$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft File: SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json) Hash identifier: 81HpsB/TKGi7HydAtRK8va1Oret6nEpBMplaKikqCIA= Subject key identifier: 5C:42:85:72:30:67:B3:69:86:3F:EF:75:0A:EB:05:5C:C2:62:B6:4E Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft Manifest number: 6C Signing time: Sun 19 May 2024 07:33:25 +0000 Manifest this update: Sun 19 May 2024 07:33:25 +0000 Manifest next update: Sun 26 May 2024 07:33:25 +0000 Files and hashes: 1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: nvdofKfTS1RVOLg4sq231mmqI4NxlwlpddNa6kKv7ss=) 2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 3gJO0VRROU7x0qzNJEOCSuT5XEYFBGwoi9G8E3dV0i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Validity Not Before: May 19 07:33:25 2024 GMT Not After : May 26 07:33:25 2024 GMT Subject: CN=6649ab45-3150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:94:03:4e:4f:bc:a1:ea:6f:86:94:8e:6a:88: 70:7f:af:df:a8:87:e4:7b:8e:5f:ed:23:54:46:40: 53:9c:49:86:6c:ab:2d:2a:b1:2c:78:f3:c0:40:82: 27:3f:a7:5d:99:6b:03:0e:4a:29:31:0b:99:91:ed: d9:e0:0f:12:a5:60:a7:5b:78:4b:54:58:9b:1e:5a: e5:73:7a:9b:3e:f2:32:6e:1f:45:da:27:6a:c5:55: 4b:2d:55:37:2b:8c:74:c6:8f:09:0a:ce:a0:95:5e: 40:2a:b0:04:f8:51:e8:01:ca:d7:6b:c5:c3:f4:77: 75:98:29:d9:45:e1:0e:b1:f4:81:75:ba:9b:09:1f: 7c:cc:fc:2e:d6:4d:62:8a:97:2a:6c:09:cd:81:e0: 5e:17:17:aa:f1:ff:eb:7f:7d:ff:26:0a:0d:da:54: 7c:59:fa:a8:54:8f:69:27:02:f0:82:12:2b:88:93: d6:ed:00:b0:d6:f1:86:20:d6:8b:e2:12:71:b6:03: ef:06:82:8a:10:d6:4e:82:01:7d:da:d3:67:5d:7c: 3c:30:0d:3a:79:27:cc:c5:70:a0:2a:91:d4:ad:dd: 12:3c:49:2f:a7:18:a0:24:a7:a2:3d:bb:dc:e8:f0: 10:7b:af:8a:5d:0f:21:5b:2e:50:ff:af:2e:a6:b2: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:42:85:72:30:67:B3:69:86:3F:EF:75:0A:EB:05:5C:C2:62:B6:4E X509v3 Authority Key Identifier: keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e6:ae:3f:61:75:5b:32:38:d1:2a:14:3b:21:9c:f8:b7:fe: 76:86:ea:f0:bc:ed:42:fa:5c:88:4a:82:58:d4:34:89:20:5a: 1e:2f:0b:e5:25:f8:37:e3:9b:3e:11:ff:39:0a:56:39:e7:f8: 80:5b:79:5d:b8:aa:41:75:90:19:10:10:b2:4f:2b:5a:94:b4: 05:36:86:8c:a8:3f:59:9a:da:88:e0:e4:b0:bc:e4:a6:ec:f3: cd:6a:dc:a4:a0:80:b6:2b:f0:14:5d:f1:64:74:af:71:6a:03: c1:d2:92:74:76:b8:7f:35:3f:c7:e9:47:04:42:9d:3f:dd:5c: 1c:33:6a:02:15:bb:38:02:23:ad:e3:9f:bb:76:7f:a8:6a:87: 71:88:a8:c3:68:2f:de:d8:a2:4d:af:1b:1d:32:6c:13:c8:12: 49:98:6d:74:8d:6c:bc:51:7a:d1:e8:eb:23:9a:bc:94:3c:f9: 88:49:0f:a3:b5:a5:92:70:3b:97:46:96:89:af:38:79:1f:b0: f6:8d:4a:cc:86:8b:26:d0:65:c0:33:52:0b:23:8a:fb:99:5f: 98:8e:99:1a:65:09:ca:7c:a3:a9:60:c2:ef:4e:12:2f:2b:55: 19:06:d9:a5:ea:b1:ff:15:c2:38:ca:0a:87:07:b3:b2:66:17: e1:af:40:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDJFMzExMC8GA1UEBRMoNDgxNzIwQTJDOEVFNkNFQzkyNDc3NzYxOTMyOTlDMTBG RUI3Q0E0NDAeFw0yNDA1MTkwNzMzMjVaFw0yNDA1MjYwNzMzMjVaMBgxFjAUBgNV BAMTDTY2NDlhYjQ1LTMxNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjlANOT7yh6m+GlI5qiHB/r9+oh+R7jl/tI1RGQFOcSYZsqy0qsSx488BAgic/ p12ZawMOSikxC5mR7dngDxKlYKdbeEtUWJseWuVzeps+8jJuH0XaJ2rFVUstVTcr jHTGjwkKzqCVXkAqsAT4UegBytdrxcP0d3WYKdlF4Q6x9IF1upsJH3zM/C7WTWKK lypsCc2B4F4XF6rx/+t/ff8mCg3aVHxZ+qhUj2knAvCCEiuIk9btALDW8YYg1ovi EnG2A+8GgooQ1k6CAX3a02ddfDwwDTp5J8zFcKAqkdSt3RI8SS+nGKAkp6I9u9zo 8BB7r4pdDyFbLlD/ry6mslHVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXEKFcjBn s2mGP+91CusFXMJitk4wHwYDVR0jBBgwFoAUSBcgosjubOySR3dhkymcEP63ykQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEMkUzLzRGNDE3OUE0NzND MDExRUVCODI3RjQ0NEM0RjlBRTAyL1NCY2dvc2p1Yk95U1IzZGhreW1jRVA2M3lr US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0JjZ29zanViT3lTUjNkaGt5bWNFUDYzeWtRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE MkUzLzRGNDE3OUE0NzNDMDExRUVCODI3RjQ0NEM0RjlBRTAyL1NCY2dvc2p1Yk95 U1IzZGhreW1jRVA2M3lrUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIHmrj9hdVsyONEqFDshnPi3/naG6vC87UL6XIhKgljUNIkgWh4vC+Ul +Dfjmz4R/zkKVjnn+IBbeV24qkF1kBkQELJPK1qUtAU2hoyoP1ma2ojg5LC85Kbs 881q3KSggLYr8BRd8WR0r3FqA8HSknR2uH81P8fpRwRCnT/dXBwzagIVuzgCI63j n7t2f6hqh3GIqMNoL97Yok2vGx0ybBPIEkmYbXSNbLxRetHo6yOavJQ8+YhJD6O1 pZJwO5dGlomvOHkfsPaNSsyGiybQZcAzUgsjivuZX5iOmRplCcp8o6lgwu9OEi8r VRkG2aXqsf8VwjjKCocHs7JmF+GvQC0= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org