$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json) Hash identifier: KhEuTiGtnLRTjefwjk1/WcIntFY8RMSXHfRZLLddGqg= Subject key identifier: 35:EF:BD:74:E7:3E:B6:41:2B:23:9B:60:8E:62:F4:04:10:71:5A:03 Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft Manifest number: 0C7F Signing time: Fri 31 May 2024 19:24:45 +0000 Manifest this update: Fri 31 May 2024 19:24:44 +0000 Manifest next update: Fri 07 Jun 2024 19:24:44 +0000 Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: sGP2KIEy/OilzOs1rSONuXCQ+kdoN2wOEZIA0iyHfI0=) 2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: QivuW/shh4Ld1sAdGaNGY/loKQ86P5qPY5jr/3gmuUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Validity Not Before: May 31 19:24:44 2024 GMT Not After : Jun 7 19:24:44 2024 GMT Subject: CN=665a23fd-989a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:6e:3f:af:15:95:b9:29:6e:d7:60:e0:e9: 90:3f:60:da:b8:92:d5:f5:90:7f:f2:41:e3:fc:f6: 50:85:1b:cf:90:5d:53:2c:a6:25:c3:ea:09:2c:1b: 4e:e5:a3:f2:9d:ea:77:b2:f6:8f:21:a4:86:a9:f2: 01:48:ad:a4:ad:1b:0e:67:6b:ed:e6:59:c9:6c:cc: 9e:d0:cb:8c:91:e6:14:bc:ff:e2:cc:b4:b4:85:94: 9f:bc:d5:27:09:a1:b9:c9:50:8f:ea:a9:35:31:0b: e8:bc:a8:3c:e4:69:01:89:7e:2e:6f:d9:90:82:7c: 61:7b:1b:0d:ea:09:bc:5d:e3:f2:ac:47:67:d8:b4: 4f:42:a4:b8:c0:01:33:af:e7:d0:86:1b:a4:d7:52: 0b:b0:6d:43:64:14:03:47:07:3c:ba:a5:10:38:c0: 51:bc:7d:0e:41:be:64:6e:65:1c:bc:48:7c:33:f8: fc:95:3d:20:7c:33:70:2d:37:1e:ee:c9:f1:4c:89: 76:e4:d3:8e:35:83:ca:31:c8:d2:f2:6c:92:f6:2e: 3e:30:e4:63:5e:a3:ec:1c:0e:1c:d0:35:31:30:f6: 02:73:14:d5:00:a6:b2:b6:06:0d:ee:b4:47:2a:98: da:4b:e7:9e:a6:a1:7a:9f:7d:06:c8:21:2d:84:12: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:BD:74:E7:3E:B6:41:2B:23:9B:60:8E:62:F4:04:10:71:5A:03 X509v3 Authority Key Identifier: keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:03:96:a2:6d:75:e2:83:7d:d3:4d:9e:9f:34:27:0a:a2:a6: 37:68:c9:a5:ed:67:ca:3b:f6:11:30:33:b4:28:b9:35:a2:5b: 57:df:e8:e0:f9:7d:60:c2:a4:e7:d4:8a:e6:ed:1d:dc:9c:e8: 7a:ff:16:c2:84:cc:d0:c9:94:b7:dd:56:b4:5f:a7:c9:6c:d3: b2:bf:82:ec:43:26:d7:ee:33:79:a9:cc:9b:89:f3:81:26:5f: 8a:02:ea:5b:9f:e7:17:94:a8:7d:32:51:c8:41:ee:f8:33:25: 10:99:0b:c3:8c:6f:94:a3:d3:fe:c5:84:fd:f3:7c:02:6e:7d: 68:b9:99:01:7f:13:76:9e:60:30:b5:85:a3:33:3a:02:43:32: 94:04:b5:34:07:35:ab:40:38:e4:ec:aa:68:6e:f8:4c:cb:4d: 34:28:94:78:c5:ea:25:23:ee:eb:1e:b0:63:f8:4e:8c:10:4a: c4:0a:4c:72:92:50:9f:ad:fa:c4:9a:e5:4c:9d:ac:10:ea:b2: 8e:12:b8:f2:94:e2:a1:8c:97:f4:2d:9d:68:f5:46:a2:24:a0: 71:ce:09:47:e4:0c:b1:0c:22:69:fc:4a:b0:34:c9:12:7c:e5: bd:48:17:63:d2:96:fd:a1:4f:7e:31:9c:de:5d:1b:19:b1:08: 6b:eb:f3:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB RTVBMjhGNjAwHhcNMjQwNTMxMTkyNDQ0WhcNMjQwNjA3MTkyNDQ0WjAYMRYwFAYD VQQDEw02NjVhMjNmZC05ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjpuP68Vlbkpbtdg4OmQP2DauJLV9ZB/8kHj/PZQhRvPkF1TLKYlw+oJLBtO 5aPynep3svaPIaSGqfIBSK2krRsOZ2vt5lnJbMye0MuMkeYUvP/izLS0hZSfvNUn CaG5yVCP6qk1MQvovKg85GkBiX4ub9mQgnxhexsN6gm8XePyrEdn2LRPQqS4wAEz r+fQhhuk11ILsG1DZBQDRwc8uqUQOMBRvH0OQb5kbmUcvEh8M/j8lT0gfDNwLTce 7snxTIl25NOONYPKMcjS8myS9i4+MORjXqPsHA4c0DUxMPYCcxTVAKaytgYN7rRH KpjaS+eepqF6n30GyCEthBKFFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXvvXTn PrZBKyObYI5i9AQQcVoDMB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1 MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsA5aibXXig33TTZ6fNCcKoqY3aMml7WfKO/YRMDO0KLk1oltX3+jg +X1gwqTn1Irm7R3cnOh6/xbChMzQyZS33Va0X6fJbNOyv4LsQybX7jN5qcybifOB Jl+KAupbn+cXlKh9MlHIQe74MyUQmQvDjG+Uo9P+xYT983wCbn1ouZkBfxN2nmAw tYWjMzoCQzKUBLU0BzWrQDjk7KpobvhMy000KJR4xeolI+7rHrBj+E6MEErECkxy klCfrfrEmuVMnawQ6rKOErjylOKhjJf0LZ1o9UaiJKBxzglH5AyxDCJp/EqwNMkS fOW9SBdj0pb9oU9+MZzeXRsZsQhr6/Ph -----END CERTIFICATE-----Generated at Fri May 31 22:13:02 2024 by rpki-client on console-fra.rpki-client.org