$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft File: 6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json) Hash identifier: r923JL0f3SUQpBZ4Cb5lPVW66II+TQBaGFzeM7S+HJc= Subject key identifier: 6C:C0:54:1D:44:43:50:7A:91:BD:03:CB:1D:60:7A:40:B7:71:88:AE Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft Manifest number: 0741 Signing time: Sat 18 May 2024 22:23:33 +0000 Manifest this update: Sat 18 May 2024 22:23:32 +0000 Manifest next update: Sat 25 May 2024 22:23:32 +0000 Files and hashes: 1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: e9tep1IbMJ2SDJqRZYK+MzqAAXbaL44g8t8bVNfLCMs=) 2: 443E334CDD8E11EA90A06285C4F9AE02.roa (hash: DusD5wJ9MDdolcjIyd4r5RP0ZZyb0nuopLTMAFqQFDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Validity Not Before: May 18 22:23:32 2024 GMT Not After : May 25 22:23:32 2024 GMT Subject: CN=66492a64-0f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:96:81:60:da:5e:22:47:47:cb:d7:2a:c8: 12:29:03:9b:80:19:13:4f:b0:43:a7:25:51:16:ae: 1b:4b:31:c4:6d:94:d4:0f:c9:f2:74:98:2a:9b:e8: 78:16:31:71:6d:39:12:1a:fc:6a:1c:c9:95:5c:81: 4e:45:e4:b9:4b:d4:0d:2b:0c:3f:e9:cd:22:3c:75: ab:e3:28:4e:a1:b5:f2:7f:e0:20:61:07:87:fd:8b: 2c:17:fb:0d:93:77:cb:1e:0e:ff:8e:08:fb:5f:80: 07:59:5f:03:64:c3:c4:40:98:cc:e2:00:0b:f2:be: 90:5c:53:c4:5d:c3:79:bd:54:92:70:c0:45:9e:40: e7:63:8a:a4:69:a5:b5:46:b3:6a:b4:ca:b2:d2:ce: ae:31:60:ad:ef:aa:66:63:45:1a:14:bd:eb:62:80: 8a:ff:b4:d2:dd:a9:04:34:23:86:07:fa:d8:4d:05: 36:54:e6:84:28:75:aa:16:57:7b:f2:0f:d9:38:0c: 5e:42:61:65:f7:a8:27:a4:2f:96:fe:38:20:a2:d0: 04:04:b7:2d:c6:ac:e3:81:68:1b:a7:cf:c5:25:60: b8:25:91:34:11:36:12:86:56:f0:ba:e4:54:46:6d: 4a:31:5b:14:d5:2d:78:d8:72:62:8c:a8:d0:2b:53: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C0:54:1D:44:43:50:7A:91:BD:03:CB:1D:60:7A:40:B7:71:88:AE X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:99:78:8e:fe:1b:db:25:e1:6e:a4:4b:90:16:ed:fe:57:70: 09:fb:e7:2c:32:f8:d6:b4:1d:de:8c:af:47:93:99:c4:be:3c: fc:18:82:37:2a:d4:4e:90:4a:fe:fa:a8:ee:66:b8:5c:c5:12: 35:26:7f:bf:bc:29:8e:10:7b:6e:da:d7:b2:24:b3:67:a4:26: 21:8b:8e:94:d8:18:78:d0:60:37:37:a3:fb:66:88:1a:88:1a: c3:d8:e7:a7:2c:10:ce:fe:e5:05:06:29:65:cb:8a:ed:e6:2d: 8e:a4:c2:9b:9f:ce:2f:bc:82:de:9b:9d:66:66:50:bd:ba:05: 40:19:06:7d:91:8d:39:96:86:91:7e:96:ac:3d:94:dc:59:e6: 54:33:ef:aa:b2:f7:dd:26:a0:d9:a1:99:5f:95:f4:d9:fb:d9: 39:3a:5d:27:8f:b9:31:04:0a:0f:1d:fb:72:e3:74:2f:ef:a6: 2b:6f:9a:ec:6e:e9:83:b9:d3:f3:7c:3d:5b:05:a8:5a:30:1b: 15:f9:d5:15:ae:a0:fc:7a:f1:3f:ef:93:5f:6f:d8:d0:4a:65: 87:96:b6:11:cb:3d:ff:4d:cf:f1:d5:2f:9c:d5:f3:0c:c6:34: 3e:6c:73:5f:b1:bb:d5:7e:39:a0:8d:44:4e:a5:18:47:11:b4: fd:7b:34:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjQwNTE4MjIyMzMyWhcNMjQwNTI1MjIyMzMyWjAYMRYwFAYD VQQDEw02NjQ5MmE2NC0wZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbyWgWDaXiJHR8vXKsgSKQObgBkTT7BDpyVRFq4bSzHEbZTUD8nydJgqm+h4 FjFxbTkSGvxqHMmVXIFOReS5S9QNKww/6c0iPHWr4yhOobXyf+AgYQeH/YssF/sN k3fLHg7/jgj7X4AHWV8DZMPEQJjM4gAL8r6QXFPEXcN5vVSScMBFnkDnY4qkaaW1 RrNqtMqy0s6uMWCt76pmY0UaFL3rYoCK/7TS3akENCOGB/rYTQU2VOaEKHWqFld7 8g/ZOAxeQmFl96gnpC+W/jggotAEBLctxqzjgWgbp8/FJWC4JZE0ETYShlbwuuRU Rm1KMVsU1S142HJijKjQK1OO/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzAVB1E Q1B6kb0Dyx1gekC3cYiuMB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkVGOC83N0Y5OEMzOEREOEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5J WFZ0aHBscGg3czExcVlHME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmmXiO/hvbJeFupEuQFu3+V3AJ++csMvjWtB3ejK9Hk5nEvjz8GII3 KtROkEr++qjuZrhcxRI1Jn+/vCmOEHtu2teyJLNnpCYhi46U2Bh40GA3N6P7Zoga iBrD2OenLBDO/uUFBilly4rt5i2OpMKbn84vvILem51mZlC9ugVAGQZ9kY05loaR fpasPZTcWeZUM++qsvfdJqDZoZlflfTZ+9k5Ol0nj7kxBAoPHfty43Qv76Yrb5rs bumDudPzfD1bBahaMBsV+dUVrqD8evE/75Nfb9jQSmWHlrYRyz3/Tc/x1S+c1fMM xjQ+bHNfsbvVfjmgjUROpRhHEbT9ezQ4 -----END CERTIFICATE-----Generated at Sun May 19 00:30:17 2024 by rpki-client on console-ams.rpki-client.org