$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json) Hash identifier: B9HvW8pAtK2DADjSDDeL5h4zHjqRwnyHcTwykugpTmM= Subject key identifier: A6:E3:24:3F:D9:2C:65:76:DC:DE:0E:2B:88:2C:EB:76:FB:AE:EC:3D Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft Manifest number: 01D6 Signing time: Sat 01 Jun 2024 05:35:45 +0000 Manifest this update: Sat 01 Jun 2024 05:35:44 +0000 Manifest next update: Sat 08 Jun 2024 05:35:44 +0000 Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: rnu4H9WeroNselH4LMeeZYxOM4pRjj2I+cGEkcLeaHI=) 2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: XCYYRIqZ0RJxW3EeII1LgJDeoQu0ZSwKPm28iclhpZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: Jun 1 05:35:44 2024 GMT Not After : Jun 8 05:35:44 2024 GMT Subject: CN=665ab330-6eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:57:54:61:02:ef:08:58:2d:02:cc:73:b6: f1:40:57:78:33:a2:21:5c:92:f1:61:d1:46:d6:18: 0a:6a:ef:80:be:a3:a0:1a:0f:ec:cf:25:c8:61:15: e1:64:f0:a5:d2:5e:9c:38:b1:d8:0c:9a:f2:20:01: 85:8c:15:ff:ae:f5:05:ea:1a:d0:53:cc:72:2c:9d: 9a:0c:68:27:04:79:0d:b6:2d:31:3c:a1:a6:72:d3: bf:c6:8d:e8:69:a5:e2:6f:f6:ef:92:a3:c6:d1:ee: 83:f3:64:0e:4c:a5:c1:1c:1f:23:38:65:d3:30:17: 41:e7:bc:3e:95:a6:bd:19:3d:9b:e9:70:3b:e0:ee: 1b:63:ad:7d:36:2f:f3:9d:30:51:19:cb:ef:79:b7: b2:bd:8a:03:e6:33:1e:b9:d5:a7:5f:6f:34:b4:78: 96:f5:1b:56:13:dc:c7:80:1e:9d:1f:2c:a1:0c:34: c8:57:92:b5:50:7a:a5:52:87:1f:f7:c3:70:2b:b9: fb:81:dc:2b:56:b2:f1:c2:71:03:f0:ac:44:d7:c2: 05:6e:32:82:02:d8:34:ba:0a:f6:9d:19:62:25:04: 72:bc:79:8b:93:4f:f9:54:b5:f5:f7:ec:0e:90:aa: 11:45:cf:99:8f:0e:2f:7d:4b:27:e7:fa:5d:00:e0: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E3:24:3F:D9:2C:65:76:DC:DE:0E:2B:88:2C:EB:76:FB:AE:EC:3D X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b1:43:90:52:15:99:49:7b:a8:0b:94:c6:9c:ec:fa:be:01: f4:2d:03:27:b8:41:d0:ff:da:bd:f7:ab:53:06:85:2f:a1:33: bf:fb:04:c3:bd:e6:bd:fc:02:f5:6d:54:7e:65:85:7b:85:2a: cc:e5:85:28:07:7b:ca:13:60:9a:51:ad:3f:42:7e:0e:e1:46: 92:c0:48:26:aa:a8:9b:b3:03:e9:94:10:4c:f9:34:9b:10:6c: 6f:95:60:4e:19:1a:e7:20:56:90:4d:37:cf:36:7f:38:f7:fd: 2d:15:9f:a3:ff:81:b6:fd:78:12:80:bc:f5:ac:f0:ac:8c:8b: ce:c6:8e:4a:eb:fe:7f:63:c6:d5:7b:d5:a6:7d:c3:3d:bd:36: 78:13:7e:a6:b9:24:70:6a:52:d2:80:fa:c0:15:df:4c:45:df: 12:08:39:e5:a1:e3:2d:c4:0f:f6:96:db:e3:26:67:61:1d:22: 87:32:0b:8d:c0:01:20:10:cf:7a:c3:0d:40:a7:79:53:16:4a: 1b:fc:ea:85:61:5c:8e:5c:cd:79:a8:d4:7e:33:54:98:7f:c3: 4f:b2:20:7b:54:ed:26:98:70:05:c7:53:00:d2:4d:29:f8:3d: d8:67:5f:2e:44:57:8c:66:14:ca:f3:ae:68:7a:c5:38:2a:76: 62:52:e8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjQwNjAxMDUzNTQ0WhcNMjQwNjA4MDUzNTQ0WjAYMRYwFAYD VQQDEw02NjVhYjMzMC02ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu55XVGEC7whYLQLMc7bxQFd4M6IhXJLxYdFG1hgKau+AvqOgGg/szyXIYRXh ZPCl0l6cOLHYDJryIAGFjBX/rvUF6hrQU8xyLJ2aDGgnBHkNti0xPKGmctO/xo3o aaXib/bvkqPG0e6D82QOTKXBHB8jOGXTMBdB57w+laa9GT2b6XA74O4bY619Ni/z nTBRGcvvebeyvYoD5jMeudWnX280tHiW9RtWE9zHgB6dHyyhDDTIV5K1UHqlUocf 98NwK7n7gdwrVrLxwnED8KxE18IFbjKCAtg0ugr2nRliJQRyvHmLk0/5VLX19+wO kKoRRc+Zjw4vfUsn5/pdAODJwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbjJD/Z LGV23N4OK4gs63b7ruw9MB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA5Qy8wQUE1N0M2QzA0NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9q ZTBObW1WZllVemxaUGNIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnsUOQUhWZSXuoC5TGnOz6vgH0LQMnuEHQ/9q996tTBoUvoTO/+wTD vea9/AL1bVR+ZYV7hSrM5YUoB3vKE2CaUa0/Qn4O4UaSwEgmqqibswPplBBM+TSb EGxvlWBOGRrnIFaQTTfPNn849/0tFZ+j/4G2/XgSgLz1rPCsjIvOxo5K6/5/Y8bV e9WmfcM9vTZ4E36muSRwalLSgPrAFd9MRd8SCDnloeMtxA/2ltvjJmdhHSKHMguN wAEgEM96ww1Ap3lTFkob/OqFYVyOXM15qNR+M1SYf8NPsiB7VO0mmHAFx1MA0k0p +D3YZ18uRFeMZhTK865oesU4KnZiUuhK -----END CERTIFICATE-----Generated at Sat Jun 1 06:27:38 2024 by rpki-client on console-fra.rpki-client.org