$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: qTScR2H5dfGMsAYMt04IaG17WxZIsRkdgy3h9ka6V+w= Subject key identifier: 15:F1:58:C6:82:DE:7C:6A:51:D3:E1:09:93:52:23:04:DA:31:4D:3A Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 0685 Signing time: Thu 18 Apr 2024 23:19:37 +0000 Manifest this update: Thu 18 Apr 2024 23:19:37 +0000 Manifest next update: Thu 25 Apr 2024 23:19:37 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: ujxQOzEko9I5Q99SdM5nmihKf1llr9+mxyvoiOWgX5U=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: f39v6ygeXRAjdPY64BJbuZ+UIBj1N1Eycl4ErcVzWRs=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: sfj2xvECrC9UYbOF65OAbFWVk5Du9BFNVeA8onJFiT4=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: X9OisaOkwt/5KjenBaaHdfiXZFZsev8q5m2QettMK0Y=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: 6kQVlrZy5cZqJirjzotMeN/Ddvn+uSO9iFSVMEsm0NU=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 0lE8Ow3LFnTXkIztshTNWS33aCOmk4VgzoWs3uDur+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 22:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Apr 18 23:19:37 2024 GMT Not After : Apr 25 23:19:37 2024 GMT Subject: CN=6621aa89-1484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:60:fa:a8:96:81:af:fb:47:98:52:1c:d5: 3e:34:5b:1f:ea:86:dc:ec:c6:d2:4e:22:e5:65:1e: 31:65:54:d0:db:56:d6:45:b2:39:a5:d8:1b:ae:bf: 7b:7d:4d:8b:bc:41:45:03:2f:7b:cf:4e:f9:ba:1e: 09:4e:fb:99:3d:0c:17:bf:c8:c9:17:f9:bf:ab:41: fd:17:08:53:23:dc:c3:39:6d:3b:1f:6e:97:df:17: b1:e5:19:16:8f:86:f2:7f:ab:81:b8:63:20:ee:ce: 05:4a:8c:86:41:cb:de:ef:da:df:8f:cf:98:c8:0a: 50:6b:fb:46:47:3a:01:a8:80:d8:6f:65:8c:4d:05: 28:6d:5a:bc:97:c5:4e:7f:5b:7c:be:d8:27:3e:24: 78:25:89:9d:14:4c:7c:13:dc:f6:85:6e:d5:34:ca: 75:b4:c4:bd:07:a9:eb:dc:55:92:0f:9a:76:4c:6e: a9:0d:f0:c8:86:29:e4:a7:0d:6c:ee:3c:dc:f1:08: 20:19:b6:c4:1f:8f:23:d6:f9:eb:77:da:ec:d7:9b: f1:fc:91:de:b9:6d:44:38:7f:d4:da:c6:b7:7c:67: 5e:0d:c0:ab:1e:55:5e:12:11:f1:69:38:bd:c9:3e: 12:c1:aa:65:ec:68:fe:92:d8:fa:a0:7c:b9:8e:fe: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F1:58:C6:82:DE:7C:6A:51:D3:E1:09:93:52:23:04:DA:31:4D:3A X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d0:82:e9:f2:91:ac:07:a2:0e:c1:e2:48:98:ce:1c:f1:38: 8c:5b:ff:2b:c8:95:dc:09:33:4f:0e:fb:d2:f7:24:b8:8a:34: 59:ad:51:8b:fc:cc:e3:53:32:56:bf:57:d0:52:b7:a4:3e:3f: 6f:62:d8:c3:75:05:35:35:d2:24:f1:e6:a2:51:1b:32:27:29: 4e:19:44:a4:7e:84:11:bf:08:61:a7:bd:1a:77:4a:fb:7d:ce: 90:84:73:dd:f0:80:5c:aa:a8:00:bd:5b:02:a5:3c:df:3e:4c: 28:48:34:33:1b:29:6e:36:7b:22:6a:66:93:f2:16:6b:ff:31: 45:12:66:84:0f:e6:d4:6f:ed:9b:41:bf:de:46:77:ec:22:71: 11:af:d8:78:06:3d:09:66:f8:89:f9:80:d2:3f:16:6d:8c:fe: 52:03:ef:4a:8a:f6:da:8e:36:71:6a:aa:a4:91:58:5f:02:13: 04:7b:c2:3c:3f:67:a4:5f:83:71:00:78:16:88:f4:c9:06:78: a2:98:97:41:64:d4:5d:1e:45:8b:3c:f2:47:eb:98:81:01:3b: ac:ec:4b:c6:07:bc:78:80:75:81:9e:ed:42:3e:d3:5e:07:2b: 6a:ed:cd:41:44:47:6d:c3:72:ff:e5:10:20:ed:17:05:c0:19: 66:c1:de:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjQwNDE4MjMxOTM3WhcNMjQwNDI1MjMxOTM3WjAYMRYwFAYD VQQDEw02NjIxYWE4OS0xNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEpg+qiWga/7R5hSHNU+NFsf6obc7MbSTiLlZR4xZVTQ21bWRbI5pdgbrr97 fU2LvEFFAy97z075uh4JTvuZPQwXv8jJF/m/q0H9FwhTI9zDOW07H26X3xex5RkW j4byf6uBuGMg7s4FSoyGQcve79rfj8+YyApQa/tGRzoBqIDYb2WMTQUobVq8l8VO f1t8vtgnPiR4JYmdFEx8E9z2hW7VNMp1tMS9B6nr3FWSD5p2TG6pDfDIhinkpw1s 7jzc8QggGbbEH48j1vnrd9rs15vx/JHeuW1EOH/U2sa3fGdeDcCrHlVeEhHxaTi9 yT4Swapl7Gj+ktj6oHy5jv7a7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXxWMaC 3nxqUdPhCZNSIwTaMU06MB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB0ILp8pGsB6IOweJImM4c8TiMW/8ryJXcCTNPDvvS9yS4ijRZrVGL /MzjUzJWv1fQUrekPj9vYtjDdQU1NdIk8eaiURsyJylOGUSkfoQRvwhhp70ad0r7 fc6QhHPd8IBcqqgAvVsCpTzfPkwoSDQzGyluNnsiamaT8hZr/zFFEmaED+bUb+2b Qb/eRnfsInERr9h4Bj0JZviJ+YDSPxZtjP5SA+9KivbajjZxaqqkkVhfAhMEe8I8 P2ekX4NxAHgWiPTJBniimJdBZNRdHkWLPPJH65iBATus7EvGB7x4gHWBnu1CPtNe Bytq7c1BREdtw3L/5RAg7RcFwBlmwd5I -----END CERTIFICATE-----Generated at Thu Apr 18 23:55:18 2024 by rpki-client on console-fra.rpki-client.org