$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: s119JbdjPJ9+9kVXm2o1rWuy//em/gm3EWJBmyrK2cY= Subject key identifier: 5D:62:18:3D:0D:44:21:A0:3E:FB:58:F0:9D:3F:2A:DF:09:11:35:D6 Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 01BB Signing time: Sun 19 May 2024 04:29:49 +0000 Manifest this update: Sun 19 May 2024 04:29:49 +0000 Manifest next update: Sun 26 May 2024 04:29:49 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: ccDLSH7F8nFVDyamjwQhUZNoqHbjCBRETGSkdpEnlhI=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: s5zo6Oy3LdXJqnKHo8639OODD+UWopqrRn4IJ2Zq31w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: May 19 04:29:49 2024 GMT Not After : May 26 04:29:49 2024 GMT Subject: CN=6649803d-34ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:d8:34:3f:9b:b6:9f:ca:46:37:30:09:ab: b1:3c:40:25:8d:77:fa:3b:f6:20:18:10:26:7c:de: 62:a1:ea:98:e0:17:bc:04:d4:76:12:41:04:fe:bb: e8:da:26:4f:8c:4c:7e:c4:5c:e3:05:7a:bb:c1:fd: cc:12:ff:76:9b:82:e5:7c:31:23:81:1f:e3:3f:49: 43:28:d6:de:d6:3e:b7:7b:9e:8c:42:55:c7:b3:51: d1:98:87:f0:01:27:86:8c:c5:2f:af:ae:34:4e:83: 2a:4c:38:fe:3a:6a:7c:fd:fb:b7:d7:d3:57:be:b3: 33:5c:97:87:9c:34:47:4d:f6:3d:b0:b2:eb:1f:48: c2:1f:cc:f5:7d:2f:14:d3:ef:af:8d:d8:47:35:eb: 17:b6:39:37:90:42:f3:eb:a3:95:68:90:33:37:51: f3:25:5d:27:47:81:ab:13:41:c6:48:0a:82:b5:7d: 5c:b2:1a:1a:fc:50:79:20:54:c9:95:f6:30:d4:f1: f5:5d:c2:bf:69:ea:7c:49:d0:ba:15:55:06:ac:fa: 20:ee:2d:30:5e:2a:e9:b4:62:d9:47:b6:e4:d6:0a: 9a:e6:bb:4b:7d:2a:6f:a0:d9:c7:fe:11:95:0a:26: 05:5c:b0:ea:ca:b9:d1:28:94:91:1f:50:5f:68:37: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:62:18:3D:0D:44:21:A0:3E:FB:58:F0:9D:3F:2A:DF:09:11:35:D6 X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7d:9f:a5:54:7c:56:e8:85:6b:a1:4b:50:bc:71:dc:c7:fc: 8f:a0:4b:50:27:20:8c:f4:1e:65:82:f8:eb:56:a2:8b:04:a6: c7:87:d6:d6:ea:2e:9f:3d:ad:49:8d:9d:2a:cf:02:1c:b0:72: de:da:11:df:f8:aa:f1:85:69:a9:87:c6:f4:d4:16:d4:12:b4: 4d:13:7e:f7:0f:66:e1:52:9f:7b:d9:a9:c6:58:a6:ea:9e:bf: 2a:3c:33:84:a8:ea:3f:17:16:d5:ea:57:2d:b3:69:8a:74:47: f2:ce:02:5c:c2:65:89:bc:96:ca:13:43:8f:b4:01:93:76:ac: 72:b8:fd:47:9a:e1:2c:7e:6e:9d:fb:35:6a:06:a2:4e:4c:56: 8b:28:4b:1e:6f:f9:2a:de:6b:08:c9:c5:5d:36:46:c0:f7:bb: 7c:4c:37:26:9e:3d:8a:82:e2:f8:a7:5a:03:ec:4a:e3:0d:91: 6c:5d:fd:02:e7:7e:24:1f:c7:a6:47:2d:a7:fb:bd:83:71:d6: c2:1f:34:50:79:0d:ff:ed:df:a8:30:0e:bb:b5:92:f2:bf:50: 6f:89:fc:65:38:f0:07:5f:27:c1:58:cf:18:a7:62:2d:41:a1: c7:93:5a:e2:bf:f4:f3:92:fe:7d:d2:84:89:ef:29:09:75:04: 58:d2:04:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjQwNTE5MDQyOTQ5WhcNMjQwNTI2MDQyOTQ5WjAYMRYwFAYD VQQDEw02NjQ5ODAzZC0zNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJjYND+btp/KRjcwCauxPEAljXf6O/YgGBAmfN5ioeqY4Be8BNR2EkEE/rvo 2iZPjEx+xFzjBXq7wf3MEv92m4LlfDEjgR/jP0lDKNbe1j63e56MQlXHs1HRmIfw ASeGjMUvr640ToMqTDj+Omp8/fu319NXvrMzXJeHnDRHTfY9sLLrH0jCH8z1fS8U 0++vjdhHNesXtjk3kELz66OVaJAzN1HzJV0nR4GrE0HGSAqCtX1cshoa/FB5IFTJ lfYw1PH1XcK/aep8SdC6FVUGrPog7i0wXirptGLZR7bk1gqa5rtLfSpvoNnH/hGV CiYFXLDqyrnRKJSRH1BfaDeVIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1iGD0N RCGgPvtY8J0/Kt8JETXWMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsfZ+lVHxW6IVroUtQvHHcx/yPoEtQJyCM9B5lgvjrVqKLBKbHh9bW 6i6fPa1JjZ0qzwIcsHLe2hHf+KrxhWmph8b01BbUErRNE373D2bhUp972anGWKbq nr8qPDOEqOo/FxbV6lcts2mKdEfyzgJcwmWJvJbKE0OPtAGTdqxyuP1HmuEsfm6d +zVqBqJOTFaLKEseb/kq3msIycVdNkbA97t8TDcmnj2KguL4p1oD7ErjDZFsXf0C 534kH8emRy2n+72DcdbCHzRQeQ3/7d+oMA67tZLyv1BvifxlOPAHXyfBWM8Yp2It QaHHk1riv/Tzkv590oSJ7ykJdQRY0gRK -----END CERTIFICATE-----Generated at Sun May 19 04:56:54 2024 by rpki-client on console-fra.rpki-client.org