$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft File: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json) Hash identifier: ujHza5ScP4weI7EQlVa+d4hPu35YI7FPSXhaRhCSZOU= Subject key identifier: D9:B1:DA:17:A2:6D:9C:E2:30:14:BF:9B:62:6D:AC:DC:D5:A5:FD:40 Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 Certificate issuer: /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Certificate serial: 1B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft Manifest number: 1B49 Signing time: Sat 18 May 2024 16:38:45 +0000 Manifest this update: Sat 18 May 2024 16:38:45 +0000 Manifest next update: Sat 25 May 2024 16:38:45 +0000 Files and hashes: 1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: bRGNYtzSIU9CvbapkK7snkKuhYsn60aJGmjuGo921q0=) 2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: X8AQp7odAt1JQqP19nbrCZ2OfUpP0Ns8/BfHaNDUuYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6997 (0x1b55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Validity Not Before: May 18 16:38:45 2024 GMT Not After : May 25 16:38:45 2024 GMT Subject: CN=6648d995-db96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:0f:ca:38:5b:9a:a5:4d:06:cf:ef:df:7a: 2c:4a:23:17:e6:96:07:e3:0b:a3:1f:5e:5a:35:b8: 27:18:77:67:d0:52:04:dd:ca:c4:72:16:2a:2a:b4: 64:a2:5a:3d:49:c1:9e:02:ff:37:69:c9:7c:8b:f6: 34:5c:15:9b:29:cf:19:51:4b:cd:d7:d0:6c:bd:14: 54:df:05:8c:04:4c:49:f4:eb:bc:ed:29:db:18:76: d1:d0:38:99:5b:76:32:94:a5:b6:2d:49:fe:37:11: b9:9b:9a:d8:ea:45:c8:b0:67:01:d4:12:26:65:2d: f4:62:d6:93:4e:14:76:2e:5e:74:ef:c7:1d:60:60: c7:3a:22:2d:d5:88:e2:c1:bb:29:d3:16:6c:2d:54: bf:f9:40:cb:fc:44:2e:e4:ec:35:34:78:f5:12:28: 04:62:c8:84:6d:c2:77:7c:bc:77:c4:0b:8d:6e:80: bc:f7:7b:9b:f7:47:52:28:f8:e4:9d:de:7e:8e:65: 9e:47:dc:38:f4:c9:2d:bc:e7:a5:b6:fe:6d:f1:4c: 6f:74:02:dd:65:c9:76:df:e8:cb:fa:36:58:66:e3: ff:4a:f2:01:0f:68:de:98:24:8e:98:c8:96:5f:3f: c7:88:45:62:9c:78:9f:e2:76:f9:de:28:6a:8e:00: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B1:DA:17:A2:6D:9C:E2:30:14:BF:9B:62:6D:AC:DC:D5:A5:FD:40 X509v3 Authority Key Identifier: keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4e:70:63:1f:e7:0b:ff:15:82:c2:77:66:eb:55:74:8d:97: 07:1b:51:60:d9:4c:64:f3:09:33:06:f4:e4:c4:6f:39:a1:cb: ee:89:44:c7:4d:94:b4:41:b9:fd:58:60:6c:29:40:7f:32:ab: c7:af:bb:90:a6:d8:c9:d5:35:8d:07:b8:05:93:94:58:27:5e: f7:60:84:e3:70:df:8a:dd:7a:41:46:6d:78:51:e9:3b:de:9d: 57:7d:78:09:90:c9:b9:9c:3a:29:7a:fc:ad:2a:a9:ee:e2:6d: 67:7d:95:98:0f:fa:34:74:18:df:57:cf:b4:cb:61:9c:8f:72: b5:5c:78:84:61:fe:2d:28:ca:58:db:31:ad:ac:38:1a:32:47: ad:31:86:08:26:91:ee:3b:ab:11:5b:d9:f8:f8:7d:93:cf:d7: 39:42:d5:a6:87:e5:81:9b:6b:7b:5d:55:16:33:11:60:6a:f9: 1f:36:40:73:90:f3:03:e8:65:4d:7b:4b:da:5d:5a:89:22:b5: 9e:37:fa:c2:ef:e9:a5:a9:d7:df:89:07:55:db:73:dc:e4:18: 23:27:a2:7e:e8:07:94:07:be:bc:7d:af:bf:ab:cf:20:6e:a1: 6a:bd:b2:ed:46:3b:ff:41:b0:ba:c6:da:4f:71:06:c8:fd:e9: 40:19:4e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MEQxMTAvBgNVBAUTKDFCQUY4MjUxRDFBMTNGNDE4ODA2MEFCMTlBMDMwRDM2 Q0FBN0FCRDQwHhcNMjQwNTE4MTYzODQ1WhcNMjQwNTI1MTYzODQ1WjAYMRYwFAYD VQQDEw02NjQ4ZDk5NS1kYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8wPyjhbmqVNBs/v33osSiMX5pYH4wujH15aNbgnGHdn0FIE3crEchYqKrRk olo9ScGeAv83acl8i/Y0XBWbKc8ZUUvN19BsvRRU3wWMBExJ9Ou87SnbGHbR0DiZ W3YylKW2LUn+NxG5m5rY6kXIsGcB1BImZS30YtaTThR2Ll5078cdYGDHOiIt1Yji wbsp0xZsLVS/+UDL/EQu5Ow1NHj1EigEYsiEbcJ3fLx3xAuNboC893ub90dSKPjk nd5+jmWeR9w49MktvOeltv5t8UxvdALdZcl23+jL+jZYZuP/SvIBD2jemCSOmMiW Xz/HiEVinHif4nb53ihqjgBuewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmx2hei bZziMBS/m2JtrNzVpf1AMB8GA1UdIwQYMBaAFBuvglHRoT9BiAYKsZoDDTbKp6vU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcwRC8xNzZENDExNEVE MjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAwR0lCZ3F4bWdNTk5zcW5x OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c2LUNVZEdoUDBHSUJncXhtZ01OTnNxbnE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcwRC8xNzZENDExNEVEMjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAw R0lCZ3F4bWdNTk5zcW5xOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHTnBjH+cL/xWCwndm61V0jZcHG1Fg2Uxk8wkzBvTkxG85ocvuiUTH TZS0Qbn9WGBsKUB/MqvHr7uQptjJ1TWNB7gFk5RYJ173YITjcN+K3XpBRm14Uek7 3p1XfXgJkMm5nDopevytKqnu4m1nfZWYD/o0dBjfV8+0y2Gcj3K1XHiEYf4tKMpY 2zGtrDgaMketMYYIJpHuO6sRW9n4+H2Tz9c5QtWmh+WBm2t7XVUWMxFgavkfNkBz kPMD6GVNe0vaXVqJIrWeN/rC7+mlqdffiQdV23Pc5BgjJ6J+6AeUB768fa+/q88g bqFqvbLtRjv/QbC6xtpPcQbI/elAGU7M -----END CERTIFICATE-----Generated at Sat May 18 17:20:07 2024 by rpki-client on console-ams.rpki-client.org