$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json) Hash identifier: BbHLva+7v86XGvJP50und27t6ToLbpbGhf/wFNYHIWI= Subject key identifier: 27:33:19:77:CA:24:A8:66:CF:57:83:DA:33:E1:76:B7:E7:8C:4C:98 Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft Manifest number: 01C6 Signing time: Sun 19 May 2024 04:28:10 +0000 Manifest this update: Sun 19 May 2024 04:28:10 +0000 Manifest next update: Sun 26 May 2024 04:28:10 +0000 Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: U16iSXOyZvpFN1EJH5S3x/vZCdxYrQ+ulQA5iIf5ZGc=) 2: 941EE9A46BB911ED97343873C4F9AE02.roa (hash: qDzvgzGQxclWpp1OURC/6skua2C8LDO9yt5r6F5M+II=) 3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: Ljp5RkkUOvcKEUjLqFwchyrrEWciN3XE4LDWa+yUF8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: May 19 04:28:10 2024 GMT Not After : May 26 04:28:10 2024 GMT Subject: CN=66497fda-de25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:35:38:c4:58:8b:f1:7c:b5:bd:6a:b7:87: ae:36:45:4e:3f:af:6a:fc:a6:20:24:26:8b:a7:84: 5a:5d:5d:f5:54:ae:51:45:be:39:43:36:78:67:1b: 29:79:8e:3d:46:18:6d:d1:52:05:2a:7b:03:02:f4: 1a:ed:d6:c4:56:3b:41:aa:66:11:05:3f:22:18:de: 8e:53:79:1b:6b:a8:76:ae:4c:88:49:9f:a5:2d:c0: 49:40:7f:e6:b5:d9:bb:f6:8f:b4:1b:50:a1:6d:53: 4c:55:3d:87:28:1d:9b:c9:60:b6:19:54:ed:b5:da: 04:70:a2:3e:83:4f:d6:39:06:77:a0:27:e0:56:36: b9:d7:3f:f0:0b:c9:1b:79:2e:35:0e:20:9d:a1:64: f0:05:5a:bd:54:5a:b7:2f:41:20:64:b0:ec:61:80: d5:ac:a7:8a:5f:f9:22:4f:cb:dd:10:cf:10:16:a4: e9:93:e0:e2:d1:34:e9:ee:08:1b:b4:8b:b0:53:17: bb:94:1d:92:4d:57:17:e3:12:40:f0:1e:64:38:fc: 54:19:19:4c:03:5f:d1:3d:66:b9:1b:8a:75:c5:c7: 0a:36:9b:84:2e:53:25:ed:41:f1:74:54:8a:ec:25: 6a:d8:34:4d:09:94:03:c8:f3:1e:e5:90:31:d9:7f: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:33:19:77:CA:24:A8:66:CF:57:83:DA:33:E1:76:B7:E7:8C:4C:98 X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ed:45:64:2a:fb:63:98:28:89:d8:dc:e6:df:d8:29:54:4b: 0a:c9:41:61:0d:b0:a4:7a:72:07:b7:df:6e:d1:13:c9:6f:86: 0e:96:73:2c:0f:e5:51:77:c1:25:e6:4f:3a:9b:96:16:b6:84: d6:df:c2:5a:1b:4d:83:e8:5c:dc:b0:49:bc:2f:42:90:46:ec: 8a:58:2b:76:7f:da:e6:64:93:12:76:4d:b1:f0:25:32:50:dc: 84:af:84:3a:d0:db:df:4e:48:94:b3:a1:f5:6f:4b:b0:79:6f: 1f:05:71:50:6d:bf:62:dc:f1:be:fd:33:98:48:1e:0b:1c:27: 79:a8:aa:45:4b:7d:bc:86:1a:ff:6e:ad:69:84:8e:8c:76:b8: 0d:bd:cb:9e:d7:25:0f:4f:70:2b:7f:f2:94:f2:68:c8:39:fc: 71:f7:b9:2d:66:5d:15:46:07:a1:76:3b:0e:6f:89:2f:e1:d5: f2:99:e0:6b:d4:fa:48:e8:b6:d0:3c:0c:a9:9b:17:9c:ae:f4: b2:74:09:56:e1:d0:2d:6c:e4:3d:75:a5:7e:ef:87:28:9e:8f: 55:1b:46:7a:74:3e:c1:1f:7c:bf:18:4c:23:00:5c:bd:8e:57: 84:96:de:8c:4d:86:03:92:0a:c5:58:f7:ef:d7:31:f3:f7:a0: 2e:0c:88:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjQwNTE5MDQyODEwWhcNMjQwNTI2MDQyODEwWjAYMRYwFAYD VQQDEw02NjQ5N2ZkYS1kZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbM1OMRYi/F8tb1qt4euNkVOP69q/KYgJCaLp4RaXV31VK5RRb45QzZ4Zxsp eY49Rhht0VIFKnsDAvQa7dbEVjtBqmYRBT8iGN6OU3kba6h2rkyISZ+lLcBJQH/m tdm79o+0G1ChbVNMVT2HKB2byWC2GVTttdoEcKI+g0/WOQZ3oCfgVja51z/wC8kb eS41DiCdoWTwBVq9VFq3L0EgZLDsYYDVrKeKX/kiT8vdEM8QFqTpk+Di0TTp7ggb tIuwUxe7lB2STVcX4xJA8B5kOPxUGRlMA1/RPWa5G4p1xccKNpuELlMl7UHxdFSK 7CVq2DRNCZQDyPMe5ZAx2X+4zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCczGXfK JKhmz1eD2jPhdrfnjEyYMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs7UVkKvtjmCiJ2Nzm39gpVEsKyUFhDbCkenIHt99u0RPJb4YOlnMs D+VRd8El5k86m5YWtoTW38JaG02D6FzcsEm8L0KQRuyKWCt2f9rmZJMSdk2x8CUy UNyEr4Q60NvfTkiUs6H1b0uweW8fBXFQbb9i3PG+/TOYSB4LHCd5qKpFS328hhr/ bq1phI6MdrgNvcue1yUPT3Arf/KU8mjIOfxx97ktZl0VRgehdjsOb4kv4dXymeBr 1PpI6LbQPAypmxecrvSydAlW4dAtbOQ9daV+74cono9VG0Z6dD7BH3y/GEwjAFy9 jleElt6MTYYDkgrFWPfv1zHz96AuDIiS -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org