$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: Xw8VqFyr+Zz1IlC8zKeSQYKLnGekPSJFy7tfDVLviUc= Subject key identifier: 8F:FE:DF:4A:5A:78:FE:CA:1F:DD:56:F2:5E:2E:CE:70:62:FF:E0:C3 Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 09AD Signing time: Thu 30 May 2024 21:17:45 +0000 Manifest this update: Thu 30 May 2024 21:17:45 +0000 Manifest next update: Thu 06 Jun 2024 21:17:45 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: CokBFwPd18uNgqX7aVbnvy+sqj1wF0XT5jCt82dOKqI=) 2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: RwhPKu38cAI3cC67SmnQfEARBZKEXwPVUQYTDgsHZos=) 3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: W7paYsvVojxFFb75gMOnX6f6hb2aZgcIMEhFjPe0SMY=) 4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: a54YtZf0SKcJMYb0lHnOkRGEn/bgtmXT4M8oGd8B0DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 21:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: May 30 21:17:45 2024 GMT Not After : Jun 6 21:17:45 2024 GMT Subject: CN=6658ecf9-ad9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a1:97:09:2f:25:d6:03:d2:b8:c4:f6:a5:a6: 56:ed:36:c5:9a:53:f2:60:df:0b:ae:f4:7c:a9:dd: 21:41:c1:e8:d6:6b:ce:7f:cf:9b:84:2c:e6:68:3b: b2:11:3b:4a:f3:be:be:fb:f4:3e:9e:53:9c:1c:b7: 19:72:04:f2:b4:43:e8:89:67:5e:34:96:ba:1e:19: cd:2c:43:0a:85:c5:d1:e4:ec:f6:9f:f5:88:e6:40: 60:c3:41:56:e5:c4:2d:0e:a3:4b:3d:d3:01:f5:5b: cd:34:10:d3:20:5d:c7:7a:b0:28:da:3c:c8:42:2f: d5:e9:05:57:f1:ba:50:7d:e6:81:b5:4c:02:f4:ee: bc:1c:c8:54:cc:e1:c1:98:4c:9b:1f:64:35:df:24: c6:c6:a1:f5:47:f7:85:7c:2a:d5:00:bc:6b:b9:69: 3d:9f:14:fe:0c:4e:bc:82:bb:bb:91:c0:11:9a:07: 7c:d6:55:87:a4:d4:7a:9b:83:4a:6e:94:3e:81:2c: 4d:b9:9e:e4:7b:a7:21:3b:fe:7d:bd:4d:48:7d:c6: 4a:2f:77:9a:ca:5b:91:4a:0d:f4:31:67:cc:75:8b: 1b:de:9d:93:cc:3f:3f:dc:89:bd:17:46:d8:cc:1a: 01:32:c3:75:30:15:84:58:66:c1:a7:8a:52:23:14: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FE:DF:4A:5A:78:FE:CA:1F:DD:56:F2:5E:2E:CE:70:62:FF:E0:C3 X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:54:2f:66:91:b1:28:75:4d:91:ff:7b:6a:b9:c9:c2:50:9b: dc:77:d3:68:11:66:ff:35:aa:07:f4:a8:13:18:0b:de:24:dc: 3f:f8:13:29:5c:18:9f:b3:a8:44:5a:27:fc:a9:47:6c:a1:a0: c1:ce:98:36:50:1b:18:e7:46:f6:21:6d:5d:2e:a1:cd:d5:cf: 7f:8a:03:85:ab:66:9d:6c:d0:76:39:b1:70:f1:45:40:d7:ce: 51:3b:0e:2f:2f:24:09:a1:f8:64:a6:3d:d8:e5:70:e6:54:4c: f9:a8:75:f2:40:6f:9f:5c:c2:07:9a:01:d8:14:b7:94:67:a7: f8:11:8f:9c:94:81:06:46:70:3d:d3:90:27:d8:d0:a6:6b:2c: d2:c9:07:8e:3f:72:0e:e6:92:f0:98:3c:fe:6c:2f:0e:f2:01: 6c:27:8a:20:30:dc:8c:9b:4f:d4:7c:a3:ad:64:ff:4d:12:05: 42:d7:c3:c7:26:43:fb:37:35:2c:fa:b9:df:6b:50:03:f6:67: 0c:98:b6:ea:28:ef:7d:65:ef:95:20:9f:e0:d5:9c:3c:cb:9e: bb:99:ef:18:7a:14:4b:42:be:ae:f3:1d:ff:d7:99:0c:55:a6: 81:71:98:31:e7:83:16:a1:61:14:af:80:97:ca:1f:31:9e:6d: fb:10:04:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjQwNTMwMjExNzQ1WhcNMjQwNjA2MjExNzQ1WjAYMRYwFAYD VQQDEw02NjU4ZWNmOS1hZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KGXCS8l1gPSuMT2paZW7TbFmlPyYN8LrvR8qd0hQcHo1mvOf8+bhCzmaDuy ETtK876++/Q+nlOcHLcZcgTytEPoiWdeNJa6HhnNLEMKhcXR5Oz2n/WI5kBgw0FW 5cQtDqNLPdMB9VvNNBDTIF3HerAo2jzIQi/V6QVX8bpQfeaBtUwC9O68HMhUzOHB mEybH2Q13yTGxqH1R/eFfCrVALxruWk9nxT+DE68gru7kcARmgd81lWHpNR6m4NK bpQ+gSxNuZ7ke6chO/59vU1IfcZKL3eayluRSg30MWfMdYsb3p2TzD8/3Im9F0bY zBoBMsN1MBWEWGbBp4pSIxRpDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/+30pa eP7KH91W8l4uznBi/+DDMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoVC9mkbEodU2R/3tqucnCUJvcd9NoEWb/NaoH9KgTGAveJNw/+BMp XBifs6hEWif8qUdsoaDBzpg2UBsY50b2IW1dLqHN1c9/igOFq2adbNB2ObFw8UVA 185ROw4vLyQJofhkpj3Y5XDmVEz5qHXyQG+fXMIHmgHYFLeUZ6f4EY+clIEGRnA9 05An2NCmayzSyQeOP3IO5pLwmDz+bC8O8gFsJ4ogMNyMm0/UfKOtZP9NEgVC18PH JkP7NzUs+rnfa1AD9mcMmLbqKO99Ze+VIJ/g1Zw8y567me8YehRLQr6u8x3/15kM VaaBcZgx54MWoWEUr4CXyh8xnm37EATz -----END CERTIFICATE-----Generated at Thu May 30 23:29:05 2024 by rpki-client on console-ams.rpki-client.org