$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: 4CrGuhCg5kGRTkaL58wQ3xfmVBQpb2VwTQzD1kDj6GY= Subject key identifier: 4F:E9:5E:38:D6:95:6D:E3:0B:53:C3:AB:73:B7:EB:30:47:CE:19:6D Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0571 Signing time: Sun 19 May 2024 00:45:13 +0000 Manifest this update: Sun 19 May 2024 00:45:12 +0000 Manifest next update: Sun 26 May 2024 00:45:12 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: qqgqfg4CN14CtAR+X7A1Oc/xXu8xVRzemHT9tapBFVo=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: zyghhD83E3ancqyM0ivmhcS7xqw8/v//USJy6ajnwTk=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: sAPblarR1RVbcdAB8jcZ3zm1ZUu8MrXig2RJFCDYAAk=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: BctLpnq9bXMH0MAtTDoa/bRoNASj+b76mdAuRKsBwpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: May 19 00:45:12 2024 GMT Not After : May 26 00:45:12 2024 GMT Subject: CN=66494b98-6d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:34:d1:48:03:b0:50:de:4f:f2:c6:58:cd: 73:09:a4:fd:74:5b:11:dc:eb:8d:be:ee:75:25:b2: 8f:82:86:2d:54:3a:6e:d9:b3:b8:ef:d0:58:84:db: d3:20:f3:28:c6:1b:69:fc:ba:9c:51:d1:66:75:fc: 72:76:46:bd:eb:7c:cc:d4:f9:ed:34:8d:30:57:9f: a6:18:c6:ab:98:21:b4:dd:3d:f1:6a:6b:23:83:83: 07:9f:62:38:bc:ce:33:7e:cd:23:57:70:f7:28:0b: 08:1a:e4:88:ab:0e:dc:15:36:e2:7d:a7:73:5d:38: 90:12:da:86:1e:a0:9b:75:07:08:98:c9:34:94:45: fb:97:b6:82:bc:e7:73:b2:73:8b:f8:87:05:89:b0: 31:a2:e3:d8:81:44:31:82:ff:1d:89:9d:1e:73:a3: fb:8b:dc:5c:89:43:5a:11:f1:d7:eb:7d:05:65:75: f0:46:93:6d:b6:c7:e5:38:8e:40:e4:c5:2a:2f:77: fc:cf:7f:a8:09:35:88:95:3e:c9:6b:5c:a2:91:97: c5:35:28:70:94:70:78:e6:23:d8:25:45:ca:44:bf: 15:83:6c:35:d0:07:a8:26:b2:f7:42:62:1a:fe:cb: 9e:02:11:b1:cb:70:94:0a:82:9c:c4:fe:d6:e9:e8: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E9:5E:38:D6:95:6D:E3:0B:53:C3:AB:73:B7:EB:30:47:CE:19:6D X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:82:2a:39:60:a3:5f:9f:83:ef:68:e6:c3:2a:8b:5a:ec:dc: 75:14:e4:14:a6:d6:7d:51:e1:bf:2a:46:cb:fd:2d:aa:0b:c5: a5:51:b9:af:cb:6b:d5:6d:cc:4e:6e:20:f9:9c:03:0a:73:37: 0b:56:31:a7:9f:16:71:dd:6d:25:89:fb:bf:fc:59:27:37:8c: 3d:96:e0:a2:54:e7:b9:1c:83:51:37:aa:76:4b:03:56:36:c4: 9e:68:da:96:2f:c5:c4:7b:a7:bf:72:57:d6:45:97:99:fd:ea: 89:77:76:44:3f:40:34:95:3e:78:22:39:84:9d:84:76:2c:b2: 45:64:5b:0b:29:26:4f:21:21:c5:2c:f2:69:fd:10:d5:3f:78: 88:41:8e:e3:3e:9f:d2:1c:10:12:58:07:4f:42:b1:fa:2c:b2: 81:24:15:0d:0d:c6:66:ee:87:3d:c1:04:b3:ee:c5:b9:f8:7a: e1:d8:39:a3:44:ea:23:a8:12:45:ea:ae:98:e4:28:79:fa:95: aa:42:64:80:84:55:1a:9c:96:fd:da:fb:9d:3b:f3:e2:71:a7: 26:3e:c0:ba:b6:86:92:dd:7e:13:7a:ce:c0:e5:36:2b:f8:e3: d4:58:25:50:00:d7:2a:1a:4c:4f:cc:08:e3:59:0f:2c:83:e2: 65:b8:a7:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjQwNTE5MDA0NTEyWhcNMjQwNTI2MDA0NTEyWjAYMRYwFAYD VQQDEw02NjQ5NGI5OC02ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2800UgDsFDeT/LGWM1zCaT9dFsR3OuNvu51JbKPgoYtVDpu2bO479BYhNvT IPMoxhtp/LqcUdFmdfxydka963zM1PntNI0wV5+mGMarmCG03T3xamsjg4MHn2I4 vM4zfs0jV3D3KAsIGuSIqw7cFTbifadzXTiQEtqGHqCbdQcImMk0lEX7l7aCvOdz snOL+IcFibAxouPYgUQxgv8diZ0ec6P7i9xciUNaEfHX630FZXXwRpNttsflOI5A 5MUqL3f8z3+oCTWIlT7Ja1yikZfFNShwlHB45iPYJUXKRL8Vg2w10AeoJrL3QmIa /sueAhGxy3CUCoKcxP7W6egLQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/pXjjW lW3jC1PDq3O36zBHzhltMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKgio5YKNfn4PvaObDKota7Nx1FOQUptZ9UeG/KkbL/S2qC8WlUbmv y2vVbcxObiD5nAMKczcLVjGnnxZx3W0lifu//FknN4w9luCiVOe5HINRN6p2SwNW NsSeaNqWL8XEe6e/clfWRZeZ/eqJd3ZEP0A0lT54IjmEnYR2LLJFZFsLKSZPISHF LPJp/RDVP3iIQY7jPp/SHBASWAdPQrH6LLKBJBUNDcZm7oc9wQSz7sW5+Hrh2Dmj ROojqBJF6q6Y5Ch5+pWqQmSAhFUanJb92vudO/PicacmPsC6toaS3X4Tes7A5TYr +OPUWCVQANcqGkxPzAjjWQ8sg+JluKcE -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-fra.rpki-client.org