$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json) Hash identifier: TelBBSY5AKmJHpv3IY6TfENp9w+Caf5wXqI3bbNVO7I= Subject key identifier: 11:88:21:3F:F7:66:AA:C6:77:3E:B4:5F:03:43:A1:67:D7:5B:C3:A6 Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Certificate serial: 33CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft Manifest number: 33C8 Signing time: Sat 18 May 2024 14:43:46 +0000 Manifest this update: Sat 18 May 2024 14:43:46 +0000 Manifest next update: Sat 25 May 2024 14:43:46 +0000 Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: WkkQ77Hbz+XEez1QFjfzFcr79Z9KUHpHpz0fVBnKdms=) 2: 054DC680CE7411EAA3A39A3EC4F9AE02.roa (hash: jI5iigQ8cUJcsIOhuxWoRnC6qmQEBFHvEIO07FBDO0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13262 (0x33ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Validity Not Before: May 18 14:43:46 2024 GMT Not After : May 25 14:43:46 2024 GMT Subject: CN=6648bea2-cf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:b2:e2:c2:da:57:f2:e3:33:6b:24:0f:73: 3d:0e:4d:f0:09:29:31:87:ff:3e:61:07:63:00:48: 4b:dd:cb:0e:69:6c:86:11:ae:96:f2:51:6e:90:31: 60:02:10:b6:dd:ba:f0:d1:ab:ef:7e:ef:a8:b3:f3: 7f:07:04:03:78:1b:20:1e:c3:95:5e:1d:e2:f8:46: 80:33:bf:50:c0:5e:e3:fe:e4:e1:45:17:93:54:3c: 2c:54:0a:da:1a:d7:3a:fe:25:82:96:b4:8c:ea:ee: 8e:9c:62:4a:05:2f:32:88:e7:f5:41:35:91:f8:92: 3b:46:55:ef:09:35:13:e4:6c:2a:b7:77:6d:69:73: c9:de:12:75:ca:a3:72:8d:f2:77:ff:20:cf:34:70: f4:9c:8f:33:cb:ee:92:f8:55:72:ab:b7:6b:8f:5c: 0d:1a:01:f7:2a:e4:68:3f:c4:95:d0:0b:29:4b:bd: 7f:60:81:9b:73:97:1e:a0:0d:d7:8a:f3:90:3a:5c: 46:91:8b:ee:e4:2e:d9:89:63:da:af:7b:ef:69:9c: 9d:3e:d1:18:8b:92:e5:11:6a:02:27:4d:11:2a:75: 51:0c:e3:5e:20:61:d3:52:9f:93:1d:2a:91:a2:20: c4:98:da:25:75:c3:3a:3f:01:71:8f:90:c9:5b:21: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:21:3F:F7:66:AA:C6:77:3E:B4:5F:03:43:A1:67:D7:5B:C3:A6 X509v3 Authority Key Identifier: keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:ca:39:79:8f:d8:15:56:49:f7:b8:a9:a9:bd:7a:75:e8:85: c4:18:97:b8:df:c7:03:c1:97:58:7f:ed:ad:47:85:5c:74:1f: 83:1c:2c:53:d9:22:7f:cd:30:fd:ca:5e:da:e0:ab:64:67:91: 98:1a:b2:62:24:fc:ed:fe:75:16:4c:2a:e6:94:b5:d4:f8:55: d5:a6:29:56:ce:a6:f7:62:6f:24:e6:3f:a8:f8:51:11:90:62: 1d:b2:b9:3d:9d:8f:66:54:60:db:57:c5:a4:1d:cc:53:0c:e2: 78:18:55:9c:47:09:ab:ec:9f:40:c7:6d:de:b4:62:bd:90:c6: 5e:89:2f:85:7a:f5:eb:9e:5d:dc:d4:41:95:95:01:49:98:eb: c5:b3:ee:97:cc:c6:91:94:fd:d6:f1:09:5e:37:93:0e:48:bf: 8e:16:24:67:38:df:9f:53:9a:29:15:e2:38:fe:8e:67:44:76: 45:bf:c2:e8:d6:62:08:b9:3b:38:66:77:75:2b:43:93:52:7c: 0d:48:8c:8f:2f:4e:63:d4:6b:98:7e:3a:8c:f9:a7:6d:72:f9: 8b:fb:67:3c:21:a9:e0:df:f7:f2:d2:1b:1d:ae:79:68:98:80: c8:29:8a:a8:0c:60:f9:96:23:c6:f7:5e:af:dd:24:68:f7:e9: 4e:0a:e1:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz M0UzRDI0NzkwHhcNMjQwNTE4MTQ0MzQ2WhcNMjQwNTI1MTQ0MzQ2WjAYMRYwFAYD VQQDEw02NjQ4YmVhMi1jZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmSy4sLaV/LjM2skD3M9Dk3wCSkxh/8+YQdjAEhL3csOaWyGEa6W8lFukDFg AhC23brw0avvfu+os/N/BwQDeBsgHsOVXh3i+EaAM79QwF7j/uThRReTVDwsVAra Gtc6/iWClrSM6u6OnGJKBS8yiOf1QTWR+JI7RlXvCTUT5Gwqt3dtaXPJ3hJ1yqNy jfJ3/yDPNHD0nI8zy+6S+FVyq7drj1wNGgH3KuRoP8SV0AspS71/YIGbc5ceoA3X ivOQOlxGkYvu5C7ZiWPar3vvaZydPtEYi5LlEWoCJ00RKnVRDONeIGHTUp+THSqR oiDEmNoldcM6PwFxj5DJWyHcewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGIIT/3 ZqrGdz60XwNDoWfXW8OmMB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjlDQi82RjZFREM2MDFEOEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2Jj M0ZiUENIYTcxQkV6NDlKSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRyjl5j9gVVkn3uKmpvXp16IXEGJe438cDwZdYf+2tR4VcdB+DHCxT 2SJ/zTD9yl7a4KtkZ5GYGrJiJPzt/nUWTCrmlLXU+FXVpilWzqb3Ym8k5j+o+FER kGIdsrk9nY9mVGDbV8WkHcxTDOJ4GFWcRwmr7J9Ax23etGK9kMZeiS+FevXrnl3c 1EGVlQFJmOvFs+6XzMaRlP3W8QleN5MOSL+OFiRnON+fU5opFeI4/o5nRHZFv8Lo 1mIIuTs4Znd1K0OTUnwNSIyPL05j1GuYfjqM+adtcvmL+2c8Iang3/fy0hsdrnlo mIDIKYqoDGD5liPG916v3SRo9+lOCuHy -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org