$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: D7qKTjqfrbXLW35j3SKWCiaJNpynHb3NKV+PUX5HLGY= Subject key identifier: BE:0C:F4:6D:3D:DB:B2:56:37:11:F2:84:CC:94:10:55:FA:32:71:C1 Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: A5 Signing time: Fri 17 May 2024 06:50:49 +0000 Manifest this update: Fri 17 May 2024 06:50:49 +0000 Manifest next update: Fri 24 May 2024 06:50:49 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: DZ9AuBkaMK+V+qSqwoP1C6ONyKbUeVfClqXfLE2xUSU=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: eVRamCS2GWg+zFHWDNnLhbWa2ki2R6hG/Wn4oBAaQI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: May 17 06:50:49 2024 GMT Not After : May 24 06:50:49 2024 GMT Subject: CN=6646fe49-fbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:34:9d:6b:3f:8b:4e:7a:d6:95:cb:43:6e: 42:eb:c2:49:49:62:f8:83:6b:b4:1b:fe:86:9d:ae: e4:df:05:0c:20:78:f8:41:41:b0:7e:9a:1e:cc:6f: 82:3a:0b:5d:e9:e0:c9:03:b9:d7:82:d6:9e:9f:fa: 56:b7:13:78:05:34:7e:dc:ea:f9:68:31:50:f8:5d: 6f:ed:98:3d:36:9e:b5:88:c8:c8:f5:49:84:75:cf: 49:54:09:45:3b:f8:90:6f:fd:93:0e:16:25:f5:bc: 8a:08:ef:ad:8c:87:5e:83:1a:26:7a:7e:e9:7a:a1: 8b:09:34:e1:a3:1f:44:f0:8a:fb:c2:af:c5:5b:bb: 1f:dc:2d:ae:4c:83:b0:38:b8:78:55:6e:e5:b1:2e: 53:13:b8:95:9c:c7:57:bd:a5:94:d7:09:63:cc:ed: e9:13:62:23:d4:d8:e9:3f:04:6a:ca:ca:5f:b5:93: 3e:8d:07:55:00:d7:0b:0f:85:78:c7:ef:a7:8a:d0: 39:60:8b:cf:36:fe:73:73:22:98:36:58:8f:78:3b: 12:ca:ee:5e:d4:e7:60:1f:b6:d7:c7:ea:5b:85:76: 6e:6e:d5:df:b5:6a:d8:f4:06:6e:a6:2c:cc:8f:b2: a4:2d:9a:a3:4b:58:cc:60:10:8d:ed:7f:64:41:af: 45:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0C:F4:6D:3D:DB:B2:56:37:11:F2:84:CC:94:10:55:FA:32:71:C1 X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:9e:14:51:d6:79:9d:08:d3:14:bc:66:3a:0a:e2:69:54:04: 37:9a:0a:d5:d6:01:c5:6f:5d:6a:18:f9:4b:60:a6:53:80:0e: 94:40:b5:2c:66:ea:af:bc:df:f0:63:43:59:2d:68:58:52:94: fa:e4:60:4b:bc:61:ff:a1:3a:2b:5e:57:68:16:1b:44:03:44: 6d:bf:48:2c:ad:7b:1a:22:0b:a3:e6:e3:c0:f2:22:12:77:06: 39:69:f2:52:07:a2:c4:ef:0f:cf:d1:94:02:ba:31:91:27:e9: 62:88:e2:e4:ba:62:26:3a:39:fa:27:dd:b4:4c:09:7a:93:32: 41:61:a1:37:b5:1f:25:0b:ea:ee:1c:01:05:28:e2:10:f0:ed: bf:3c:52:1a:19:90:e4:98:d6:df:0d:ea:b0:55:d7:9e:7d:dc: 7e:26:92:51:13:8a:a7:64:31:da:67:d1:d3:48:fd:0e:61:f6: 0d:c9:db:c2:dd:e0:17:36:bd:06:fd:69:70:6f:34:e7:c1:fe: 2d:df:86:58:38:b5:65:c4:15:32:5d:24:db:33:8e:82:11:a9: b2:00:cb:a3:01:34:a0:d6:13:5d:e4:9e:44:8b:05:84:7e:46: 51:fc:98:40:17:11:b5:66:51:a9:0a:5d:62:95:67:6e:38:2e: e6:3e:d1:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjQwNTE3MDY1MDQ5WhcNMjQwNTI0MDY1MDQ5WjAYMRYwFAYD VQQDEw02NjQ2ZmU0OS1mYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Zc0nWs/i0561pXLQ25C68JJSWL4g2u0G/6Gna7k3wUMIHj4QUGwfpoezG+C Ogtd6eDJA7nXgtaen/pWtxN4BTR+3Or5aDFQ+F1v7Zg9Np61iMjI9UmEdc9JVAlF O/iQb/2TDhYl9byKCO+tjIdegxomen7peqGLCTThox9E8Ir7wq/FW7sf3C2uTIOw OLh4VW7lsS5TE7iVnMdXvaWU1wljzO3pE2Ij1NjpPwRqyspftZM+jQdVANcLD4V4 x++nitA5YIvPNv5zcyKYNliPeDsSyu5e1OdgH7bXx+pbhXZubtXftWrY9AZupizM j7KkLZqjS1jMYBCN7X9kQa9FcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4M9G09 27JWNxHyhMyUEFX6MnHBMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWnhRR1nmdCNMUvGY6CuJpVAQ3mgrV1gHFb11qGPlLYKZTgA6UQLUs ZuqvvN/wY0NZLWhYUpT65GBLvGH/oTorXldoFhtEA0Rtv0gsrXsaIguj5uPA8iIS dwY5afJSB6LE7w/P0ZQCujGRJ+liiOLkumImOjn6J920TAl6kzJBYaE3tR8lC+ru HAEFKOIQ8O2/PFIaGZDkmNbfDeqwVdeefdx+JpJRE4qnZDHaZ9HTSP0OYfYNydvC 3eAXNr0G/WlwbzTnwf4t34ZYOLVlxBUyXSTbM46CEamyAMujATSg1hNd5J5EiwWE fkZR/JhAFxG1ZlGpCl1ilWduOC7mPtGQ -----END CERTIFICATE-----Generated at Fri May 17 08:13:55 2024 by rpki-client on console-fra.rpki-client.org