$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json) Hash identifier: uRQ3rwSGFMlsHYiVh67RmcFb1q6CHQZNwRuqTx1o/Kg= Subject key identifier: 10:03:28:36:F7:12:EF:DE:F2:3C:C8:45:CB:AB:CB:F0:EB:D0:84:42 Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft Manifest number: 0351 Signing time: Sun 19 May 2024 02:57:34 +0000 Manifest this update: Sun 19 May 2024 02:57:33 +0000 Manifest next update: Sun 26 May 2024 02:57:33 +0000 Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: PI6Vva8hnUvHj1o9DCfHV7NsHEJaGVN2d52JsJIv5f0=) 2: C32984BE6B1011EEACECDE38C4F9AE02.roa (hash: QV8yDdB/aBnujvUw9k5YEZKIEFHi0AQt3Gc1cTTRp5Y=) 3: 08241A166B1111EE99759439C4F9AE02.roa (hash: 4ppChZ9jVbCYg6pjEna3vYQITcTqnyvQumfQReb/zW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Validity Not Before: May 19 02:57:33 2024 GMT Not After : May 26 02:57:33 2024 GMT Subject: CN=66496a9e-a46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:e4:90:af:3e:4f:00:37:22:28:6f:62:07: 36:29:fe:a8:02:df:a8:74:cd:87:29:d7:78:d0:6e: d9:0c:ee:22:d9:cc:bc:c1:c2:2c:a8:4b:16:06:87: 4a:41:e9:1c:ff:c2:80:17:24:4b:30:91:d8:43:bf: 69:ba:d2:bd:6e:b8:4f:34:44:52:2b:54:46:13:2f: 39:9e:18:c1:f0:a3:9f:81:4f:87:52:71:78:41:6e: 46:91:87:e6:4f:1b:f8:6c:7c:b5:24:e9:27:02:45: 61:64:74:01:fd:4f:ec:e6:c1:c9:db:94:be:e9:b8: 5a:b6:e1:04:10:e5:28:2d:ea:ce:d1:a5:72:26:83: 45:21:af:c8:7e:ec:56:28:0f:bd:0d:9c:4c:7a:4c: 41:cb:d8:dc:b9:ad:6f:ec:71:c3:dc:29:81:c4:1b: 50:f5:89:d2:f9:8e:96:9b:f8:1a:fa:4a:02:e0:67: 03:d3:2d:9d:3d:56:15:55:bc:e5:48:76:2d:ff:6f: 8f:8a:f4:d7:22:91:64:02:ae:90:6e:66:3d:53:bf: 3c:6b:80:59:eb:8c:99:da:32:99:c7:69:30:06:6f: 6e:65:77:bc:04:8b:64:d6:17:34:68:a6:d8:17:a1: f4:ed:fc:c2:1d:44:3c:f2:aa:f5:2b:db:c3:50:fd: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:03:28:36:F7:12:EF:DE:F2:3C:C8:45:CB:AB:CB:F0:EB:D0:84:42 X509v3 Authority Key Identifier: keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c8:6e:bf:e8:11:76:77:29:52:da:52:42:24:22:ec:b8:ef: bf:24:1b:eb:e5:b2:a8:19:b1:52:e8:cc:56:d4:bd:10:8b:1c: 31:89:f5:e5:86:10:35:ca:d0:9d:b3:9b:23:a8:40:4d:53:99: b9:51:04:19:22:46:69:f2:25:6a:9b:83:47:e2:7c:93:dc:96: fa:d6:46:a0:57:ed:6e:65:fe:d1:28:ba:0b:09:62:d8:1a:ca: 85:0c:5d:84:ce:a1:d9:14:2d:9a:59:5d:ab:90:be:f0:00:6b: c0:5a:bc:cc:d4:75:31:d6:34:de:e3:7b:63:c1:47:d0:3f:56: 8e:f6:ba:bb:70:d7:1a:c9:d5:c4:0f:fa:3f:b1:85:d9:03:bc: 8a:a8:07:da:74:2a:80:fd:01:64:a4:e0:37:cd:e2:23:f2:64: 11:2a:b1:f3:87:b9:9f:ec:1c:1c:d5:c3:3e:f1:cd:99:56:89: e9:b2:72:4b:a9:44:d2:2b:8a:25:66:65:23:66:f2:71:cd:5b: 45:14:51:93:8e:7b:32:5b:cf:bf:9d:eb:e0:28:77:f5:26:b5: 68:3c:90:b1:a9:4c:df:ce:98:84:83:96:32:fe:45:ce:3e:10: 75:d2:63:63:8a:37:f5:27:f1:1c:e0:89:9b:69:87:25:72:f9: e3:78:a9:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE NTBCMDExNTcwHhcNMjQwNTE5MDI1NzMzWhcNMjQwNTI2MDI1NzMzWjAYMRYwFAYD VQQDEw02NjQ5NmE5ZS1hNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqTkkK8+TwA3IihvYgc2Kf6oAt+odM2HKdd40G7ZDO4i2cy8wcIsqEsWBodK Qekc/8KAFyRLMJHYQ79putK9brhPNERSK1RGEy85nhjB8KOfgU+HUnF4QW5GkYfm Txv4bHy1JOknAkVhZHQB/U/s5sHJ25S+6bhatuEEEOUoLerO0aVyJoNFIa/IfuxW KA+9DZxMekxBy9jcua1v7HHD3CmBxBtQ9YnS+Y6Wm/ga+koC4GcD0y2dPVYVVbzl SHYt/2+PivTXIpFkAq6QbmY9U788a4BZ64yZ2jKZx2kwBm9uZXe8BItk1hc0aKbY F6H07fzCHUQ88qr1K9vDUP34iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBADKDb3 Eu/e8jzIRcury/Dr0IRCMB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0 NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtyG6/6BF2dylS2lJCJCLsuO+/JBvr5bKoGbFS6MxW1L0QixwxifXl hhA1ytCds5sjqEBNU5m5UQQZIkZp8iVqm4NH4nyT3Jb61kagV+1uZf7RKLoLCWLY GsqFDF2EzqHZFC2aWV2rkL7wAGvAWrzM1HUx1jTe43tjwUfQP1aO9rq7cNcaydXE D/o/sYXZA7yKqAfadCqA/QFkpOA3zeIj8mQRKrHzh7mf7Bwc1cM+8c2ZVonpsnJL qUTSK4olZmUjZvJxzVtFFFGTjnsyW8+/nevgKHf1JrVoPJCxqUzfzpiEg5Yy/kXO PhB10mNjijf1J/Ec4ImbaYclcvnjeKkR -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org