$ rpki-client -vvf rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft File: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft (raw, json) Hash identifier: ZrIBo8fyLgW4syXczBdvJmjQHKCtgtFIANOzfSqxZgk= Subject key identifier: DB:D3:31:F5:C9:6E:E9:90:7E:F9:2C:C8:4F:98:34:14:AA:88:A0:CA Authority key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84 Certificate issuer: /CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184 Certificate serial: 09DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft Manifest number: 09D7 Signing time: Sat 18 May 2024 20:45:39 +0000 Manifest this update: Sat 18 May 2024 20:45:38 +0000 Manifest next update: Sat 25 May 2024 20:45:38 +0000 Files and hashes: 1: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl (hash: 1Za6OZtq0bEjanAjXOwtTDAUZ43CiBzxdkYfDcorqEU=) 2: BA767AE8584A11EA91887312C4F9AE02.roa (hash: sEMY6wJOI25FATMBbFUhgjLB9MeXx5Qa7wulqNT2Y/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184 Validity Not Before: May 18 20:45:38 2024 GMT Not After : May 25 20:45:38 2024 GMT Subject: CN=66491373-3906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:ec:bf:a4:84:9f:11:fe:b0:2b:f6:24:49: 5a:d5:ce:d3:30:1a:c0:87:f7:a4:ad:d4:c3:f0:01: 36:d0:2d:92:7a:78:72:fd:e4:f6:c7:5b:be:38:48: 67:1a:00:52:b2:21:a2:cc:29:1c:aa:5f:d1:c4:04: 18:fa:27:5b:36:9e:ad:0b:9b:b7:14:5f:90:5e:be: 4b:3e:b3:e5:a8:8e:f1:fd:e5:b5:15:c9:37:cf:b2: dc:ce:98:92:02:7b:66:7c:0a:a0:c2:b9:70:bc:28: 3b:1d:de:bc:5d:93:fa:ef:ec:5f:88:e5:77:b7:de: fc:e9:68:d7:ca:9b:c9:66:db:48:69:fd:78:e9:90: 0e:32:48:ab:fa:b5:4c:08:90:b3:11:cb:5e:61:12: 39:1b:57:26:ac:41:60:f5:8c:51:0a:f4:16:91:e1: 36:c8:c4:c7:91:fc:71:2f:f0:d2:00:bb:fe:a1:2a: fc:c3:21:6b:b4:f5:ee:b4:90:21:3b:46:8d:72:ad: 08:cc:d0:18:6e:66:c8:1c:d7:a3:ec:17:17:f0:90: e4:72:2f:92:fc:15:33:1b:d4:85:7d:b1:ba:a8:12: 94:b4:2b:3a:df:ee:ed:61:5f:9e:91:3e:e7:b8:90: ed:1e:17:d5:dc:fe:45:c1:99:32:73:a1:db:53:85: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D3:31:F5:C9:6E:E9:90:7E:F9:2C:C8:4F:98:34:14:AA:88:A0:CA X509v3 Authority Key Identifier: keyid:EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:23:2c:43:d2:21:57:43:60:88:4c:a5:7a:94:9b:66:e8:f6: 0e:4f:9a:a2:6f:8b:11:79:48:9c:dc:b7:18:33:74:6f:15:12: 4a:b7:f5:86:a4:2e:da:97:8f:90:d5:bf:6c:a9:21:79:41:ed: 5e:72:26:47:4e:59:7c:b6:f9:25:03:11:bf:b3:61:5c:85:b8: 53:15:5c:fe:f6:1d:d4:81:25:43:e8:79:3d:b4:5a:6d:f2:41: f0:a3:9d:86:bb:25:b7:40:9e:af:33:e7:98:3d:a5:47:74:00: 27:f0:81:c5:7d:c6:20:fe:01:13:69:ef:5f:95:aa:ed:ea:92: c9:cd:6d:4e:45:dc:b4:28:07:8f:7f:4b:e8:66:b0:b4:fb:ee: 5c:91:97:52:f2:1b:4f:79:9a:60:12:2b:38:8a:08:a2:2f:7a: fa:af:a2:1f:41:2d:24:d4:4e:ed:b9:a4:96:11:b2:68:0c:e4: 91:41:a2:5a:d1:0a:53:f3:59:c6:9a:34:0b:95:32:1c:5a:4d: 82:ae:93:f7:e4:0d:6c:ae:0f:d2:7e:73:d5:8d:14:44:73:9b: 08:f9:e9:fb:2d:cd:7d:b2:24:15:4a:c4:2d:09:71:72:f1:38: ca:0d:12:d1:84:2e:3d:32:c1:1a:37:87:fd:d8:bf:6d:03:10: 48:26:29:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MzUxMTAvBgNVBAUTKEVCRUU4MUZDNEJDOUQ2NzNEREY3NDg1NEE2NTVFRDVG QUNFNUQxODQwHhcNMjQwNTE4MjA0NTM4WhcNMjQwNTI1MjA0NTM4WjAYMRYwFAYD VQQDEw02NjQ5MTM3My0zOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBbsv6SEnxH+sCv2JEla1c7TMBrAh/ekrdTD8AE20C2Senhy/eT2x1u+OEhn GgBSsiGizCkcql/RxAQY+idbNp6tC5u3FF+QXr5LPrPlqI7x/eW1Fck3z7LczpiS AntmfAqgwrlwvCg7Hd68XZP67+xfiOV3t9786WjXypvJZttIaf146ZAOMkir+rVM CJCzEcteYRI5G1cmrEFg9YxRCvQWkeE2yMTHkfxxL/DSALv+oSr8wyFrtPXutJAh O0aNcq0IzNAYbmbIHNej7BcX8JDkci+S/BUzG9SFfbG6qBKUtCs63+7tYV+ekT7n uJDtHhfV3P5FwZkyc6HbU4UyMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvTMfXJ bumQfvksyE+YNBSqiKDKMB8GA1UdIwQYMBaAFOvugfxLydZz3fdIVKZV7V+s5dGE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYzNS9BRjBGOEQ4QTU4 NDkxMUVBQkY2QTg0MTJDNEY5QUUwMi82LTZCX0V2SjFuUGQ5MGhVcGxYdFg2emww WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYtNkJfRXZKMW5QZDkwaFVwbFh0WDZ6bDBZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYzNS9BRjBGOEQ4QTU4NDkxMUVBQkY2QTg0MTJDNEY5QUUwMi82LTZCX0V2SjFu UGQ5MGhVcGxYdFg2emwwWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqIyxD0iFXQ2CITKV6lJtm6PYOT5qib4sReUic3LcYM3RvFRJKt/WG pC7al4+Q1b9sqSF5Qe1eciZHTll8tvklAxG/s2FchbhTFVz+9h3UgSVD6Hk9tFpt 8kHwo52GuyW3QJ6vM+eYPaVHdAAn8IHFfcYg/gETae9flart6pLJzW1ORdy0KAeP f0voZrC0++5ckZdS8htPeZpgEis4igiiL3r6r6IfQS0k1E7tuaSWEbJoDOSRQaJa 0QpT81nGmjQLlTIcWk2CrpP35A1srg/SfnPVjRREc5sI+en7Lc19siQVSsQtCXFy 8TjKDRLRhC49MsEaN4f92L9tAxBIJimL -----END CERTIFICATE-----Generated at Sat May 18 21:31:25 2024 by rpki-client on console-ams.rpki-client.org