$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft File: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft (raw, json) Hash identifier: kjCLoyV628nX05yHJ5hFovQ3kN98GFfxCrRBQC32Wus= Subject key identifier: 1E:72:7A:54:DB:56:01:59:63:FE:64:2C:28:62:79:DE:10:DC:AC:67 Authority key identifier: E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D Certificate issuer: /CN=A911954F/serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft Manifest number: 5D Signing time: Sun 19 May 2024 07:48:54 +0000 Manifest this update: Sun 19 May 2024 07:48:53 +0000 Manifest next update: Sun 26 May 2024 07:48:53 +0000 Files and hashes: 1: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl (hash: a49rvAdNFxHMmFFzC5wGlQjEGJqjrj3LcMgMLwSi2TI=) 2: EEA8CDAE91B511EEA8ECF882C4F9AE02.roa (hash: FCGz1mx6kA+oDpAk/3UmD4PEaVvmfrdHkCIUq18i6a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F/serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D Validity Not Before: May 19 07:48:53 2024 GMT Not After : May 26 07:48:53 2024 GMT Subject: CN=6649aee6-0a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:c3:9b:c7:4c:87:65:b8:6b:13:10:70:05: a9:7d:b4:02:32:3b:6f:ff:d1:42:3d:93:54:b4:0f: ad:7f:02:ae:b3:12:86:35:9d:69:a7:90:0b:6b:12: 86:4c:a2:bb:e9:f0:b4:99:f3:56:48:5d:80:7c:91: d7:3f:a1:15:b6:a2:d3:60:90:67:84:48:fd:95:a1: df:a8:8d:e2:1a:7c:49:41:17:45:40:5f:57:a7:b0: 06:34:60:a5:34:26:f5:00:9e:ee:91:64:16:f6:90: 09:dd:8b:c6:de:d6:7b:a7:f0:78:95:66:a2:a0:e9: b4:0a:c5:89:54:49:56:5e:3c:69:a4:cb:ce:db:a8: 47:eb:24:98:b1:6b:35:cf:be:49:f9:62:e5:09:0e: f0:11:27:f7:e1:e0:1f:b8:0a:84:63:14:53:e5:e4: aa:15:d4:32:1b:73:75:53:a2:02:1a:0c:d1:ff:bf: 71:27:d3:4a:5c:7e:24:5a:03:9e:7b:47:b4:84:d9: 42:9d:52:f1:58:a8:a3:34:75:d0:c8:32:fb:5f:28: 79:0f:33:0c:7e:ce:d8:b0:c5:ce:14:8c:92:7a:de: d5:b9:6a:ff:0f:3e:af:7a:a6:96:d7:87:71:8c:64: d1:0e:b6:15:d9:50:b1:61:5a:6a:eb:ad:80:ba:38: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:72:7A:54:DB:56:01:59:63:FE:64:2C:28:62:79:DE:10:DC:AC:67 X509v3 Authority Key Identifier: keyid:E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ef:4b:6c:db:60:67:92:b0:0c:0c:15:8d:5b:f0:22:2f:57: 72:ac:fd:64:67:a6:55:6a:31:3e:17:2f:9c:bc:f2:76:60:ff: 87:f8:46:47:a3:c4:d3:42:6e:9b:64:02:74:88:33:b5:21:d8: 5f:05:40:cf:f1:de:50:bd:c1:9e:d3:93:d0:c0:b9:92:da:95: 81:6a:b2:fc:a8:fc:cc:7b:17:ed:b0:b4:77:d4:bb:16:75:c2: 23:2a:10:4b:82:79:79:22:49:01:63:4c:c7:80:30:9c:8b:5e: d6:8a:0a:12:32:46:6e:18:e3:64:e6:6a:b9:70:e0:4c:30:f8: 93:b5:7c:46:d9:76:2d:3b:67:2c:51:bb:0f:ee:5b:b2:57:33: 6e:02:9d:6d:43:47:58:82:91:95:e0:df:46:60:fe:d2:b2:ba: b2:ab:77:e6:54:9a:21:40:fe:f3:20:21:52:fc:ce:5c:52:5b: 69:7c:c2:ea:ee:86:0d:28:5d:c2:81:59:1e:10:67:0e:a8:16: e8:96:55:48:e0:43:0c:62:6f:b7:29:8f:c6:52:19:1c:04:2b: b7:b9:34:a5:ca:ba:4c:d8:ff:58:1a:de:6e:46:ee:8e:9a:86: 16:c8:c0:1a:e2:75:cd:ce:72:de:a0:05:56:2f:e0:12:1d:29: ce:ea:f1:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTU0RjExMC8GA1UEBRMoRTk4RUVDQjczMEYxQTk0QTY2QTlCNTEyRkM3NzU3NzhD NjAwODMwRDAeFw0yNDA1MTkwNzQ4NTNaFw0yNDA1MjYwNzQ4NTNaMBgxFjAUBgNV BAMTDTY2NDlhZWU2LTBhOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtYsObx0yHZbhrExBwBal9tAIyO2//0UI9k1S0D61/Aq6zEoY1nWmnkAtrEoZM orvp8LSZ81ZIXYB8kdc/oRW2otNgkGeESP2Vod+ojeIafElBF0VAX1ensAY0YKU0 JvUAnu6RZBb2kAndi8be1nun8HiVZqKg6bQKxYlUSVZePGmky87bqEfrJJixazXP vkn5YuUJDvARJ/fh4B+4CoRjFFPl5KoV1DIbc3VTogIaDNH/v3En00pcfiRaA557 R7SE2UKdUvFYqKM0ddDIMvtfKHkPMwx+ztiwxc4UjJJ63tW5av8PPq96ppbXh3GM ZNEOthXZULFhWmrrrYC6OMxLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHnJ6VNtW AVlj/mQsKGJ53hDcrGcwHwYDVR0jBBgwFoAU6Y7stzDxqUpmqbUS/HdXeMYAgw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5NTRGLzU5MUEzMjIwOTE0 QTExRUU5NDJDQzg3MUM0RjlBRTAyLzZZN3N0ekR4cVVwbXFiVVNfSGRYZU1ZQWd3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNlk3c3R6RHhxVXBtcWJVU19IZFhlTVlBZ3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 NTRGLzU5MUEzMjIwOTE0QTExRUU5NDJDQzg3MUM0RjlBRTAyLzZZN3N0ekR4cVVw bXFiVVNfSGRYZU1ZQWd3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIHvS2zbYGeSsAwMFY1b8CIvV3Ks/WRnplVqMT4XL5y88nZg/4f4Rkej xNNCbptkAnSIM7Uh2F8FQM/x3lC9wZ7Tk9DAuZLalYFqsvyo/Mx7F+2wtHfUuxZ1 wiMqEEuCeXkiSQFjTMeAMJyLXtaKChIyRm4Y42Tmarlw4Eww+JO1fEbZdi07ZyxR uw/uW7JXM24CnW1DR1iCkZXg30Zg/tKyurKrd+ZUmiFA/vMgIVL8zlxSW2l8wuru hg0oXcKBWR4QZw6oFuiWVUjgQwxib7cpj8ZSGRwEK7e5NKXKukzY/1ga3m5G7o6a hhbIwBridc3Oct6gBVYv4BIdKc7q8VM= -----END CERTIFICATE-----Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org