$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft File: cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json) Hash identifier: 6AvzbJnpR/GIkai/Z2JRROCn+fxkmXp7/8x8A5VNNrI= Subject key identifier: 0A:8F:52:EA:70:93:94:75:9B:5B:61:ED:0E:55:72:87:34:35:8E:E3 Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F Certificate issuer: /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft Manifest number: 06A3 Signing time: Thu 30 May 2024 23:43:39 +0000 Manifest this update: Thu 30 May 2024 23:43:38 +0000 Manifest next update: Thu 06 Jun 2024 23:43:38 +0000 Files and hashes: 1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: 5rbSaPu0WCjF26iV5F1cwzNEutjtPVUz/YYBgnga2Nw=) 2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: vJ4N0RUwnrF8kK3ogO94lxwKBhFEzNLvy4nGAVz8u6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Validity Not Before: May 30 23:43:38 2024 GMT Not After : Jun 6 23:43:38 2024 GMT Subject: CN=66590f2a-470e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:d0:fa:50:51:31:68:9e:af:44:b7:21:41: e1:6c:5a:77:c0:9a:be:4b:a5:d9:82:aa:08:fc:67: f2:2e:92:f3:a9:0f:42:82:de:f8:86:bb:3e:91:c1: f0:23:7e:8f:ff:0e:ca:c4:f8:ff:b2:52:e0:03:03: 42:ac:10:25:57:2a:f9:04:68:55:11:65:65:04:63: 7e:de:31:31:59:bd:36:95:b7:36:64:59:e8:bc:fe: 1c:df:12:dc:07:02:3a:80:23:29:df:67:28:9f:30: 73:58:74:cd:bd:8a:3e:e1:f2:a0:d7:9c:57:e3:74: d3:32:43:7e:c9:d2:05:99:5e:84:b8:cf:5b:13:a0: 87:4d:02:41:9f:66:f5:b7:64:7b:0d:ea:c0:db:a9: 5f:9d:62:5c:79:69:10:f6:ec:8d:f3:d1:71:c1:8c: 46:e7:e7:fc:af:1d:0d:14:e3:fe:de:5a:b1:6d:d7: a4:7d:0c:8a:d3:c5:15:62:35:80:86:86:12:d3:6c: 7b:24:94:db:52:8e:23:b8:78:69:a2:fc:59:38:51: a2:51:ac:f6:25:58:c4:f0:82:c9:b9:a9:c0:fa:2f: c5:bb:b8:0d:f3:c4:ac:0d:f1:d6:f9:38:d7:91:c0: 3e:82:50:a9:ec:52:55:4b:57:72:ab:f2:3b:3b:df: c5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8F:52:EA:70:93:94:75:9B:5B:61:ED:0E:55:72:87:34:35:8E:E3 X509v3 Authority Key Identifier: keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e4:bd:87:37:5f:a1:50:85:3d:9c:42:fd:e1:55:e0:24:8a: 14:46:1c:fa:32:a6:b8:76:16:fe:e9:13:d2:d6:1e:37:10:62: 07:4a:87:c5:c3:e8:29:2b:e7:3a:fe:65:d4:0f:30:11:3d:67: a6:7d:ec:b2:67:eb:1b:d7:25:7a:7e:e4:f0:57:36:75:c7:9c: f4:9e:a8:d0:da:4d:b2:b3:96:b2:b6:4a:fa:93:03:2b:a8:f5: 57:25:09:33:0e:ed:18:bd:a6:f4:76:06:32:db:a2:5c:de:a9: 90:1f:ed:c6:89:1c:e7:94:4d:b3:59:a4:8c:8d:c1:68:b5:0a: 22:f2:ef:e6:d5:dd:74:96:ff:1b:31:06:43:32:19:3d:e8:df: 2d:9c:f1:1b:30:de:21:94:4c:ee:3b:9c:7d:f3:a5:4e:c6:73: 1d:ae:ef:e4:91:4a:d2:68:27:2a:f2:6d:eb:6a:86:b8:bd:66: aa:ef:5f:80:44:e5:9e:14:25:7f:1f:14:28:48:5b:15:0e:3f: b4:ce:70:49:88:af:39:73:8d:1b:15:c0:d5:46:60:2d:67:18: a6:17:20:09:52:25:bd:86:5d:86:50:81:3d:ff:ba:18:39:31: 45:18:a5:7e:d7:9a:e6:20:f9:d1:7a:cc:8a:46:90:f3:9b:44: 94:bf:fb:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY5ODAxMTAvBgNVBAUTKDcwRDE2RDc3Mzc5ODlCMTVDNkM4REYxRENBMkE5ODBF MEJCRkJBMEYwHhcNMjQwNTMwMjM0MzM4WhcNMjQwNjA2MjM0MzM4WjAYMRYwFAYD VQQDEw02NjU5MGYyYS00NzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qzQ+lBRMWier0S3IUHhbFp3wJq+S6XZgqoI/GfyLpLzqQ9Cgt74hrs+kcHw I36P/w7KxPj/slLgAwNCrBAlVyr5BGhVEWVlBGN+3jExWb02lbc2ZFnovP4c3xLc BwI6gCMp32conzBzWHTNvYo+4fKg15xX43TTMkN+ydIFmV6EuM9bE6CHTQJBn2b1 t2R7DerA26lfnWJceWkQ9uyN89FxwYxG5+f8rx0NFOP+3lqxbdekfQyK08UVYjWA hoYS02x7JJTbUo4juHhpovxZOFGiUaz2JVjE8ILJuanA+i/Fu7gN88SsDfHW+TjX kcA+glCp7FJVS1dyq/I7O9/FqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqPUupw k5R1m1th7Q5Vcoc0NY7jMB8GA1UdIwQYMBaAFHDRbXc3mJsVxsjfHcoqmA4Lv7oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njk4MC9DQjAwNkQ2MjFD RDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14WEd5TjhkeWlxWURndV91 ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NORnRkemVZbXhYR3lOOGR5aXFZRGd1X3VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njk4MC9DQjAwNkQ2MjFDRDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14 WEd5TjhkeWlxWURndV91ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT5L2HN1+hUIU9nEL94VXgJIoURhz6Mqa4dhb+6RPS1h43EGIHSofF w+gpK+c6/mXUDzARPWemfeyyZ+sb1yV6fuTwVzZ1x5z0nqjQ2k2ys5aytkr6kwMr qPVXJQkzDu0Yvab0dgYy26Jc3qmQH+3GiRznlE2zWaSMjcFotQoi8u/m1d10lv8b MQZDMhk96N8tnPEbMN4hlEzuO5x986VOxnMdru/kkUrSaCcq8m3raoa4vWaq71+A ROWeFCV/HxQoSFsVDj+0znBJiK85c40bFcDVRmAtZximFyAJUiW9hl2GUIE9/7oY OTFFGKV+15rmIPnResyKRpDzm0SUv/sq -----END CERTIFICATE-----Generated at Fri May 31 00:28:34 2024 by rpki-client on console-ams.rpki-client.org