$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft File: x6CGcqgQDaMwwSIxURVYe-YRDfE.mft (raw, json) Hash identifier: 9IjmhPSgMFgzPMF/3bIK0KPTH4r586crkJeeJgRzl3A= Subject key identifier: 6C:9D:64:A5:1E:B0:04:73:63:A7:45:8C:80:CC:2E:8C:CA:5E:96:E0 Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft Manifest number: 0620 Signing time: Sat 18 May 2024 23:45:35 +0000 Manifest this update: Sat 18 May 2024 23:45:34 +0000 Manifest next update: Sat 25 May 2024 23:45:34 +0000 Files and hashes: 1: x6CGcqgQDaMwwSIxURVYe-YRDfE.crl (hash: E+noyG2DHuhYbpxA5HBBDv0qhSrKG545e4QGnUKG94o=) 2: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (hash: lGneckyUhTQuwYh6XGjp5LQ8QZF1NYFAjZHaCvuKpEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Validity Not Before: May 18 23:45:34 2024 GMT Not After : May 25 23:45:34 2024 GMT Subject: CN=66493d9e-0bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6c:b9:05:e0:44:f1:51:73:07:e5:3c:b3:25: d2:ae:52:0e:78:31:56:6e:da:f1:86:80:fc:b1:20: 18:38:d2:f9:f5:a4:49:17:3c:97:f5:a1:5f:7a:12: 42:ae:db:b2:03:a2:49:a4:d9:e4:f8:31:e5:b3:7e: e1:d1:25:a2:83:01:e4:af:d6:54:23:31:2c:45:ba: 34:1f:8d:45:03:1d:68:c8:fd:71:21:84:0f:35:09: 09:fd:4f:47:ed:39:ed:23:39:af:73:a5:6f:2c:91: 80:3c:7f:bc:82:b8:95:57:54:e2:96:0f:52:70:b1: 1d:c7:c9:c1:fd:93:82:7b:2b:c1:0c:b2:24:38:14: 1d:3f:38:93:87:67:a0:17:36:93:2c:f0:43:3d:f8: bf:0d:52:d9:4b:fb:a4:ce:bc:f0:44:f1:09:83:a1: b4:c9:f6:f9:94:d4:75:8a:ec:d2:51:af:77:a6:47: 29:7d:a6:46:fb:6a:e4:45:dd:f4:d5:ab:f7:8f:1e: 77:cf:34:c9:d5:05:9f:ef:d4:68:db:da:7b:67:57: 47:01:44:32:c1:f9:69:bb:e9:dd:ac:ff:57:37:d4: 6e:da:b0:d9:76:42:ad:35:6c:40:3f:54:2a:d5:7c: 4b:46:06:93:40:17:da:1d:f6:19:63:cc:1c:7c:76: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9D:64:A5:1E:B0:04:73:63:A7:45:8C:80:CC:2E:8C:CA:5E:96:E0 X509v3 Authority Key Identifier: keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:be:8b:0d:4c:9d:c2:bc:e4:ec:0d:bf:63:04:e4:61:40:89: 09:67:f4:6b:4c:04:7f:f4:cf:6f:7b:d7:9c:fa:ae:b8:70:ba: 86:b1:f8:3f:c9:7b:e0:a5:ad:6f:42:c5:ac:2a:97:5b:c5:6a: b8:e5:4f:f3:bd:7c:34:a5:ee:66:14:d4:cf:35:f2:87:e1:41: d4:d5:f1:c7:63:fe:82:a8:43:bd:e7:e6:34:27:b1:7f:11:6d: 45:e1:31:f3:3b:60:b7:d4:94:e4:58:97:9d:26:58:53:a4:8b: 59:bf:a5:b9:26:e8:fe:f0:fc:f8:67:72:75:60:52:fd:91:63: fa:e1:98:9b:39:87:1e:63:4f:10:40:6f:2d:a6:72:9a:b6:16: 31:20:2d:d7:71:74:d6:0b:1f:24:ba:47:9e:d2:f4:7d:41:fd: 49:13:08:e6:66:89:2b:78:f0:08:68:33:d3:ca:9b:54:16:9a: 5d:4d:35:56:17:e1:14:d4:c5:3a:42:30:eb:65:01:54:57:b9: 6b:d8:2f:d0:a9:ec:db:a9:3d:da:f1:c7:eb:11:d3:e2:c7:b7: e1:a0:ae:9a:3a:83:e7:17:8b:23:31:22:5c:d6:4c:56:9f:84: e2:cd:cb:c8:94:a7:73:67:05:f9:37:0a:1a:80:75:5d:d0:a1: f9:b0:90:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC RTYxMTBERjEwHhcNMjQwNTE4MjM0NTM0WhcNMjQwNTI1MjM0NTM0WjAYMRYwFAYD VQQDEw02NjQ5M2Q5ZS0wYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Wy5BeBE8VFzB+U8syXSrlIOeDFWbtrxhoD8sSAYONL59aRJFzyX9aFfehJC rtuyA6JJpNnk+DHls37h0SWigwHkr9ZUIzEsRbo0H41FAx1oyP1xIYQPNQkJ/U9H 7TntIzmvc6VvLJGAPH+8griVV1Tilg9ScLEdx8nB/ZOCeyvBDLIkOBQdPziTh2eg FzaTLPBDPfi/DVLZS/ukzrzwRPEJg6G0yfb5lNR1iuzSUa93pkcpfaZG+2rkRd30 1av3jx53zzTJ1QWf79Ro29p7Z1dHAUQywflpu+ndrP9XN9Ru2rDZdkKtNWxAP1Qq 1XxLRgaTQBfaHfYZY8wcfHbAZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGydZKUe sARzY6dFjIDMLozKXpbgMB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNBOS9FRUQ3NDhENjRGMTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURh TXd3U0l4VVJWWWUtWVJEZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvvosNTJ3CvOTsDb9jBORhQIkJZ/RrTAR/9M9ve9ec+q64cLqGsfg/ yXvgpa1vQsWsKpdbxWq45U/zvXw0pe5mFNTPNfKH4UHU1fHHY/6CqEO95+Y0J7F/ EW1F4THzO2C31JTkWJedJlhTpItZv6W5Juj+8Pz4Z3J1YFL9kWP64ZibOYceY08Q QG8tpnKathYxIC3XcXTWCx8kukee0vR9Qf1JEwjmZokrePAIaDPTyptUFppdTTVW F+EU1MU6QjDrZQFUV7lr2C/QqezbqT3a8cfrEdPix7fhoK6aOoPnF4sjMSJc1kxW n4TizcvIlKdzZwX5NwoagHVd0KH5sJDA -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org