$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json) Hash identifier: jHNAsnGFIVVMLJ/9LLH40kJOLN3/c7v9g4D41af9xVw= Subject key identifier: D5:96:61:C5:C3:CA:70:E3:A5:45:CF:EE:77:AF:F2:3C:CF:EB:3E:F4 Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft Manifest number: 01A9 Signing time: Mon 29 Apr 2024 04:33:52 +0000 Manifest this update: Mon 29 Apr 2024 04:33:51 +0000 Manifest next update: Mon 06 May 2024 04:33:51 +0000 Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: OXMOShnTceFbvjXsJKj20nWEphnhPM3PmSeMWFzf8ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 04:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Validity Not Before: Apr 29 04:33:51 2024 GMT Not After : May 6 04:33:51 2024 GMT Subject: CN=662f2330-1498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:15:ae:c2:eb:00:3b:92:5d:17:de:a4:1f: 4a:6e:09:d3:be:c4:68:61:6d:83:71:ac:d1:6e:a5: e5:f1:08:3e:02:a2:a8:df:c7:cd:ee:ee:4d:68:29: e2:ae:8a:75:8c:91:37:66:2b:a4:53:ce:69:a8:69: 0e:98:b6:c8:0c:ac:4e:03:c9:d5:d8:c5:11:c6:61: 88:b1:2d:52:f7:e8:90:4a:62:a0:04:72:45:d8:f4: 7c:c0:bc:8c:4f:9f:4a:d8:d7:83:ee:d9:59:e4:64: df:0b:5d:02:1d:0f:6c:04:44:12:60:0c:04:98:6a: 03:47:00:6c:e4:f5:71:1b:bd:06:48:6d:fb:e2:64: 20:b3:5d:e6:b0:9c:cf:88:f2:26:ec:14:be:66:a1: 84:5a:de:36:7f:a1:8f:5c:9b:3e:b0:67:04:bc:d6: cc:73:e9:38:b1:6a:77:97:33:ec:82:4f:5c:2e:df: f5:4f:2d:55:51:27:45:49:bf:8d:87:4d:df:f9:72: 93:bb:d4:27:f4:d3:06:dd:d3:30:bf:82:ff:d3:d8: 5b:b1:28:1f:f1:9b:17:56:f2:68:f6:87:70:3b:64: 12:88:26:d8:f6:a1:81:cc:6b:5f:bb:5e:45:93:64: 8e:15:48:88:7e:08:90:9a:30:97:7f:54:e7:93:f2: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:96:61:C5:C3:CA:70:E3:A5:45:CF:EE:77:AF:F2:3C:CF:EB:3E:F4 X509v3 Authority Key Identifier: keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f8:3b:ac:4a:aa:b1:54:85:e6:c4:2d:b6:43:99:f3:49:ae: 5a:8a:b1:d8:e6:fd:5d:43:39:6c:75:26:6c:28:04:b9:a0:e5: 5f:6b:74:fc:60:df:9d:89:9c:ed:16:cd:8c:9d:81:38:df:80: 9e:18:53:b4:c9:da:08:e1:7d:7e:03:8d:27:29:4d:10:c3:2a: c1:6b:e2:b1:6f:34:5e:42:e2:34:ff:d0:d7:de:51:96:5c:0d: a5:26:6c:64:1f:40:54:83:84:5f:ba:6c:99:3b:03:f9:93:13: 77:27:46:fa:76:b7:de:7a:50:07:ff:a7:01:d1:e9:dd:56:9a: e7:9c:9a:fa:56:71:30:5c:55:f9:80:2b:54:16:32:af:bd:7b: bb:9a:5d:0f:85:c7:31:96:b9:27:e8:29:7e:46:6f:f7:f9:3c: 92:33:2b:ee:e2:4b:87:fd:f7:42:af:cb:78:98:27:51:c2:68: 45:68:b0:f7:d5:e7:cc:dd:15:a1:d6:45:b3:9f:27:7d:11:7d: 2e:67:5c:e5:94:ac:54:7c:b8:f6:fd:5f:65:d5:bf:29:9d:af: 7e:7e:e0:f4:e6:de:28:58:9e:46:40:27:c6:c7:3b:49:d1:46: 4b:47:aa:d9:1b:5e:ca:dc:12:13:b2:ae:b2:70:59:a7:11:18: dd:ef:f6:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDhCQUFGQUM0NjVGMDhEMDQ3RDJENzA5NEJBNTI4MEQ3 RDM5ODgzNjYwHhcNMjQwNDI5MDQzMzUxWhcNMjQwNTA2MDQzMzUxWjAYMRYwFAYD VQQDEw02NjJmMjMzMC0xNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+8VrsLrADuSXRfepB9KbgnTvsRoYW2DcazRbqXl8Qg+AqKo38fN7u5NaCni rop1jJE3ZiukU85pqGkOmLbIDKxOA8nV2MURxmGIsS1S9+iQSmKgBHJF2PR8wLyM T59K2NeD7tlZ5GTfC10CHQ9sBEQSYAwEmGoDRwBs5PVxG70GSG374mQgs13msJzP iPIm7BS+ZqGEWt42f6GPXJs+sGcEvNbMc+k4sWp3lzPsgk9cLt/1Ty1VUSdFSb+N h03f+XKTu9Qn9NMG3dMwv4L/09hbsSgf8ZsXVvJo9odwO2QSiCbY9qGBzGtfu15F k2SOFUiIfgiQmjCXf1Tnk/IlkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWWYcXD ynDjpUXP7nev8jzP6z70MB8GA1UdIwQYMBaAFIuq+sRl8I0EfS1wlLpSgNfTmINm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pRUjlMWENVdWxLQTE5T1ln MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2cjZ4R1h3alFSOUxYQ1V1bEtBMTlPWWcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pR UjlMWENVdWxLQTE5T1lnMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH+DusSqqxVIXmxC22Q5nzSa5airHY5v1dQzlsdSZsKAS5oOVfa3T8 YN+diZztFs2MnYE434CeGFO0ydoI4X1+A40nKU0QwyrBa+KxbzReQuI0/9DX3lGW XA2lJmxkH0BUg4RfumyZOwP5kxN3J0b6drfeelAH/6cB0endVprnnJr6VnEwXFX5 gCtUFjKvvXu7ml0Phccxlrkn6Cl+Rm/3+TySMyvu4kuH/fdCr8t4mCdRwmhFaLD3 1efM3RWh1kWznyd9EX0uZ1zllKxUfLj2/V9l1b8pna9+fuD05t4oWJ5GQCfGxztJ 0UZLR6rZG17K3BITsq6ycFmnERjd7/Zj -----END CERTIFICATE-----Generated at Mon Apr 29 12:51:01 2024 by rpki-client on console-ams.rpki-client.org