$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft File: 6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json) Hash identifier: mrxrfGvFljp8cKVAqqcgjc8Kr4XTWQCSXF9bMfTIdNg= Subject key identifier: D9:69:08:A0:94:A7:27:CC:18:6C:48:CF:13:CD:6D:CB:7D:6D:83:2A Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft Manifest number: 5D Signing time: Fri 31 May 2024 08:38:02 +0000 Manifest this update: Fri 31 May 2024 08:38:02 +0000 Manifest next update: Fri 07 Jun 2024 08:38:01 +0000 Files and hashes: 1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: zZjbyJLGDzxcJbQm399f1l+lPE8FpOGOVDxwQt4Az+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Validity Not Before: May 31 08:38:02 2024 GMT Not After : Jun 7 08:38:01 2024 GMT Subject: CN=66598c6a-53c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:a4:5c:d8:27:4f:65:7c:a4:e3:bd:d6:3b: 46:6c:5a:b6:c3:f0:e9:e1:68:8d:ff:4f:59:83:f9: af:df:59:d7:df:c7:58:5a:4f:69:2a:89:61:01:0f: 7f:67:69:72:da:d0:d0:f5:a7:c9:d3:d0:ae:f3:3a: 08:20:92:70:7b:ba:83:4f:3e:9e:99:32:42:ba:7a: 88:0d:36:46:83:aa:b5:43:97:50:09:6a:1a:52:9a: e4:94:28:f1:16:79:c2:bb:1a:ae:f3:12:c3:f3:65: 6d:ec:68:bf:39:c0:4c:d5:ab:9d:a3:7f:2e:66:55: ee:9d:7b:d8:80:d6:4e:86:36:87:f1:80:92:d8:6f: 1e:92:5f:98:7b:cd:94:4e:db:f4:42:81:a2:b5:8f: 29:18:df:8a:15:b1:e2:cc:95:98:73:4a:c9:ea:f2: 06:5d:5a:65:8b:f3:5f:0e:6d:ce:4a:e7:35:d4:ba: d6:c7:03:52:0b:24:f7:d2:18:f2:1e:d6:f2:87:1d: ae:66:84:d1:b3:db:25:93:9c:8f:a3:28:79:42:66: e4:c2:74:89:cc:69:04:e4:a5:f8:e7:f0:e8:79:2a: 00:4a:be:c8:35:4c:23:fd:fe:ac:5d:9a:fe:30:19: 7c:06:34:e1:06:03:4a:11:26:93:88:ab:2d:39:02: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:69:08:A0:94:A7:27:CC:18:6C:48:CF:13:CD:6D:CB:7D:6D:83:2A X509v3 Authority Key Identifier: keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:44:2d:98:26:d5:2c:1c:cf:43:f5:3b:7d:bc:a0:5f:8d:7e: 0c:42:9a:34:15:23:56:e2:b8:7b:96:cb:a8:a4:4c:57:47:22: e3:fd:55:63:07:10:ac:93:01:94:1f:a6:06:2b:45:78:01:2a: 88:1f:72:9f:a9:72:32:32:04:67:7f:3a:7e:9c:7f:e9:f9:d8: c7:95:9d:06:5d:20:3e:51:cb:42:4d:a0:d2:1e:db:9a:5a:68: c7:0c:11:f6:cf:ed:6d:be:d1:55:a4:35:dd:13:da:ff:0d:23: 22:93:e5:4d:6f:76:4d:e3:d0:21:33:65:b2:02:51:37:f0:a2: da:de:9b:15:95:b7:05:37:39:e2:9b:88:1f:1c:2e:4e:69:89: 75:83:ca:10:6f:36:d5:1f:27:f9:fd:ff:10:c1:aa:99:c6:91: 29:21:5c:1d:46:03:da:2f:05:21:ab:1f:14:1e:26:0e:fa:39: f5:87:a4:09:1c:ad:dc:a4:fd:b8:8b:76:36:63:85:89:64:99: a0:30:a2:d8:16:a6:04:5d:8e:57:44:53:25:b4:e3:a3:13:ee: 78:4a:91:70:59:e7:38:84:f5:4d:8c:c6:48:df:39:db:08:32: 71:9c:f0:54:c1:ec:d2:98:6b:7b:f9:ab:90:2d:3d:37:b2:72: 55:ac:d0:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzBERTExMC8GA1UEBRMoRUFFMkJDRTgzNUU0MkIxMTVGMThCM0ZFMEU4RjI3Rjg0 QTQ3NDk5NjAeFw0yNDA1MzEwODM4MDJaFw0yNDA2MDcwODM4MDFaMBgxFjAUBgNV BAMTDTY2NTk4YzZhLTUzYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCliqRc2CdPZXyk473WO0ZsWrbD8OnhaI3/T1mD+a/fWdffx1haT2kqiWEBD39n aXLa0ND1p8nT0K7zOgggknB7uoNPPp6ZMkK6eogNNkaDqrVDl1AJahpSmuSUKPEW ecK7Gq7zEsPzZW3saL85wEzVq52jfy5mVe6de9iA1k6GNofxgJLYbx6SX5h7zZRO 2/RCgaK1jykY34oVseLMlZhzSsnq8gZdWmWL818Obc5K5zXUutbHA1ILJPfSGPIe 1vKHHa5mhNGz2yWTnI+jKHlCZuTCdInMaQTkpfjn8Oh5KgBKvsg1TCP9/qxdmv4w GXwGNOEGA0oRJpOIqy05Ak1LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2WkIoJSn J8wYbEjPE81ty31tgyowHwYDVR0jBBgwFoAU6uK86DXkKxFfGLP+Do8n+EpHSZYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDMERFL0U0NzQ0M0Q2OEZF RTExRUU5MDM4OUUxQ0M0RjlBRTAyLzZ1Szg2RFhrS3hGZkdMUC1EbzhuLUVwSFNa WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnVLODZEWGtLeEZmR0xQLURvOG4tRXBIU1pZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD MERFL0U0NzQ0M0Q2OEZFRTExRUU5MDM4OUUxQ0M0RjlBRTAyLzZ1Szg2RFhrS3hG ZkdMUC1EbzhuLUVwSFNaWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEVELZgm1Swcz0P1O328oF+NfgxCmjQVI1biuHuWy6ikTFdHIuP9VWMH EKyTAZQfpgYrRXgBKogfcp+pcjIyBGd/On6cf+n52MeVnQZdID5Ry0JNoNIe25pa aMcMEfbP7W2+0VWkNd0T2v8NIyKT5U1vdk3j0CEzZbICUTfwotremxWVtwU3OeKb iB8cLk5piXWDyhBvNtUfJ/n9/xDBqpnGkSkhXB1GA9ovBSGrHxQeJg76OfWHpAkc rdyk/biLdjZjhYlkmaAwotgWpgRdjldEUyW046MT7nhKkXBZ5ziE9U2MxkjfOdsI MnGc8FTB7NKYa3v5q5AtPTeyclWs0MY= -----END CERTIFICATE-----Generated at Fri May 31 10:01:39 2024 by rpki-client on console-ams.rpki-client.org