$ rpki-client -vvf rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft File: a6i-wGygtAdTNe2mqSY4hNWuAys.mft (raw, json) Hash identifier: 4AlXOVicUi6WWkjfAmnEHDNvfjZtPi2BuL/xgZP/E7Y= Subject key identifier: 8B:F2:D3:10:9F:F6:1D:EF:16:46:CA:D5:E2:39:3C:49:DA:C8:09:67 Authority key identifier: 6B:A8:BE:C0:6C:A0:B4:07:53:35:ED:A6:A9:26:38:84:D5:AE:03:2B Certificate issuer: /CN=A91821EE/serialNumber=6BA8BEC06CA0B4075335EDA6A9263884D5AE032B Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft Manifest number: 0787 Signing time: Fri 31 May 2024 23:00:21 +0000 Manifest this update: Fri 31 May 2024 23:00:20 +0000 Manifest next update: Fri 07 Jun 2024 23:00:20 +0000 Files and hashes: 1: a6i-wGygtAdTNe2mqSY4hNWuAys.crl (hash: K7Kebr3AYLYlzdu8cwDbaOwNK0LMv3Tv9wM9LeXHS5w=) 2: E035CD6ECC8B11EA9169032FC4F9AE02.roa (hash: G45zBMyeX1/Ztr8g4kLebhPxrgF+WVV8JQyuxv74DSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.crl rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91821EE/serialNumber=6BA8BEC06CA0B4075335EDA6A9263884D5AE032B Validity Not Before: May 31 23:00:20 2024 GMT Not After : Jun 7 23:00:20 2024 GMT Subject: CN=665a5684-53e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:54:2a:fb:58:c4:c9:4a:6d:fc:93:53:37: a9:f5:f4:5b:16:e8:78:e1:84:48:c8:df:bc:b2:97: 3d:5e:3d:80:42:22:e8:c6:7a:67:bd:12:44:88:28: 04:4b:ef:0e:ef:34:45:ad:20:55:78:72:a4:67:e0: ff:01:e1:ad:93:e0:47:c8:25:2d:85:cb:90:4c:a4: 7c:56:26:5d:aa:eb:74:1f:cd:89:18:56:04:ec:e7: 75:c4:ed:84:9d:c5:53:41:10:6d:68:a0:64:06:d8: 26:ab:fe:f9:a1:d1:1b:75:04:e7:d1:e4:66:ef:55: 0f:1a:13:d8:a0:e0:a7:00:48:db:75:c3:97:ca:03: 3a:96:f7:c2:04:e1:a0:17:8e:7d:fc:ee:f5:c2:67: b7:e2:b0:b5:9d:f9:a6:10:e9:79:d2:6c:a9:e0:a2: e0:a1:d2:9e:81:54:a6:ad:2a:cb:a4:ed:4d:a4:d2: fd:f2:bd:be:0c:ba:05:f3:5c:b2:ba:06:35:f4:68: 9c:e1:94:b8:5e:24:66:45:9d:35:06:be:df:0d:6f: aa:d0:d4:a1:c2:a7:cd:3f:13:5c:13:eb:f8:0a:fa: bc:22:50:10:c9:d6:88:b0:8a:a1:7e:cf:f6:33:49: a3:fa:c0:06:6a:8d:e4:7f:a8:73:7d:77:8f:07:21: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F2:D3:10:9F:F6:1D:EF:16:46:CA:D5:E2:39:3C:49:DA:C8:09:67 X509v3 Authority Key Identifier: keyid:6B:A8:BE:C0:6C:A0:B4:07:53:35:ED:A6:A9:26:38:84:D5:AE:03:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3c:d7:86:4f:f0:a0:5e:ea:04:3c:91:a7:8e:f4:73:a7:cc: 82:2f:5c:3b:65:5b:23:7d:67:a9:48:6b:d4:93:38:ec:9f:12: db:9b:c8:fa:91:42:14:e3:5b:89:8c:05:96:31:bc:0c:ef:8d: f3:ac:61:32:b1:07:07:34:5b:2d:3f:09:a0:d1:b9:7e:51:7c: 25:13:76:55:85:d7:30:fa:ed:db:24:30:ec:95:ec:8a:2e:e8: de:7a:02:a7:5e:cf:7e:d4:6c:d0:bf:e0:2e:3a:a5:e0:57:01: 33:02:2c:24:89:91:6e:8f:c4:ef:58:bf:70:b6:e4:c3:a9:8b: 0f:da:0f:cc:7f:b3:ba:55:99:cd:7a:df:16:45:bf:76:23:a4: 97:9c:9b:f1:ff:5f:3e:e1:b2:9d:9a:b6:03:0d:20:dd:ef:5c: dc:be:ad:09:24:e2:1a:52:da:22:51:77:50:e2:78:f9:d7:56: d7:12:04:71:27:49:7c:c5:27:1d:30:83:cb:a1:9e:9a:3f:b5: 80:59:3f:ed:7c:47:06:ea:5b:a3:00:50:25:55:a8:db:e6:f7: 75:7f:09:95:96:14:d9:59:28:08:12:a7:3b:ba:e3:20:29:30: 4e:3a:a1:30:36:82:68:f6:c4:79:d8:94:6e:43:ff:e2:42:e5: 56:e7:19:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxRUUxMTAvBgNVBAUTKDZCQThCRUMwNkNBMEI0MDc1MzM1RURBNkE5MjYzODg0 RDVBRTAzMkIwHhcNMjQwNTMxMjMwMDIwWhcNMjQwNjA3MjMwMDIwWjAYMRYwFAYD VQQDEw02NjVhNTY4NC01M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4xUKvtYxMlKbfyTUzep9fRbFuh44YRIyN+8spc9Xj2AQiLoxnpnvRJEiCgE S+8O7zRFrSBVeHKkZ+D/AeGtk+BHyCUthcuQTKR8ViZdqut0H82JGFYE7Od1xO2E ncVTQRBtaKBkBtgmq/75odEbdQTn0eRm71UPGhPYoOCnAEjbdcOXygM6lvfCBOGg F459/O71wme34rC1nfmmEOl50myp4KLgodKegVSmrSrLpO1NpNL98r2+DLoF81yy ugY19Gic4ZS4XiRmRZ01Br7fDW+q0NShwqfNPxNcE+v4Cvq8IlAQydaIsIqhfs/2 M0mj+sAGao3kf6hzfXePByEByQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvy0xCf 9h3vFkbK1eI5PEnayAlnMB8GA1UdIwQYMBaAFGuovsBsoLQHUzXtpqkmOITVrgMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjFFRS9GNkNBQTBBQUND OEExMUVBOUFFRkNFMkVDNEY5QUUwMi9hNmktd0d5Z3RBZFROZTJtcVNZNGhOV3VB eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2aS13R3lndEFkVE5lMm1xU1k0aE5XdUF5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjFFRS9GNkNBQTBBQUNDOEExMUVBOUFFRkNFMkVDNEY5QUUwMi9hNmktd0d5Z3RB ZFROZTJtcVNZNGhOV3VBeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuPNeGT/CgXuoEPJGnjvRzp8yCL1w7ZVsjfWepSGvUkzjsnxLbm8j6 kUIU41uJjAWWMbwM743zrGEysQcHNFstPwmg0bl+UXwlE3ZVhdcw+u3bJDDsleyK LujeegKnXs9+1GzQv+AuOqXgVwEzAiwkiZFuj8TvWL9wtuTDqYsP2g/Mf7O6VZnN et8WRb92I6SXnJvx/18+4bKdmrYDDSDd71zcvq0JJOIaUtoiUXdQ4nj511bXEgRx J0l8xScdMIPLoZ6aP7WAWT/tfEcG6lujAFAlVajb5vd1fwmVlhTZWSgIEqc7uuMg KTBOOqEwNoJo9sR52JRuQ//iQuVW5xn8 -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:20 2024 by rpki-client on console-ams.rpki-client.org