: 41:42:a7:ae:d7:4e:e3:e1:96:71:24:d3:26:26:2d:60:27:b6: da:c0:17:3a:d5:bc:fa:4f:88:7e:93:35:05:13:a4:e9:7b:7b: a1:cd:4c:51:59:eb:17:ba:f7:d2:88:31:4e:be:e8:05:38:2b: 5b:92:85:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjQwNTMwMTYyMzM5WhcNMjQwNjA2MTYyMzM5WjAYMRYwFAYD VQQDEw02NjU4YTgwYi04MTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYbEv62zSeJmNbgCEZgAifSPQt9O4+Mf2uFWY9ww+jMW876EGNHf2jC23AxH m/lfox1+v8xnbUyo8sxVZEQa0p7Bur0HHJkk8WZo1guXdw4ty5gOv3vgggSkdsY5 GQcBUMjU0nUPHDNV7PGbj2Hvz9LMs0pn+VXNPoGcz0aBWdY1BQ1/+F8ErPBRxow2 xEh/GzNXuIyC3kS6BsowQMnllSHdnjCoyp/Ktwx5t72WQqgylX6RD364BYLKqJmN Fl/DTbANFbNUoV0x37HPMHUc5ljxR+yP64MUKv4fdUnmjoGkX3ska0bM4VlTQ8Wz 9NM6vsrAvW/2mrSYQw2a1a79cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO02aSo7 sU26ArfJYJ7K9TcmSGiEMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh/96ZKulLQ0KpZVAzkNIJxWEGT361Ol/882mBpBv0i064wWdxpnUJ sIL7f3jpQsixqRjZzRS+uRVX4ZfsrpgKJiFrTF807CzvwgzpFYrBXe83s7kFTnZ6 cAN3e1M9VNcibUJGQTTdKVm3/tCCF6LG5VaC0TmbhGpyfCodN8wc8oOQDXFJZRP0 6v6j3HiUyHJa0SpPwTv/pCYhOJ/dYKbfQjE7khFJLo9yXkG/d7Z4u2kk0pe4ebm3 beblO3PPWHJ+7pJqJ89BQqeu107j4ZZxJNMmJi1gJ7bawBc61bz6T4h+kzUFE6Tp e3uhzUxRWesXuvfSiDFOvugFOCtbkoUb -----END CERTIFICATE-----Generated at Thu May 30 18:46:46 2024 by rpki-client on console-ams.rpki-client.org