$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft File: Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft (raw, json) Hash identifier: DIXU963QVmlckJ8eyZaWzGuNJWW7hNT7d1qMCNl7TjA= Subject key identifier: 68:7B:6C:17:7B:8D:C8:C3:FA:62:BA:4D:5D:6A:EF:CF:64:8B:E6:8C Authority key identifier: 67:A3:A3:5E:89:76:4F:FE:97:86:8F:55:CC:60:ED:9D:95:A6:5B:FC Certificate issuer: /CN=A91F31FA/serialNumber=67A3A35E89764FFE97868F55CC60ED9D95A65BFC Certificate serial: 1ABF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft Manifest number: 1AB6 Signing time: Fri 31 May 2024 17:37:05 +0000 Manifest this update: Fri 31 May 2024 17:37:04 +0000 Manifest next update: Fri 07 Jun 2024 17:37:04 +0000 Files and hashes: 1: Z6OjXol2T_6Xho9VzGDtnZWmW_w.crl (hash: qL1hk00RfbNj4GiuBd/sqg8ntIMDYou99HlEsSQ3jkA=) 2: 152A08D898BF11EAA3B42868C4F9AE02.roa (hash: BzaLN40r77ex+UF5vsXl8kA976dG4UoD/PSV4k2TGCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.crl rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6847 (0x1abf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31FA/serialNumber=67A3A35E89764FFE97868F55CC60ED9D95A65BFC Validity Not Before: May 31 17:37:04 2024 GMT Not After : Jun 7 17:37:04 2024 GMT Subject: CN=665a0ac0-4f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:29:35:26:2c:d4:5d:cf:e4:c0:db:fd:d5: 12:60:0f:ce:19:b8:0e:43:1a:aa:28:af:b1:93:d6: 7a:4d:cd:4f:f9:ba:a9:67:a2:64:f1:55:f5:8a:bf: b0:50:7c:31:04:d7:28:f2:3e:29:03:72:ec:ff:2c: 03:00:30:c5:65:76:5c:82:c9:5d:c2:99:02:90:a1: 4a:b7:f2:17:bc:4a:17:fc:a9:a5:9c:39:58:98:74: cf:1f:c2:dd:fc:83:99:34:ae:fe:ae:f8:af:d3:45: 37:36:6b:8a:3c:c0:6d:8e:af:f6:8d:48:41:83:fe: 4c:0b:98:63:49:68:d7:81:8f:42:69:21:4a:ef:53: 53:42:db:52:1d:bb:2e:5f:38:04:0e:fe:0d:90:63: 36:e8:68:c1:83:73:f2:2c:77:57:b2:a8:0b:22:b1: a9:6a:02:2c:45:4c:75:33:c7:a4:e4:76:a7:24:0e: 95:48:33:af:d3:f0:ee:b9:ba:32:bf:97:7d:59:2e: bc:1a:44:10:b2:7b:de:78:9a:3c:9b:b3:a0:72:6a: 31:a3:c5:b4:5d:9b:a6:30:fa:60:fb:16:07:82:61: b5:cb:a1:6b:e6:4d:2c:ed:a7:25:96:cb:78:be:5b: 68:49:38:25:7e:c3:75:09:ef:6f:92:e1:6f:29:48: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:6C:17:7B:8D:C8:C3:FA:62:BA:4D:5D:6A:EF:CF:64:8B:E6:8C X509v3 Authority Key Identifier: keyid:67:A3:A3:5E:89:76:4F:FE:97:86:8F:55:CC:60:ED:9D:95:A6:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:79:37:48:01:79:a7:1c:32:a1:f1:d4:e0:8b:f3:3b:c2:ce: 11:27:7e:83:3c:a5:9b:86:0e:77:0f:23:70:b5:cb:97:9e:d7: df:b7:af:32:80:68:81:51:36:42:94:17:e1:8b:26:2f:0e:99: 88:75:11:6d:cf:5e:db:bd:26:0c:89:f1:e6:24:2b:6b:67:f5: dd:0c:d1:ae:b6:31:cd:85:3f:89:7c:a7:9f:62:8e:22:be:4c: 46:df:d2:c4:93:21:38:80:f7:1c:98:ed:7a:a1:c8:bb:d0:8c: 8c:5c:4f:e0:31:4a:8f:6d:47:81:6a:0d:2e:52:6e:dd:21:ba: 94:7f:e7:8d:c6:ea:e4:85:29:5f:46:14:31:23:c2:fa:7c:7f: 42:73:96:32:30:2a:3c:85:99:ab:ec:41:78:9a:51:a9:55:2a: ef:ad:78:14:06:dd:9a:a7:25:e1:e9:b1:a8:b5:8b:2a:93:ad: 20:27:f7:6f:03:d1:68:6a:25:6b:b0:b6:d7:16:58:ff:07:4d: 3b:62:8d:b7:4c:6d:e1:76:d6:5e:aa:2e:c4:20:47:38:75:9b: e3:de:d9:8f:2f:3c:17:62:15:73:34:aa:2e:f1:da:5a:02:dc: 4f:53:c4:f7:50:55:3b:e4:08:b9:44:d9:99:7b:03:96:82:bf: ad:27:a2:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxRkExMTAvBgNVBAUTKDY3QTNBMzVFODk3NjRGRkU5Nzg2OEY1NUNDNjBFRDlE OTVBNjVCRkMwHhcNMjQwNTMxMTczNzA0WhcNMjQwNjA3MTczNzA0WjAYMRYwFAYD VQQDEw02NjVhMGFjMC00ZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgwpNSYs1F3P5MDb/dUSYA/OGbgOQxqqKK+xk9Z6Tc1P+bqpZ6Jk8VX1ir+w UHwxBNco8j4pA3Ls/ywDADDFZXZcgsldwpkCkKFKt/IXvEoX/KmlnDlYmHTPH8Ld /IOZNK7+rviv00U3NmuKPMBtjq/2jUhBg/5MC5hjSWjXgY9CaSFK71NTQttSHbsu XzgEDv4NkGM26GjBg3PyLHdXsqgLIrGpagIsRUx1M8ek5HanJA6VSDOv0/Duuboy v5d9WS68GkQQsnveeJo8m7Ogcmoxo8W0XZumMPpg+xYHgmG1y6Fr5k0s7acllst4 vltoSTglfsN1Ce9vkuFvKUgwSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh7bBd7 jcjD+mK6TV1q789ki+aMMB8GA1UdIwQYMBaAFGejo16Jdk/+l4aPVcxg7Z2Vplv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFGQS8wRDIxMEIxQzBB M0YxMUU3QTVBNDYyMUFDNEY5QUUwMi9aNk9qWG9sMlRfNlhobzlWekdEdG5aV21X X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o2T2pYb2wyVF82WGhvOVZ6R0R0blpXbVdfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFGQS8wRDIxMEIxQzBBM0YxMUU3QTVBNDYyMUFDNEY5QUUwMi9aNk9qWG9sMlRf NlhobzlWekdEdG5aV21XX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/eTdIAXmnHDKh8dTgi/M7ws4RJ36DPKWbhg53DyNwtcuXntfft68y gGiBUTZClBfhiyYvDpmIdRFtz17bvSYMifHmJCtrZ/XdDNGutjHNhT+JfKefYo4i vkxG39LEkyE4gPccmO16oci70IyMXE/gMUqPbUeBag0uUm7dIbqUf+eNxurkhSlf RhQxI8L6fH9Cc5YyMCo8hZmr7EF4mlGpVSrvrXgUBt2apyXh6bGotYsqk60gJ/dv A9FoaiVrsLbXFlj/B007Yo23TG3hdtZeqi7EIEc4dZvj3tmPLzwXYhVzNKou8dpa AtxPU8T3UFU75Ai5RNmZewOWgr+tJ6J6 -----END CERTIFICATE-----Generated at Fri May 31 19:47:54 2024 by rpki-client on console-fra.rpki-client.org