$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: 6zvQ1cGQvV19G3UA7mvJefs9MNoALnNNF7296f2DkTI= Subject key identifier: 6B:61:A3:20:90:40:0D:45:13:3C:53:61:DF:B8:07:FD:0B:AC:34:26 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 33CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 33C8 Signing time: Sat 18 May 2024 14:57:36 +0000 Manifest this update: Sat 18 May 2024 14:57:36 +0000 Manifest next update: Sat 25 May 2024 14:57:36 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: MJTE2iaJAIaruTLBxl+ZuC4po2aj1ToZCS51LjKjPL4=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: n3vOwUJUoWCR75yw1bvlHI6uJ2Fk4FKWZcFIvFpXKwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13259 (0x33cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: May 18 14:57:36 2024 GMT Not After : May 25 14:57:36 2024 GMT Subject: CN=6648c1e0-6bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:80:f9:7f:f7:06:65:13:65:42:9b:02:0f: 2b:b3:10:5e:9b:0e:af:0b:ca:8e:cc:16:11:11:bc: 70:2b:54:24:2d:98:82:e4:17:ce:40:c5:0f:3a:87: 8b:3b:d7:06:60:0f:54:db:61:40:8a:db:e6:6a:da: 3d:36:e3:fc:65:db:d0:3d:08:20:8c:0f:4f:60:77: b3:a5:4e:94:49:49:00:43:f0:1f:f9:33:82:80:c3: ee:5e:6e:0b:b6:f3:be:69:18:89:1c:b7:ef:a2:e8: 7c:a9:04:21:44:36:02:50:c2:7b:e7:10:1e:fd:c8: 8d:d2:82:e3:dc:1c:40:ff:d0:dc:3d:d6:75:e2:cf: 1f:0b:74:06:75:05:a5:9b:9c:69:2c:38:bf:a0:aa: 9a:d1:87:50:94:ad:fc:42:6b:08:1b:bd:55:73:54: 9c:74:1b:25:db:49:92:47:6d:bf:0b:4e:01:30:e8: 52:82:26:c4:4a:91:3a:bb:f3:e9:d9:1d:48:cf:16: 1b:57:e9:1e:96:ef:96:12:26:c4:b4:df:61:e0:ff: 10:71:04:94:92:1f:93:b6:7f:e7:37:46:da:ea:09: 92:64:42:8b:93:8a:9e:5b:07:11:29:41:11:7e:dd: 8c:9f:ea:95:10:0e:17:b9:37:93:b1:ad:7c:eb:a2: db:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:61:A3:20:90:40:0D:45:13:3C:53:61:DF:B8:07:FD:0B:AC:34:26 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:44:c5:dd:11:e2:ed:69:25:93:78:5b:70:c9:4b:a7:64:b0: 52:a8:06:ad:7d:ba:1a:3d:d4:40:77:12:67:55:6d:0d:4c:ed: 4a:37:be:c2:fd:68:9d:27:73:b4:36:9d:8b:1f:3b:7d:4a:f3: 9b:bb:b3:9c:cc:cc:08:82:47:2d:30:92:4e:91:cc:96:40:f6: 28:20:7a:36:36:26:3f:9f:ed:3c:a0:91:e8:d7:d9:b2:ac:a1: dc:5f:ea:27:31:62:a9:bf:a8:5e:bb:be:1e:81:ef:7e:8f:b3: a1:ec:07:d0:82:89:fb:a6:30:ec:a4:83:0f:2b:b0:7b:8d:59: 16:8e:48:03:7d:8d:5c:25:8d:e0:c7:88:70:b2:bb:9b:33:8c: 1d:a6:4b:87:2f:7e:ae:f5:cc:47:a6:11:b1:b7:14:53:b0:25: 39:ca:f7:74:aa:8f:78:9f:07:c9:c8:e6:21:05:24:a8:c1:e9: 14:e6:23:00:90:94:7a:eb:3f:19:92:98:f2:d3:1a:63:a8:b2: 88:ad:8e:1f:8b:76:7a:6e:2f:75:57:9c:ee:6f:0c:a2:95:55: 7e:04:9e:01:5f:39:23:7e:04:2b:9d:9f:86:61:2e:95:57:80: f9:ff:27:70:48:49:52:e2:e4:a8:04:40:00:64:05:6c:81:b2: e1:68:82:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjQwNTE4MTQ1NzM2WhcNMjQwNTI1MTQ1NzM2WjAYMRYwFAYD VQQDEw02NjQ4YzFlMC02YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PyA+X/3BmUTZUKbAg8rsxBemw6vC8qOzBYREbxwK1QkLZiC5BfOQMUPOoeL O9cGYA9U22FAitvmato9NuP8ZdvQPQggjA9PYHezpU6USUkAQ/Af+TOCgMPuXm4L tvO+aRiJHLfvouh8qQQhRDYCUMJ75xAe/ciN0oLj3BxA/9DcPdZ14s8fC3QGdQWl m5xpLDi/oKqa0YdQlK38QmsIG71Vc1ScdBsl20mSR22/C04BMOhSgibESpE6u/Pp 2R1IzxYbV+kelu+WEibEtN9h4P8QcQSUkh+Ttn/nN0ba6gmSZEKLk4qeWwcRKUER ft2Mn+qVEA4XuTeTsa1866LbdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGthoyCQ QA1FEzxTYd+4B/0LrDQmMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqRMXdEeLtaSWTeFtwyUunZLBSqAatfboaPdRAdxJnVW0NTO1KN77C /WidJ3O0Np2LHzt9SvObu7OczMwIgkctMJJOkcyWQPYoIHo2NiY/n+08oJHo19my rKHcX+onMWKpv6heu74ege9+j7Oh7AfQgon7pjDspIMPK7B7jVkWjkgDfY1cJY3g x4hwsrubM4wdpkuHL36u9cxHphGxtxRTsCU5yvd0qo94nwfJyOYhBSSowekU5iMA kJR66z8Zkpjy0xpjqLKIrY4fi3Z6bi91V5zubwyilVV+BJ4BXzkjfgQrnZ+GYS6V V4D5/ydwSElS4uSoBEAAZAVsgbLhaIKq -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org