$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft File: k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json) Hash identifier: XHUG2/feReYIMeHkSwsFCbhGtKX6nSh3r0yKHW3sgZY= Subject key identifier: 63:42:D8:00:E2:6E:A7:97:26:C6:AE:13:7C:96:05:8E:53:40:0B:26 Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 Certificate issuer: /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft Manifest number: 0FAE Signing time: Sat 18 May 2024 21:05:20 +0000 Manifest this update: Sat 18 May 2024 21:05:19 +0000 Manifest next update: Sat 25 May 2024 21:05:19 +0000 Files and hashes: 1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: SKlvsAHd1uOymva52+9e+G5iqAQhlEvB8j2mZqRnpJU=) 2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: js92WdHTgwYeYUJwq8GTDLtVj0ldWBn8KlPdiu7W0Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Validity Not Before: May 18 21:05:19 2024 GMT Not After : May 25 21:05:19 2024 GMT Subject: CN=6649180f-3bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:5d:34:98:4c:d6:f1:16:b9:95:a7:1d:0f: a6:82:e4:7f:89:50:62:e5:dd:77:ec:c4:49:8c:12: 80:f9:d5:b6:7f:bd:b7:cb:96:25:65:a9:08:d6:22: be:c4:0d:d5:23:2c:1c:26:3b:ea:d3:e4:48:e4:a9: eb:c3:f8:4a:ea:cc:6d:57:e7:c8:ac:53:37:16:4e: 14:09:15:06:d6:6e:8c:ec:1f:40:4c:87:06:e0:8e: a0:4f:5b:95:6e:ec:5c:6b:80:0d:78:bc:9e:d5:a7: a2:38:85:7a:ce:c5:cc:47:77:2e:4d:fb:99:10:35: 48:05:2e:f0:0f:76:04:9d:7e:0f:a1:8e:70:2f:d9: ad:db:a4:b3:a0:f7:c7:2f:cd:2a:80:f1:14:01:3a: d4:e5:be:94:f2:7b:b0:0e:13:f8:82:e0:f4:0b:f1: 0a:41:f9:ee:38:99:e8:61:34:27:da:27:28:41:d1: 57:b4:17:a4:b9:05:2a:a7:a6:92:a4:47:51:19:44: ed:84:ad:7e:ab:98:6d:4a:54:c7:65:c0:b2:e6:df: 18:4e:fb:d9:63:51:7f:72:fb:d0:f1:29:0e:62:b4: ba:b2:d0:e2:3f:88:a6:0d:71:a5:6c:79:b4:e9:07: 6d:b6:d5:a6:0d:eb:46:3d:43:f5:b8:ae:24:78:10: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:42:D8:00:E2:6E:A7:97:26:C6:AE:13:7C:96:05:8E:53:40:0B:26 X509v3 Authority Key Identifier: keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7c:59:b6:7c:6c:d0:f8:b7:07:5a:06:88:8c:d4:12:4d:93: b7:8a:01:ac:69:cf:8c:57:3b:f9:91:75:f1:26:fd:9e:fe:7e: 35:45:5d:45:05:4e:f5:b8:05:df:77:ce:f2:b3:d1:3b:67:46: 87:ef:f0:41:98:c5:7e:3b:25:30:56:0a:a2:b2:cd:66:e3:dd: 99:84:19:70:5e:26:a0:78:91:fb:ba:af:ae:72:24:de:ab:da: 3b:99:06:7c:df:5d:f3:3b:da:7d:22:e5:b7:d0:a0:98:d7:62: 3f:2b:2e:a4:17:36:d5:27:52:26:e4:b1:41:26:9f:61:15:05: 6e:bf:34:d5:f0:c7:db:ac:0f:60:83:f2:bb:fb:d8:8f:08:30: d2:47:c6:a3:c1:03:28:0a:f5:43:eb:da:38:cd:b3:30:e7:ce: 36:c9:bf:cc:21:eb:87:dc:47:43:42:4d:74:c0:dc:c0:10:76: 55:8c:62:52:b6:4d:57:62:77:6f:d0:68:b0:4c:8b:e4:02:3a: f7:c2:83:96:c1:5e:d9:40:64:23:12:46:dd:48:d7:dc:ef:6a: a1:57:be:e0:71:a8:1b:64:a8:8a:9d:f2:cb:34:6a:55:95:c3: 8f:13:2b:38:c7:c9:8b:7a:3f:66:b1:81:b9:f1:4a:28:92:f0: 00:ac:00:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDkzQTdEODM1RTEzODU4QkI1OTk1MUMzOTlBNUY5RUFC MEUyRUI5MzEwHhcNMjQwNTE4MjEwNTE5WhcNMjQwNTI1MjEwNTE5WjAYMRYwFAYD VQQDEw02NjQ5MTgwZi0zYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa1dNJhM1vEWuZWnHQ+mguR/iVBi5d137MRJjBKA+dW2f723y5YlZakI1iK+ xA3VIywcJjvq0+RI5Knrw/hK6sxtV+fIrFM3Fk4UCRUG1m6M7B9ATIcG4I6gT1uV buxca4ANeLye1aeiOIV6zsXMR3cuTfuZEDVIBS7wD3YEnX4PoY5wL9mt26SzoPfH L80qgPEUATrU5b6U8nuwDhP4guD0C/EKQfnuOJnoYTQn2icoQdFXtBekuQUqp6aS pEdRGUTthK1+q5htSlTHZcCy5t8YTvvZY1F/cvvQ8SkOYrS6stDiP4imDXGlbHm0 6QdtttWmDetGPUP1uK4keBCOgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNC2ADi bqeXJsauE3yWBY5TQAsmMB8GA1UdIwQYMBaAFJOn2DXhOFi7WZUcOZpfnqsOLrkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdMdFpsUnc1bWwtZXF3NHV1 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s2ZllOZUU0V0x0WmxSdzVtbC1lcXc0dXVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdM dFpsUnc1bWwtZXF3NHV1VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBufFm2fGzQ+LcHWgaIjNQSTZO3igGsac+MVzv5kXXxJv2e/n41RV1F BU71uAXfd87ys9E7Z0aH7/BBmMV+OyUwVgqiss1m492ZhBlwXiageJH7uq+uciTe q9o7mQZ8313zO9p9IuW30KCY12I/Ky6kFzbVJ1Im5LFBJp9hFQVuvzTV8MfbrA9g g/K7+9iPCDDSR8ajwQMoCvVD69o4zbMw5842yb/MIeuH3EdDQk10wNzAEHZVjGJS tk1XYndv0GiwTIvkAjr3woOWwV7ZQGQjEkbdSNfc72qhV77gcagbZKiKnfLLNGpV lcOPEys4x8mLej9msYG58UookvAArADx -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org