$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json) Hash identifier: X3ene22pWeaLb+G4dyuHUNr/XsX2pVeq/lHE3Gvb+rM= Subject key identifier: C7:7A:B2:9F:31:74:F3:E0:19:3E:8D:DD:60:E2:02:92:4E:20:46:B8 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 17D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft Manifest number: 17CF Signing time: Sun 02 Jun 2024 16:18:18 +0000 Manifest this update: Sun 02 Jun 2024 16:18:17 +0000 Manifest next update: Sun 09 Jun 2024 16:18:17 +0000 Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: TRBwQlMehq2xt8OKZXoh0I37ssgc1iq6SJL3D6f8O60=) 2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: DNT/34XAbGmFn+OFYFCM+fQUbu9lF38oPOg62WMGaks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 16:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6100 (0x17d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Jun 2 16:18:17 2024 GMT Not After : Jun 9 16:18:17 2024 GMT Subject: CN=665c9b49-be72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:de:53:eb:bc:c5:ee:08:60:7f:0d:c2:b0: 0b:09:18:b3:a1:26:a6:01:63:89:1f:14:46:ca:c9: aa:56:67:0a:35:1d:3f:79:87:c9:e4:11:35:24:9a: 83:f7:26:7f:cd:d1:2c:73:4b:f8:64:19:a5:fd:65: 0e:54:cb:81:de:f2:e6:79:86:ae:d9:a4:87:5c:b4: 5f:f5:fd:42:56:70:80:16:68:ab:07:a2:17:0b:48: 9c:12:cf:c3:7e:58:d0:bc:c3:ce:3a:52:d4:7e:5d: e5:c6:3b:cc:a9:f6:9f:89:d5:46:63:c1:ce:3a:27: 8e:23:4b:92:40:4d:e5:46:ae:7d:ff:24:cd:fd:2d: e0:5a:e8:be:8c:7e:41:82:38:c4:ad:e5:12:75:fe: 36:c6:aa:07:0c:43:5a:e4:f4:88:99:2b:e1:9d:4c: 10:31:a3:42:23:b3:00:41:1b:05:7b:85:33:26:c6: c4:d6:9f:59:e6:ad:bb:49:30:ca:8d:2a:d1:a1:a0: ec:65:37:93:fc:03:2d:14:61:43:5e:d5:d4:08:d2: 8c:1b:fd:3a:30:ac:11:12:2a:e6:37:fb:ec:6b:ae: aa:0e:e2:ec:66:28:64:22:53:eb:03:1f:b9:42:2a: 1b:37:bd:fd:7e:91:41:80:a3:ec:88:bd:77:a4:9c: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7A:B2:9F:31:74:F3:E0:19:3E:8D:DD:60:E2:02:92:4E:20:46:B8 X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d8:f8:dc:ca:1a:f5:64:e2:c9:a0:8d:ad:2e:d5:d7:3a:4f: 0c:0e:1a:39:21:cc:af:e1:80:1f:fc:42:74:02:4e:52:a0:8e: 8b:74:8e:9a:fe:e7:8f:92:1a:a3:ab:82:e1:62:62:d2:92:ab: 48:3d:14:14:a6:24:27:25:b2:16:42:df:c0:3b:18:d9:0b:b1: e1:b4:9e:bd:db:28:2a:ec:c3:3e:e4:49:88:46:7b:0d:94:ca: c3:ae:ab:82:5f:d9:8c:e4:74:83:86:26:37:72:a1:e2:9b:88: 8f:86:47:26:fb:ea:dc:24:48:34:7c:a1:a4:ed:95:9c:fc:83: 85:09:65:70:60:9d:13:31:f7:a8:b6:49:4c:c7:4d:f8:e0:ba: 85:01:fc:d1:5e:ef:f8:26:e4:7f:3e:96:b8:bf:8c:d5:fd:75: ed:1a:19:0d:dd:fa:dd:24:43:04:78:75:48:62:a0:6e:b1:83: 1d:91:7a:48:00:2d:73:d5:c5:21:0c:fb:15:dc:a3:f1:39:c0: 59:0b:8e:bd:da:ea:2a:b4:3f:a1:9e:b6:01:5f:45:c6:2e:5d: 34:91:1b:e0:76:6d:33:96:56:80:cd:c0:38:20:9a:45:0b:7e: 7e:c7:bb:5d:2c:d1:a4:59:6a:5b:2b:f0:ef:60:3a:9e:cb:64: 24:c1:da:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjQwNjAyMTYxODE3WhcNMjQwNjA5MTYxODE3WjAYMRYwFAYD VQQDEw02NjVjOWI0OS1iZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9neU+u8xe4IYH8NwrALCRizoSamAWOJHxRGysmqVmcKNR0/eYfJ5BE1JJqD 9yZ/zdEsc0v4ZBml/WUOVMuB3vLmeYau2aSHXLRf9f1CVnCAFmirB6IXC0icEs/D fljQvMPOOlLUfl3lxjvMqfafidVGY8HOOieOI0uSQE3lRq59/yTN/S3gWui+jH5B gjjEreUSdf42xqoHDENa5PSImSvhnUwQMaNCI7MAQRsFe4UzJsbE1p9Z5q27STDK jSrRoaDsZTeT/AMtFGFDXtXUCNKMG/06MKwREirmN/vsa66qDuLsZihkIlPrAx+5 QiobN739fpFBgKPsiL13pJwDhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd6sp8x dPPgGT6N3WDiApJOIEa4MB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1 N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy2Pjcyhr1ZOLJoI2tLtXXOk8MDho5Icyv4YAf/EJ0Ak5SoI6LdI6a /uePkhqjq4LhYmLSkqtIPRQUpiQnJbIWQt/AOxjZC7HhtJ692ygq7MM+5EmIRnsN lMrDrquCX9mM5HSDhiY3cqHim4iPhkcm++rcJEg0fKGk7ZWc/IOFCWVwYJ0TMfeo tklMx0344LqFAfzRXu/4JuR/Ppa4v4zV/XXtGhkN3frdJEMEeHVIYqBusYMdkXpI AC1z1cUhDPsV3KPxOcBZC4692uoqtD+hnrYBX0XGLl00kRvgdm0zllaAzcA4IJpF C35+x7tdLNGkWWpbK/DvYDqey2QkwdpF -----END CERTIFICATE-----Generated at Sun Jun 2 17:59:45 2024 by rpki-client on console-fra.rpki-client.org