$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft File: 6w67ZlG90AYnOWdC_xoLTqD94uU.mft (raw, json) Hash identifier: fdjWaWM98yG9Dtvj/D3ENvsBjF4hpHQTlsO00mXxCek= Subject key identifier: 2C:C8:FC:86:CB:12:CD:1C:BE:54:21:DE:EB:B5:AC:98:F0:0F:5B:22 Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5 Certificate issuer: /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5 Certificate serial: 17EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft Manifest number: 17E1 Signing time: Sat 18 May 2024 16:58:47 +0000 Manifest this update: Sat 18 May 2024 16:58:47 +0000 Manifest next update: Sat 25 May 2024 16:58:47 +0000 Files and hashes: 1: 6w67ZlG90AYnOWdC_xoLTqD94uU.crl (hash: KwRepg5WipwsK7yYFMFdUDby9eUrAsmNTXPf/7/284o=) 2: C00CB30A87A711EA94E5CF22C4F9AE02.roa (hash: H7UiCPtCv14knct6AsSW1QeCOme/Hfazm/MFSslpfgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6126 (0x17ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5 Validity Not Before: May 18 16:58:47 2024 GMT Not After : May 25 16:58:47 2024 GMT Subject: CN=6648de47-b591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:f4:04:48:6d:61:ea:04:83:38:ba:b7:61: 43:98:83:6e:d0:94:03:04:86:ba:01:41:80:4c:1f: 85:e5:f5:4f:9a:ce:ac:52:7d:84:1c:17:7d:45:f6: ce:a5:5b:46:14:f9:a9:2b:8a:2c:da:ef:38:5f:8e: a3:c2:6c:49:21:2f:ee:10:68:71:49:bc:c2:1f:27: 2a:4f:a2:98:a1:c2:68:49:2b:5f:d7:2a:0e:b7:84: a9:df:d3:ff:02:80:66:54:4b:ae:17:69:84:67:d7: 5d:cf:65:3f:06:d9:05:16:d2:09:7c:45:f2:6b:ba: 50:ff:34:09:10:ec:81:7e:dd:24:b8:21:c1:95:8e: 9d:60:fe:c0:04:53:08:b5:f1:fc:83:f3:9e:e3:23: 34:75:99:7d:25:3e:d0:52:2c:76:61:1e:0b:8b:57: 7f:aa:ad:01:b4:89:5e:d4:2b:ea:72:20:18:67:5b: de:ab:2f:cc:3a:9e:20:59:2e:b0:ca:b4:55:9c:0d: 39:d0:c3:ba:88:bb:34:7b:3d:5a:f6:a9:7c:06:60: d8:a9:9f:d0:88:f4:03:2f:ec:23:11:f6:b1:d4:ab: df:6d:bc:c2:45:0f:c5:cc:d5:c8:d0:12:2e:d7:07: dc:8f:93:24:ea:30:1d:67:db:f6:fd:f3:a0:4d:af: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C8:FC:86:CB:12:CD:1C:BE:54:21:DE:EB:B5:AC:98:F0:0F:5B:22 X509v3 Authority Key Identifier: keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:03:0b:f4:a2:ae:61:51:ca:87:d2:c8:57:67:99:be:00:30: a6:7c:fd:a8:59:98:ea:0c:45:c8:40:0b:51:b3:47:62:65:41: 02:28:33:a2:02:86:13:af:a5:48:3e:9c:e2:5e:9c:ec:ce:b6: 27:51:9b:51:7b:fb:b6:e8:96:ba:7e:ff:05:ec:a1:c7:a8:06: 11:5d:06:8a:b8:bf:3b:23:01:52:dc:60:91:de:e7:86:1f:ea: 89:67:a6:a2:7f:de:c4:3d:fa:3f:c1:55:63:e8:1d:0d:82:c9: 24:9a:32:94:b9:76:23:1f:c5:ca:e9:a8:be:41:c8:e1:67:a7: 6a:ff:1b:b0:b1:01:7f:c4:bc:60:6d:4d:de:16:e7:68:57:ed: 39:3e:59:c7:5e:7c:26:be:3e:90:d5:b5:72:7e:6c:e1:af:4f: 6b:c2:8f:42:4d:9f:5d:8f:ca:65:f0:9b:58:98:0f:ef:cc:37: 6e:03:73:c7:d4:ee:2c:70:4e:a3:e4:e3:0a:c6:f2:31:e8:86: 3e:29:82:b3:9e:8c:25:90:09:4b:3a:e6:f6:b8:89:97:a9:56: 2d:3e:5e:3e:6d:5c:32:77:6d:26:fb:63:b8:45:de:a4:c2:82: 69:cb:cb:26:b3:62:cb:6d:bc:d0:92:db:02:9a:42:41:91:ec: 18:a4:d3:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U1MDQxMTAvBgNVBAUTKEVCMEVCQjY2NTFCREQwMDYyNzM5Njc0MkZGMUEwQjRF QTBGREUyRTUwHhcNMjQwNTE4MTY1ODQ3WhcNMjQwNTI1MTY1ODQ3WjAYMRYwFAYD VQQDEw02NjQ4ZGU0Ny1iNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywL0BEhtYeoEgzi6t2FDmINu0JQDBIa6AUGATB+F5fVPms6sUn2EHBd9RfbO pVtGFPmpK4os2u84X46jwmxJIS/uEGhxSbzCHycqT6KYocJoSStf1yoOt4Sp39P/ AoBmVEuuF2mEZ9ddz2U/BtkFFtIJfEXya7pQ/zQJEOyBft0kuCHBlY6dYP7ABFMI tfH8g/Oe4yM0dZl9JT7QUix2YR4Li1d/qq0BtIle1CvqciAYZ1veqy/MOp4gWS6w yrRVnA050MO6iLs0ez1a9ql8BmDYqZ/QiPQDL+wjEfax1KvfbbzCRQ/FzNXI0BIu 1wfcj5Mk6jAdZ9v2/fOgTa8/jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzI/IbL Es0cvlQh3uu1rJjwD1siMB8GA1UdIwQYMBaAFOsOu2ZRvdAGJzlnQv8aC06g/eLl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTUwNC9BMDhBMkM3Njk4 M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxHOTBBWW5PV2RDX3hvTFRxRDk0 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3NjdabEc5MEFZbk9XZENfeG9MVHFEOTR1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTUwNC9BMDhBMkM3Njk4M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxHOTBB WW5PV2RDX3hvTFRxRDk0dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJAwv0oq5hUcqH0shXZ5m+ADCmfP2oWZjqDEXIQAtRs0diZUECKDOi AoYTr6VIPpziXpzszrYnUZtRe/u26Ja6fv8F7KHHqAYRXQaKuL87IwFS3GCR3ueG H+qJZ6aif97EPfo/wVVj6B0NgskkmjKUuXYjH8XK6ai+QcjhZ6dq/xuwsQF/xLxg bU3eFudoV+05PlnHXnwmvj6Q1bVyfmzhr09rwo9CTZ9dj8pl8JtYmA/vzDduA3PH 1O4scE6j5OMKxvIx6IY+KYKznowlkAlLOub2uImXqVYtPl4+bVwyd20m+2O4Rd6k woJpy8sms2LLbbzQktsCmkJBkewYpNNg -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org