$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: X02H1lvaJFfZiOtLr4h01D1LBUDMqJsMPyK6rw53Sdk= Subject key identifier: 62:CF:82:04:3E:F3:22:0D:20:CE:55:C8:34:4F:FC:67:7E:1D:F8:31 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 0120 Signing time: Sun 19 May 2024 05:24:08 +0000 Manifest this update: Sun 19 May 2024 05:24:07 +0000 Manifest next update: Sun 26 May 2024 05:24:07 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: 0+oHa/RpfiolxjTDkYt+KZ0rczwxgm/9sYpoUkSiUBE=) 2: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: ywhvDJvQxyWr5M5HeSY6XX6kpPDyeGDW1U6yRs4SzyA=) 3: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: HEP7ygO7vwbJNA6a1Yh81guofjc2KZAgniicQPiMuwk=) 4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: bgF9MEhNt9OhTuD+qzVTZBt1Y1hR4lpAcvN75ie3PMk=) 5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 4nca+zjw/oceArKoao4vA7g0YEPiT0qMny/vAkel68o=) 6: 319543069BBF11EDBFB6EE5DC4F9AE02.roa (hash: vZLrRb8D5tduBuTVKoErlXudBIz+MpXOKS0TeU5hY9o=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: ua1AQMU7bCCk0fcUdLe1mRz8NyiPnpe550PawenVzJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: May 19 05:24:07 2024 GMT Not After : May 26 05:24:07 2024 GMT Subject: CN=66498cf8-295c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:85:d4:94:85:db:53:1d:f9:47:c3:be:0b: 1e:bf:9c:67:4c:81:e6:b2:aa:bd:49:9e:3e:48:f3: 28:63:1c:38:89:60:38:bc:85:ba:3f:a0:00:b4:c0: dc:5a:f8:44:2b:e6:b8:4a:30:24:eb:ef:a8:c3:76: 43:8b:74:60:97:66:4f:f4:71:06:2e:b3:89:30:62: 83:1f:fa:19:2f:4e:ef:c4:07:90:06:0b:e4:3b:48: 6e:ec:09:90:34:61:a8:f9:be:51:65:33:cc:73:7e: 36:66:bb:e8:9a:c9:40:bf:77:66:d1:c8:16:03:27: db:5c:05:76:ff:85:71:7b:61:e7:d8:c5:c2:3e:1d: a2:00:ab:b8:14:af:63:f6:8e:39:2b:67:2e:f1:8e: c7:66:a4:64:8b:a7:dd:b5:1e:65:c8:51:66:7b:75: 57:a0:0d:ec:dc:80:58:0b:7d:c1:3d:09:8c:4f:e9: 8b:36:91:7e:f5:c3:a9:fc:d6:17:13:42:e3:aa:cf: 60:66:37:fd:c7:e7:46:38:6d:9d:08:4c:e2:6f:21: 44:77:a6:e5:4e:40:32:fa:db:76:3f:db:05:f1:aa: 4b:48:63:de:66:3d:cd:fd:1f:8a:84:9c:fe:5a:bb: 1e:8b:54:a3:c5:64:d2:3b:55:3f:b6:f3:25:a7:08: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CF:82:04:3E:F3:22:0D:20:CE:55:C8:34:4F:FC:67:7E:1D:F8:31 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:84:20:d1:06:5a:66:13:69:16:91:79:0d:b4:7b:63:3f:59: 36:e2:b1:bd:42:84:27:8f:38:58:82:c9:3f:63:9c:56:72:3e: 22:3e:03:bf:23:27:9f:cb:a4:9e:d3:3b:ba:ed:38:45:ac:38: 57:ab:93:86:06:a7:85:96:b1:fe:5c:de:8a:62:22:6a:40:d0: e1:f4:5d:8d:f1:88:c8:ad:0c:7b:25:dd:1d:f9:a8:0b:f4:da: 7a:88:34:e2:b5:63:cd:2c:ae:4e:02:62:19:ae:9f:79:59:e2: cf:2c:17:ba:cc:5d:e1:51:42:3d:75:82:77:86:f2:60:bd:50: 02:6a:6d:2e:d1:12:ef:2f:65:4e:9c:4a:10:d8:87:65:9b:49: d7:fb:59:19:e7:13:da:dc:c3:d3:cb:0b:d6:ab:f4:77:b9:f5: d3:ac:2b:93:10:52:e3:7f:a8:42:2f:50:0c:32:ce:70:49:ac: a1:c3:60:8b:c0:67:fd:bc:9f:8a:84:e9:b9:0c:65:3b:39:44: 4e:3d:c8:ab:7e:6f:d9:1b:a3:95:3c:11:01:2d:9a:8e:a7:9e: fd:68:d3:b5:72:2c:07:16:cc:1e:29:19:e4:a1:eb:b1:73:1f: b2:b9:d9:13:ea:ee:d8:54:00:5e:35:7e:38:1e:c0:05:d8:bf: 41:f7:26:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjQwNTE5MDUyNDA3WhcNMjQwNTI2MDUyNDA3WjAYMRYwFAYD VQQDEw02NjQ5OGNmOC0yOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBKF1JSF21Md+UfDvgsev5xnTIHmsqq9SZ4+SPMoYxw4iWA4vIW6P6AAtMDc WvhEK+a4SjAk6++ow3ZDi3Rgl2ZP9HEGLrOJMGKDH/oZL07vxAeQBgvkO0hu7AmQ NGGo+b5RZTPMc342ZrvomslAv3dm0cgWAyfbXAV2/4Vxe2Hn2MXCPh2iAKu4FK9j 9o45K2cu8Y7HZqRki6fdtR5lyFFme3VXoA3s3IBYC33BPQmMT+mLNpF+9cOp/NYX E0Ljqs9gZjf9x+dGOG2dCEzibyFEd6blTkAy+tt2P9sF8apLSGPeZj3N/R+KhJz+ Wrsei1SjxWTSO1U/tvMlpwhkuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLPggQ+ 8yINIM5VyDRP/Gd+HfgxMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+hCDRBlpmE2kWkXkNtHtjP1k24rG9QoQnjzhYgsk/Y5xWcj4iPgO/ Iyefy6Se0zu67ThFrDhXq5OGBqeFlrH+XN6KYiJqQNDh9F2N8YjIrQx7Jd0d+agL 9Np6iDTitWPNLK5OAmIZrp95WeLPLBe6zF3hUUI9dYJ3hvJgvVACam0u0RLvL2VO nEoQ2Idlm0nX+1kZ5xPa3MPTywvWq/R3ufXTrCuTEFLjf6hCL1AMMs5wSayhw2CL wGf9vJ+KhOm5DGU7OUROPcirfm/ZG6OVPBEBLZqOp579aNO1ciwHFsweKRnkoeux cx+yudkT6u7YVABeNX44HsAF2L9B9yak -----END CERTIFICATE-----Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org