$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft File: 61l_6N8H6peZiwP4KDQ7yIda7Qg.mft (raw, json) Hash identifier: pZKckUe9DjHbfd8ObcpBRBeL8rZ6ayNQna424ZV8kHc= Subject key identifier: E5:47:9C:95:7D:96:5A:24:11:CA:76:12:D6:04:85:FE:89:B8:15:FB Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 Certificate issuer: /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft Manifest number: 0591 Signing time: Sun 19 May 2024 00:28:16 +0000 Manifest this update: Sun 19 May 2024 00:28:15 +0000 Manifest next update: Sun 26 May 2024 00:28:15 +0000 Files and hashes: 1: 61l_6N8H6peZiwP4KDQ7yIda7Qg.crl (hash: hAJHnUJH1VKcyLWvEQn85rXynMRWOaszGbaTLhMBS2g=) 2: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (hash: 1Np6q+KzS501yGbJmnak7Gn4lwm2tkNgIP8+p6JTg10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Validity Not Before: May 19 00:28:15 2024 GMT Not After : May 26 00:28:15 2024 GMT Subject: CN=6649479f-684b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:24:7b:b3:df:7e:31:4a:d7:d3:27:c2:be:ae: e7:0e:f9:f8:78:62:92:e0:49:69:b8:e8:80:0c:d4: 92:a6:df:6b:cb:1b:39:0a:f9:00:16:18:54:2e:ba: 59:fe:48:bd:fc:41:62:3d:92:f2:49:e6:47:88:3b: 57:a0:e5:3a:fe:1c:c1:97:0c:bc:ab:c3:39:67:81: d5:ac:23:45:f8:5e:a2:df:ba:16:73:ec:d8:d3:18: f8:5f:35:33:c3:51:e6:ea:cc:3a:5a:d1:0f:92:d4: f5:2d:9f:62:5b:1c:3b:c2:d4:47:93:c7:b4:7a:c6: e1:ea:17:a6:dd:30:9a:9f:21:46:df:9f:5a:03:25: 4b:91:4c:4c:b2:09:de:63:d5:cb:4e:5e:49:1c:0e: a3:70:b4:69:24:72:77:f5:2a:9d:dc:5e:98:26:e2: c8:3a:aa:bd:d0:87:e0:a5:ee:55:f2:3c:d0:1c:ad: e3:d4:87:1e:33:3b:eb:a2:67:35:6c:da:8f:e3:70: 27:f5:bf:71:54:7a:d8:77:c5:b1:32:8a:75:02:ca: 87:a2:5e:cc:71:9c:16:c2:65:cb:5e:25:f5:3a:af: 49:98:d3:b6:07:c2:19:72:1c:49:f6:11:09:b2:fb: 3b:d1:e8:62:f8:9d:21:ba:92:c9:40:09:dc:66:33: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:47:9C:95:7D:96:5A:24:11:CA:76:12:D6:04:85:FE:89:B8:15:FB X509v3 Authority Key Identifier: keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:00:37:e9:97:e5:4f:d1:b2:50:6b:b0:f4:71:4d:a8:ec:20: 88:c7:1b:6b:3e:b1:03:61:a0:44:8e:24:43:da:5d:0b:06:38: 1e:55:2d:17:18:76:92:bc:64:d3:37:2d:0a:a1:da:17:fb:b3: 44:ab:31:38:37:a0:17:f4:b9:08:27:1d:5d:d4:11:dc:e5:01: 86:66:a1:98:c3:f0:ba:2a:cf:23:75:78:b5:d8:22:42:ac:9d: 57:8c:aa:c1:23:57:35:33:bc:b5:4f:95:d8:49:63:d5:cf:89: e2:a4:0c:28:9c:7c:43:5a:de:4b:d8:82:57:fa:4e:86:b6:40: d6:0f:24:c4:b0:97:0f:3a:e8:c2:dc:91:61:05:93:58:28:91: 86:75:f9:b7:73:39:32:24:18:bb:4b:23:c2:75:bc:96:c2:ce: 79:7f:e1:50:03:45:67:10:4d:7e:35:8c:07:c0:b5:87:39:d5: a8:76:ed:fe:a5:4e:96:2f:65:3e:ea:9d:d5:6c:d0:9c:5a:af: 28:01:6e:31:bd:25:79:6e:df:35:b0:f1:fe:87:aa:5a:2a:97: ef:90:98:28:32:92:39:41:17:b7:b1:1c:d3:17:31:6b:d3:9f: a7:64:8f:82:a6:fc:06:a3:43:76:68:64:92:0f:ed:f6:b8:fc: ca:99:3a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGN0MxMTAvBgNVBAUTKEVCNTk3RkU4REYwN0VBOTc5OThCMDNGODI4MzQzQkM4 ODc1QUVEMDgwHhcNMjQwNTE5MDAyODE1WhcNMjQwNTI2MDAyODE1WjAYMRYwFAYD VQQDEw02NjQ5NDc5Zi02ODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSR7s99+MUrX0yfCvq7nDvn4eGKS4ElpuOiADNSSpt9ryxs5CvkAFhhULrpZ /ki9/EFiPZLySeZHiDtXoOU6/hzBlwy8q8M5Z4HVrCNF+F6i37oWc+zY0xj4XzUz w1Hm6sw6WtEPktT1LZ9iWxw7wtRHk8e0esbh6hem3TCanyFG359aAyVLkUxMsgne Y9XLTl5JHA6jcLRpJHJ39Sqd3F6YJuLIOqq90Ifgpe5V8jzQHK3j1IceMzvromc1 bNqP43An9b9xVHrYd8WxMop1AsqHol7McZwWwmXLXiX1Oq9JmNO2B8IZchxJ9hEJ svs70ehi+J0hupLJQAncZjNsHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVHnJV9 llokEcp2EtYEhf6JuBX7MB8GA1UdIwQYMBaAFOtZf+jfB+qXmYsD+Cg0O8iHWu0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y3Qy9DRDNCNzQ4Qzg3 Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZwZVppd1A0S0RRN3lJZGE3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxbF82TjhINnBlWml3UDRLRFE3eUlkYTdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y3Qy9DRDNCNzQ4Qzg3Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZw ZVppd1A0S0RRN3lJZGE3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3ADfpl+VP0bJQa7D0cU2o7CCIxxtrPrEDYaBEjiRD2l0LBjgeVS0X GHaSvGTTNy0KodoX+7NEqzE4N6AX9LkIJx1d1BHc5QGGZqGYw/C6Ks8jdXi12CJC rJ1XjKrBI1c1M7y1T5XYSWPVz4nipAwonHxDWt5L2IJX+k6GtkDWDyTEsJcPOujC 3JFhBZNYKJGGdfm3czkyJBi7SyPCdbyWws55f+FQA0VnEE1+NYwHwLWHOdWodu3+ pU6WL2U+6p3VbNCcWq8oAW4xvSV5bt81sPH+h6paKpfvkJgoMpI5QRe3sRzTFzFr 05+nZI+CpvwGo0N2aGSSD+32uPzKmTqa -----END CERTIFICATE-----Generated at Sun May 19 00:59:44 2024 by rpki-client on console-fra.rpki-client.org