$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft File: 6u5Zump8cEkFjFZZfMdFxh7FoKk.mft (raw, json) Hash identifier: sUiDtBYVhtKi+pHcRecsKZfFOuaO3zctSE9H0YVBc/o= Subject key identifier: D2:3E:48:98:D8:D2:3E:89:3B:B8:4A:FF:7C:C8:5B:C7:B5:1B:64:28 Authority key identifier: EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9 Certificate issuer: /CN=A914AD92/serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft Manifest number: 0342 Signing time: Sun 19 May 2024 03:33:56 +0000 Manifest this update: Sun 19 May 2024 03:33:56 +0000 Manifest next update: Sun 26 May 2024 03:33:56 +0000 Files and hashes: 1: 6u5Zump8cEkFjFZZfMdFxh7FoKk.crl (hash: Dxx1W+88RVkSvnk7TGnQlgkLxUCa0yYwld44HMPfDr4=) 2: F19BD82C46A011EE85BCFA3FC4F9AE02.roa (hash: ZOjRA4e8JF04vz5XfrfA+6zi4vKEjUsdc+KkK56wyTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AD92/serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9 Validity Not Before: May 19 03:33:56 2024 GMT Not After : May 26 03:33:56 2024 GMT Subject: CN=66497324-3cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:63:ab:06:09:c9:0e:07:31:4e:36:58:b5: 6e:3d:55:bc:02:0e:80:79:f6:57:7d:b1:6d:3c:3f: 94:83:4a:00:ab:ef:a0:8a:25:83:95:a7:9a:df:93: 0e:b7:3a:1a:57:bc:be:a1:e5:c6:45:04:56:c9:33: 3e:df:c4:a3:fb:09:08:e0:29:f2:0f:84:b8:a7:62: 0b:8e:ce:0b:f5:66:ab:6e:36:b3:ed:15:91:c2:e1: 64:42:29:fc:b7:07:82:2a:fe:a5:c7:f0:40:dd:2c: 76:40:b4:86:e4:42:e5:4c:1b:1c:e8:b3:37:06:1d: 0a:92:1c:a1:ca:38:fc:46:b2:f7:93:6b:bb:f3:48: 07:be:f6:0f:f2:0d:2a:d9:b5:d1:31:d5:85:04:aa: dd:da:04:39:ed:ce:85:44:c0:42:9d:25:da:2a:bb: 4e:db:80:ad:64:4d:cd:c9:83:d4:91:54:4d:74:3e: ce:a7:cf:0a:19:c5:36:8d:ad:28:f0:96:e3:21:58: f8:bd:8b:a7:1c:ad:c5:8e:1d:fd:31:96:1d:f2:33: 76:35:07:03:35:12:67:63:65:b3:a9:27:a3:90:0f: 89:bd:4a:3d:3e:9a:ae:7a:7d:1a:a8:99:0b:7f:77: a4:c1:db:20:8c:d9:b8:42:e6:5b:77:35:09:8d:b2: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3E:48:98:D8:D2:3E:89:3B:B8:4A:FF:7C:C8:5B:C7:B5:1B:64:28 X509v3 Authority Key Identifier: keyid:EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:01:e0:9b:85:4f:b3:d9:3e:7b:ba:f5:dc:7d:ed:0b:60:50: c5:17:55:e0:68:12:66:2d:3e:53:cb:fb:aa:71:2c:8f:17:0d: 4a:87:f9:fb:f4:b0:f6:ac:96:65:d8:be:06:45:9a:09:0e:86: 33:45:bd:c4:80:f1:00:0a:e5:5d:26:59:a6:fc:a9:89:41:05: a9:47:e8:8b:21:9d:e2:ce:5f:9f:09:a0:2f:dd:19:fb:39:ff: 28:ef:bd:94:e1:b3:25:0b:64:41:8b:f3:94:e3:b7:74:0d:d1: 86:a1:76:ae:5d:10:d8:38:f6:85:e0:05:e5:b1:dd:59:e7:18: 5d:96:7d:83:01:40:10:5d:96:b5:ce:6a:56:04:dc:ed:ba:72: 95:1b:d7:55:b6:2b:ea:1e:bb:b4:7f:99:cf:5b:cd:5e:64:9b: a6:b0:2f:50:a2:48:57:19:cd:ec:9e:75:a2:87:61:01:a6:89: b9:cc:4e:3a:10:38:6e:3a:0a:58:fa:ec:fd:58:92:61:39:ab: 8b:79:7f:44:43:f2:82:2e:1f:af:3f:67:c1:da:f0:9a:f6:c0: 6d:d2:0d:2d:0b:4f:e4:dd:5a:2e:f8:e0:dc:b1:69:53:5d:78: fb:b1:ea:7a:ad:07:62:6a:45:e1:3a:b9:05:a4:19:4f:09:af: e0:73:9c:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFEOTIxMTAvBgNVBAUTKEVBRUU1OUJBNkE3QzcwNDkwNThDNTY1OTdDQzc0NUM2 MUVDNUEwQTkwHhcNMjQwNTE5MDMzMzU2WhcNMjQwNTI2MDMzMzU2WjAYMRYwFAYD VQQDEw02NjQ5NzMyNC0zY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApotjqwYJyQ4HMU42WLVuPVW8Ag6AefZXfbFtPD+Ug0oAq++giiWDlaea35MO tzoaV7y+oeXGRQRWyTM+38Sj+wkI4CnyD4S4p2ILjs4L9Warbjaz7RWRwuFkQin8 tweCKv6lx/BA3Sx2QLSG5ELlTBsc6LM3Bh0Kkhyhyjj8RrL3k2u780gHvvYP8g0q 2bXRMdWFBKrd2gQ57c6FRMBCnSXaKrtO24CtZE3NyYPUkVRNdD7Op88KGcU2ja0o 8JbjIVj4vYunHK3Fjh39MZYd8jN2NQcDNRJnY2WzqSejkA+JvUo9Ppquen0aqJkL f3ekwdsgjNm4QuZbdzUJjbKgoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI+SJjY 0j6JO7hK/3zIW8e1G2QoMB8GA1UdIwQYMBaAFOruWbpqfHBJBYxWWXzHRcYexaCp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUQ5Mi8zMzBEMDhFMEFF OUUxMUVDOUU0ODNENzNDNEY5QUUwMi82dTVadW1wOGNFa0ZqRlpaZk1kRnhoN0Zv S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ1NVp1bXA4Y0VrRmpGWlpmTWRGeGg3Rm9Lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUQ5Mi8zMzBEMDhFMEFFOUUxMUVDOUU0ODNENzNDNEY5QUUwMi82dTVadW1wOGNF a0ZqRlpaZk1kRnhoN0ZvS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJAeCbhU+z2T57uvXcfe0LYFDFF1XgaBJmLT5Ty/uqcSyPFw1Kh/n7 9LD2rJZl2L4GRZoJDoYzRb3EgPEACuVdJlmm/KmJQQWpR+iLIZ3izl+fCaAv3Rn7 Of8o772U4bMlC2RBi/OU47d0DdGGoXauXRDYOPaF4AXlsd1Z5xhdln2DAUAQXZa1 zmpWBNztunKVG9dVtivqHru0f5nPW81eZJumsC9QokhXGc3snnWih2EBpom5zE46 EDhuOgpY+uz9WJJhOauLeX9EQ/KCLh+vP2fB2vCa9sBt0g0tC0/k3Vou+ODcsWlT XXj7sep6rQdiakXhOrkFpBlPCa/gc5xA -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org