$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: 5rjKUZfCJMKCqoXGvmkBQELNDzm5COacIiXWddIjiw8= Subject key identifier: 1D:6E:C0:C0:A4:3B:63:EA:06:99:E9:0E:8D:9C:D8:4A:2A:D3:3F:D3 Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 0610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 060C Signing time: Sat 18 May 2024 23:52:25 +0000 Manifest this update: Sat 18 May 2024 23:52:24 +0000 Manifest next update: Sat 25 May 2024 23:52:24 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: rmyEMIS694StophVjaryTuUgHbaIWQebUdvR0M7GNaM=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: Inb9B715qZk5M1JWcplHdxcNsFhqmtb5cbAEnCl04ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: May 18 23:52:24 2024 GMT Not After : May 25 23:52:24 2024 GMT Subject: CN=66493f38-599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:26:9d:dc:c5:b8:56:99:92:b0:0a:9d:06: 77:9d:4a:03:09:b8:05:56:53:51:7d:44:02:78:12: c3:b0:0e:c3:37:f4:13:91:5a:6d:9b:a8:f5:bb:6c: 12:35:04:bf:8b:34:b1:b6:d8:5e:6b:fe:89:a1:b1: 07:30:47:ac:18:db:96:57:80:0d:9c:a3:ab:03:67: d2:65:ac:b3:ef:23:da:d6:b1:bc:ba:81:56:02:15: dc:b1:b4:a6:21:84:7e:80:24:85:bd:c8:79:a6:49: 7b:53:3b:c0:c3:3a:4c:dc:d6:be:a3:93:63:57:2d: 1e:cb:a0:b9:74:ca:02:1b:73:8d:ea:4b:97:f8:5f: 3d:f6:50:ba:66:43:ab:11:0b:57:c2:54:8b:ed:36: 2f:11:b5:0d:c3:2c:9a:0f:0e:25:d5:4b:e1:92:cc: d1:e9:fb:37:8b:8a:80:04:8c:33:e2:17:6a:c3:73: 2b:29:84:f6:25:d4:08:30:48:6b:5b:ca:bf:9d:3a: de:51:a7:2c:db:ef:09:48:bd:ec:1e:b1:71:30:a2: 29:87:b6:d8:fc:2c:f1:9a:13:d0:39:bc:58:86:c4: 00:a5:60:a5:bc:4b:1b:33:1b:ab:a9:4f:1a:20:7d: 4f:b6:27:57:14:78:6c:8e:39:5c:4b:f7:64:81:b8: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6E:C0:C0:A4:3B:63:EA:06:99:E9:0E:8D:9C:D8:4A:2A:D3:3F:D3 X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:99:68:e4:4d:8b:a0:2b:fc:63:7a:76:bd:71:37:32:1e:73: 97:e0:de:89:b0:d8:67:b7:e1:b5:58:0d:ac:e0:ca:f9:fa:35: cf:8d:db:67:a7:9a:12:ec:6c:2f:ce:97:a3:0b:ca:8d:5e:f4: 35:0f:d7:11:59:f5:4b:07:04:8f:28:9d:ee:25:cc:5b:66:0c: 28:09:3e:9b:7a:c9:c0:94:68:94:80:0c:28:94:39:26:31:c7: bf:98:e6:fb:f9:e3:db:2a:33:a3:d2:3b:88:cf:8b:93:09:37: 2c:8a:bd:07:c1:5f:49:da:61:f5:b3:04:e1:a2:9d:7d:fc:5a: 87:85:35:e9:32:2f:9c:2a:93:8e:15:4d:f6:14:04:47:95:90: 60:39:0d:34:90:25:7c:a8:cd:53:e5:3a:cb:71:70:26:19:ca: b1:c1:2a:3c:47:c3:11:c8:66:e8:ad:66:49:33:d5:c0:5c:c8: d5:c0:76:86:e5:1e:80:b5:0b:10:bf:10:2b:04:ed:4e:35:52: 67:3e:c0:b0:2a:a9:f2:4f:8a:6b:c2:46:64:0a:ce:f2:83:82: f3:2b:3b:2d:42:38:ae:13:85:78:f4:63:69:2d:a7:96:a4:5c: 15:f2:10:31:97:79:e3:d8:82:37:22:a9:05:25:85:9e:44:56: f5:6c:68:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjQwNTE4MjM1MjI0WhcNMjQwNTI1MjM1MjI0WjAYMRYwFAYD VQQDEw02NjQ5M2YzOC01OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3EmndzFuFaZkrAKnQZ3nUoDCbgFVlNRfUQCeBLDsA7DN/QTkVptm6j1u2wS NQS/izSxtthea/6JobEHMEesGNuWV4ANnKOrA2fSZayz7yPa1rG8uoFWAhXcsbSm IYR+gCSFvch5pkl7UzvAwzpM3Na+o5NjVy0ey6C5dMoCG3ON6kuX+F899lC6ZkOr EQtXwlSL7TYvEbUNwyyaDw4l1UvhkszR6fs3i4qABIwz4hdqw3MrKYT2JdQIMEhr W8q/nTreUacs2+8JSL3sHrFxMKIph7bY/CzxmhPQObxYhsQApWClvEsbMxurqU8a IH1PtidXFHhsjjlcS/dkgbi/mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1uwMCk O2PqBpnpDo2c2Eoq0z/TMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqmWjkTYugK/xjena9cTcyHnOX4N6JsNhnt+G1WA2s4Mr5+jXPjdtn p5oS7GwvzpejC8qNXvQ1D9cRWfVLBwSPKJ3uJcxbZgwoCT6besnAlGiUgAwolDkm Mce/mOb7+ePbKjOj0juIz4uTCTcsir0HwV9J2mH1swThop19/FqHhTXpMi+cKpOO FU32FARHlZBgOQ00kCV8qM1T5TrLcXAmGcqxwSo8R8MRyGborWZJM9XAXMjVwHaG 5R6AtQsQvxArBO1ONVJnPsCwKqnyT4prwkZkCs7yg4LzKzstQjiuE4V49GNpLaeW pFwV8hAxl3nj2II3IqkFJYWeRFb1bGil -----END CERTIFICATE-----Generated at Sun May 19 00:59:44 2024 by rpki-client on console-fra.rpki-client.org