$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft File: 15_6dyN1rrQCGo_1GC_qqjJZKP0.mft (raw, json) Hash identifier: 04ls6+dYFBtuJ+Plxt9rlGHvYlkAoQZFCQeqNEkjXdc= Subject key identifier: 87:A0:E2:87:82:DA:61:B2:B5:53:21:E9:95:51:23:1F:B6:7F:4D:C1 Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD Certificate issuer: /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft Manifest number: 3B4D Signing time: Sat 04 May 2024 15:28:29 +0000 Manifest this update: Sat 04 May 2024 15:28:29 +0000 Manifest next update: Sat 11 May 2024 15:28:29 +0000 Files and hashes: 1: 15_6dyN1rrQCGo_1GC_qqjJZKP0.crl (hash: yR99IJ1K6Q2/KngeRNJydd42OXnkSwW7Co37CryDkrE=) 2: 355A29B8D6CC11EE99534F6EC4F9AE02.roa (hash: 7XScGt+5Xh4t4lRJpA3T6ij1h1E2NJKftqBX/YrH1oo=) 3: D127B58CF8EF11EEA2537576C4F9AE02.roa (hash: USZSkKOpvRstAy6bGHIvH9iPNrUuZ7zTpn1HoGAIWzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Validity Not Before: May 4 15:28:29 2024 GMT Not After : May 11 15:28:29 2024 GMT Subject: CN=6636541d-d1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:5b:01:60:43:67:9e:f5:bd:4d:9e:f3:7d: a2:88:10:a8:52:26:7b:82:b8:0f:4a:6a:d9:a2:71: 75:a5:2e:a1:96:df:ec:a5:d5:66:9d:ed:33:a7:99: d2:ad:c6:91:7a:25:b9:e1:84:15:d9:5b:ac:2e:a4: 94:0f:e8:cc:a1:5a:79:77:e7:7e:1d:79:b3:59:1a: 32:33:1e:15:6c:dd:ed:6a:39:a3:3d:bb:dc:aa:4b: a3:2f:4b:50:e6:49:a1:44:ce:7d:f0:60:d1:12:3c: 93:68:92:02:13:a9:36:4d:e3:52:2a:83:7e:5e:bf: 9f:4a:54:31:56:4c:20:c2:df:57:e5:6f:91:6d:51: cc:10:ef:dc:2f:11:c0:f7:56:5c:68:06:b5:d8:17: ff:e9:b1:0d:85:45:e1:30:12:e2:fe:94:d8:7d:07: 2a:33:3a:4f:f4:a1:7d:de:bd:5c:c6:09:79:c4:9f: c8:1d:7b:99:9c:db:89:26:4a:69:e1:8f:ac:6e:13: fc:89:fe:1b:f6:7a:15:f9:c3:56:80:48:7b:40:9e: d7:03:f0:d6:df:b1:e2:c4:ca:a4:40:19:ac:6b:a1: c9:48:e2:c9:c6:7a:73:69:99:15:e0:8c:c6:ab:c0: 26:5b:d7:4f:46:6b:38:47:42:59:e7:14:6f:50:2d: ba:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A0:E2:87:82:DA:61:B2:B5:53:21:E9:95:51:23:1F:B6:7F:4D:C1 X509v3 Authority Key Identifier: keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:11:18:ca:81:39:fe:b8:b7:a1:56:86:6d:a9:c2:17:6b:8a: 62:c2:9c:f6:71:fd:2f:28:de:b6:d5:dc:95:86:0e:0a:8d:ae: ed:b6:9c:07:d6:a5:6f:d8:6b:19:7c:08:3d:2c:b0:79:0f:81: 79:36:03:2d:96:b9:81:26:15:8e:97:ac:c0:35:68:b0:4e:02: 6a:d6:8a:27:d2:83:4a:c5:a2:39:b6:da:1e:74:0b:fb:b4:59: 09:ad:29:6e:fc:29:6b:e1:05:48:18:01:34:81:0c:a6:05:3b: 7d:75:4d:8d:05:0a:4b:42:2a:05:27:0d:52:fe:3c:7c:21:b3: 22:ba:c4:1c:f3:74:70:52:5d:34:65:ac:e5:51:33:1b:c0:75: fa:25:01:f3:fb:83:b5:1a:0c:b6:fb:3e:14:8c:99:ed:ec:9b: af:96:2b:61:a1:5a:41:22:22:36:61:33:7e:e7:49:52:65:98: e5:d1:da:42:a9:42:59:71:17:31:29:96:0c:a8:13:f3:ae:fb: e5:1e:ce:6c:36:39:ee:95:9c:a7:71:4f:2b:4b:f8:37:f8:62: c9:9c:33:0a:ff:99:57:f2:82:87:0e:e9:41:7d:85:05:12:0d: b8:a3:66:91:39:f6:24:d0:f4:c5:b5:85:fe:4b:ed:c0:33:dc: db:6e:e2:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEQ3OUZGQTc3MjM3NUFFQjQwMjFBOEZGNTE4MkZFQUFB MzI1OTI4RkQwHhcNMjQwNTA0MTUyODI5WhcNMjQwNTExMTUyODI5WjAYMRYwFAYD VQQDEw02NjM2NTQxZC1kMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoJbAWBDZ571vU2e832iiBCoUiZ7grgPSmrZonF1pS6hlt/spdVmne0zp5nS rcaReiW54YQV2VusLqSUD+jMoVp5d+d+HXmzWRoyMx4VbN3tajmjPbvcqkujL0tQ 5kmhRM598GDREjyTaJICE6k2TeNSKoN+Xr+fSlQxVkwgwt9X5W+RbVHMEO/cLxHA 91ZcaAa12Bf/6bENhUXhMBLi/pTYfQcqMzpP9KF93r1cxgl5xJ/IHXuZnNuJJkpp 4Y+sbhP8if4b9noV+cNWgEh7QJ7XA/DW37HixMqkQBmsa6HJSOLJxnpzaZkV4IzG q8AmW9dPRms4R0JZ5xRvUC261wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeg4oeC 2mGytVMh6ZVRIx+2f03BMB8GA1UdIwQYMBaAFNef+ncjda60AhqP9Rgv6qoyWSj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJyUUNHb18xR0NfcXFqSlpL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1XzZkeU4xcnJRQ0dvXzFHQ19xcWpKWktQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJy UUNHb18xR0NfcXFqSlpLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVERjKgTn+uLehVoZtqcIXa4piwpz2cf0vKN621dyVhg4Kja7ttpwH 1qVv2GsZfAg9LLB5D4F5NgMtlrmBJhWOl6zANWiwTgJq1oon0oNKxaI5ttoedAv7 tFkJrSlu/Clr4QVIGAE0gQymBTt9dU2NBQpLQioFJw1S/jx8IbMiusQc83RwUl00 ZazlUTMbwHX6JQHz+4O1Ggy2+z4UjJnt7JuvlithoVpBIiI2YTN+50lSZZjl0dpC qUJZcRcxKZYMqBPzrvvlHs5sNjnulZyncU8rS/g3+GLJnDMK/5lX8oKHDulBfYUF Eg24o2aROfYk0PTFtYX+S+3AM9zbbuJR -----END CERTIFICATE-----Generated at Sat May 4 16:34:31 2024 by rpki-client on console-fra.rpki-client.org