$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json) Hash identifier: udAWuPPwdBac714nV7Aq3yaMQK5EghFh3aUfDNfpyNU= Subject key identifier: 85:33:B4:7C:DD:A7:CE:97:9C:79:60:7E:5A:87:A2:A2:BA:BF:DF:2F Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft Manifest number: 44 Signing time: Sun 19 May 2024 08:10:45 +0000 Manifest this update: Sun 19 May 2024 08:10:45 +0000 Manifest next update: Sun 26 May 2024 08:10:45 +0000 Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: JdoU/Bkh2gVlrFCc0y60LXjll56JsmxvMniXXYi95c4=) 2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: eaJ/+41Y17jpA221CA5Azh5X2Cjo4uasGG6BRZBrij8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Validity Not Before: May 19 08:10:45 2024 GMT Not After : May 26 08:10:45 2024 GMT Subject: CN=6649b405-b979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:dd:27:e4:a8:2e:57:32:1d:4b:95:63:ac: 29:94:aa:82:ba:23:88:18:1f:a9:18:dd:eb:3d:1c: 57:d2:89:7a:45:f0:93:84:b1:b6:8d:4d:dc:03:2c: 94:97:ef:f0:a5:bf:fb:72:fe:3c:fd:fb:a3:9c:24: 34:d5:58:4c:e7:86:92:1a:eb:3d:c4:7c:a7:dc:c0: 12:b9:07:95:59:ac:e8:9c:25:bc:ce:20:a1:7e:ac: 98:20:dd:8c:9c:39:9b:d6:1f:49:42:96:61:94:e2: 3e:24:89:a6:60:26:bc:90:10:8b:28:c3:95:f2:8f: c3:4f:9f:42:b4:70:c5:0f:fe:9f:6d:4c:ff:94:ef: 25:e6:7c:25:59:ef:5f:5e:51:30:12:83:9c:63:51: c4:bb:ea:36:32:fa:f5:40:55:26:9d:76:d5:59:76: fb:9f:49:2a:51:cf:e5:fb:df:85:2f:56:37:12:0f: 03:fa:f2:16:1c:dd:da:e2:b6:ea:aa:98:58:f5:8c: 45:f2:cd:74:6a:79:39:ab:9b:cf:1e:1e:ab:cc:9a: b5:c3:a5:f3:26:52:b6:d0:99:dd:20:85:02:8d:c0: 51:e0:d4:0b:d4:08:9c:6b:ea:58:99:cc:e0:bc:3c: 76:fe:90:94:e0:de:41:17:1a:3c:43:a7:56:28:a7: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:33:B4:7C:DD:A7:CE:97:9C:79:60:7E:5A:87:A2:A2:BA:BF:DF:2F X509v3 Authority Key Identifier: keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:dc:da:59:27:ec:6d:cc:6e:06:c3:41:8b:bb:cb:b8:63:21: 4f:1a:ee:26:ef:ed:c0:de:3c:a4:89:09:4c:1b:1e:cb:dc:5d: 4d:ec:aa:6f:f2:ea:a3:ea:12:f9:f9:bf:81:e4:0f:c4:5a:70: 6c:c3:51:ce:90:36:d8:bb:5d:1a:90:43:d1:64:10:b4:f6:7b: 81:22:d2:ba:a5:c5:e0:97:ea:73:8e:60:67:7f:46:3c:57:04: a3:da:9c:71:a1:d1:78:e7:e6:d2:69:0c:f3:0f:f9:d9:41:0c: ab:59:12:8a:af:9f:57:3d:92:43:f7:9b:3a:26:2b:f6:8b:93: f3:58:b7:1b:6f:cc:e4:27:e1:07:16:fe:9a:60:a0:d5:9d:ff: 21:27:1d:67:4c:8a:c3:f9:44:08:6e:b3:a2:e4:d1:be:3c:58: 9b:3b:8b:f6:6f:95:4b:42:e8:af:86:2e:df:a7:3f:3d:24:1b: 2c:16:65:2b:31:65:45:5b:90:83:b1:55:62:81:6a:d7:6d:88: bc:ac:c4:ff:1b:f6:f5:08:4f:22:ed:2a:a2:24:a2:5e:0f:c5: 23:fc:1b:58:49:bd:2a:74:32:64:a7:9a:b5:0f:61:cf:39:aa: 5d:4a:98:6b:d9:8c:09:c2:df:3e:18:ce:de:82:3a:5c:37:9e: 3c:a0:6a:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUNCMjExMC8GA1UEBRMoRTg4ODYxRkY0QTQ1MzgwMjY3QTgxQjU4RkE5OUU0ODlB RDAwMUJCRDAeFw0yNDA1MTkwODEwNDVaFw0yNDA1MjYwODEwNDVaMBgxFjAUBgNV BAMTDTY2NDliNDA1LWI5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4XN0n5KguVzIdS5VjrCmUqoK6I4gYH6kY3es9HFfSiXpF8JOEsbaNTdwDLJSX 7/Clv/ty/jz9+6OcJDTVWEznhpIa6z3EfKfcwBK5B5VZrOicJbzOIKF+rJgg3Yyc OZvWH0lClmGU4j4kiaZgJryQEIsow5Xyj8NPn0K0cMUP/p9tTP+U7yXmfCVZ719e UTASg5xjUcS76jYy+vVAVSaddtVZdvufSSpRz+X734UvVjcSDwP68hYc3drituqq mFj1jEXyzXRqeTmrm88eHqvMmrXDpfMmUrbQmd0ghQKNwFHg1AvUCJxr6liZzOC8 PHb+kJTg3kEXGjxDp1YopyIFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhTO0fN2n zpeceWB+Woeiorq/3y8wHwYDVR0jBBgwFoAU6Ihh/0pFOAJnqBtY+pnkia0AG70w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQ0IyLzlGRTc2MEE2Qjgz QzExRUU4NzQxOTAyRUM0RjlBRTAyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkloaF8wcEZPQUpucUJ0WS1wbmtpYTBBRzcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB Q0IyLzlGRTc2MEE2QjgzQzExRUU4NzQxOTAyRUM0RjlBRTAyLzZJaGhfMHBGT0FK bnFCdFktcG5raWEwQUc3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3c2lkn7G3MbgbDQYu7y7hjIU8a7ibv7cDePKSJCUwbHsvcXU3sqm/y 6qPqEvn5v4HkD8RacGzDUc6QNti7XRqQQ9FkELT2e4Ei0rqlxeCX6nOOYGd/RjxX BKPanHGh0Xjn5tJpDPMP+dlBDKtZEoqvn1c9kkP3mzomK/aLk/NYtxtvzOQn4QcW /ppgoNWd/yEnHWdMisP5RAhus6Lk0b48WJs7i/ZvlUtC6K+GLt+nPz0kGywWZSsx ZUVbkIOxVWKBatdtiLysxP8b9vUITyLtKqIkol4PxSP8G1hJvSp0MmSnmrUPYc85 ql1KmGvZjAnC3z4Yzt6COlw3njygaqo= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org