$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: qVAaUjtx9YLIOgu7oHn37KQPHrqE11JrbdjQANHUM8I= Subject key identifier: 77:14:61:B9:47:6C:92:AA:2C:1A:23:C7:39:1F:00:F5:E7:BA:E4:F2 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0BBB Signing time: Fri 31 May 2024 19:55:17 +0000 Manifest this update: Fri 31 May 2024 19:55:17 +0000 Manifest next update: Fri 07 Jun 2024 19:55:17 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: 3izCT/QILCPN9bvDBBczuHaJutXStL7yHrnKqeMqYA0=) 2: 717FA770604811EDB338B84DC4F9AE02.roa (hash: hNHquyFtjbWiLJebjaDHNkHXMOgjmdo3XenJ/g3x7jE=) 3: 33FF50C6601611ED894DD02FC4F9AE02.roa (hash: Aau/lAVFBQSjfKYJocyqGtnZDvR4wa/EhBEq8CNCLyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: May 31 19:55:17 2024 GMT Not After : Jun 7 19:55:17 2024 GMT Subject: CN=665a2b25-9cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:f9:3d:a6:14:79:dd:62:3a:92:18:a1:b5: f2:c0:a9:1a:4d:f4:f5:7e:bf:32:9e:90:92:e9:36: 21:3b:df:df:73:69:f0:ba:8e:bd:8e:8a:6f:ad:ea: 77:f1:bd:67:0e:aa:e0:5e:dc:e5:0e:1b:60:b6:3a: 19:95:a3:04:b4:18:17:ce:79:fe:06:13:6e:33:8c: 22:81:a1:cf:8f:07:09:29:7a:1a:4d:66:7a:22:e7: 67:f8:fd:e7:ec:b4:fe:91:b7:21:d9:9e:3d:f2:d5: 83:9c:f7:5b:f7:5b:73:f6:2a:d0:7a:22:a3:66:bb: 90:be:99:e9:c8:8a:bd:72:26:90:b7:13:78:5d:ac: 8d:f2:73:92:f2:ce:cb:88:53:e1:1f:5c:87:4b:cd: 76:d1:04:c5:18:57:00:c9:19:38:3e:d8:0a:2c:01: 0c:58:cc:f2:c6:35:7d:92:e8:7f:69:91:36:ff:b4: 56:04:f0:b0:ae:fe:63:0d:47:32:ed:57:20:7e:bc: f2:ec:fd:96:31:8b:29:b0:84:95:7b:84:a3:60:79: 03:89:ad:d7:13:b1:57:c7:bf:a3:ed:62:69:a4:3f: e5:21:4a:28:0a:5e:be:aa:01:3d:2a:7b:a9:02:fa: 26:6b:aa:66:c7:a6:3e:8b:96:a0:8b:14:a2:ea:89: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:14:61:B9:47:6C:92:AA:2C:1A:23:C7:39:1F:00:F5:E7:BA:E4:F2 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:56:34:6c:66:4e:3d:84:36:c6:70:c0:a4:59:2e:5d:67:ac: 54:29:cc:eb:f3:3e:01:b5:e1:25:d4:f5:fb:56:15:b9:d5:8b: 5e:b5:aa:fa:80:61:de:5d:46:cb:09:34:4a:88:67:69:dd:7a: 1c:62:04:f1:d6:03:46:80:30:1b:4c:a8:c8:76:7c:46:49:b8: 35:1a:7a:cd:44:f2:98:b4:dc:59:1d:93:68:63:d9:e0:49:7b: 41:17:41:b7:44:58:d8:1b:bb:0e:f2:ec:31:42:c7:a1:21:bc: d5:da:79:05:65:26:22:8d:6e:1b:5f:c9:a3:4d:dd:79:a9:de: a2:39:ce:00:f3:5c:ca:3e:04:02:7f:07:e7:60:81:08:97:9b: 69:5f:b5:57:d4:50:74:e6:43:82:ef:4a:01:b4:ff:af:e5:1f: 8b:12:e6:d9:72:ca:01:42:81:63:13:b4:75:ac:3b:b6:a6:40: 70:1a:d9:51:52:4f:d9:d5:e4:e9:01:62:54:db:b6:7e:82:15: 96:1a:a5:44:3d:31:1d:10:62:fc:97:d2:99:6d:36:73:63:54: 55:46:e5:30:56:1c:d1:01:81:a5:9d:7e:8b:d8:d5:dc:81:e8: 8a:62:38:b9:e0:ef:89:f5:df:46:8c:3a:51:3a:6f:2b:f5:6d: 69:bc:aa:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjQwNTMxMTk1NTE3WhcNMjQwNjA3MTk1NTE3WjAYMRYwFAYD VQQDEw02NjVhMmIyNS05Y2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswP5PaYUed1iOpIYobXywKkaTfT1fr8ynpCS6TYhO9/fc2nwuo69jopvrep3 8b1nDqrgXtzlDhtgtjoZlaMEtBgXznn+BhNuM4wigaHPjwcJKXoaTWZ6Iudn+P3n 7LT+kbch2Z498tWDnPdb91tz9irQeiKjZruQvpnpyIq9ciaQtxN4XayN8nOS8s7L iFPhH1yHS8120QTFGFcAyRk4PtgKLAEMWMzyxjV9kuh/aZE2/7RWBPCwrv5jDUcy 7Vcgfrzy7P2WMYspsISVe4SjYHkDia3XE7FXx7+j7WJppD/lIUooCl6+qgE9Knup Avoma6pmx6Y+i5agixSi6onPiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcUYblH bJKqLBojxzkfAPXnuuTyMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQVjRsZk49hDbGcMCkWS5dZ6xUKczr8z4BteEl1PX7VhW51Ytetar6 gGHeXUbLCTRKiGdp3XocYgTx1gNGgDAbTKjIdnxGSbg1GnrNRPKYtNxZHZNoY9ng SXtBF0G3RFjYG7sO8uwxQsehIbzV2nkFZSYijW4bX8mjTd15qd6iOc4A81zKPgQC fwfnYIEIl5tpX7VX1FB05kOC70oBtP+v5R+LEubZcsoBQoFjE7R1rDu2pkBwGtlR Uk/Z1eTpAWJU27Z+ghWWGqVEPTEdEGL8l9KZbTZzY1RVRuUwVhzRAYGlnX6L2NXc geiKYji54O+J9d9GjDpROm8r9W1pvKqW -----END CERTIFICATE-----Generated at Fri May 31 22:13:11 2024 by rpki-client on console-fra.rpki-client.org