$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft File: 6tNqfTCwZhVrgDAlqqpf-SetdcI.mft (raw, json) Hash identifier: xLpiG9Oal9chin8cMoqYLTZxRjKufkVpKWMZ+Slyc8Y= Subject key identifier: 2B:0C:5F:7F:4B:D7:C0:F3:0C:15:07:15:AB:3F:21:7F:55:A4:FC:67 Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Certificate serial: 15AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft Manifest number: 15A9 Signing time: Sat 18 May 2024 17:15:32 +0000 Manifest this update: Sat 18 May 2024 17:15:31 +0000 Manifest next update: Sat 25 May 2024 17:15:31 +0000 Files and hashes: 1: 6tNqfTCwZhVrgDAlqqpf-SetdcI.crl (hash: w6yGmMutVmbDrtRhSGnvtyZt65Qolk0kSUiW/NkDKSM=) 2: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (hash: /qosAUFjTR/Oysa3vkH6q4cvDQEajvhVRt1iG/L2ATQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5551 (0x15af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Validity Not Before: May 18 17:15:31 2024 GMT Not After : May 25 17:15:31 2024 GMT Subject: CN=6648e234-cff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:11:4f:8f:21:3b:e3:b6:a9:3b:a6:8c:ef: 22:23:eb:be:37:aa:fc:9c:2a:e3:90:6d:98:b6:d7: fe:50:5b:f0:7c:45:9c:ce:9c:4b:43:3c:eb:e8:cc: 3a:0c:66:a8:e9:f9:90:35:d6:c5:82:04:75:c4:11: 33:df:b4:87:b1:3d:0c:e6:c8:1f:82:9d:af:cc:fe: 66:51:98:ab:0c:de:89:b9:d6:3c:cb:61:03:7e:36: 50:6c:10:c0:45:1e:cf:19:1b:3d:29:bb:ef:94:de: e8:4d:26:24:0c:41:10:24:a1:05:07:70:8f:f8:b6: 60:a3:29:b3:7f:36:36:8b:65:26:fb:54:51:b1:34: d3:5b:e4:8d:a9:92:ce:5c:1b:41:41:9f:ef:79:1a: cd:42:e0:0a:83:97:c8:34:2c:1e:55:0d:e8:2a:ff: 1e:12:6c:45:61:c5:58:fe:13:e4:64:a9:56:bf:65: 8b:99:80:76:13:eb:f3:a6:b6:68:17:48:25:c5:90: bc:f2:e2:de:9b:8d:f8:98:20:e1:1d:23:0d:da:cc: 3c:ce:89:57:72:ff:99:3b:6b:82:e9:f8:51:60:36: ac:32:5b:d8:a1:c3:5a:68:4c:e6:0d:ef:e3:d4:bc: c3:5f:12:23:3c:40:22:af:6c:30:2f:8c:b4:32:ee: 82:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0C:5F:7F:4B:D7:C0:F3:0C:15:07:15:AB:3F:21:7F:55:A4:FC:67 X509v3 Authority Key Identifier: keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:6f:6a:33:9d:ca:56:21:bc:fd:ac:5a:fc:6e:95:ad:10:ac: 00:e2:fd:ad:63:1b:84:2c:92:5d:e0:37:b2:71:b8:38:58:67: a4:1e:1e:11:1b:84:bd:5d:22:81:64:96:d3:2b:52:b7:af:de: 5e:88:cc:51:75:30:1f:cb:f9:ac:71:47:a2:6c:67:57:d5:aa: 1c:c6:b4:e7:1e:d9:85:2b:a7:6e:9b:22:7c:44:53:c8:e2:bc: 1c:49:ba:6e:da:61:fc:9b:d6:de:69:35:fe:26:b8:18:cf:33: 78:f7:5c:b1:7c:ac:17:e1:fe:cb:7d:b8:7a:bd:f4:12:71:9b: 7b:8d:de:2e:13:bd:97:1b:eb:60:bf:fe:98:47:bb:09:5f:20: 70:77:7d:7e:f4:41:65:5d:85:5f:4f:c4:38:a2:23:0f:41:b9: b0:fc:9b:92:66:9a:3b:8d:7b:ac:13:36:9f:fe:6b:5b:83:1b: ea:85:aa:9d:33:d1:f3:68:95:37:ba:b7:49:6c:86:73:f7:94: 1a:fc:50:e9:ca:52:d6:53:96:d4:40:b3:6c:b4:8e:c5:6a:d6: 66:c4:70:0f:b3:3c:f1:02:6d:a2:6f:c3:0f:7d:e8:67:5a:bc: dc:de:f3:8b:f2:0d:47:2c:cb:30:b4:e7:7a:56:d4:fa:15:94: 29:79:48:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5 MjdBRDc1QzIwHhcNMjQwNTE4MTcxNTMxWhcNMjQwNTI1MTcxNTMxWjAYMRYwFAYD VQQDEw02NjQ4ZTIzNC1jZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzoRT48hO+O2qTumjO8iI+u+N6r8nCrjkG2Yttf+UFvwfEWczpxLQzzr6Mw6 DGao6fmQNdbFggR1xBEz37SHsT0M5sgfgp2vzP5mUZirDN6JudY8y2EDfjZQbBDA RR7PGRs9KbvvlN7oTSYkDEEQJKEFB3CP+LZgoymzfzY2i2Um+1RRsTTTW+SNqZLO XBtBQZ/veRrNQuAKg5fINCweVQ3oKv8eEmxFYcVY/hPkZKlWv2WLmYB2E+vzprZo F0glxZC88uLem434mCDhHSMN2sw8zolXcv+ZO2uC6fhRYDasMlvYocNaaEzmDe/j 1LzDXxIjPEAir2wwL4y0Mu6CEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsMX39L 18DzDBUHFas/IX9VpPxnMB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3 QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjJDMy8xNTIzRDJFNDA3QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1po VnJnREFscXFwZi1TZXRkY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3b2ozncpWIbz9rFr8bpWtEKwA4v2tYxuELJJd4Deycbg4WGekHh4R G4S9XSKBZJbTK1K3r95eiMxRdTAfy/mscUeibGdX1aocxrTnHtmFK6dumyJ8RFPI 4rwcSbpu2mH8m9beaTX+JrgYzzN491yxfKwX4f7Lfbh6vfQScZt7jd4uE72XG+tg v/6YR7sJXyBwd31+9EFlXYVfT8Q4oiMPQbmw/JuSZpo7jXusEzaf/mtbgxvqhaqd M9HzaJU3urdJbIZz95Qa/FDpylLWU5bUQLNstI7FatZmxHAPszzxAm2ib8MPfehn Wrzc3vOL8g1HLMswtOd6VtT6FZQpeUgx -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org