$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json) Hash identifier: rWMCMRlr6YArtEa5T1/3MNmTdIXYOKoleOkUFL7LI4Q= Subject key identifier: E0:7F:CE:4F:F8:42:51:95:6F:2A:46:55:47:CE:CE:D2:52:F9:20:A4 Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft Manifest number: 047C Signing time: Sat 01 Jun 2024 02:41:26 +0000 Manifest this update: Sat 01 Jun 2024 02:41:25 +0000 Manifest next update: Sat 08 Jun 2024 02:41:25 +0000 Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: pFfPkfMhJeRjuXuE6JKPU9Tq094HUd10/yHAj0EvCKI=) 2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: +yQIyhf/TyYpDcf0R24C9WjNNq39cWlJNp6OClFEIoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: Jun 1 02:41:25 2024 GMT Not After : Jun 8 02:41:25 2024 GMT Subject: CN=665a8a55-dac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:50:8e:78:bb:e3:ee:f4:fe:22:8d:d9:73: 2f:be:7c:f7:fc:24:f9:b9:0e:13:4b:1b:77:8b:12: e0:e4:7d:f6:bd:49:5c:ce:45:40:d3:2e:ce:b2:a7: 3e:fd:a4:50:64:f3:58:dc:98:23:d7:6e:97:2c:fc: 15:ef:11:2e:dc:4b:01:d4:df:36:eb:59:4c:f4:b5: 08:7d:f9:ad:59:12:0f:9c:71:c3:75:f2:a2:c6:24: 49:fe:23:da:37:74:3e:e3:c5:f9:55:73:c4:68:fe: 12:52:16:47:96:95:a4:3c:ed:69:ef:64:83:3b:b5: ed:17:6d:a5:0e:87:8b:cb:63:ab:9a:2b:14:92:78: 21:b5:22:e0:49:9b:7e:9b:e1:9b:2b:13:9a:56:a0: 49:e7:f1:7f:69:d8:b1:29:cd:53:21:0f:29:55:b7: ed:ce:62:4a:b7:90:82:4c:10:cb:db:b2:c8:c0:ff: d3:9f:de:bc:a3:4d:59:e3:3a:74:1d:a6:f5:6b:e3: ad:bd:69:d0:5e:6c:56:cf:ea:64:fd:ea:19:f0:03: 64:4f:45:51:bc:78:ab:60:2d:c0:79:97:b2:13:48: a5:26:a9:90:ef:76:e7:58:53:32:1c:6e:cb:d9:4a: c9:41:da:60:bd:4e:7e:74:7f:35:f7:bd:b9:f4:da: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7F:CE:4F:F8:42:51:95:6F:2A:46:55:47:CE:CE:D2:52:F9:20:A4 X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:48:21:31:b2:65:d9:fa:2f:76:a7:df:1a:46:76:b6:79:a8: 07:e4:cb:2a:31:30:c3:73:cc:b4:db:e6:46:30:f7:9f:77:b8: 92:38:b8:23:a5:b0:e0:00:0e:56:5b:d5:ee:c6:3a:94:80:75: 5b:08:19:11:bd:96:70:05:de:59:f4:ff:00:3b:a0:65:3c:a4: 06:a7:8f:26:a0:bf:14:b0:49:34:f7:3d:cd:16:67:9d:27:d4: 25:61:c8:fe:f6:20:a5:c5:4c:fc:c8:8b:7c:44:27:27:5d:c2: e1:6c:44:5b:31:cf:12:9b:27:02:c1:86:b9:bb:9b:be:d2:5d: 7e:34:14:73:5b:66:9c:78:d7:cc:26:6e:da:50:0d:ba:85:88: f4:e9:8d:87:bb:74:30:4d:05:52:60:4e:8e:8c:6e:f5:2a:0f: 82:8f:58:0c:0c:40:64:18:06:cd:4e:28:0b:ed:05:ee:b1:1e: b2:64:c0:75:e6:8e:ad:58:5c:3b:0f:48:85:96:f0:85:92:92: 45:93:1e:46:f0:fb:a8:95:21:4e:de:ce:32:76:bf:da:f5:a6: 14:94:94:96:9e:38:28:ba:fd:80:e7:6d:e5:27:f5:49:2b:cd: cf:5b:25:ec:28:f8:f8:c0:62:09:9b:06:3a:78:3a:ff:81:3b: 75:15:69:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjQwNjAxMDI0MTI1WhcNMjQwNjA4MDI0MTI1WjAYMRYwFAYD VQQDEw02NjVhOGE1NS1kYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI5Qjni74+70/iKN2XMvvnz3/CT5uQ4TSxt3ixLg5H32vUlczkVA0y7Osqc+ /aRQZPNY3Jgj126XLPwV7xEu3EsB1N8261lM9LUIffmtWRIPnHHDdfKixiRJ/iPa N3Q+48X5VXPEaP4SUhZHlpWkPO1p72SDO7XtF22lDoeLy2OrmisUknghtSLgSZt+ m+GbKxOaVqBJ5/F/adixKc1TIQ8pVbftzmJKt5CCTBDL27LIwP/Tn968o01Z4zp0 Hab1a+OtvWnQXmxWz+pk/eoZ8ANkT0VRvHirYC3AeZeyE0ilJqmQ73bnWFMyHG7L 2UrJQdpgvU5+dH8197259NrfYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB/zk/4 QlGVbypGVUfOztJS+SCkMB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0OC81MEVGRDg3NkY5RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNi bmtRemdsRGFQV1RZQm9lZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOSCExsmXZ+i92p98aRna2eagH5MsqMTDDc8y02+ZGMPefd7iSOLgj pbDgAA5WW9XuxjqUgHVbCBkRvZZwBd5Z9P8AO6BlPKQGp48moL8UsEk09z3NFmed J9QlYcj+9iClxUz8yIt8RCcnXcLhbERbMc8SmycCwYa5u5u+0l1+NBRzW2aceNfM Jm7aUA26hYj06Y2Hu3QwTQVSYE6OjG71Kg+Cj1gMDEBkGAbNTigL7QXusR6yZMB1 5o6tWFw7D0iFlvCFkpJFkx5G8PuolSFO3s4ydr/a9aYUlJSWnjgouv2A523lJ/VJ K83PWyXsKPj4wGIJmwY6eDr/gTt1FWmZ -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:23 2024 by rpki-client on console-ams.rpki-client.org