$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json) Hash identifier: oDqw1DSVRdDBw2AwgP+xF6GxQgZN2nqdda6wCBsgCbo= Subject key identifier: 00:BF:B0:AC:E4:6B:B7:29:FA:92:F4:5E:6A:1E:D2:DC:67:AD:A0:D9 Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft Manifest number: 47 Signing time: Sun 19 May 2024 08:02:50 +0000 Manifest this update: Sun 19 May 2024 08:02:49 +0000 Manifest next update: Sun 26 May 2024 08:02:49 +0000 Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: PuoLnY6XnOljwhFli/jpxM/UVRzikejVVoZIiLpxvGs=) 2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 9KgUBwn7ZxB41N0G+ybbb26vRb4/nvvRfm6F0NtcKGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: May 19 08:02:49 2024 GMT Not After : May 26 08:02:49 2024 GMT Subject: CN=6649b229-5276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:d5:4a:ea:f6:1c:53:f8:92:7c:63:34:07: 48:03:bd:6b:c5:b1:a3:88:78:ef:5b:56:2c:29:03: d2:6c:85:f0:3f:d7:52:b8:0e:34:01:38:ff:53:fb: 4d:b1:a7:3b:17:67:c0:c1:65:6c:58:35:2a:37:d6: 6e:d2:30:50:7e:fe:69:d6:6f:4f:ef:8f:fd:fa:f6: bf:85:c2:a7:c9:25:91:94:88:8c:49:38:4d:78:45: 91:8d:a0:ba:79:20:ea:d3:07:ea:39:85:10:74:bb: 7a:24:b2:2c:b8:5a:ce:77:8f:37:87:c1:ac:53:6e: e5:0f:f1:83:a7:be:31:5c:54:83:c2:3c:ee:07:9f: 56:a1:a6:70:ce:1f:53:59:35:e8:34:7a:3f:40:85: 5b:fe:56:fe:9a:e1:f7:49:10:c6:cc:70:07:04:61: 61:8f:6c:3a:43:5d:72:7f:7e:de:6d:5c:d8:7a:61: 0d:ca:52:78:7f:b5:56:a0:11:12:b9:ba:d4:25:73: 71:94:6f:14:ff:1c:37:db:62:c9:c6:7e:bf:85:da: 09:45:73:9d:26:e1:f2:ca:f2:46:c3:11:bd:2a:f2: 49:3a:2c:a0:0a:f2:d0:28:89:01:e4:fe:3f:34:b2: cf:a6:4e:16:29:f6:30:25:82:eb:e1:09:4c:e5:fe: 19:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BF:B0:AC:E4:6B:B7:29:FA:92:F4:5E:6A:1E:D2:DC:67:AD:A0:D9 X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f7:86:7b:d2:d5:21:22:83:b9:96:4f:44:e6:e2:e9:3b:31: 9c:7b:02:b1:01:51:ce:32:55:36:92:4f:1b:fd:8e:80:e7:29: 15:4a:93:6a:1e:f5:c8:49:ad:ba:9a:07:96:ca:9b:38:45:dc: a4:97:4d:26:cf:41:0f:47:e2:e3:ad:bb:bf:26:d9:e6:d9:ed: 70:d8:9b:96:cc:be:24:6e:48:25:87:25:07:6c:20:6d:0c:19: 11:2d:c0:19:da:a1:af:47:e1:a8:db:cc:f4:90:6b:8f:d0:7c: 45:b6:e2:f8:d8:ee:62:68:b0:32:1e:af:b2:ef:4e:55:ff:4a: b6:59:d2:d7:6a:36:3b:8a:ec:82:d0:9d:bb:44:f0:83:90:9e: 19:0b:c0:e8:f9:d7:36:d8:b7:c2:06:5f:69:37:aa:af:86:84: 4e:76:72:37:d1:ac:31:e6:16:3c:f4:eb:22:e7:f2:af:29:57: a2:7e:ea:b2:98:54:71:88:92:9d:ee:1f:b4:bc:85:01:f0:44: 0a:a3:a9:9b:1b:4a:fd:b5:e9:53:05:ff:e0:0a:97:f6:8c:ae: 02:02:e2:9b:7b:d9:53:c3:06:f0:d0:f4:b4:37:af:8a:a8:fa: 5f:0c:46:36:59:12:72:c0:38:fa:55:2f:6d:af:f2:01:ce:16: 00:ae:ad:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjhFQzExMC8GA1UEBRMoMEJBOEJBNDBGODk3MzRDQzNGM0FFM0VENjc3NENCRDg0 M0UyRTc3MjAeFw0yNDA1MTkwODAyNDlaFw0yNDA1MjYwODAyNDlaMBgxFjAUBgNV BAMTDTY2NDliMjI5LTUyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8X9VK6vYcU/iSfGM0B0gDvWvFsaOIeO9bViwpA9JshfA/11K4DjQBOP9T+02x pzsXZ8DBZWxYNSo31m7SMFB+/mnWb0/vj/369r+FwqfJJZGUiIxJOE14RZGNoLp5 IOrTB+o5hRB0u3oksiy4Ws53jzeHwaxTbuUP8YOnvjFcVIPCPO4Hn1ahpnDOH1NZ Neg0ej9AhVv+Vv6a4fdJEMbMcAcEYWGPbDpDXXJ/ft5tXNh6YQ3KUnh/tVagERK5 utQlc3GUbxT/HDfbYsnGfr+F2glFc50m4fLK8kbDEb0q8kk6LKAK8tAoiQHk/j80 ss+mThYp9jAlguvhCUzl/hndAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAL+wrORr tyn6kvReah7S3GetoNkwHwYDVR0jBBgwFoAUC6i6QPiXNMw/OuPtZ3TL2EPi53Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2OEVDL0UwNTdFMkIwQURC NDExRUVCRUE3RTU2M0M0RjlBRTAyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzZpNlFQaVhOTXdfT3VQdFozVEwyRVBpNTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 OEVDL0UwNTdFMkIwQURCNDExRUVCRUE3RTU2M0M0RjlBRTAyL0M2aTZRUGlYTk13 X091UHRaM1RMMkVQaTUzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACD3hnvS1SEig7mWT0Tm4uk7MZx7ArEBUc4yVTaSTxv9joDnKRVKk2oe 9chJrbqaB5bKmzhF3KSXTSbPQQ9H4uOtu78m2ebZ7XDYm5bMviRuSCWHJQdsIG0M GREtwBnaoa9H4ajbzPSQa4/QfEW24vjY7mJosDIer7LvTlX/SrZZ0tdqNjuK7ILQ nbtE8IOQnhkLwOj51zbYt8IGX2k3qq+GhE52cjfRrDHmFjz06yLn8q8pV6J+6rKY VHGIkp3uH7S8hQHwRAqjqZsbSv216VMF/+AKl/aMrgIC4pt72VPDBvDQ9LQ3r4qo +l8MRjZZEnLAOPpVL22v8gHOFgCurfM= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org