$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft File: 6eDCCGLs2ANoFFu3z2LO3YARYzo.mft (raw, json) Hash identifier: n+mV2h3xwkkQE1IgtKfS0zUYvTEfPR/KdqxQ0djZBuo= Subject key identifier: D1:57:8D:75:91:4E:54:A9:4E:63:F4:92:CC:6F:A2:79:1F:B4:15:E1 Authority key identifier: E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A Certificate issuer: /CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft Manifest number: 0824 Signing time: Sat 18 May 2024 21:47:01 +0000 Manifest this update: Sat 18 May 2024 21:47:01 +0000 Manifest next update: Sat 25 May 2024 21:47:01 +0000 Files and hashes: 1: 6eDCCGLs2ANoFFu3z2LO3YARYzo.crl (hash: GSeVk2ixnRvwZOS6N2p/rWmHE3koB0IQvEE4W2sAK10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Validity Not Before: May 18 21:47:01 2024 GMT Not After : May 25 21:47:01 2024 GMT Subject: CN=664921d5-41aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:59:e1:29:38:75:c3:d7:41:07:2b:8e:a7: c4:4b:a7:dc:f9:c2:a3:0a:f5:10:34:8d:17:42:37: 9d:fc:04:49:e0:3f:a2:c7:d2:53:62:12:d4:4d:60: fc:50:91:d7:0c:d1:4f:b4:00:b2:cb:48:da:93:51: ff:31:ea:59:67:a7:be:8a:70:ac:1b:f2:fe:73:fb: 5e:52:5d:4a:26:72:6e:cf:15:c1:79:b9:9a:1c:34: 48:09:8e:74:d8:da:68:22:f7:cb:c4:55:51:da:9f: e1:96:11:51:49:dd:b1:e1:01:e0:bf:f5:6b:32:43: 5c:b4:f8:d1:c8:87:81:d6:0d:ba:11:41:2b:25:44: 80:ae:09:de:1e:3e:3f:d1:64:97:11:d6:3b:36:66: 90:b7:74:63:24:a7:12:f9:a0:ca:da:f6:b8:9b:08: f5:1b:12:c2:48:45:b4:ab:84:8a:86:0d:23:34:d7: e9:fc:aa:14:ca:7f:18:a5:e0:20:6a:ad:cb:f8:e9: db:0f:d0:3e:db:53:f9:19:da:92:58:a9:68:66:9f: ee:f2:aa:04:3c:93:4e:1a:02:df:63:bb:89:e4:67: 32:7d:28:27:d6:76:98:f5:7c:9e:d7:42:d1:71:3d: 37:3b:b4:ac:5a:60:4f:65:2f:d7:4e:4b:37:72:f5: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:8D:75:91:4E:54:A9:4E:63:F4:92:CC:6F:A2:79:1F:B4:15:E1 X509v3 Authority Key Identifier: keyid:E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:7f:8d:b4:59:49:97:21:fc:39:da:1c:56:ce:21:21:2c:7a: 8b:0e:cc:02:ac:be:aa:48:27:cf:63:72:62:68:2f:32:c5:24: d6:f2:82:d2:b8:f8:0d:58:d4:26:18:49:2e:d7:fd:cd:34:69: d8:dc:0e:82:24:9c:0a:b6:a3:ef:5f:47:4a:ca:92:22:a6:b7: cf:fe:cb:7d:9e:f0:26:fc:a0:8b:6d:e8:0d:cc:82:d0:06:61: 4f:42:00:0a:c3:90:f2:f5:9a:11:18:bf:71:c1:a2:39:e3:f2: c0:bc:c1:6e:ba:46:77:35:96:65:e5:bf:04:1d:ff:b0:63:b8: 43:05:c4:aa:c7:3d:f6:93:8f:dd:3d:80:24:dc:0f:06:b8:94: 7c:2d:02:9f:f5:09:ae:c4:95:aa:d8:1f:79:9e:53:24:6e:f2: 1f:b8:96:19:3d:28:23:7f:ba:02:bd:db:65:0b:7f:66:c3:1d: 7b:11:b8:fe:6e:e8:7f:a1:a7:49:60:f8:bc:12:23:32:66:b6: 71:fb:c5:55:37:88:15:5a:ea:7f:bf:b9:3e:05:91:bd:2e:b4: 0b:9a:94:15:52:64:c5:e0:8b:13:f2:42:ff:5b:61:42:de:11: 82:de:41:4a:da:e7:a8:60:48:6d:40:37:bc:ba:c8:66:30:80: 59:37:51:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMUMxMTAvBgNVBAUTKEU5RTBDMjA4NjJFQ0Q4MDM2ODE0NUJCN0NGNjJDRURE ODAxMTYzM0EwHhcNMjQwNTE4MjE0NzAxWhcNMjQwNTI1MjE0NzAxWjAYMRYwFAYD VQQDEw02NjQ5MjFkNS00MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnBZ4Sk4dcPXQQcrjqfES6fc+cKjCvUQNI0XQjed/ARJ4D+ix9JTYhLUTWD8 UJHXDNFPtACyy0jak1H/MepZZ6e+inCsG/L+c/teUl1KJnJuzxXBebmaHDRICY50 2NpoIvfLxFVR2p/hlhFRSd2x4QHgv/VrMkNctPjRyIeB1g26EUErJUSArgneHj4/ 0WSXEdY7NmaQt3RjJKcS+aDK2va4mwj1GxLCSEW0q4SKhg0jNNfp/KoUyn8YpeAg aq3L+OnbD9A+21P5GdqSWKloZp/u8qoEPJNOGgLfY7uJ5GcyfSgn1naY9Xye10LR cT03O7SsWmBPZS/XTks3cvX7LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFXjXWR TlSpTmP0ksxvonkftBXhMB8GA1UdIwQYMBaAFOngwghi7NgDaBRbt89izt2AEWM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MxQy9EOTMyNTJGQ0FC RjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJBTm9GRnUzejJMTzNZQVJZ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZlRENDR0xzMkFOb0ZGdTN6MkxPM1lBUll6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MxQy9EOTMyNTJGQ0FCRjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJB Tm9GRnUzejJMTzNZQVJZem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3f420WUmXIfw52hxWziEhLHqLDswCrL6qSCfPY3JiaC8yxSTW8oLS uPgNWNQmGEku1/3NNGnY3A6CJJwKtqPvX0dKypIiprfP/st9nvAm/KCLbegNzILQ BmFPQgAKw5Dy9ZoRGL9xwaI54/LAvMFuukZ3NZZl5b8EHf+wY7hDBcSqxz32k4/d PYAk3A8GuJR8LQKf9QmuxJWq2B95nlMkbvIfuJYZPSgjf7oCvdtlC39mwx17Ebj+ buh/oadJYPi8EiMyZrZx+8VVN4gVWup/v7k+BZG9LrQLmpQVUmTF4IsT8kL/W2FC 3hGC3kFK2ueoYEhtQDe8ushmMIBZN1EN -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org