$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json) Hash identifier: MA77jHErg7mPnx4IhrowbIC5E0JQ5WJ0ZwO3AUHQ8Vc= Subject key identifier: 47:35:F3:54:E3:C9:D4:E1:F4:FA:74:A7:C6:86:34:83:1C:E3:ED:5C Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft Manifest number: 06C6 Signing time: Thu 02 May 2024 23:11:36 +0000 Manifest this update: Thu 02 May 2024 23:11:36 +0000 Manifest next update: Thu 09 May 2024 23:11:36 +0000 Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: aYkjgv/WmY08YHFSmUEPqZlVOnAXXbqW/G0wLFEKp20=) 2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: x8iy2PgN96Ou3PQKhNwnOjqTdki54muE+UKRIOEDa1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Validity Not Before: May 2 23:11:36 2024 GMT Not After : May 9 23:11:36 2024 GMT Subject: CN=66341da8-0012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:08:6a:91:ff:71:b0:e0:6a:ad:c6:a4:5f: 26:ab:22:09:29:c1:c5:f1:0c:f2:fc:79:6b:6c:a9: 56:31:4e:61:75:f6:9d:51:8c:bd:58:7d:77:1a:51: 0a:b9:84:ca:0d:fd:59:4f:50:2e:39:34:53:67:55: 7c:4b:de:e2:da:a5:88:ad:3b:c4:d2:43:0a:03:6b: 01:11:fe:72:92:16:28:13:83:0a:eb:f8:aa:dd:18: 01:f1:08:48:52:60:1f:d1:cd:10:cc:7c:be:69:65: 3f:74:c7:5d:b2:3e:68:6b:51:ce:f3:14:6e:2d:35: 1d:98:f0:59:5f:09:83:bb:d5:0b:8f:2b:53:4d:03: 50:bd:2e:54:e0:cd:44:49:38:21:54:a5:a0:65:b8: 34:f7:92:7c:17:d5:73:32:8d:66:fd:bb:32:26:9b: ba:8f:f2:dc:f6:3f:6c:20:4c:34:c1:e6:cc:3a:ae: df:8e:77:34:c8:63:30:79:97:85:77:18:8f:69:64: ce:0b:ed:be:7c:70:d9:de:8a:ac:6d:47:e8:d3:bb: 61:6c:77:c4:4b:f1:a2:9f:00:09:5e:88:1f:91:2d: 1b:5a:2f:61:bd:2c:f0:33:ec:eb:d0:61:db:7f:5a: af:02:6e:27:0e:0e:49:49:3d:46:84:0d:4b:c4:e8: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:F3:54:E3:C9:D4:E1:F4:FA:74:A7:C6:86:34:83:1C:E3:ED:5C X509v3 Authority Key Identifier: keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:83:d8:15:34:05:98:a3:76:a8:68:ed:2f:bd:8d:e1:c4:c5: c2:40:09:ee:d0:85:23:69:d3:7c:ae:fa:7a:6f:99:59:32:d3: 54:c4:4c:ce:5b:54:6a:ff:5e:7f:ae:38:a5:b3:85:6a:ab:65: e4:6c:46:9d:fa:e0:21:47:87:b5:a7:c4:51:29:7c:ac:d8:f1: be:65:f5:c4:34:c1:1e:da:ea:31:03:3c:c8:ee:6a:3a:e1:a1: f1:b3:a2:90:02:95:9d:fa:79:2a:40:32:5b:c5:7b:0e:01:39: c2:07:da:d8:f3:94:05:cf:53:8f:3c:b3:4f:80:fa:7e:7f:78: d8:45:9a:80:60:4a:49:ef:6d:0b:d0:c1:84:97:32:d3:82:32: 27:85:f7:c5:3f:ea:ea:4f:79:9e:d7:38:d7:db:81:43:8f:33: 5b:12:3c:23:b3:b0:fd:27:e7:17:48:fc:f9:bc:73:6c:97:60: e1:7a:e4:68:11:36:44:5d:0e:3e:7d:85:3f:08:70:21:0e:1e: ad:d8:bc:cc:af:33:37:84:9b:16:4b:6c:d1:10:5e:49:45:54: dd:56:03:c8:6a:64:06:50:5a:09:1e:b8:c5:da:ea:5f:07:2a: 63:7c:28:3c:7d:28:89:b7:2d:ae:ba:64:42:81:7f:1e:cc:3a: 1e:24:8c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4MkYzM0QxMTg2 MTc0REU4M0EwHhcNMjQwNTAyMjMxMTM2WhcNMjQwNTA5MjMxMTM2WjAYMRYwFAYD VQQDEw02NjM0MWRhOC0wMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYQIapH/cbDgaq3GpF8mqyIJKcHF8Qzy/HlrbKlWMU5hdfadUYy9WH13GlEK uYTKDf1ZT1AuOTRTZ1V8S97i2qWIrTvE0kMKA2sBEf5ykhYoE4MK6/iq3RgB8QhI UmAf0c0QzHy+aWU/dMddsj5oa1HO8xRuLTUdmPBZXwmDu9ULjytTTQNQvS5U4M1E STghVKWgZbg095J8F9VzMo1m/bsyJpu6j/Lc9j9sIEw0webMOq7fjnc0yGMweZeF dxiPaWTOC+2+fHDZ3oqsbUfo07thbHfES/GinwAJXogfkS0bWi9hvSzwM+zr0GHb f1qvAm4nDg5JST1GhA1LxOjLXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc181Tj ydTh9Pp0p8aGNIMc4+1cMB8GA1UdIwQYMBaAFONc5E5xlyl1kTmNgvM9EYYXTeg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUU1NS9EOTUxNzY4NDBE RjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtYV1JPWTJDOHowUmhoZE42 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxemtUbkdYS1hXUk9ZMkM4ejBSaGhkTjZEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUU1NS9EOTUxNzY4NDBERjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtY V1JPWTJDOHowUmhoZE42RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqg9gVNAWYo3aoaO0vvY3hxMXCQAnu0IUjadN8rvp6b5lZMtNUxEzO W1Rq/15/rjils4Vqq2XkbEad+uAhR4e1p8RRKXys2PG+ZfXENMEe2uoxAzzI7mo6 4aHxs6KQApWd+nkqQDJbxXsOATnCB9rY85QFz1OPPLNPgPp+f3jYRZqAYEpJ720L 0MGElzLTgjInhffFP+rqT3me1zjX24FDjzNbEjwjs7D9J+cXSPz5vHNsl2DheuRo ETZEXQ4+fYU/CHAhDh6t2LzMrzM3hJsWS2zREF5JRVTdVgPIamQGUFoJHrjF2upf BypjfCg8fSiJty2uumRCgX8ezDoeJIze -----END CERTIFICATE-----Generated at Thu May 2 23:48:44 2024 by rpki-client on console-fra.rpki-client.org