$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: J7p1ENsGoJ9NFeEUhHos1Mu6dPc9bYFjCAp+E7jabkI= Subject key identifier: FD:2C:72:D7:D9:F5:4D:00:2F:CF:4A:04:F3:08:BB:72:4F:2C:32:0C Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 293A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 292D Signing time: Sat 18 May 2024 14:21:32 +0000 Manifest this update: Sat 18 May 2024 14:21:32 +0000 Manifest next update: Sat 25 May 2024 14:21:32 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: 51oAMJKF8XC8SSLLhk54cbtDeySFJj0ieBgsfxL3Gu4=) 2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: /HPPmmFykZW5v3XdGcZXXi6wBnasoJsG4/b4AV7xkYs=) 3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: RueahHW0YYQICZr1Iyrl4vDSbOuoH/cPEdDeupB9ebc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10554 (0x293a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: May 18 14:21:32 2024 GMT Not After : May 25 14:21:32 2024 GMT Subject: CN=6648b96c-8d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:88:99:b8:77:4a:90:41:ec:a3:1f:ae:2a: e1:54:a5:ad:28:0a:10:e5:2b:cf:2b:37:a7:fb:a8: 2a:71:6c:c4:fa:c2:98:e4:b9:42:52:db:33:79:3e: 1d:a1:11:7e:99:aa:68:1d:37:22:ba:4d:41:b1:fd: a1:be:9d:51:03:01:95:0f:ea:a8:8d:3d:4d:77:5e: 51:85:b3:e4:d6:04:c9:bb:54:c0:3f:c0:f3:08:64: 9c:4c:cf:ac:b4:c0:ff:85:70:aa:5d:1d:bc:d5:8c: 37:28:b6:be:58:77:36:bd:1d:f0:57:1e:ee:d9:a5: f1:75:41:f2:e7:36:da:29:48:ba:04:ae:e8:d8:1c: 9a:31:52:d6:de:7c:06:be:a3:5e:00:9d:e7:ee:27: 36:2b:f9:6e:ac:e9:1c:82:0b:99:1c:6c:f5:75:8b: d8:dd:48:41:d6:ce:9b:35:50:64:1d:f0:19:a5:c3: c0:75:5d:21:1f:71:86:a6:ef:76:4f:74:59:b3:51: fe:10:49:75:fb:cd:01:1f:79:8f:2b:d6:d8:8d:64: 92:9a:89:c1:b6:bb:92:82:31:4b:a8:c3:b6:e2:6d: 52:2a:ca:31:84:c9:8e:e8:35:c0:9f:25:1a:92:35: ce:b6:67:01:fe:ef:0d:83:10:bd:b4:f2:b7:4b:14: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:72:D7:D9:F5:4D:00:2F:CF:4A:04:F3:08:BB:72:4F:2C:32:0C X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2a:db:ab:99:e8:87:93:d6:85:48:f1:79:b3:56:47:66:da: 7b:08:b1:5c:68:f0:3a:c9:b2:d7:01:23:8a:5f:70:7f:72:d0: e8:e1:1c:10:90:00:fb:e1:c4:51:f7:b3:22:d7:60:3c:08:b8: 52:b8:5b:a7:16:77:8b:e2:04:03:3e:68:81:54:da:1b:3a:6d: 6b:8c:f9:8e:a8:1c:51:7a:37:a2:d1:a8:3a:d0:c9:41:a6:f5: 31:5e:c6:29:2e:a9:40:1c:ff:d5:cc:75:d3:07:60:f0:56:ba: cf:ae:8b:eb:fb:af:a7:85:74:8c:4f:11:27:d4:c2:81:f9:a2: 0d:8c:61:08:a9:c9:9b:e2:d8:2f:90:12:2a:f6:04:b1:1f:80: 34:55:a6:1d:24:6b:2b:cd:79:e9:e0:ca:96:53:a6:9a:d8:4b: a9:f3:10:75:19:35:ce:c5:06:98:82:04:51:e5:fd:06:dd:a9: 8e:61:c8:ee:0f:83:4a:3d:47:9d:55:c5:59:e0:3f:f9:62:99: 8b:9e:83:6c:47:51:2a:c9:38:c8:cd:2f:2b:18:0d:36:29:d0: 1e:e4:0e:4a:92:72:36:24:6c:58:4d:a2:45:fd:d7:3f:8e:4c: 69:53:82:08:75:75:5a:26:43:37:61:9c:b3:38:71:92:18:23: 48:95:7f:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjQwNTE4MTQyMTMyWhcNMjQwNTI1MTQyMTMyWjAYMRYwFAYD VQQDEw02NjQ4Yjk2Yy04ZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxeImbh3SpBB7KMfrirhVKWtKAoQ5SvPKzen+6gqcWzE+sKY5LlCUtszeT4d oRF+mapoHTciuk1Bsf2hvp1RAwGVD+qojT1Nd15RhbPk1gTJu1TAP8DzCGScTM+s tMD/hXCqXR281Yw3KLa+WHc2vR3wVx7u2aXxdUHy5zbaKUi6BK7o2ByaMVLW3nwG vqNeAJ3n7ic2K/lurOkcgguZHGz1dYvY3UhB1s6bNVBkHfAZpcPAdV0hH3GGpu92 T3RZs1H+EEl1+80BH3mPK9bYjWSSmonBtruSgjFLqMO24m1SKsoxhMmO6DXAnyUa kjXOtmcB/u8NgxC9tPK3SxRmzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0sctfZ 9U0AL89KBPMIu3JPLDIMMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtKturmeiHk9aFSPF5s1ZHZtp7CLFcaPA6ybLXASOKX3B/ctDo4RwQ kAD74cRR97Mi12A8CLhSuFunFneL4gQDPmiBVNobOm1rjPmOqBxRejei0ag60MlB pvUxXsYpLqlAHP/VzHXTB2DwVrrProvr+6+nhXSMTxEn1MKB+aINjGEIqcmb4tgv kBIq9gSxH4A0VaYdJGsrzXnp4MqWU6aa2Eup8xB1GTXOxQaYggRR5f0G3amOYcju D4NKPUedVcVZ4D/5YpmLnoNsR1EqyTjIzS8rGA02KdAe5A5KknI2JGxYTaJF/dc/ jkxpU4IIdXVaJkM3YZyzOHGSGCNIlX/a -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org