$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: vJJobWXlYJG1lpPcTeBIrNsyqD3/Vyv353hk0VWZ0w4= Subject key identifier: 37:E5:E1:EE:6C:FA:FD:FC:54:C1:5C:DD:0C:25:5D:79:BE:FC:19:21 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0A7D Signing time: Sat 18 May 2024 20:15:56 +0000 Manifest this update: Sat 18 May 2024 20:15:55 +0000 Manifest next update: Sat 25 May 2024 20:15:55 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: iRV38o8fs0qeimefcHkw6w1iKgpTyGvPJToM9P6Dbdo=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: paapjxPleKLebHDMRnmQwPcu9J7d7Sr7UlJFEzedjKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: May 18 20:15:55 2024 GMT Not After : May 25 20:15:55 2024 GMT Subject: CN=66490c7b-4eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:b2:68:19:60:78:45:6e:eb:97:4d:7d:21: dd:72:db:70:33:ee:25:32:c6:4f:36:f6:38:2e:64: 7a:15:39:9c:64:b9:8b:b6:6b:ee:0d:5e:7b:38:fe: ee:74:89:d4:2d:d8:a9:9b:25:eb:ef:19:ba:84:b8: 1f:3f:6f:c6:4d:ec:1a:4e:4b:c8:e5:87:19:92:e9: 05:59:68:cd:45:a1:53:5b:64:2c:32:d8:60:84:1d: ad:40:91:98:d7:5c:f4:72:e6:6d:0b:e8:5b:cb:bd: 28:f6:4f:dd:b9:a8:d8:44:a5:b9:ab:00:46:32:0f: 9f:29:a8:6b:d6:de:0b:06:0b:ba:8e:5b:3e:97:2f: 88:ee:53:4b:6c:72:47:3d:d2:fc:1e:bc:2d:e6:fd: 1e:ef:9d:fb:0d:69:dc:05:63:ce:4a:1b:91:29:bd: 94:6b:9b:b2:ea:a5:76:a6:bd:a7:ca:e6:01:cb:a4: 7b:2c:a1:16:37:0c:39:4d:e6:eb:0e:6e:a4:17:db: c6:33:b8:90:b4:c9:3e:ee:17:d8:71:3a:98:1b:1c: 32:74:7f:72:50:5a:b5:bd:36:a6:8d:ae:a6:a6:2f: 40:db:79:52:ee:16:c6:48:9a:14:93:2c:a7:3a:04: 56:f7:8b:57:2d:ad:45:d5:f1:67:a7:88:83:86:08: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E5:E1:EE:6C:FA:FD:FC:54:C1:5C:DD:0C:25:5D:79:BE:FC:19:21 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:30:e1:be:29:71:0d:28:94:be:84:b0:df:2a:6b:61:8d: 85:77:b3:87:89:78:80:1c:06:04:5e:f5:12:01:f5:58:6b:37: 84:7b:da:05:86:d1:98:81:f1:5e:f0:12:2b:b3:80:78:70:40: 19:f8:10:6a:53:15:32:49:a1:3b:a1:c5:ba:14:0a:48:73:25: 6d:a7:f2:b2:91:04:bc:1c:5e:d3:4b:ce:fe:d6:33:e3:ac:91: 80:93:ff:00:75:de:56:83:45:f4:2a:35:fa:81:7c:57:54:8f: 27:48:66:6a:08:70:45:38:03:db:71:3a:8d:6e:39:b3:9f:55: 4a:67:f6:c4:c3:72:10:5e:2d:c7:82:00:29:5b:6b:6f:33:e5: 2e:d5:33:57:7e:68:b4:38:ad:2d:c2:f0:70:06:bf:33:08:7c: 9c:1f:c9:49:8c:eb:ba:fc:ad:8a:73:9c:1a:f6:e8:04:92:85: 85:27:3a:ec:9c:0f:92:62:ce:48:de:5c:05:ee:73:87:58:d7: 62:f8:2c:01:b6:4e:ab:cc:8a:f0:8e:b8:3e:e4:1e:e9:3f:de: 8c:9d:3e:ca:13:b2:fa:88:8b:3d:fb:9d:c6:2a:06:96:7e:70: 47:27:68:86:82:67:75:94:96:5c:61:26:c8:21:4e:11:c9:74: 75:ad:34:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjQwNTE4MjAxNTU1WhcNMjQwNTI1MjAxNTU1WjAYMRYwFAYD VQQDEw02NjQ5MGM3Yi00ZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylOyaBlgeEVu65dNfSHdcttwM+4lMsZPNvY4LmR6FTmcZLmLtmvuDV57OP7u dInULdipmyXr7xm6hLgfP2/GTewaTkvI5YcZkukFWWjNRaFTW2QsMthghB2tQJGY 11z0cuZtC+hby70o9k/duajYRKW5qwBGMg+fKahr1t4LBgu6jls+ly+I7lNLbHJH PdL8Hrwt5v0e7537DWncBWPOShuRKb2Ua5uy6qV2pr2nyuYBy6R7LKEWNww5Tebr Dm6kF9vGM7iQtMk+7hfYcTqYGxwydH9yUFq1vTamja6mpi9A23lS7hbGSJoUkyyn OgRW94tXLa1F1fFnp4iDhgjHjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfl4e5s +v38VMFc3QwlXXm+/BkhMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbsTDhvilxDSiUvoSw3yprYY2Fd7OHiXiAHAYEXvUSAfVYazeEe9oF htGYgfFe8BIrs4B4cEAZ+BBqUxUySaE7ocW6FApIcyVtp/KykQS8HF7TS87+1jPj rJGAk/8Add5Wg0X0KjX6gXxXVI8nSGZqCHBFOAPbcTqNbjmzn1VKZ/bEw3IQXi3H ggApW2tvM+Uu1TNXfmi0OK0twvBwBr8zCHycH8lJjOu6/K2Kc5wa9ugEkoWFJzrs nA+SYs5I3lwF7nOHWNdi+CwBtk6rzIrwjrg+5B7pP96MnT7KE7L6iIs9+53GKgaW fnBHJ2iGgmd1lJZcYSbIIU4RyXR1rTSw -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org