$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json) Hash identifier: ZDmJm9rq1dAIfebyVbTfAvVFtPrPDqEN6fnhV4Jr5Fw= Subject key identifier: 4F:B1:FC:42:C3:69:A2:E7:70:28:7D:3F:BD:87:34:72:39:AA:05:6F Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft Manifest number: 0C7F Signing time: Sat 18 May 2024 18:52:12 +0000 Manifest this update: Sat 18 May 2024 18:52:11 +0000 Manifest next update: Sat 25 May 2024 18:52:11 +0000 Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: kk6Z+sRPH71aJw8P7kX70WRCgVMQUO9+OmLi7NvxlH4=) 2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: HTGV+/hUaosCSp7RHZgq707SKnf5flE29JXS30lFZzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Validity Not Before: May 18 18:52:11 2024 GMT Not After : May 25 18:52:11 2024 GMT Subject: CN=6648f8dc-d5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:f9:c2:5e:7c:ae:72:5f:d5:89:46:1c:aa: 6c:5c:32:51:88:f5:93:b5:d6:2d:e6:f5:00:a7:71: 3f:4c:e0:62:b2:62:fd:e8:78:58:49:dc:85:95:c0: 7f:ed:15:d9:78:7b:b8:7e:10:b1:5f:d4:7b:3a:c4: ac:5b:42:40:16:3b:ae:97:d3:f1:d6:6b:0c:83:77: d2:a6:4d:ef:dc:31:d2:00:a5:f8:b1:94:6b:08:e4: 18:e3:d6:78:d1:c4:9a:86:9c:db:12:07:67:bd:3b: aa:94:a2:5d:45:78:68:8d:58:bc:6f:c0:9c:48:dd: 6c:83:0e:4c:2d:c6:5d:d4:3c:11:9f:6f:55:f2:1b: c3:09:29:fc:81:f9:db:71:95:71:8e:0f:01:83:a0: 77:23:69:d8:87:72:2a:6e:08:fe:cb:fe:29:3b:ac: a2:90:14:16:bf:94:fc:be:da:13:38:08:f1:c1:d8: df:7d:4a:3b:57:19:c5:b4:5f:42:73:d7:ee:15:54: 10:91:7d:94:fa:f1:23:7f:62:32:b3:2b:de:5f:56: 16:9a:9a:df:a4:97:3b:ef:a7:45:02:86:f0:69:88: ef:e7:4d:90:fc:4b:54:af:c4:4e:7a:27:30:09:e6: 2e:62:79:ba:1b:3c:5c:63:c7:71:91:fe:9a:8c:34: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B1:FC:42:C3:69:A2:E7:70:28:7D:3F:BD:87:34:72:39:AA:05:6F X509v3 Authority Key Identifier: keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f4:b7:26:1f:9e:30:3d:41:ad:f2:09:f0:e8:13:08:94:56: 90:4b:13:8a:b9:0a:b3:26:78:96:f2:4e:a9:32:10:24:a0:65: 1f:16:61:f9:38:12:c5:6c:f9:f5:15:56:ab:f4:99:f9:1a:90: e0:b7:7b:55:f7:e7:48:11:cc:d8:6b:f8:2e:2d:0a:1e:9d:4e: 07:30:72:78:64:3d:6c:40:f6:4f:0a:44:cb:0e:43:9e:16:9f: ef:90:e0:50:7d:9f:0e:c1:4d:9d:27:90:1e:fe:f5:b1:d8:02: db:4d:8e:37:82:67:55:a9:d8:b1:9b:03:ce:09:16:4f:36:d6: 90:2f:0a:f6:45:41:67:60:ba:b9:12:50:df:37:87:d2:14:a2: 6d:01:da:e0:1d:e4:dc:4e:2b:84:5c:08:38:2c:7f:9a:22:89: e4:37:47:8b:22:7c:06:7d:60:d9:ab:b2:d8:4d:75:2c:41:e5: ef:4b:9e:00:b8:29:ed:a5:50:0d:30:d8:e1:93:2d:df:04:ca: cd:ce:19:2c:86:10:8e:ed:74:0a:4f:3e:49:df:ec:0d:5b:76: 2b:e5:9c:bd:21:b9:78:0a:70:4e:5a:01:0d:ee:ff:5a:f4:49: 81:b5:49:32:be:5d:da:5b:a3:46:48:dc:33:1a:08:0c:fb:4b: 7f:8c:d5:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2 MkZDODFGQkQwHhcNMjQwNTE4MTg1MjExWhcNMjQwNTI1MTg1MjExWjAYMRYwFAYD VQQDEw02NjQ4ZjhkYy1kNWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRL5wl58rnJf1YlGHKpsXDJRiPWTtdYt5vUAp3E/TOBismL96HhYSdyFlcB/ 7RXZeHu4fhCxX9R7OsSsW0JAFjuul9Px1msMg3fSpk3v3DHSAKX4sZRrCOQY49Z4 0cSahpzbEgdnvTuqlKJdRXhojVi8b8CcSN1sgw5MLcZd1DwRn29V8hvDCSn8gfnb cZVxjg8Bg6B3I2nYh3Iqbgj+y/4pO6yikBQWv5T8vtoTOAjxwdjffUo7VxnFtF9C c9fuFVQQkX2U+vEjf2IysyveX1YWmprfpJc776dFAobwaYjv502Q/EtUr8ROeicw CeYuYnm6GzxcY8dxkf6ajDTjRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+x/ELD aaLncCh9P72HNHI5qgVvMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0 NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC8zRDRBNUE4NEQ0NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIy Y3B3MVlxTkctMjlpX0lINzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi9LcmH54wPUGt8gnw6BMIlFaQSxOKuQqzJniW8k6pMhAkoGUfFmH5 OBLFbPn1FVar9Jn5GpDgt3tV9+dIEczYa/guLQoenU4HMHJ4ZD1sQPZPCkTLDkOe Fp/vkOBQfZ8OwU2dJ5Ae/vWx2ALbTY43gmdVqdixmwPOCRZPNtaQLwr2RUFnYLq5 ElDfN4fSFKJtAdrgHeTcTiuEXAg4LH+aIonkN0eLInwGfWDZq7LYTXUsQeXvS54A uCntpVANMNjhky3fBMrNzhkshhCO7XQKTz5J3+wNW3Yr5Zy9Ibl4CnBOWgEN7v9a 9EmBtUkyvl3aW6NGSNwzGggM+0t/jNWk -----END CERTIFICATE-----Generated at Sat May 18 20:15:58 2024 by rpki-client on console-ams.rpki-client.org