$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft File: H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json) Hash identifier: I+yglTM9/YbQLUM3N6c70DAJv0jNIkLx0DXlobLD3Gs= Subject key identifier: 9E:77:92:59:0A:3B:B9:CC:B0:D2:7F:2C:AD:72:B4:D2:B0:5D:93:E9 Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft Manifest number: 042F Signing time: Wed 01 May 2024 02:19:01 +0000 Manifest this update: Wed 01 May 2024 02:19:00 +0000 Manifest next update: Wed 08 May 2024 02:19:00 +0000 Files and hashes: 1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: 2N05holGxarrQ1220uBNzTU/vbEnVOTSK2d1vRFphjU=) 2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: 0473n6cZ117rWowmsJ3+l7YYDgOV0+wUBp1nMoCK80U=) 3: 3CD0F8AA120911EC9B2B737AC4F9AE02.roa (hash: Qhj+xNKH2IZf3Wy3p7IKrHO3bB/eW6VZjI7w4qXGyiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: May 1 02:19:00 2024 GMT Not After : May 8 02:19:00 2024 GMT Subject: CN=6631a695-df17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:3b:ef:20:92:bb:1b:45:b2:c4:05:15:c3: c6:75:da:bc:b1:c2:db:95:e2:50:63:48:d9:03:1e: 14:7c:fe:ee:0f:b4:58:72:0d:16:cb:7d:99:b7:3a: 53:bc:23:73:45:89:66:5c:18:cc:3c:c5:d4:52:0d: 8c:0c:7b:d8:c4:7a:6c:6c:f2:32:53:10:b7:3e:d7: b5:ad:8b:03:df:74:cc:eb:38:15:36:e0:82:59:2d: 80:6f:cd:0f:1d:86:e0:1d:a4:9c:a4:ad:68:bf:ab: c5:12:ed:3a:63:1a:36:de:25:e8:4a:08:f8:65:55: d2:56:18:20:30:bc:91:d9:17:21:48:d8:c1:a4:8d: 3b:71:06:d0:44:2f:b7:09:ae:d6:cd:0a:fe:f9:dd: b2:0f:d7:c1:78:f2:a6:10:75:e8:9b:4b:dc:14:db: 49:ee:76:0f:37:2e:4d:01:ee:b8:df:15:5b:24:5d: c0:4a:d0:91:ac:8c:5a:01:b6:cd:3c:96:ae:1e:3a: 3e:0d:3b:4a:9d:49:40:da:15:60:71:49:19:70:99: 2c:9a:6b:7c:bc:52:0a:50:c5:ba:a1:90:e0:c5:61: 46:91:7b:2d:82:f2:20:c5:be:60:d3:1e:68:f3:5e: 40:ac:6f:a5:a0:de:aa:17:28:2a:7e:93:71:c9:ce: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:77:92:59:0A:3B:B9:CC:B0:D2:7F:2C:AD:72:B4:D2:B0:5D:93:E9 X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:d8:6c:2e:16:57:a8:2c:88:b9:ad:d6:dd:b1:a0:29:7b:fa: 2e:69:7b:ee:31:d8:a0:a9:b3:6f:31:65:a2:07:84:61:d8:fa: 3b:2d:e6:9b:f0:d3:fb:17:8d:a0:b1:1f:b8:b2:ef:d7:a2:43: ff:d3:63:68:2d:c9:ec:7a:cc:07:2c:61:51:0d:ed:53:35:f9: c7:47:ff:de:f1:a9:1a:c7:c6:7a:bf:0e:3c:f5:13:0e:f4:96: b9:03:4a:0d:6d:5a:6a:fa:32:a6:2d:f8:d7:9b:cb:ae:a3:92: 54:76:2c:74:a2:87:76:33:0d:43:c5:16:88:4f:86:19:21:b1: 8b:b4:6a:e4:0e:ee:af:aa:0f:ef:22:0a:65:97:2b:aa:69:11: df:61:3c:cd:bc:8c:e6:ae:9f:a7:96:fb:8b:b1:ef:7b:3f:38: 5a:74:0b:da:d6:61:87:b8:db:d5:8b:78:5f:9e:5f:af:c3:aa: 9e:b5:8a:37:c4:ea:a7:ec:41:bb:e0:14:6d:96:57:87:f4:7e: 81:ca:d6:f4:78:4c:a0:c2:85:e1:03:8c:cc:ca:42:1a:e4:99: 36:8d:4b:97:92:dd:5f:32:f6:87:9d:88:30:fe:e6:a4:48:0d: 01:9c:8a:46:1f:0b:9f:25:af:28:67:83:9f:1a:0d:c2:c2:be: 77:fa:53:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjQwNTAxMDIxOTAwWhcNMjQwNTA4MDIxOTAwWjAYMRYwFAYD VQQDEw02NjMxYTY5NS1kZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXY77yCSuxtFssQFFcPGddq8scLbleJQY0jZAx4UfP7uD7RYcg0Wy32ZtzpT vCNzRYlmXBjMPMXUUg2MDHvYxHpsbPIyUxC3Pte1rYsD33TM6zgVNuCCWS2Ab80P HYbgHaScpK1ov6vFEu06Yxo23iXoSgj4ZVXSVhggMLyR2RchSNjBpI07cQbQRC+3 Ca7WzQr++d2yD9fBePKmEHXom0vcFNtJ7nYPNy5NAe643xVbJF3AStCRrIxaAbbN PJauHjo+DTtKnUlA2hVgcUkZcJksmmt8vFIKUMW6oZDgxWFGkXstgvIgxb5g0x5o 815ArG+loN6qFygqfpNxyc5JJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ53klkK O7nMsNJ/LK1ytNKwXZPpMB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIwNC84MzBBM0EyODEyMDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRu VVFnTlowUGlfT0FOS1UyMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR2GwuFleoLIi5rdbdsaApe/ouaXvuMdigqbNvMWWiB4Rh2Po7Leab 8NP7F42gsR+4su/XokP/02NoLcnseswHLGFRDe1TNfnHR//e8akax8Z6vw489RMO 9Ja5A0oNbVpq+jKmLfjXm8uuo5JUdix0ood2Mw1DxRaIT4YZIbGLtGrkDu6vqg/v IgpllyuqaRHfYTzNvIzmrp+nlvuLse97PzhadAva1mGHuNvVi3hfnl+vw6qetYo3 xOqn7EG74BRtlleH9H6Bytb0eEygwoXhA4zMykIa5Jk2jUuXkt1fMvaHnYgw/uak SA0BnIpGHwufJa8oZ4OfGg3Cwr53+lNX -----END CERTIFICATE-----Generated at Wed May 1 03:20:34 2024 by rpki-client on console-fra.rpki-client.org