$ rpki-client -vvf rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft File: 6yX--P-P_HFEQDc2nK2vr2zYklI.mft (raw, json) Hash identifier: xSGVRASUjsomvcYR9iCcQGB+af7Fs+QK5xcLSE7zkvo= Subject key identifier: 31:1E:B2:0E:D0:07:68:F4:6B:A7:34:C8:95:F4:E1:DD:79:B0:CB:84 Authority key identifier: EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52 Certificate issuer: /CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft Manifest number: D5 Signing time: Sun 19 May 2024 06:10:38 +0000 Manifest this update: Sun 19 May 2024 06:10:38 +0000 Manifest next update: Sun 26 May 2024 06:10:38 +0000 Files and hashes: 1: 6yX--P-P_HFEQDc2nK2vr2zYklI.crl (hash: qO+8/l93cG6a8KWIPc0WACPfd+BmSHYKEgrxixshB7g=) 2: 7E156BA0D46511EDBFC00C87C4F9AE02.roa (hash: kq6uKx75WLXR0akV5GBjKknlyNJFdlLTGI8PryJ3Oqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252 Validity Not Before: May 19 06:10:38 2024 GMT Not After : May 26 06:10:38 2024 GMT Subject: CN=664997de-45a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9c:7e:d4:88:fc:fb:4c:58:35:0b:6c:30:7f: 7e:fb:44:83:53:3b:58:39:4f:75:ec:8f:50:a2:1d: 2c:f2:d5:c9:d7:51:69:a7:a1:20:75:e1:d4:c2:bc: 9b:00:45:12:aa:41:12:20:c0:d8:ad:33:92:c7:fb: 2f:54:33:2c:3f:f3:05:c8:a3:96:23:09:10:25:e1: 49:ca:25:0d:b6:23:f0:e9:e6:a8:86:79:ed:ba:c8: 74:ea:6b:5c:b4:39:b4:8f:c8:fa:a2:18:4b:d4:85: 9c:45:c6:95:51:21:cc:cc:6d:27:ea:f6:52:a1:de: c9:ad:3e:96:72:fb:37:55:f2:47:6b:b5:81:d4:ef: 7b:9e:25:1e:b4:e8:b6:a9:48:94:d6:ae:62:73:cb: b3:ce:c4:1e:c7:3c:15:1e:f8:3d:1f:fc:cc:40:1a: 86:24:bc:c1:bf:16:69:74:02:de:cc:e9:e7:bb:63: 1d:ed:07:e8:5c:de:92:9e:6a:ef:07:a6:80:c8:1f: f8:1e:cd:b0:5c:d2:a1:a4:61:c9:03:de:0e:99:b2: 34:58:0d:9e:d7:df:71:6d:95:f4:79:5d:c1:be:a6: 2b:3d:92:9e:7f:18:d2:14:ca:d1:06:ce:60:89:09: 53:21:72:cd:58:55:2f:c4:9c:80:3e:b8:80:d4:df: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1E:B2:0E:D0:07:68:F4:6B:A7:34:C8:95:F4:E1:DD:79:B0:CB:84 X509v3 Authority Key Identifier: keyid:EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:b2:c9:51:52:e7:19:9f:d6:4e:24:07:e5:85:b8:49:4c:cd: 47:07:46:06:71:a8:a6:93:a8:0c:c7:a0:9a:ad:7a:d9:b2:fc: 1c:08:0a:01:55:a8:85:5a:e8:3a:0b:01:75:46:a6:79:99:12: ce:d5:4e:57:0d:9a:a9:f4:2d:bc:de:8b:b6:06:55:bc:47:49: f7:1d:23:4d:1b:6a:d7:23:a7:2e:62:a6:05:52:ec:85:92:32: 8c:01:fa:35:d3:ad:fe:53:bd:a9:09:53:cc:3e:56:bf:cf:65: 83:70:3c:4f:4f:fd:b4:6b:92:ed:38:0e:38:79:2e:60:b0:56: c9:a6:7f:c5:a7:1b:e9:e4:b6:4c:33:e9:98:1e:ed:2c:c8:e9: 6d:d9:05:bc:cf:82:89:62:17:37:c2:54:27:77:cf:6b:66:01: 6b:13:3f:e7:c0:c4:04:8d:5a:41:6f:ee:a3:76:d2:d2:42:7a: 6e:6f:28:09:08:7c:46:b5:d6:27:cb:b4:52:b9:b2:e3:1b:d3: df:47:c0:16:9e:9c:fb:d9:e5:a0:c0:53:84:b0:c0:75:47:d2: e5:58:6e:e6:e2:15:cf:b6:75:21:91:cd:46:db:79:4f:37:47: c1:34:53:d9:22:23:89:96:2f:ef:68:e2:0a:e6:4f:07:f2:58: 24:e1:71:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0NTYxMTAvBgNVBAUTKEVCMjVGRUY4RkY4RkZDNzE0NDQwMzczNjlDQURBRkFG NkNEODkyNTIwHhcNMjQwNTE5MDYxMDM4WhcNMjQwNTI2MDYxMDM4WjAYMRYwFAYD VQQDEw02NjQ5OTdkZS00NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Zx+1Ij8+0xYNQtsMH9++0SDUztYOU917I9Qoh0s8tXJ11Fpp6EgdeHUwryb AEUSqkESIMDYrTOSx/svVDMsP/MFyKOWIwkQJeFJyiUNtiPw6eaohnntush06mtc tDm0j8j6ohhL1IWcRcaVUSHMzG0n6vZSod7JrT6Wcvs3VfJHa7WB1O97niUetOi2 qUiU1q5ic8uzzsQexzwVHvg9H/zMQBqGJLzBvxZpdALezOnnu2Md7QfoXN6Snmrv B6aAyB/4Hs2wXNKhpGHJA94OmbI0WA2e199xbZX0eV3BvqYrPZKefxjSFMrRBs5g iQlTIXLNWFUvxJyAPriA1N+tGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEesg7Q B2j0a6c0yJX04d15sMuEMB8GA1UdIwQYMBaAFOsl/vj/j/xxREA3Npytr69s2JJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ1Ni8wNTJFMkM0OEQ0 NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9IRkVRRGMybksydnIyellr bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5WC0tUC1QX0hGRVFEYzJuSzJ2cjJ6WWtsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ1Ni8wNTJFMkM0OEQ0NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9I RkVRRGMybksydnIyellrbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLsslRUucZn9ZOJAflhbhJTM1HB0YGcaimk6gMx6CarXrZsvwcCAoB VaiFWug6CwF1RqZ5mRLO1U5XDZqp9C283ou2BlW8R0n3HSNNG2rXI6cuYqYFUuyF kjKMAfo1063+U72pCVPMPla/z2WDcDxPT/20a5LtOA44eS5gsFbJpn/Fpxvp5LZM M+mYHu0syOlt2QW8z4KJYhc3wlQnd89rZgFrEz/nwMQEjVpBb+6jdtLSQnpubygJ CHxGtdYny7RSubLjG9PfR8AWnpz72eWgwFOEsMB1R9LlWG7m4hXPtnUhkc1G23lP N0fBNFPZIiOJli/vaOIK5k8H8lgk4XHh -----END CERTIFICATE-----Generated at Sun May 19 08:25:02 2024 by rpki-client on console-ams.rpki-client.org