$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft File: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json) Hash identifier: L9kcyktzVIHvoQIGJ1izySvPSxuhzkhUytx3/4V7LOE= Subject key identifier: 6C:85:F1:10:07:F3:54:30:A6:69:90:0D:BA:A5:E1:D9:31:96:34:39 Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Certificate serial: 0BBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft Manifest number: 0BAB Signing time: Sat 18 May 2024 19:13:43 +0000 Manifest this update: Sat 18 May 2024 19:13:42 +0000 Manifest next update: Sat 25 May 2024 19:13:42 +0000 Files and hashes: 1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: xdLWafgQhAQYH7a6ysFu/G2yNzfHgWjTjjX9q4ubqbA=) 2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: 8PHVn9If1KaSC8nCoYiajJsQR/OPEgCtjcjWuxfQRCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3007 (0xbbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Validity Not Before: May 18 19:13:42 2024 GMT Not After : May 25 19:13:42 2024 GMT Subject: CN=6648fde7-20ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ea:1e:95:c1:43:61:a3:cf:30:f1:80:9a:d1: 3c:05:70:8b:43:86:d2:49:79:c7:e9:b0:d2:cc:1c: 65:12:ce:5c:03:24:7b:55:a2:70:be:eb:31:20:a8: 83:5d:4e:2f:7f:9c:f8:08:79:41:5e:8c:1b:14:4a: 90:1f:02:64:a6:85:f0:69:ed:90:f0:f5:b6:a5:ee: 9a:cc:58:d3:85:49:7d:d6:20:36:cf:a8:7a:dc:ff: ed:72:ac:1a:12:ae:d1:97:dd:ab:62:d8:23:1e:40: 02:60:73:f5:2c:39:6a:ad:ef:80:eb:61:25:cd:bb: 93:b9:8f:ee:d6:0a:0b:70:dc:4c:51:26:b1:b8:c9: f8:a2:3c:44:d3:bf:59:be:5b:e6:ab:07:32:06:05: e6:0f:81:75:db:b6:a9:0e:83:c1:9f:7d:02:74:7e: d2:22:94:ab:77:6d:e1:e2:4d:16:38:d4:3c:7e:0a: 3e:7a:9c:e9:ed:c9:31:d2:d6:0d:94:80:26:3a:82: ac:67:4a:4a:c9:a1:e6:b1:a7:76:47:f0:29:1b:fd: 60:31:7e:6f:19:5b:77:46:ab:25:2e:94:99:d5:a8: 2e:f4:41:02:2b:91:49:4c:7b:23:6d:39:d3:29:52: 53:ab:bb:ba:b1:2d:06:ab:fd:95:d2:94:bd:df:55: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:85:F1:10:07:F3:54:30:A6:69:90:0D:BA:A5:E1:D9:31:96:34:39 X509v3 Authority Key Identifier: keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:6e:98:e0:fd:93:1c:ab:e0:44:db:1e:64:f0:ae:bd:9c:41: 1a:67:c8:f0:79:58:93:f6:7f:6e:ed:e5:51:09:8b:bc:bd:09: 3c:f8:20:4d:9b:2f:02:54:54:8a:3f:44:6d:b2:ec:7d:49:0f: bd:07:bb:9a:61:6e:9d:d7:d1:5b:d9:03:49:bc:b4:22:46:6e: ad:f4:38:15:0a:82:e6:90:2e:0b:73:66:77:b9:11:6e:12:3b: f6:99:38:ad:31:09:f8:44:02:37:71:e7:cc:3c:d8:37:38:59: 87:e3:36:d8:35:7a:a4:6d:65:49:41:4c:90:8d:95:26:13:83: 2a:97:73:a8:64:bd:4d:4e:96:7b:c9:83:65:d4:5f:2f:95:ff: ac:43:44:dd:05:2f:64:d3:bd:f3:77:31:9f:d5:4a:01:e2:32: 7b:d5:60:39:6f:02:a6:a1:2d:29:5b:e8:6e:65:41:13:42:df: b9:19:1e:1e:9f:2c:6f:35:d5:eb:29:32:7f:1c:6f:97:36:5f: 2f:98:3e:9b:c2:7f:28:04:c5:27:67:a6:88:df:fc:0f:d7:92: 48:b5:14:28:b6:bd:a3:87:13:fe:0e:76:07:5e:e5:71:c8:d6: 16:bf:bc:db:82:16:60:65:43:39:e8:c3:5c:56:b0:04:73:f6: 86:cd:ac:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ1QzExMTAvBgNVBAUTKEU4MkQxMEQyREExQzk4QkY2OENBNEM2NDkxQjkwRkZE MEZBQjMzOTQwHhcNMjQwNTE4MTkxMzQyWhcNMjQwNTI1MTkxMzQyWjAYMRYwFAYD VQQDEw02NjQ4ZmRlNy0yMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eoelcFDYaPPMPGAmtE8BXCLQ4bSSXnH6bDSzBxlEs5cAyR7VaJwvusxIKiD XU4vf5z4CHlBXowbFEqQHwJkpoXwae2Q8PW2pe6azFjThUl91iA2z6h63P/tcqwa Eq7Rl92rYtgjHkACYHP1LDlqre+A62ElzbuTuY/u1goLcNxMUSaxuMn4ojxE079Z vlvmqwcyBgXmD4F127apDoPBn30CdH7SIpSrd23h4k0WONQ8fgo+epzp7ckx0tYN lIAmOoKsZ0pKyaHmsad2R/ApG/1gMX5vGVt3RqslLpSZ1agu9EECK5FJTHsjbTnT KVJTq7u6sS0Gq/2V0pS931WGdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyF8RAH 81QwpmmQDbql4dkxljQ5MB8GA1UdIwQYMBaAFOgtENLaHJi/aMpMZJG5D/0PqzOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDVDMS9CMDdEQ0I0NEZG Q0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21MOW95a3hra2JrUF9RLXJN NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZDMFEwdG9jbUw5b3lreGtrYmtQX1Etck01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDVDMS9CMDdEQ0I0NEZGQ0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21M OW95a3hra2JrUF9RLXJNNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEbpjg/ZMcq+BE2x5k8K69nEEaZ8jweViT9n9u7eVRCYu8vQk8+CBN my8CVFSKP0Rtsux9SQ+9B7uaYW6d19Fb2QNJvLQiRm6t9DgVCoLmkC4Lc2Z3uRFu Ejv2mTitMQn4RAI3cefMPNg3OFmH4zbYNXqkbWVJQUyQjZUmE4Mql3OoZL1NTpZ7 yYNl1F8vlf+sQ0TdBS9k073zdzGf1UoB4jJ71WA5bwKmoS0pW+huZUETQt+5GR4e nyxvNdXrKTJ/HG+XNl8vmD6bwn8oBMUnZ6aI3/wP15JItRQotr2jhxP+DnYHXuVx yNYWv7zbghZgZUM56MNcVrAEc/aGzazN -----END CERTIFICATE-----Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org