$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: TKcm650oL7MdG8R4mi3z6XD/icjWDCRipTIRCGuSBEU= Subject key identifier: 50:4C:08:8A:B8:1E:67:03:F8:60:46:9F:7A:7A:BE:40:C0:72:FD:E2 Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 04E1 Signing time: Sun 19 May 2024 01:18:47 +0000 Manifest this update: Sun 19 May 2024 01:18:46 +0000 Manifest next update: Sun 26 May 2024 01:18:46 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: /rYIji9d4mWDuozWSr8ea35MwJILtdS0uSoM8wpJZKw=) 2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: 6BX/xEUhirg9NGqrkFl8v5nSuGOuNdQtJsriNoOq47E=) 3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: rvf5KLvSN+en8iwi9yAY4m1EOnz1VzSLZ+8+NQHxWts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: May 19 01:18:46 2024 GMT Not After : May 26 01:18:46 2024 GMT Subject: CN=66495377-a8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b3:d5:4d:7f:07:f1:be:7d:82:bf:a2:ea:ee: ab:d4:7b:c7:71:a5:8e:7c:d5:10:20:8d:8b:bb:82: 40:8c:a3:89:bd:de:2a:ab:b4:95:34:cb:17:69:6c: 91:92:8c:3d:1a:ce:6e:ba:32:52:e9:63:f8:a1:f1: ad:26:bb:a2:f5:da:29:5a:fa:2d:6a:95:de:5e:19: 3e:65:58:50:bc:ab:37:ee:79:b1:52:86:89:22:01: 4d:76:9b:32:55:3b:da:2b:a4:7e:b9:e8:69:3a:2a: 66:51:48:ae:12:b9:88:ed:1e:fb:c8:dc:cc:53:aa: a9:8a:6c:1f:f7:2a:8b:9f:8d:ec:0a:31:59:76:37: 4e:9c:8b:88:24:71:10:4e:22:29:bb:40:3f:a7:f7: 2c:91:06:51:2f:1e:61:ff:36:e2:c8:9b:fe:7e:4d: ea:68:c9:51:61:40:2a:73:57:9c:a9:91:6e:ac:b6: 51:72:73:4c:46:b7:90:d0:f4:78:54:06:d2:75:b4: 56:85:d2:db:86:ea:25:89:a7:4f:53:ab:dc:e0:51: 3f:d6:fa:a2:80:60:72:6f:97:80:f3:db:90:c5:b8: d0:7d:1f:d5:b1:e3:63:5f:a5:45:b9:fa:7a:02:df: 0c:f4:3d:af:72:40:2d:af:48:79:50:f3:1c:6a:ce: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4C:08:8A:B8:1E:67:03:F8:60:46:9F:7A:7A:BE:40:C0:72:FD:E2 X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:0b:f4:ed:1f:fe:48:f1:eb:80:d9:0e:39:7e:66:ad:ea: c7:20:51:8a:04:10:82:20:8e:d6:f7:31:ee:02:91:ea:f3:da: 5b:5d:f0:c3:70:54:f7:66:e2:b3:ac:9c:4f:36:36:be:50:c7: d3:77:af:32:a5:22:32:3b:cc:5d:57:5f:09:01:ac:72:6d:a7: cf:58:a9:74:55:28:1e:6c:9b:48:70:64:c1:c1:aa:87:11:ea: 47:69:6a:59:66:da:01:42:31:99:27:0b:46:aa:2f:24:ff:8b: 6a:4b:f0:da:5e:c5:a5:71:6f:80:e2:e2:31:9f:e1:82:68:e1: 11:6a:24:16:28:4d:a6:35:3b:ac:71:5e:5f:9b:f9:69:5c:42: eb:f5:0a:59:04:6b:ff:40:68:d0:19:ae:8e:50:b9:b5:37:d5: c4:5a:3b:20:a5:0d:8a:1a:7a:a9:b4:67:92:df:48:20:b8:18: 0a:60:3d:5c:cb:46:d0:f6:36:08:60:96:28:3a:58:13:d8:4e: f0:2f:14:d2:0a:e5:2c:77:1f:23:98:84:c4:72:13:d4:b5:d4: 40:a5:30:d8:63:93:71:91:d0:07:77:a2:e7:72:5b:15:32:c0: 17:eb:32:01:1b:0a:52:30:e5:2c:fb:dd:18:74:74:0d:1a:de: 81:97:5b:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjQwNTE5MDExODQ2WhcNMjQwNTI2MDExODQ2WjAYMRYwFAYD VQQDEw02NjQ5NTM3Ny1hOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bPVTX8H8b59gr+i6u6r1HvHcaWOfNUQII2Lu4JAjKOJvd4qq7SVNMsXaWyR kow9Gs5uujJS6WP4ofGtJrui9dopWvotapXeXhk+ZVhQvKs37nmxUoaJIgFNdpsy VTvaK6R+uehpOipmUUiuErmI7R77yNzMU6qpimwf9yqLn43sCjFZdjdOnIuIJHEQ TiIpu0A/p/cskQZRLx5h/zbiyJv+fk3qaMlRYUAqc1ecqZFurLZRcnNMRreQ0PR4 VAbSdbRWhdLbhuoliadPU6vc4FE/1vqigGByb5eA89uQxbjQfR/VseNjX6VFufp6 At8M9D2vckAtr0h5UPMcas5czwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBMCIq4 HmcD+GBGn3p6vkDAcv3iMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOfwv07R/+SPHrgNkOOX5mrerHIFGKBBCCII7W9zHuApHq89pbXfDD cFT3ZuKzrJxPNja+UMfTd68ypSIyO8xdV18JAaxybafPWKl0VSgebJtIcGTBwaqH EepHaWpZZtoBQjGZJwtGqi8k/4tqS/DaXsWlcW+A4uIxn+GCaOERaiQWKE2mNTus cV5fm/lpXELr9QpZBGv/QGjQGa6OULm1N9XEWjsgpQ2KGnqptGeS30gguBgKYD1c y0bQ9jYIYJYoOlgT2E7wLxTSCuUsdx8jmITEchPUtdRApTDYY5NxkdAHd6LnclsV MsAX6zIBGwpSMOUs+90YdHQNGt6Bl1uB -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-fra.rpki-client.org