$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json) Hash identifier: LzTcy5Gk9waodwejRD5LdwTh08GV1G0FF47R5OuRGAE= Subject key identifier: EA:CE:DB:A2:84:BA:FF:B6:89:9F:EE:90:CF:58:A9:C8:F3:32:6D:61 Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft Manifest number: 0615 Signing time: Mon 06 May 2024 23:52:00 +0000 Manifest this update: Mon 06 May 2024 23:52:00 +0000 Manifest next update: Mon 13 May 2024 23:51:59 +0000 Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: C1RZcr14g7DjHhjktSz66BRxQ24JYimt8b6XzZwve4g=) 2: B6FCD4F60CD111ECABD2264AC4F9AE02.roa (hash: UJaZLCJGHbcF3AUiHfA/17edU57SpLXg2ocdTCk51jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Validity Not Before: May 6 23:52:00 2024 GMT Not After : May 13 23:51:59 2024 GMT Subject: CN=66396d20-3ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:56:87:00:91:0d:48:a2:9a:80:ad:5c:99: eb:eb:f4:f1:bc:b5:be:a5:d9:b3:e0:de:7a:5f:00: 5f:f8:8b:2a:b0:ef:ce:64:02:44:79:b2:46:bf:97: e5:bc:ba:00:4e:85:b8:6a:11:1b:08:60:9d:88:5f: 85:d9:5a:ce:df:a9:38:05:da:37:42:29:3e:e1:1b: 50:c4:be:74:52:89:09:06:52:8a:5c:8c:86:95:4f: d8:d7:8b:42:9b:5b:8a:22:54:75:bf:cc:3b:ba:6c: f4:d4:c2:17:ea:d1:68:6d:25:46:55:73:81:2e:3f: 18:06:52:7a:b1:b4:f9:b9:0e:76:22:00:40:65:51: e2:0d:b8:83:50:61:c8:a4:0c:75:f3:28:00:c8:6a: 9d:56:59:55:95:05:3b:5f:00:86:95:b5:e9:58:46: fc:4d:07:70:40:3a:37:a9:da:37:b1:3c:35:64:76: 01:36:22:ca:8d:57:29:20:df:24:09:f9:7c:c1:f7: 8d:02:56:84:1d:0b:62:97:4c:8e:b7:69:5a:97:17: 95:38:cb:4a:de:94:cf:33:24:ea:8b:0a:0c:b2:8f: 7d:fb:ce:cc:1d:f4:aa:95:27:eb:d5:79:8c:15:e2: 96:1f:d0:e9:dc:0d:f4:e7:58:4b:23:0c:36:10:8b: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CE:DB:A2:84:BA:FF:B6:89:9F:EE:90:CF:58:A9:C8:F3:32:6D:61 X509v3 Authority Key Identifier: keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:55:5d:2e:9a:e7:e8:8c:18:72:33:44:c9:cb:2c:c6:81:c0: e3:bc:48:61:87:ae:17:d6:2b:ac:15:75:ac:32:0e:ba:d1:0a: 6f:2c:2d:21:93:fe:0d:e3:70:22:18:32:b8:34:2d:7b:47:ee: a4:34:a7:40:1b:d7:0b:6d:54:e7:b3:d4:71:23:c3:50:5d:c4: 05:da:28:8a:36:c9:f8:2b:b9:27:e2:25:e8:5f:8a:13:64:85: 17:c9:bd:7a:c1:60:ae:2d:08:5a:20:6b:5a:de:78:36:a7:12: e7:67:3a:7b:df:17:18:8c:b4:cf:f4:06:23:ce:5c:0e:02:e2: 65:35:ca:89:4f:52:4c:e2:54:71:69:0f:08:29:ad:d5:d7:de: 4a:11:6f:0b:b2:ea:f1:2d:7c:22:c9:7b:09:ee:01:8a:d3:e4: 6b:db:75:e1:b0:08:83:18:1d:aa:9f:88:ae:69:01:1b:67:5d: 93:1e:6b:78:d7:9a:ec:ab:bc:a8:80:be:7a:cb:37:96:f2:5d: 5f:ae:75:b9:05:64:9c:c4:bb:ca:fe:1c:50:1e:b0:e4:40:85: 4f:97:05:e0:a8:38:d5:30:2b:cd:99:e6:91:d4:75:ca:4e:fe: cd:74:6c:c0:57:8d:c0:b9:40:44:ee:fa:37:07:91:04:88:f0: d5:68:ff:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE MDBERjRENzAwHhcNMjQwNTA2MjM1MjAwWhcNMjQwNTEzMjM1MTU5WjAYMRYwFAYD VQQDEw02NjM5NmQyMC0zZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYpWhwCRDUiimoCtXJnr6/TxvLW+pdmz4N56XwBf+IsqsO/OZAJEebJGv5fl vLoAToW4ahEbCGCdiF+F2VrO36k4Bdo3Qik+4RtQxL50UokJBlKKXIyGlU/Y14tC m1uKIlR1v8w7umz01MIX6tFobSVGVXOBLj8YBlJ6sbT5uQ52IgBAZVHiDbiDUGHI pAx18ygAyGqdVllVlQU7XwCGlbXpWEb8TQdwQDo3qdo3sTw1ZHYBNiLKjVcpIN8k Cfl8wfeNAlaEHQtil0yOt2lalxeVOMtK3pTPMyTqiwoMso99+87MHfSqlSfr1XmM FeKWH9Dp3A3051hLIww2EIveQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrO26KE uv+2iZ/ukM9YqcjzMm1hMB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMVV0umufojBhyM0TJyyzGgcDjvEhhh64X1iusFXWsMg660QpvLC0h k/4N43AiGDK4NC17R+6kNKdAG9cLbVTns9RxI8NQXcQF2iiKNsn4K7kn4iXoX4oT ZIUXyb16wWCuLQhaIGta3ng2pxLnZzp73xcYjLTP9AYjzlwOAuJlNcqJT1JM4lRx aQ8IKa3V195KEW8LsurxLXwiyXsJ7gGK0+Rr23XhsAiDGB2qn4iuaQEbZ12THmt4 15rsq7yogL56yzeW8l1frnW5BWScxLvK/hxQHrDkQIVPlwXgqDjVMCvNmeaR1HXK Tv7NdGzAV43AuUBE7vo3B5EEiPDVaP8G -----END CERTIFICATE-----Generated at Tue May 7 01:58:29 2024 by rpki-client on console-fra.rpki-client.org