$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft File: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json) Hash identifier: re9+W0wCGNHGgnajANZ5AdDc4HkvTF6ix2uwtw9Tspc= Subject key identifier: E9:C0:91:EC:A2:E1:54:B5:5E:82:4E:6E:34:CC:1C:7C:87:94:07:EB Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE Certificate issuer: /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft Manifest number: 6A Signing time: Sun 19 May 2024 07:34:31 +0000 Manifest this update: Sun 19 May 2024 07:34:31 +0000 Manifest next update: Sun 26 May 2024 07:34:31 +0000 Files and hashes: 1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: JPCa7NPI87jVikTvOwoYqRAYPKHcbEf8JBdvTNVK+44=) 2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: ct5zX5NS05/VJitXpfU+YuTRAVg4+4lmhuLeWj84jbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE Validity Not Before: May 19 07:34:31 2024 GMT Not After : May 26 07:34:31 2024 GMT Subject: CN=6649ab87-2cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:f6:fd:23:9c:84:0e:09:ff:3b:2d:65:0c: 2e:45:4b:e4:b9:cb:f2:fe:70:42:e7:bc:30:69:81: 60:b6:99:71:03:79:88:ce:ae:98:45:ba:25:4c:6a: 6a:ab:95:18:f5:79:98:5c:e0:6a:d4:ff:cd:14:2b: 6d:f4:30:a4:a4:04:f8:4e:1d:7a:2d:19:63:d6:5e: 36:92:e1:bf:09:51:98:a2:30:2d:63:2b:d5:c7:74: f2:16:bd:c4:82:64:48:6c:c8:c3:d0:3e:70:e4:46: f5:5a:a9:5d:d6:7d:b8:73:19:4e:46:7f:9e:35:1f: 3f:02:f7:e1:aa:d7:8b:17:b5:45:0a:cd:f8:f2:e7: b6:9a:cb:0e:45:cf:5b:fb:5d:27:9a:04:f8:0e:6c: f7:18:ca:ba:89:64:3d:7a:3c:db:4f:d4:cd:ef:c4: c5:53:96:36:00:f6:50:1f:c6:10:92:e1:cc:7b:fe: 64:6f:e6:e6:83:52:c1:1b:3d:08:de:9b:71:48:bd: 1a:50:4a:1c:a2:7f:37:1a:84:dd:41:d2:ea:5c:ef: 32:c6:2b:e6:04:c2:b7:36:54:71:d6:ed:ce:ba:23: 9c:c9:91:78:86:d0:e1:72:d2:9d:d1:6d:ee:ae:7d: 30:3a:95:52:12:3b:a4:7b:c6:60:b8:5c:a5:fb:6e: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C0:91:EC:A2:E1:54:B5:5E:82:4E:6E:34:CC:1C:7C:87:94:07:EB X509v3 Authority Key Identifier: keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:74:87:5c:65:df:c5:e2:ae:3c:b4:72:66:d9:c7:1a:32:06: 37:ea:e1:07:86:86:ab:0a:74:64:43:0e:cd:e8:1e:60:36:da: 69:3d:ed:8d:0d:35:02:16:5c:69:9f:23:83:04:33:c6:e4:ae: ab:1e:c1:fe:dd:58:16:ac:e7:27:5e:3a:0b:85:1d:28:41:fc: 44:19:ec:a2:fc:10:91:86:2e:82:65:0e:e8:e1:69:8c:42:d5: ff:bf:d8:15:ac:94:55:65:3e:30:e9:0d:43:ad:94:b9:40:09: ee:3d:05:e7:15:5f:dc:d2:c0:ae:0d:cd:2c:f0:a0:4a:1f:fc: a3:3e:65:a6:7d:60:05:74:5f:51:5c:c0:3c:51:40:91:59:0d: 3d:b9:0b:e5:e8:5c:99:93:64:21:15:3e:b8:5d:48:3c:94:d1: be:a8:eb:64:74:d3:9b:bb:2e:31:5f:87:ed:bd:c6:5c:6b:89: 7d:5e:21:e0:f3:25:8b:7c:ea:ae:5d:7f:fb:19:a4:69:27:98: 0d:bb:f3:54:66:9a:42:61:3c:bf:6b:57:58:77:d1:c6:ad:79: 1e:fe:32:7e:3a:cc:68:a2:f8:0a:99:e1:bc:46:1b:bd:4a:c1: d8:00:ca:04:d8:14:a9:bc:2d:15:f5:cd:e3:1b:17:b4:48:55: 89:b2:a4:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjRGRTExMC8GA1UEBRMoRTZGMDg2QzA1QzVFMDRERDk2QUUwRTVGQzkwMzk3OTFB Mzc1NjBGRTAeFw0yNDA1MTkwNzM0MzFaFw0yNDA1MjYwNzM0MzFaMBgxFjAUBgNV BAMTDTY2NDlhYjg3LTJjZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpkvb9I5yEDgn/Oy1lDC5FS+S5y/L+cELnvDBpgWC2mXEDeYjOrphFuiVMamqr lRj1eZhc4GrU/80UK230MKSkBPhOHXotGWPWXjaS4b8JUZiiMC1jK9XHdPIWvcSC ZEhsyMPQPnDkRvVaqV3WfbhzGU5Gf541Hz8C9+Gq14sXtUUKzfjy57aayw5Fz1v7 XSeaBPgObPcYyrqJZD16PNtP1M3vxMVTljYA9lAfxhCS4cx7/mRv5uaDUsEbPQje m3FIvRpQShyifzcahN1B0upc7zLGK+YEwrc2VHHW7c66I5zJkXiG0OFy0p3Rbe6u fTA6lVISO6R7xmC4XKX7bu5ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6cCR7KLh VLVegk5uNMwcfIeUB+swHwYDVR0jBBgwFoAU5vCGwFxeBN2Wrg5fyQOXkaN1YP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2NEZFL0I4MjZDQTgwNzZC RjExRUVCMTRGMkQ3MkM0RjlBRTAyLzV2Q0d3RnhlQk4yV3JnNWZ5UU9Ya2FOMVlQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXZDR3dGeGVCTjJXcmc1ZnlRT1hrYU4xWVA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 NEZFL0I4MjZDQTgwNzZCRjExRUVCMTRGMkQ3MkM0RjlBRTAyLzV2Q0d3RnhlQk4y V3JnNWZ5UU9Ya2FOMVlQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABF0h1xl38Xirjy0cmbZxxoyBjfq4QeGhqsKdGRDDs3oHmA22mk97Y0N NQIWXGmfI4MEM8bkrqsewf7dWBas5ydeOguFHShB/EQZ7KL8EJGGLoJlDujhaYxC 1f+/2BWslFVlPjDpDUOtlLlACe49BecVX9zSwK4NzSzwoEof/KM+ZaZ9YAV0X1Fc wDxRQJFZDT25C+XoXJmTZCEVPrhdSDyU0b6o62R005u7LjFfh+29xlxriX1eIeDz JYt86q5df/sZpGknmA2781RmmkJhPL9rV1h30cateR7+Mn46zGii+AqZ4bxGG71K wdgAygTYFKm8LRX1zeMbF7RIVYmypL0= -----END CERTIFICATE-----Generated at Sun May 19 08:24:56 2024 by rpki-client on console-ams.rpki-client.org