$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: VeP5dHSguycQpZSNkghJ111uWQi5/WbyrG5SB2NTFrc= Subject key identifier: 24:8C:AA:4F:2B:31:9B:2B:21:DC:5C:4D:A7:64:87:66:57:33:1E:AB Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0B75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0B59 Signing time: Sat 18 May 2024 19:43:15 +0000 Manifest this update: Sat 18 May 2024 19:43:15 +0000 Manifest next update: Sat 25 May 2024 19:43:15 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: nJShXptjvEeyB8PjHlfH6v243BQmxsGzepU9PXMk3Ig=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: 6dFzl9s/I6pGlRFXJwxSFot9IFsaE8UBtVgNTAm3m5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2933 (0xb75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: May 18 19:43:15 2024 GMT Not After : May 25 19:43:15 2024 GMT Subject: CN=664904d3-d42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:2f:c5:5e:4c:2b:62:54:d3:05:f8:a4:2e: 83:e4:0f:2e:a3:cd:62:89:9e:4b:a4:bf:08:fa:7e: dd:d0:6a:3d:0b:ac:e9:e5:90:4e:3f:d8:00:21:d8: 93:00:6a:10:da:70:cc:fb:46:24:ab:7a:33:8f:b7: a7:3b:26:48:83:3d:e4:6a:af:40:cb:42:10:cb:30: ed:3f:7e:7b:85:ca:8e:95:9b:ec:e5:09:45:45:09: fd:d1:af:c5:b7:e9:60:65:2b:30:c2:61:44:4a:7f: b4:27:68:86:d0:56:24:ec:11:7b:42:b3:49:b8:b2: 2c:56:6e:c9:4d:b1:f7:77:92:6f:d4:a0:e4:ee:ab: db:ed:dc:07:78:eb:84:ee:1e:50:9a:22:c0:fc:2a: bf:53:3b:83:c7:b3:66:30:8f:3e:74:15:bb:de:53: f8:a8:46:f7:a6:27:0f:77:b5:d8:32:9a:73:5f:82: 93:bb:e7:e8:f4:84:9a:96:af:72:46:9c:fd:9b:d8: fa:ea:9b:f5:76:e5:31:3d:7a:04:cf:45:22:c4:1a: d3:3c:66:99:57:81:4c:df:33:ca:21:44:ef:47:61: bc:86:7a:03:5e:35:50:73:3f:f6:15:7d:f6:c8:63: 59:52:39:d1:ad:39:3f:4a:d9:73:44:4d:1e:3c:b9: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8C:AA:4F:2B:31:9B:2B:21:DC:5C:4D:A7:64:87:66:57:33:1E:AB X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a4:2a:81:69:c2:c2:7b:33:da:10:4e:b8:ca:8d:66:10:c0: bc:7d:1a:67:b3:9b:1d:e8:ef:b8:41:63:8b:85:f1:13:92:b5: 75:67:90:d6:7f:f5:23:c9:45:68:d7:1f:6b:8f:ce:31:ec:c1: 33:8d:6b:0b:02:8e:ed:aa:16:bd:5c:b0:8b:9a:61:38:5f:45: 53:7a:aa:a7:94:54:37:52:6a:5f:45:47:17:06:fb:e9:68:97: 7e:8a:11:23:a1:f4:1f:4c:fe:75:fd:bf:23:a7:0c:ad:b4:6e: 64:60:fc:3c:d8:59:ec:c9:51:d3:4b:29:80:b6:f6:0e:2b:40: 12:f1:b9:c9:17:eb:46:59:11:f4:d0:51:f1:fc:0f:74:6a:06: 45:a7:92:7b:ae:3b:b2:38:8f:ea:19:e5:d3:81:32:d1:8a:0a: 32:c9:56:b5:13:ec:0c:79:f4:6c:c4:c3:bb:ab:e1:86:8a:e0: 3d:c3:b4:86:da:d5:a3:fa:4c:30:f2:8b:61:a3:79:96:b5:d0: 29:0a:e6:36:85:b4:23:c3:aa:8b:f6:3f:01:64:c1:84:a5:4b: c5:bc:9c:e4:df:c4:cd:41:c3:6a:7b:71:31:c0:44:99:70:61: aa:b6:eb:3e:84:b3:3c:68:8d:5b:10:01:ee:e3:84:77:c3:d0: 4e:de:62:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjQwNTE4MTk0MzE1WhcNMjQwNTI1MTk0MzE1WjAYMRYwFAYD VQQDEw02NjQ5MDRkMy1kNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0novxV5MK2JU0wX4pC6D5A8uo81iiZ5LpL8I+n7d0Go9C6zp5ZBOP9gAIdiT AGoQ2nDM+0Ykq3ozj7enOyZIgz3kaq9Ay0IQyzDtP357hcqOlZvs5QlFRQn90a/F t+lgZSswwmFESn+0J2iG0FYk7BF7QrNJuLIsVm7JTbH3d5Jv1KDk7qvb7dwHeOuE 7h5QmiLA/Cq/UzuDx7NmMI8+dBW73lP4qEb3picPd7XYMppzX4KTu+fo9ISalq9y Rpz9m9j66pv1duUxPXoEz0UixBrTPGaZV4FM3zPKIUTvR2G8hnoDXjVQcz/2FX32 yGNZUjnRrTk/StlzRE0ePLn1RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSMqk8r MZsrIdxcTadkh2ZXMx6rMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXpCqBacLCezPaEE64yo1mEMC8fRpns5sd6O+4QWOLhfETkrV1Z5DW f/UjyUVo1x9rj84x7MEzjWsLAo7tqha9XLCLmmE4X0VTeqqnlFQ3UmpfRUcXBvvp aJd+ihEjofQfTP51/b8jpwyttG5kYPw82FnsyVHTSymAtvYOK0AS8bnJF+tGWRH0 0FHx/A90agZFp5J7rjuyOI/qGeXTgTLRigoyyVa1E+wMefRsxMO7q+GGiuA9w7SG 2tWj+kww8otho3mWtdApCuY2hbQjw6qL9j8BZMGEpUvFvJzk38TNQcNqe3ExwESZ cGGqtus+hLM8aI1bEAHu44R3w9BO3mIk -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org