$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: M9L7vCCh0q7FDiascrc2rLG+PLurjPT0Q5r2J7/8i/E= Subject key identifier: D3:72:78:CC:85:85:18:66:4F:61:B6:22:BD:3D:88:A7:A3:CF:82:01 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 02A3 Signing time: Sat 25 May 2024 03:46:29 +0000 Manifest this update: Sat 25 May 2024 03:46:28 +0000 Manifest next update: Sat 01 Jun 2024 03:46:28 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: TirGfCvkYC6KVqATd1vppwg8cbJYKtoxKr0ZLouuo2o=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: Yo+TkiCZdIsDX5eWvbmet6aAsm5sWLklbrBhAqSQ/jo=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: +1rr6hdaPkBuu5DRaFr2mXd3vAcnp+KmmihMstYoHfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: May 25 03:46:28 2024 GMT Not After : Jun 1 03:46:28 2024 GMT Subject: CN=66515f14-f8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:ff:ec:00:bd:ab:4d:95:3e:86:c2:a7:f2: 8d:89:d9:73:cb:de:fc:c6:24:59:89:27:69:4e:db: 24:72:9a:32:ca:fe:7f:cf:48:45:ef:8d:be:50:3f: 94:86:66:e4:26:bf:96:78:eb:65:b2:88:4e:04:00: 40:8e:6e:a1:18:2f:9e:9c:7b:57:d6:fd:f2:34:7e: 11:3b:06:00:65:1d:8e:79:8e:58:b5:92:58:4a:f3: 16:81:ba:1f:ca:9f:fd:1f:9f:c5:47:42:57:26:0b: 69:c1:69:c8:63:3b:af:02:26:f7:94:19:36:48:f6: 9c:60:e4:25:92:09:0c:6d:41:4e:29:6f:d7:cb:5b: 23:ce:67:89:1e:b1:43:9d:a2:40:6b:ab:bf:f7:c4: 26:e1:6a:3b:ac:d9:be:c4:d2:a3:d9:13:50:ec:9d: f7:d4:8a:4c:4a:41:49:3b:fd:83:8f:fe:fe:87:f7: 11:43:0c:3e:cb:f4:52:ab:6b:ed:99:5c:ff:c1:44: 14:55:4d:4a:e0:d7:45:23:03:d6:e1:99:9d:bf:60: aa:71:27:64:c3:08:eb:07:db:0a:3f:34:56:48:22: 4b:92:c6:de:22:b1:cb:41:e6:19:48:81:f9:f6:bf: 73:ac:76:7f:df:3b:e7:3d:2e:57:7d:11:f5:a0:fe: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:72:78:CC:85:85:18:66:4F:61:B6:22:BD:3D:88:A7:A3:CF:82:01 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b5:1f:be:39:0a:4f:3b:6f:0e:7e:1b:94:68:51:c4:8a:cc: bd:2b:c2:ca:ae:42:67:ad:0b:9b:54:91:24:d1:bf:5b:92:45: ed:d2:6e:c3:98:73:8d:f1:30:70:5f:dd:14:e0:ca:05:6d:4d: cd:82:b4:10:7b:39:ad:11:e3:c5:b0:66:d5:6a:36:f9:ae:57: e6:e3:6f:8a:ee:72:63:8d:09:7e:c8:e6:36:b1:79:8e:fe:db: 20:21:72:87:8b:f6:9a:2f:99:e1:77:6c:b9:a6:03:8f:5f:c9: dc:e6:b3:56:ec:9a:8d:a8:8d:05:2c:5a:57:2d:de:8f:95:58: 70:56:cb:21:58:e9:72:3e:e0:cf:82:c1:70:19:d5:07:de:2f: ed:45:df:65:97:44:26:b5:de:1e:d4:f1:d5:b6:1e:62:d8:d1: 5d:e2:2c:5a:f1:f3:8f:c6:62:d1:0a:b6:9a:0d:b6:b4:41:b8: 86:8a:7f:8e:ca:80:6e:01:cd:ac:9d:16:e3:65:ca:39:89:04: a1:75:cc:bd:05:b4:e0:1f:1d:91:8d:73:57:2d:21:ec:22:b7: b0:a2:2d:64:75:b6:b2:d9:e1:61:94:8d:ca:6e:cb:ac:10:53: bb:8f:df:1b:ea:ab:dd:25:4a:ee:e2:cd:ea:c0:13:f8:cf:6f: b2:33:f3:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjQwNTI1MDM0NjI4WhcNMjQwNjAxMDM0NjI4WjAYMRYwFAYD VQQDEw02NjUxNWYxNC1mOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HD/7AC9q02VPobCp/KNidlzy978xiRZiSdpTtskcpoyyv5/z0hF742+UD+U hmbkJr+WeOtlsohOBABAjm6hGC+enHtX1v3yNH4ROwYAZR2OeY5YtZJYSvMWgbof yp/9H5/FR0JXJgtpwWnIYzuvAib3lBk2SPacYOQlkgkMbUFOKW/Xy1sjzmeJHrFD naJAa6u/98Qm4Wo7rNm+xNKj2RNQ7J331IpMSkFJO/2Dj/7+h/cRQww+y/RSq2vt mVz/wUQUVU1K4NdFIwPW4Zmdv2CqcSdkwwjrB9sKPzRWSCJLksbeIrHLQeYZSIH5 9r9zrHZ/3zvnPS5XfRH1oP5v6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNyeMyF hRhmT2G2Ir09iKejz4IBMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZtR++OQpPO28OfhuUaFHEisy9K8LKrkJnrQubVJEk0b9bkkXt0m7D mHON8TBwX90U4MoFbU3NgrQQezmtEePFsGbVajb5rlfm42+K7nJjjQl+yOY2sXmO /tsgIXKHi/aaL5nhd2y5pgOPX8nc5rNW7JqNqI0FLFpXLd6PlVhwVsshWOlyPuDP gsFwGdUH3i/tRd9ll0Qmtd4e1PHVth5i2NFd4ixa8fOPxmLRCraaDba0QbiGin+O yoBuAc2snRbjZco5iQShdcy9BbTgHx2RjXNXLSHsIrewoi1kdbay2eFhlI3Kbsus EFO7j98b6qvdJUru4s3qwBP4z2+yM/M9 -----END CERTIFICATE-----Generated at Sat May 25 04:21:40 2024 by rpki-client on console-fra.rpki-client.org