$ rpki-client -vvf rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft File: -V6w5_mnqDfmxExu_hvZAZWJfy0.mft (raw, json) Hash identifier: rEIC3dCmbcxdXYtCdtkDzjaxYYFTMv7iPTsc+gKEJbM= Subject key identifier: 41:B8:C8:7F:AE:7C:03:58:86:40:C7:E7:73:89:1A:17:1F:3C:84:C2 Authority key identifier: F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D Certificate issuer: /CN=A916D547/serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D Certificate serial: 0B77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft Manifest number: 0B6F Signing time: Sat 18 May 2024 19:31:55 +0000 Manifest this update: Sat 18 May 2024 19:31:55 +0000 Manifest next update: Sat 25 May 2024 19:31:55 +0000 Files and hashes: 1: -V6w5_mnqDfmxExu_hvZAZWJfy0.crl (hash: u0Yh1BFMT7ZfwwEZx5Zqxk+vSPef1LPIcW2wmunjzL8=) 2: A9E0680E094611EAADB2B84EC4F9AE02.roa (hash: vl3UBSRpyexuG+AmDfNQkiHjPBfDCHJQVvoGsEpXW+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2935 (0xb77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D547/serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D Validity Not Before: May 18 19:31:55 2024 GMT Not After : May 25 19:31:55 2024 GMT Subject: CN=6649022b-35e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f8:7f:d5:0b:a6:24:64:56:52:c6:5c:c6:0e: 08:9f:4f:39:0e:9b:f8:36:2c:3c:30:f4:51:ce:c7: 2b:2a:f5:49:34:6e:9e:d0:9c:22:d0:c9:dd:5f:59: b4:82:67:3f:e9:c2:ea:05:ab:f7:c6:e4:89:8a:f5: 03:77:28:49:c0:7f:cf:4b:19:75:39:cc:79:d0:60: 1b:2c:a7:45:af:da:85:78:ba:d0:6e:71:c4:0b:ed: 71:9a:9c:af:d6:6f:d7:2d:44:56:f3:80:59:0b:16: 37:79:ed:fd:c6:58:40:dc:96:5e:35:b6:8e:45:31: 6b:dd:43:03:ee:d4:8f:71:0d:14:10:54:fa:4c:9c: 25:29:40:01:a2:5d:58:8e:d8:e6:f7:d1:ae:8f:3d: ab:27:35:7c:15:2a:7c:ce:9d:17:30:fe:6d:a4:8b: dc:45:d0:39:fb:82:5d:f4:d8:df:e9:ed:a1:a4:c9: 1f:4f:94:f9:c6:4a:73:e5:b7:fa:18:c9:91:56:cb: 61:df:f3:40:77:67:1e:56:70:62:be:ae:46:f7:45: da:1b:e3:4e:47:6a:fa:22:2a:fa:87:be:13:9f:ef: 2d:06:71:66:4f:2a:5d:8e:32:87:c9:40:a0:3f:5f: 83:c1:75:d8:93:15:c6:90:ee:a0:30:d4:46:77:72: 62:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B8:C8:7F:AE:7C:03:58:86:40:C7:E7:73:89:1A:17:1F:3C:84:C2 X509v3 Authority Key Identifier: keyid:F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:a1:4f:c2:df:f5:a7:6d:00:cc:ab:9c:c5:14:76:b7:6a:32: c2:30:83:b1:a2:c8:8d:28:d7:3d:8b:b1:1a:dd:9f:c3:2d:3d: af:18:31:f5:05:ef:f2:a7:00:bb:aa:e0:d8:29:1f:ba:9f:26: 8c:7a:70:24:fb:19:ca:f9:f9:45:7c:cc:50:70:a0:10:17:ae: 90:fa:1f:61:1f:55:9b:49:96:d3:1a:ff:a2:10:b4:f6:c6:a7: 0d:2a:8e:00:2a:fe:7a:01:57:73:95:4c:45:6c:69:f1:3a:d3: 87:1b:7d:e4:32:49:dc:15:5d:f7:e2:80:4e:12:6c:8e:32:36: d0:93:d1:45:31:9b:cd:46:db:3f:65:86:78:c9:57:d7:84:cd: 5c:7e:0b:f5:7a:b9:44:dc:8d:ca:60:8a:61:34:73:2c:ee:8d: 71:a6:4f:36:36:52:21:bf:62:92:f1:10:fc:02:03:21:4e:56: d2:c0:15:c3:13:47:1f:d7:80:8c:77:a0:a1:00:84:80:98:31: fb:84:be:13:e8:44:51:ab:23:ec:51:c5:41:c0:d2:43:21:b4: 61:eb:81:11:37:54:08:bf:f0:97:48:41:39:7d:c3:ba:49:2c: bb:0f:11:63:ab:98:d9:5f:c2:e9:bb:5b:38:55:4b:95:dc:8a: d1:ec:6e:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1NDcxMTAvBgNVBAUTKEY5NUVCMEU3RjlBN0E4MzdFNkM0NEM2RUZFMUJEOTAx OTU4OTdGMkQwHhcNMjQwNTE4MTkzMTU1WhcNMjQwNTI1MTkzMTU1WjAYMRYwFAYD VQQDEw02NjQ5MDIyYi0zNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/h/1QumJGRWUsZcxg4In085Dpv4Niw8MPRRzscrKvVJNG6e0Jwi0MndX1m0 gmc/6cLqBav3xuSJivUDdyhJwH/PSxl1Ocx50GAbLKdFr9qFeLrQbnHEC+1xmpyv 1m/XLURW84BZCxY3ee39xlhA3JZeNbaORTFr3UMD7tSPcQ0UEFT6TJwlKUABol1Y jtjm99Gujz2rJzV8FSp8zp0XMP5tpIvcRdA5+4Jd9Njf6e2hpMkfT5T5xkpz5bf6 GMmRVsth3/NAd2ceVnBivq5G90XaG+NOR2r6Iir6h74Tn+8tBnFmTypdjjKHyUCg P1+DwXXYkxXGkO6gMNRGd3JiqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG4yH+u fANYhkDH53OJGhcfPITCMB8GA1UdIwQYMBaAFPlesOf5p6g35sRMbv4b2QGViX8t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDU0Ny8xNUIwMTk5RTA5 MzMxMUVBQTc5RTQ5MUFDNEY5QUUwMi8tVjZ3NV9tbnFEZm14RXh1X2h2WkFaV0pm eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1WNnc1X21ucURmbXhFeHVfaHZaQVpXSmZ5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDU0Ny8xNUIwMTk5RTA5MzMxMUVBQTc5RTQ5MUFDNEY5QUUwMi8tVjZ3NV9tbnFE Zm14RXh1X2h2WkFaV0pmeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDoU/C3/WnbQDMq5zFFHa3ajLCMIOxosiNKNc9i7Ea3Z/DLT2vGDH1 Be/ypwC7quDYKR+6nyaMenAk+xnK+flFfMxQcKAQF66Q+h9hH1WbSZbTGv+iELT2 xqcNKo4AKv56AVdzlUxFbGnxOtOHG33kMkncFV334oBOEmyOMjbQk9FFMZvNRts/ ZYZ4yVfXhM1cfgv1erlE3I3KYIphNHMs7o1xpk82NlIhv2KS8RD8AgMhTlbSwBXD E0cf14CMd6ChAISAmDH7hL4T6ERRqyPsUcVBwNJDIbRh64ERN1QIv/CXSEE5fcO6 SSy7DxFjq5jZX8Lpu1s4VUuV3IrR7G4s -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org