$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: hIg60GbkSmh9HzvxzAq6Gu5EegAwkxK1VdcOdISvagU= Subject key identifier: 8F:9B:A0:E9:64:1D:AC:5D:4B:67:F5:B1:AF:EB:2F:8B:E5:67:1A:D2 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: A6 Signing time: Fri 17 May 2024 06:46:32 +0000 Manifest this update: Fri 17 May 2024 06:46:31 +0000 Manifest next update: Fri 24 May 2024 06:46:31 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: CeLkc3YPJNDxQfa0BF0QE7lxeEiw4cRSv9nMKx8Jpa4=) 2: F287261014C311EE89C2C021C4F9AE02.roa (hash: rRCqSYERULgOs2MmSeKHJDDd81Ml4dvZaVdHvC51O/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: May 17 06:46:31 2024 GMT Not After : May 24 06:46:31 2024 GMT Subject: CN=6646fd48-5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:ec:8a:40:1a:75:00:aa:37:ce:73:5a:9f: 2b:6b:3c:c5:f3:d2:fe:73:09:66:6b:cf:ad:4a:49: 80:72:2e:b4:40:1a:41:7f:87:22:40:fd:ce:10:de: 5a:82:e9:db:ea:53:53:84:22:a6:c0:83:ec:a5:43: f9:19:e2:c8:b4:cc:3c:33:35:f8:55:9b:5a:48:17: 0c:12:63:93:da:d7:42:b7:79:0a:75:4f:09:10:64: cf:f2:f4:d6:63:79:d5:d2:60:80:fe:f7:93:e5:a3: a2:5e:dc:84:22:b5:5c:26:49:28:8c:64:04:9c:56: 16:21:a4:b2:fe:2d:a0:e3:89:71:4b:5c:99:23:ae: 1d:ab:82:9b:09:51:fb:26:48:b6:c9:a5:09:75:a3: e8:7c:84:04:fd:1c:8a:e5:90:09:2a:b3:8a:d2:dd: 67:e2:92:96:41:14:e7:0b:0a:fa:29:ab:66:85:ba: cf:c0:3e:07:45:cd:43:5a:05:84:92:88:4c:a9:68: ae:d0:71:d6:46:d7:6c:d4:55:a2:20:8c:26:0a:90: c7:75:36:fb:6e:aa:4f:f2:01:7e:cf:67:ab:43:e0: 67:7d:44:4c:26:24:68:9f:e9:9b:f0:64:1d:34:3f: 8e:ac:05:84:df:08:73:f5:25:1b:75:15:2f:25:aa: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9B:A0:E9:64:1D:AC:5D:4B:67:F5:B1:AF:EB:2F:8B:E5:67:1A:D2 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:7f:7a:ba:51:6d:d8:51:4d:bd:fb:7f:a8:f5:0c:e1:16:3f: 02:e1:3a:2b:a1:65:20:91:53:47:f9:38:3b:55:4f:34:07:17: cb:83:89:d9:48:f8:eb:1a:6d:7e:7d:e9:aa:fe:33:01:d0:4e: 45:07:9e:be:58:df:43:e3:5d:5d:ca:54:e2:61:d3:15:08:31: f6:11:37:33:71:69:cd:7c:c4:72:15:49:1c:03:0c:f8:6c:44: a6:7e:ef:c7:6e:cb:93:ac:bf:72:8f:b9:44:4b:03:26:e5:f5: c1:02:bf:92:00:dc:5f:18:a4:24:f5:17:9a:0a:f0:2b:ff:30: 4c:91:5a:59:96:f4:11:72:d7:62:a7:93:ad:83:62:69:a3:5c: 8f:b1:de:91:44:af:7c:e9:ad:fb:8f:a3:79:64:44:ef:f6:57: 9f:de:4f:5c:80:6c:e5:df:e0:91:60:8e:26:a9:dc:04:1f:0f: e2:c5:84:a5:9d:6f:18:f1:26:ff:fb:e2:af:2c:6f:a5:ef:83: 03:f2:69:59:00:c1:90:b7:c0:63:90:67:c9:74:4f:15:5f:13: d7:62:b2:32:d6:06:f1:df:a5:b3:6d:06:4c:60:31:23:f5:f8: 7a:32:ed:38:68:d6:a2:28:5d:16:ca:cf:18:fc:58:64:6b:1a: 9a:d9:dc:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjQwNTE3MDY0NjMxWhcNMjQwNTI0MDY0NjMxWjAYMRYwFAYD VQQDEw02NjQ2ZmQ0OC01NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruXsikAadQCqN85zWp8razzF89L+cwlma8+tSkmAci60QBpBf4ciQP3OEN5a gunb6lNThCKmwIPspUP5GeLItMw8MzX4VZtaSBcMEmOT2tdCt3kKdU8JEGTP8vTW Y3nV0mCA/veT5aOiXtyEIrVcJkkojGQEnFYWIaSy/i2g44lxS1yZI64dq4KbCVH7 Jki2yaUJdaPofIQE/RyK5ZAJKrOK0t1n4pKWQRTnCwr6KatmhbrPwD4HRc1DWgWE kohMqWiu0HHWRtds1FWiIIwmCpDHdTb7bqpP8gF+z2erQ+BnfURMJiRon+mb8GQd ND+OrAWE3whz9SUbdRUvJarFWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+boOlk HaxdS2f1sa/rL4vlZxrSMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpf3q6UW3YUU29+3+o9QzhFj8C4ToroWUgkVNH+Tg7VU80BxfLg4nZ SPjrGm1+femq/jMB0E5FB56+WN9D411dylTiYdMVCDH2ETczcWnNfMRyFUkcAwz4 bESmfu/HbsuTrL9yj7lESwMm5fXBAr+SANxfGKQk9ReaCvAr/zBMkVpZlvQRctdi p5Otg2Jpo1yPsd6RRK986a37j6N5ZETv9lef3k9cgGzl3+CRYI4mqdwEHw/ixYSl nW8Y8Sb/++KvLG+l74MD8mlZAMGQt8BjkGfJdE8VXxPXYrIy1gbx36WzbQZMYDEj 9fh6Mu04aNaiKF0Wys8Y/Fhkaxqa2dy1 -----END CERTIFICATE-----Generated at Fri May 17 08:13:53 2024 by rpki-client on console-fra.rpki-client.org