$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: g7nyMsUESDi9FeUK9NZK//qUS/Z9K5epvY2UELLJDII= Subject key identifier: EC:87:5D:D5:B6:CF:9B:60:44:D8:B1:C0:EA:20:B6:31:B5:0B:2D:FA Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: 26 Signing time: Sun 19 May 2024 08:33:01 +0000 Manifest this update: Sun 19 May 2024 08:33:00 +0000 Manifest next update: Sun 26 May 2024 08:33:00 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: YoEldHrl1YWUUad7CK1STGkJ1LMBs1FfQ7VuW+u5TGk=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: PUjVsLMakoeiQgCADxJ0sNiMuXuae7hB49f6/P7jIFA=) 3: E0C47044E18D11EE82E6CE22C4F9AE02.roa (hash: ESyGYyt9wkH29mEF4NUVln1nHsyONlF4S3DRKcZSsQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: May 19 08:33:00 2024 GMT Not After : May 26 08:33:00 2024 GMT Subject: CN=6649b93d-f1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:e0:ec:cf:0e:2d:a0:36:d1:fb:33:99:99: 18:e8:91:e3:07:66:fd:f7:ca:90:09:74:b1:7b:d8: 36:82:2a:6d:10:c9:3b:9a:27:ea:08:2a:32:85:27: 58:c8:96:25:a2:5f:27:b9:00:9e:e7:ec:e2:b5:c6: 19:8b:a0:d3:28:e7:de:e9:5d:c3:eb:83:36:4f:e8: 46:f8:c9:4b:68:d9:b4:35:74:91:b8:f0:a6:8b:7e: 0c:df:a0:94:06:8d:35:9c:64:fd:f5:da:6f:5c:73: 43:c8:44:b9:28:e6:a5:98:4e:bf:c5:6a:49:1f:f1: 4c:bb:3e:74:05:7a:7c:6c:59:87:7f:60:69:b1:80: 87:9b:38:92:d5:98:5d:12:3b:6a:14:a3:27:7e:d8: 25:42:1f:2f:cd:bc:c7:80:cb:d3:dc:23:05:a1:72: 2a:e3:6a:3b:20:cb:d7:3c:33:c7:b4:47:38:45:ca: 9c:c0:33:5d:f5:ee:a9:4e:9d:75:3d:e5:47:ce:a4: cb:43:87:cc:5a:f9:07:1a:f6:2b:ff:ea:af:aa:e8: 08:0b:12:2a:b2:84:a4:3c:fe:91:6b:74:64:04:e0: 84:7f:6f:69:8f:3c:ee:37:dc:10:e0:95:41:54:52: e9:64:c4:18:13:06:cc:4f:2a:82:c3:c7:bf:d8:c9: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:87:5D:D5:B6:CF:9B:60:44:D8:B1:C0:EA:20:B6:31:B5:0B:2D:FA X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:7b:b4:16:46:eb:7c:2c:c4:e5:fb:cb:e2:57:56:3f:47:92: 46:91:26:c1:e9:cd:f1:d7:e4:a1:c1:82:f3:11:41:2d:a0:5a: 4e:4f:e7:6d:53:6d:0f:17:d5:5e:f9:2c:81:8a:9c:1f:1b:a2: 1e:14:ac:eb:ca:6c:78:de:5c:6e:57:01:d6:1a:a0:8f:78:f4: bd:f7:af:6b:a2:13:2f:5d:57:cb:78:b8:fb:52:06:10:08:fc: 74:ec:91:d7:9a:c6:be:00:c5:7c:c3:3b:6d:8b:4d:94:69:b9: 9b:91:c1:8a:26:4a:22:a2:40:e9:11:ab:b9:6e:c3:5b:c0:e1: ec:ca:99:a1:ef:0b:fe:8d:78:dc:95:18:77:dd:25:62:41:62: a3:84:f2:72:89:e2:5d:54:20:94:f6:01:9a:b7:c6:07:06:eb: 2c:42:94:4d:37:71:b2:ec:09:e4:f2:12:2e:0c:e2:0a:61:8a: 37:9e:81:ec:b8:25:ab:94:e7:47:dd:5a:2f:2f:c0:37:57:e9: 58:a0:79:47:68:5a:eb:5a:24:68:ab:8c:c2:2a:f8:18:79:b1: 2e:67:64:61:95:f1:68:b8:98:40:c2:a6:bf:d9:5d:a0:8d:55: e6:7a:04:45:77:29:ba:10:61:49:2e:50:06:5b:e3:8f:18:05: 4e:d9:ef:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzNCQjExMC8GA1UEBRMoOTM3QTFCNUZFQjBBMjkzMzYwRUE0RTg4NDczNTJFN0ZE MzZDQzdBNTAeFw0yNDA1MTkwODMzMDBaFw0yNDA1MjYwODMzMDBaMBgxFjAUBgNV BAMTDTY2NDliOTNkLWYxZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcdeDszw4toDbR+zOZmRjokeMHZv33ypAJdLF72DaCKm0QyTuaJ+oIKjKFJ1jI liWiXye5AJ7n7OK1xhmLoNMo597pXcPrgzZP6Eb4yUto2bQ1dJG48KaLfgzfoJQG jTWcZP312m9cc0PIRLko5qWYTr/Fakkf8Uy7PnQFenxsWYd/YGmxgIebOJLVmF0S O2oUoyd+2CVCHy/NvMeAy9PcIwWhcirjajsgy9c8M8e0RzhFypzAM1317qlOnXU9 5UfOpMtDh8xa+Qca9iv/6q+q6AgLEiqyhKQ8/pFrdGQE4IR/b2mPPO433BDglUFU UulkxBgTBsxPKoLDx7/YyYWHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7Idd1bbP m2BE2LHA6iC2MbULLfowHwYDVR0jBBgwFoAUk3obX+sKKTNg6k6IRzUuf9Nsx6Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3M0JCLzdFRDU3NTg2RTE4 RDExRUU5OTBGRUM0RkM0RjlBRTAyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvazNvYlgtc0tLVE5nNms2SVJ6VXVmOU5zeDZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 M0JCLzdFRDU3NTg2RTE4RDExRUU5OTBGRUM0RkM0RjlBRTAyL2szb2JYLXNLS1RO ZzZrNklSelV1ZjlOc3g2VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALR7tBZG63wsxOX7y+JXVj9HkkaRJsHpzfHX5KHBgvMRQS2gWk5P521T bQ8X1V75LIGKnB8boh4UrOvKbHjeXG5XAdYaoI949L33r2uiEy9dV8t4uPtSBhAI /HTskdeaxr4AxXzDO22LTZRpuZuRwYomSiKiQOkRq7luw1vA4ezKmaHvC/6NeNyV GHfdJWJBYqOE8nKJ4l1UIJT2AZq3xgcG6yxClE03cbLsCeTyEi4M4gphijeegey4 JauU50fdWi8vwDdX6VigeUdoWutaJGirjMIq+Bh5sS5nZGGV8Wi4mEDCpr/ZXaCN VeZ6BEV3KboQYUkuUAZb448YBU7Z7z4= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org