$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: B1iMP+0urlypzmSXmh8z4m4iFC2Eb/pweZ4CHNqrBLc= Subject key identifier: F7:37:17:E0:4A:23:6A:A3:95:83:BF:00:63:0D:DC:1A:36:52:FE:F8 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0D3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0D34 Signing time: Sat 18 May 2024 18:41:33 +0000 Manifest this update: Sat 18 May 2024 18:41:32 +0000 Manifest next update: Sat 25 May 2024 18:41:32 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: Ci40HiRAVFkN+1oNJm2+TGa/9taqkXxaglD4wgW0Gns=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: cPuH3KnObJ5LzUMt7RntsKohdQaNvdVKPfVrdLH882w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: May 18 18:41:32 2024 GMT Not After : May 25 18:41:32 2024 GMT Subject: CN=6648f65c-b465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:85:e9:41:3f:46:b6:b9:54:0f:21:60:c4: da:cd:a3:65:ed:69:7c:45:67:5d:5d:fc:37:90:ad: 1c:b0:ed:6b:cd:99:e3:b2:89:a5:6b:6a:0d:1d:1a: bc:3e:ed:2e:b1:91:be:b0:4c:17:e2:7e:ec:b9:50: 51:a5:b5:f4:52:e3:1a:d4:35:7f:a5:33:eb:a3:6c: 58:c8:90:d1:4d:f8:d0:21:e8:ea:12:c3:55:bc:af: 21:19:45:47:10:41:e2:f3:56:89:90:9f:e1:48:30: 40:48:10:03:b3:0b:d4:c5:73:55:ab:d0:73:d4:53: 01:00:a5:ef:6f:c1:de:a4:a4:19:05:e7:df:02:95: 50:93:63:6a:49:bb:f2:b8:f9:5f:c5:1b:61:a4:2f: 39:7c:85:68:8a:d9:a5:06:f4:9a:41:0a:78:c2:bc: 7a:3b:11:f2:44:a8:2c:d5:70:46:1e:c3:73:4f:13: 97:53:bb:33:45:62:ac:ff:de:d3:58:54:3d:3c:e5: ec:0c:c7:6c:d2:fa:55:4b:19:41:9e:28:8e:0f:91: d3:a3:24:87:df:e3:c1:ff:08:d6:6e:ce:9c:57:12: f6:a8:2c:d3:dd:6f:2d:a5:d4:19:3d:5e:53:2f:f6: 8d:8b:0c:d5:b5:79:da:cb:e1:fb:92:1f:d9:2a:f3: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:37:17:E0:4A:23:6A:A3:95:83:BF:00:63:0D:DC:1A:36:52:FE:F8 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:09:0e:6a:5f:a1:19:34:61:06:3c:dc:85:6f:c3:95:0a:0b: 2b:56:92:54:d7:60:d7:74:61:a5:8e:f7:ae:53:9c:ad:57:dd: 3c:ea:97:de:97:48:de:2b:bc:c9:a5:f8:02:db:61:74:32:b3: e1:8a:9c:52:de:22:a6:21:3c:c5:3e:2b:02:b0:08:71:59:ab: 78:81:af:17:cf:3b:78:d5:5e:ec:b1:8d:c0:4e:a3:a4:c1:b0: 06:5a:f8:61:ce:f9:69:c4:d0:ef:11:95:74:82:31:70:3b:1c: 78:1c:1e:7e:01:be:5f:a3:8b:c0:04:ca:ab:39:ae:01:a8:3e: 5a:fd:ff:d1:26:65:f0:be:c2:c4:3d:92:22:88:f6:d2:20:d6: 2c:82:22:da:80:b8:4f:a0:a3:3a:dc:da:13:a7:c0:a0:21:1b: 22:07:c1:cb:b3:60:d2:c8:4e:ce:d1:5a:44:82:df:13:59:5c: 71:3c:cc:4f:e7:1f:9c:92:b2:41:78:c8:dc:b4:2c:54:b7:cf: e8:f1:68:9d:50:ac:15:33:39:79:42:7e:ad:bc:fb:ee:ad:79: c6:82:4a:c6:89:55:55:5d:ae:fb:7f:cf:01:76:08:b3:97:3b: 5e:e3:68:c1:52:c1:43:32:fc:8d:91:69:83:a9:ef:24:1d:97: 12:7d:aa:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjQwNTE4MTg0MTMyWhcNMjQwNTI1MTg0MTMyWjAYMRYwFAYD VQQDEw02NjQ4ZjY1Yy1iNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooiF6UE/Rra5VA8hYMTazaNl7Wl8RWddXfw3kK0csO1rzZnjsomla2oNHRq8 Pu0usZG+sEwX4n7suVBRpbX0UuMa1DV/pTPro2xYyJDRTfjQIejqEsNVvK8hGUVH EEHi81aJkJ/hSDBASBADswvUxXNVq9Bz1FMBAKXvb8HepKQZBeffApVQk2NqSbvy uPlfxRthpC85fIVoitmlBvSaQQp4wrx6OxHyRKgs1XBGHsNzTxOXU7szRWKs/97T WFQ9POXsDMds0vpVSxlBniiOD5HToySH3+PB/wjWbs6cVxL2qCzT3W8tpdQZPV5T L/aNiwzVtXnay+H7kh/ZKvMdAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc3F+BK I2qjlYO/AGMN3Bo2Uv74MB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMCQ5qX6EZNGEGPNyFb8OVCgsrVpJU12DXdGGljveuU5ytV9086pfe l0jeK7zJpfgC22F0MrPhipxS3iKmITzFPisCsAhxWat4ga8Xzzt41V7ssY3ATqOk wbAGWvhhzvlpxNDvEZV0gjFwOxx4HB5+Ab5fo4vABMqrOa4BqD5a/f/RJmXwvsLE PZIiiPbSINYsgiLagLhPoKM63NoTp8CgIRsiB8HLs2DSyE7O0VpEgt8TWVxxPMxP 5x+ckrJBeMjctCxUt8/o8WidUKwVMzl5Qn6tvPvurXnGgkrGiVVVXa77f88Bdgiz lzte42jBUsFDMvyNkWmDqe8kHZcSfaoE -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org