$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft File: ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json) Hash identifier: PAgxVilio1DKUY8XX+dYNA422stvMNt1nHdFNkoGfB8= Subject key identifier: 14:FC:6E:B1:A5:AC:A8:22:26:F6:F9:BE:8B:DC:E2:DB:8B:57:A8:74 Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Certificate serial: 0B03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft Manifest number: 0AFC Signing time: Sat 18 May 2024 19:57:51 +0000 Manifest this update: Sat 18 May 2024 19:57:50 +0000 Manifest next update: Sat 25 May 2024 19:57:50 +0000 Files and hashes: 1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: dz4bCDZS60enKua722UjORzNu8oFy2Ec1nu0scmhLzQ=) 2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: kzzvDt9d/HhjlFNs6PyqeT0i8/ElA6E/6XKvOGNdQJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2819 (0xb03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Validity Not Before: May 18 19:57:50 2024 GMT Not After : May 25 19:57:50 2024 GMT Subject: CN=6649083e-e73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:d8:f2:35:c7:04:a4:65:f3:1d:d5:b2:36: 75:1f:61:0b:09:d2:73:4d:b5:0a:45:6c:d2:f1:e8: 0d:a2:6c:54:22:35:27:3f:01:48:61:15:64:34:49: a3:2b:8d:4e:65:59:f6:54:3b:ad:e3:40:4e:06:c9: 8e:c6:df:48:55:73:32:08:f2:55:da:5f:df:58:fd: d5:0b:f5:3e:87:3e:f3:f0:e5:1f:d6:e8:8e:87:fb: 82:79:ba:b6:13:c3:72:2b:31:37:1e:f4:ae:ae:af: 0d:82:c4:24:a2:0f:40:80:a2:87:85:5e:97:8d:e6: 0f:5e:28:1a:b3:75:d3:23:2a:50:ce:6b:5c:10:9d: 5e:1c:c8:4d:01:25:60:c2:df:84:19:63:5e:4f:13: 9b:09:83:3e:26:fc:1b:1a:6a:cd:a7:13:45:40:05: 28:63:1c:b9:4f:16:8a:3a:21:54:56:d7:9f:68:8b: 19:25:32:7a:a0:ed:ea:85:b1:a9:90:a8:89:ca:1f: 02:a4:39:fe:6c:cf:45:30:88:8a:0a:33:f1:c9:c1: ba:1a:99:e0:b5:d4:04:45:8a:9d:2c:b0:19:fc:22: e9:d3:98:b6:8d:2f:68:55:5a:f8:65:0c:0d:3c:56: 5e:5e:42:e7:17:a2:44:44:1b:4c:9f:3a:42:e3:f7: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FC:6E:B1:A5:AC:A8:22:26:F6:F9:BE:8B:DC:E2:DB:8B:57:A8:74 X509v3 Authority Key Identifier: keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b2:cf:fa:44:d3:7c:25:00:c6:57:c8:19:ff:e7:09:3a:49: d9:b5:43:5c:a4:10:9b:1a:e1:fd:98:2b:10:2e:4f:a7:16:95: 82:49:51:69:fc:0b:84:7e:10:39:b4:b0:fd:89:c7:11:47:ca: 30:1f:c2:b3:fe:77:0e:e8:2c:52:79:de:1f:b8:4f:7d:01:c1: e2:da:bb:d3:32:5d:db:4f:46:55:49:b4:d4:3d:08:4e:c9:ff: c3:bb:96:af:90:71:14:3b:42:c5:a4:7c:1f:a5:6b:6c:82:9f: 5c:e7:3f:b5:ce:8f:1b:3d:56:d3:a0:3a:59:22:e2:5c:5c:87: 04:92:f7:ae:f6:65:be:fc:43:ed:c5:7f:40:43:80:df:fd:72: 60:4a:b6:15:83:40:80:84:95:2f:69:01:8f:45:19:ba:5d:ce: d0:ba:17:20:a5:8c:c9:59:fa:4c:5c:c5:71:90:76:e4:e7:ac: da:fd:de:f3:f1:b2:d7:36:d4:6c:ed:dd:31:42:89:31:11:24: 65:dc:c7:4a:e5:4f:4f:f5:f4:bb:83:e3:85:99:c8:af:fb:8c: b6:9e:ff:15:17:c7:8d:7b:cd:6b:bf:40:90:b2:6c:39:1f:0f: 4c:bb:c8:dc:5e:c3:70:96:3a:10:9a:89:36:f4:e4:74:2c:4b: 45:cd:b3:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE ODZFMUVDQjAwHhcNMjQwNTE4MTk1NzUwWhcNMjQwNTI1MTk1NzUwWjAYMRYwFAYD VQQDEw02NjQ5MDgzZS1lNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQDY8jXHBKRl8x3VsjZ1H2ELCdJzTbUKRWzS8egNomxUIjUnPwFIYRVkNEmj K41OZVn2VDut40BOBsmOxt9IVXMyCPJV2l/fWP3VC/U+hz7z8OUf1uiOh/uCebq2 E8NyKzE3HvSurq8NgsQkog9AgKKHhV6XjeYPXigas3XTIypQzmtcEJ1eHMhNASVg wt+EGWNeTxObCYM+JvwbGmrNpxNFQAUoYxy5TxaKOiFUVtefaIsZJTJ6oO3qhbGp kKiJyh8CpDn+bM9FMIiKCjPxycG6GpngtdQERYqdLLAZ/CLp05i2jS9oVVr4ZQwN PFZeXkLnF6JERBtMnzpC4/ef3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT8brGl rKgiJvb5vovc4tuLV6h0MB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoss/6RNN8JQDGV8gZ/+cJOknZtUNcpBCbGuH9mCsQLk+nFpWCSVFp /AuEfhA5tLD9iccRR8owH8Kz/ncO6CxSed4fuE99AcHi2rvTMl3bT0ZVSbTUPQhO yf/Du5avkHEUO0LFpHwfpWtsgp9c5z+1zo8bPVbToDpZIuJcXIcEkveu9mW+/EPt xX9AQ4Df/XJgSrYVg0CAhJUvaQGPRRm6Xc7QuhcgpYzJWfpMXMVxkHbk56za/d7z 8bLXNtRs7d0xQokxESRl3MdK5U9P9fS7g+OFmciv+4y2nv8VF8eNe81rv0CQsmw5 Hw9Mu8jcXsNwljoQmok29OR0LEtFzbN4 -----END CERTIFICATE-----Generated at Sat May 18 21:31:28 2024 by rpki-client on console-ams.rpki-client.org