$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: DIYzdBSJLROPQ9hvHIqNc8dFHa6QChAKbX3IVFlhap4= Subject key identifier: 6C:17:5D:52:59:68:6C:95:7B:8B:4E:59:72:05:6F:2A:C4:14:8D:88 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 06F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 06E9 Signing time: Mon 06 May 2024 22:58:08 +0000 Manifest this update: Mon 06 May 2024 22:58:08 +0000 Manifest next update: Mon 13 May 2024 22:58:08 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: TjSGva0kvpXVFyYHUYfNKFVOrA9mFvmi+3CdLCGYEJc=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: hGyDaWsB6vStXrPUx8DBJUGAM8TcEy/X6DWGVh0ngjs=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: Oq+xa6PKUitDNpjJ0KBa6s7EUZ4J9jfgk0JZREcVIg8=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: Pz6CvoQxMzKLqI1q75InLhAVidS6RSQm6q6AgXZUE8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: May 6 22:58:08 2024 GMT Not After : May 13 22:58:08 2024 GMT Subject: CN=66396080-feae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:6b:07:04:e6:9d:71:cf:41:74:cf:02:1a: 25:ee:94:95:16:89:03:e8:66:8d:74:40:9a:c2:ec: a9:03:b5:1d:de:04:cc:14:88:91:14:6d:79:c3:fa: 7f:b3:8b:cd:73:99:34:c9:09:c4:11:21:e8:05:25: 61:49:2a:f3:41:32:a6:2c:d6:3a:85:3d:94:e7:cc: 2d:87:08:76:77:aa:93:3d:f4:0a:6c:ac:26:2b:08: 60:6c:1b:e9:9d:0b:04:56:64:eb:f6:e8:b8:bb:47: cb:47:2c:c7:35:39:76:ea:a4:ed:77:27:31:13:26: 1f:27:1d:03:a0:35:b5:ce:54:12:53:e3:b1:30:04: 22:c5:8c:b0:25:ec:fd:47:de:be:ca:11:aa:1f:69: dd:9d:6b:70:9e:d5:0c:1b:eb:fb:f2:58:63:1c:67: f7:65:59:b5:c3:10:ef:b3:7a:a1:c7:60:01:16:83: ea:29:91:46:fa:4f:08:76:10:88:28:6b:01:31:fd: de:09:14:36:dd:1f:9d:9b:cb:5e:d5:32:d2:df:03: b7:c1:41:35:48:6a:cd:2a:95:4a:d9:0f:03:2f:17: 70:17:3f:84:d6:08:a5:6e:95:c0:aa:d1:51:67:bc: 42:6e:98:c3:ab:8f:cc:2e:63:92:1b:62:95:60:7d: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:17:5D:52:59:68:6C:95:7B:8B:4E:59:72:05:6F:2A:C4:14:8D:88 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:28:91:28:4c:77:7b:a9:20:0c:d3:8a:f3:d6:33:8f:3a:a5: f9:4d:a1:b1:7f:f2:4d:47:3b:b2:f8:03:f1:97:a4:ab:a0:b0: a2:2d:aa:17:7e:4d:76:f8:97:a3:36:25:3d:2e:ef:6a:50:8b: 9a:b7:ac:d4:c1:cf:47:0b:09:93:76:5f:37:a2:1e:9c:42:1c: 6e:a4:cc:41:89:47:a5:b0:a6:5c:f5:d9:05:75:c0:9a:d8:0c: 47:a7:ce:5f:2b:80:8f:e8:1e:76:1d:21:ba:c1:c5:18:ed:8c: 02:f5:d3:41:88:bf:86:79:2c:e5:29:c2:ba:5d:7b:7e:ab:ea: 58:65:c0:4c:f8:83:6a:00:ba:9a:ea:74:c5:7a:56:89:6f:cf: aa:6d:d8:75:f9:93:c9:b1:de:ee:b3:16:f7:73:5b:29:01:c4: 30:f8:9f:a2:ba:19:a3:40:dc:f1:c4:ca:d7:55:46:69:6c:e2: 5e:b3:a2:9a:bb:ed:bc:a2:67:f2:df:9c:53:e0:dc:db:78:8d: 92:78:2a:b8:44:f3:ee:79:88:ac:c6:3c:29:2b:af:9a:90:b8: 3b:ce:15:d5:4d:b7:d6:bd:65:4e:1b:6d:1b:d7:68:4a:eb:7c: d0:61:b5:2c:b8:dc:a8:e2:24:61:e0:b5:e2:ad:77:62:e5:68: 06:9b:39:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjQwNTA2MjI1ODA4WhcNMjQwNTEzMjI1ODA4WjAYMRYwFAYD VQQDEw02NjM5NjA4MC1mZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzilrBwTmnXHPQXTPAhol7pSVFokD6GaNdECawuypA7Ud3gTMFIiRFG15w/p/ s4vNc5k0yQnEESHoBSVhSSrzQTKmLNY6hT2U58wthwh2d6qTPfQKbKwmKwhgbBvp nQsEVmTr9ui4u0fLRyzHNTl26qTtdycxEyYfJx0DoDW1zlQSU+OxMAQixYywJez9 R96+yhGqH2ndnWtwntUMG+v78lhjHGf3ZVm1wxDvs3qhx2ABFoPqKZFG+k8IdhCI KGsBMf3eCRQ23R+dm8te1TLS3wO3wUE1SGrNKpVK2Q8DLxdwFz+E1gilbpXAqtFR Z7xCbpjDq4/MLmOSG2KVYH1dXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwXXVJZ aGyVe4tOWXIFbyrEFI2IMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWKJEoTHd7qSAM04rz1jOPOqX5TaGxf/JNRzuy+APxl6SroLCiLaoX fk12+JejNiU9Lu9qUIuat6zUwc9HCwmTdl83oh6cQhxupMxBiUelsKZc9dkFdcCa 2AxHp85fK4CP6B52HSG6wcUY7YwC9dNBiL+GeSzlKcK6XXt+q+pYZcBM+INqALqa 6nTFelaJb8+qbdh1+ZPJsd7usxb3c1spAcQw+J+iuhmjQNzxxMrXVUZpbOJes6Ka u+28omfy35xT4NzbeI2SeCq4RPPueYisxjwpK6+akLg7zhXVTbfWvWVOG20b12hK 63zQYbUsuNyo4iRh4LXirXdi5WgGmznK -----END CERTIFICATE-----Generated at Tue May 7 01:58:29 2024 by rpki-client on console-fra.rpki-client.org