$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft File: 6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft (raw, json) Hash identifier: /eMI8r0vKJb4GA7NSA6L9zIVG+J1O2qfaHymhdqsFvQ= Subject key identifier: 48:70:D4:53:F3:9B:1D:2D:F3:12:3C:B4:1B:EB:D9:90:1C:B2:97:C3 Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84 Certificate issuer: /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984 Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft Manifest number: 06B9 Signing time: Sat 04 May 2024 23:18:15 +0000 Manifest this update: Sat 04 May 2024 23:18:15 +0000 Manifest next update: Sat 11 May 2024 23:18:15 +0000 Files and hashes: 1: 6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl (hash: NwMDnK/kSzd2msNKIfLKUlc96wvln5n4Y2MIkAx9K0o=) 2: EF980EA6140D11EBB0DCE540C4F9AE02.roa (hash: AHw9Xu7UY4TkEstVhgVO2U9IwBiX2fROVGixOVgfly4=) 3: EEED9F34140D11EBB0DCE540C4F9AE02.roa (hash: 3YLqDnqZ1B+/t0nbEMetPkPAZ6ztIITA1pbSZZ0qnNw=) 4: 9B0DA87CEB8A11EC86295E7BC4F9AE02.roa (hash: U9A27sTiILooczu4FPKq/inu4TUTixKO6quuZG1wufc=) 5: D467E7363D9211EDBF4D9F7DC4F9AE02.roa (hash: Q1A//xJAenDCX+OfnpV5599B7Fna6P7+W/m6bu+16I0=) 6: E5373ACAE8B111EC89E9AC5DC4F9AE02.roa (hash: o4dgArVBoZXr5dfHe6PiOHgDW4zohpDDBvVcCegfRCE=) 7: 873A15DA140C11EB9204AC24C4F9AE02.roa (hash: +wqMrLovTJbkiku8bnxz8Y3AxhoJQCec+53n8PscEvI=) 8: EE3A46BE140D11EBB0DCE540C4F9AE02.roa (hash: iRQ5/MH0qA6L3u9yvw7czyqKYPYaftxjqgXCwZsC5Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984 Validity Not Before: May 4 23:18:15 2024 GMT Not After : May 11 23:18:15 2024 GMT Subject: CN=6636c237-ce08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:07:77:d6:aa:cd:b9:bf:95:9d:00:3a:16:5d: 2c:5c:23:c6:f9:ce:2d:71:94:d4:61:6a:83:92:b4: bd:6a:60:97:60:89:65:d8:39:dc:e8:54:4a:ff:36: 1e:29:3f:f6:f8:d2:16:6d:06:2a:4c:88:49:53:0b: e5:04:a0:ae:25:da:67:f2:13:50:00:87:29:ac:4a: 72:88:0d:eb:4b:ba:62:86:ab:27:57:5f:95:fa:d2: f1:24:5e:2e:60:d3:f8:13:4c:bb:6c:eb:0c:f3:95: 42:0b:31:87:aa:85:56:1d:3a:43:11:08:dd:07:1d: 1a:e2:50:2d:bb:c6:c5:34:3f:a1:18:28:47:06:58: 0a:8b:f9:f1:c3:28:df:20:fb:14:fd:dc:0e:4a:a9: c2:be:d5:97:38:72:b7:2c:7f:dc:d5:a4:0a:2f:24: 04:7c:18:1e:bc:0b:00:14:3a:23:dd:ba:ec:e1:21: 9b:6f:cc:0e:04:50:e5:a1:ec:8e:99:9f:74:b2:cb: 22:10:09:70:1e:99:6c:19:02:c5:64:30:48:81:3f: 7a:28:16:d5:72:90:ca:51:89:b6:e3:c3:c8:51:79: 65:5e:63:6b:0a:5b:52:03:0b:50:a4:92:91:c5:d5: 76:93:16:30:d9:a6:ce:89:f1:b0:ba:31:7a:23:c3: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:70:D4:53:F3:9B:1D:2D:F3:12:3C:B4:1B:EB:D9:90:1C:B2:97:C3 X509v3 Authority Key Identifier: keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:73:8f:4f:05:0f:b4:ae:26:4f:e5:0b:26:3f:94:ce:dd:68: d0:68:04:15:56:a4:98:31:74:bf:8e:97:2a:fc:6c:52:ee:26: 32:0e:21:a7:92:14:97:ff:66:93:ea:ac:33:fc:ab:28:71:11: cb:ed:49:e7:d7:8d:00:3c:a4:25:56:91:fd:23:76:f8:4d:d4: a1:28:df:fa:44:dd:88:1d:cd:90:67:99:d0:bb:1d:a4:69:96: b7:ac:cd:6f:f5:8e:2b:3b:ea:7f:2a:1b:81:01:88:d9:14:44: e4:6f:51:b9:a1:e4:83:7b:58:92:76:5a:f3:00:15:ae:16:f6: db:66:b7:da:20:c9:95:ea:6a:25:ff:bb:09:cd:9b:a7:24:81: 50:92:37:97:42:c0:ee:d1:68:a5:01:8f:f1:af:8d:9d:2b:5c: e8:05:0f:41:ef:48:ac:17:97:89:8f:95:f7:b7:bd:6c:4b:8e: 28:4c:c0:8f:98:22:b2:85:ff:57:f3:a2:35:65:db:f7:7b:f1: e6:82:d3:c7:4f:e1:af:f8:04:ea:0d:94:5d:44:0c:3f:1f:38: 3d:17:90:20:a8:89:f3:32:ea:ee:4f:a6:07:d8:34:d3:96:82: 57:a0:e4:9f:12:15:3f:4f:67:01:da:4b:af:35:b2:8d:20:88: 44:ea:1d:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRGQjcxMTAvBgNVBAUTKEVBNTFDRTIwQTU5RTQyQjhDNzFEMjZBQTZCODg2Njkw Q0QxNTI5ODQwHhcNMjQwNTA0MjMxODE1WhcNMjQwNTExMjMxODE1WjAYMRYwFAYD VQQDEw02NjM2YzIzNy1jZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wd31qrNub+VnQA6Fl0sXCPG+c4tcZTUYWqDkrS9amCXYIll2Dnc6FRK/zYe KT/2+NIWbQYqTIhJUwvlBKCuJdpn8hNQAIcprEpyiA3rS7pihqsnV1+V+tLxJF4u YNP4E0y7bOsM85VCCzGHqoVWHTpDEQjdBx0a4lAtu8bFND+hGChHBlgKi/nxwyjf IPsU/dwOSqnCvtWXOHK3LH/c1aQKLyQEfBgevAsAFDoj3brs4SGbb8wOBFDloeyO mZ90sssiEAlwHplsGQLFZDBIgT96KBbVcpDKUYm248PIUXllXmNrCltSAwtQpJKR xdV2kxYw2abOifGwujF6I8PRFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhw1FPz mx0t8xI8tBvr2ZAcspfDMB8GA1UdIwQYMBaAFOpRziClnkK4xx0mqmuIZpDNFSmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREZCNy9BNTFFQzU4NDE0 MEExMUVCOTYzNkZGMjJDNEY5QUUwMi82bEhPSUtXZVFyakhIU2FxYTRobWtNMFZL WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZsSE9JS1dlUXJqSEhTYXFhNGhta00wVktZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REZCNy9BNTFFQzU4NDE0MEExMUVCOTYzNkZGMjJDNEY5QUUwMi82bEhPSUtXZVFy akhIU2FxYTRobWtNMFZLWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcc49PBQ+0riZP5QsmP5TO3WjQaAQVVqSYMXS/jpcq/GxS7iYyDiGn khSX/2aT6qwz/KsocRHL7Unn140APKQlVpH9I3b4TdShKN/6RN2IHc2QZ5nQux2k aZa3rM1v9Y4rO+p/KhuBAYjZFETkb1G5oeSDe1iSdlrzABWuFvbbZrfaIMmV6mol /7sJzZunJIFQkjeXQsDu0WilAY/xr42dK1zoBQ9B70isF5eJj5X3t71sS44oTMCP mCKyhf9X86I1Zdv3e/HmgtPHT+Gv+ATqDZRdRAw/Hzg9F5AgqInzMuruT6YH2DTT loJXoOSfEhU/T2cB2kuvNbKNIIhE6h3c -----END CERTIFICATE-----Generated at Sun May 5 00:12:36 2024 by rpki-client on console-fra.rpki-client.org