$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json) Hash identifier: WaR1wXLcnYmfqyRWQmwie7k8TVb1PsO/1gH7tgKpGwI= Subject key identifier: 56:92:73:BE:61:80:62:A9:C2:F0:EC:F3:F2:98:DE:D0:BC:27:C9:C1 Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Certificate serial: 2D1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft Manifest number: 2D04 Signing time: Fri 31 May 2024 15:51:03 +0000 Manifest this update: Fri 31 May 2024 15:51:03 +0000 Manifest next update: Fri 07 Jun 2024 15:51:03 +0000 Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: UlvXk335uA5/fwsn6G+Khici4LeCHPXKoTImX21jF9E=) 2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: 3yLI1G9CDO88xmuEKu7WMAe/TJefaC7wumODSumchPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11547 (0x2d1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Validity Not Before: May 31 15:51:03 2024 GMT Not After : Jun 7 15:51:03 2024 GMT Subject: CN=6659f1e7-9ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d0:96:00:0b:e9:9c:bf:f3:08:0b:d0:a6:4c: 60:49:3a:d6:c0:57:2b:cf:33:17:ea:71:77:7d:f1: a4:00:0c:22:6c:32:4e:0e:3c:34:ce:f1:3d:cb:59: 95:d1:6a:db:e7:9a:10:76:70:4c:cb:0a:c3:ef:6b: 72:93:ee:d8:f6:ad:1f:d8:cd:fc:89:97:5d:81:2e: 45:a2:6c:45:e8:9e:a7:ef:6c:71:40:3e:35:0f:8e: e7:c2:b6:5d:3b:7a:1b:bd:26:91:a6:b3:f4:ec:17: 68:c9:89:61:11:08:00:ed:b5:04:59:d5:c3:7e:a6: 2f:b9:8e:27:6d:cc:c3:c7:fa:61:95:88:d3:d3:d8: 91:0a:71:54:e9:f8:10:64:60:a5:f6:f2:42:e4:4a: 93:60:81:5a:f8:f9:f6:80:b7:c1:12:de:80:f5:9c: 16:34:a9:3b:1d:39:40:7a:c5:27:da:2e:c4:60:18: 6b:ad:4c:e4:1c:14:29:9a:d0:fc:77:41:de:44:70: b2:af:c4:d9:b4:61:a8:a0:e3:e6:0c:b1:94:56:26: bb:8c:21:38:34:05:5d:41:98:40:74:89:67:7d:18: 23:74:5e:6e:a6:6c:23:97:41:10:61:2b:0d:5c:56: 03:28:a4:6f:64:b0:49:7b:61:dd:5b:68:ee:5b:a9: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:92:73:BE:61:80:62:A9:C2:F0:EC:F3:F2:98:DE:D0:BC:27:C9:C1 X509v3 Authority Key Identifier: keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b6:3c:b6:66:ab:f5:a3:2b:8f:3f:2a:68:91:70:d7:82:76: a8:6e:20:e8:56:2d:7f:3a:fa:8e:ff:bf:39:86:4e:d6:2b:dd: a2:77:f0:11:34:36:16:29:e1:fa:1c:55:b1:88:df:93:d2:fc: 78:5b:84:b0:a8:a7:da:08:a6:4a:a0:bc:c7:21:41:89:90:ad: 80:fb:b2:9b:7f:41:80:92:30:18:a5:b9:a4:3a:f4:65:cf:69: d9:26:22:c3:d6:c2:e4:ad:39:4c:f6:c9:60:d4:0f:ee:ab:f3: 3d:65:1c:07:a8:ea:07:7a:ae:95:c8:e7:af:06:75:89:53:fe: 96:55:53:a4:49:6e:63:f4:6a:85:4a:f4:d3:fe:4d:31:17:1c: ef:0e:26:ec:dd:9b:0f:71:3b:96:cb:ce:2e:ad:d3:d7:43:78: 06:5d:fd:27:0d:67:cd:94:7c:8c:c4:69:dc:31:d2:05:9f:9e: da:d5:76:d5:8b:b2:9e:f5:cf:ce:95:da:f3:52:6b:81:2b:0b: f4:0e:5c:e3:ca:3f:9d:e3:ce:6c:1a:8d:08:de:ba:03:d0:8f: 64:25:04:e1:44:9d:86:ce:ab:ec:77:ea:ee:1d:82:18:7e:5c: cb:28:47:fd:e2:0c:5a:9e:19:85:9a:05:3a:3c:e2:e0:e1:c0: bf:ca:a5:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYyMkE0NTNCQ0Ex QTNCQTZDRDgwHhcNMjQwNTMxMTU1MTAzWhcNMjQwNjA3MTU1MTAzWjAYMRYwFAYD VQQDEw02NjU5ZjFlNy05YWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29CWAAvpnL/zCAvQpkxgSTrWwFcrzzMX6nF3ffGkAAwibDJODjw0zvE9y1mV 0Wrb55oQdnBMywrD72tyk+7Y9q0f2M38iZddgS5FomxF6J6n72xxQD41D47nwrZd O3obvSaRprP07BdoyYlhEQgA7bUEWdXDfqYvuY4nbczDx/phlYjT09iRCnFU6fgQ ZGCl9vJC5EqTYIFa+Pn2gLfBEt6A9ZwWNKk7HTlAesUn2i7EYBhrrUzkHBQpmtD8 d0HeRHCyr8TZtGGooOPmDLGUVia7jCE4NAVdQZhAdIlnfRgjdF5upmwjl0EQYSsN XFYDKKRvZLBJe2HdW2juW6ntHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaSc75h gGKpwvDs8/KY3tC8J8nBMB8GA1UdIwQYMBaAFPkaOpgxQ4TEA6j/IqRTvKGjumzY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEwMi9ENEFFRTJDODc2 OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhNUURxUDhpcEZPOG9hTzZi TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1SbzZtREZEaE1RRHFQOGlwRk84b2FPNmJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEwMi9ENEFFRTJDODc2OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhN UURxUDhpcEZPOG9hTzZiTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbtjy2Zqv1oyuPPypokXDXgnaobiDoVi1/OvqO/785hk7WK92id/AR NDYWKeH6HFWxiN+T0vx4W4SwqKfaCKZKoLzHIUGJkK2A+7Kbf0GAkjAYpbmkOvRl z2nZJiLD1sLkrTlM9slg1A/uq/M9ZRwHqOoHeq6VyOevBnWJU/6WVVOkSW5j9GqF SvTT/k0xFxzvDibs3ZsPcTuWy84urdPXQ3gGXf0nDWfNlHyMxGncMdIFn57a1XbV i7Ke9c/OldrzUmuBKwv0Dlzjyj+d485sGo0I3roD0I9kJQThRJ2Gzqvsd+ruHYIY flzLKEf94gxanhmFmgU6POLg4cC/yqXY -----END CERTIFICATE-----Generated at Fri May 31 17:44:52 2024 by rpki-client on console-fra.rpki-client.org