$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json) Hash identifier: REPYu4zOJ0g9ZzRmN9dxznHwoi3oTHtR6eAbnyHECBs= Subject key identifier: BB:55:F6:2E:8A:EF:C9:EA:F0:BD:BE:43:1C:63:2D:9B:7F:50:D0:D3 Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft Manifest number: 5B Signing time: Wed 29 May 2024 08:26:35 +0000 Manifest this update: Wed 29 May 2024 08:26:35 +0000 Manifest next update: Wed 05 Jun 2024 08:26:35 +0000 Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: jUu/SYk6uF/oqsDtfZ1TtRnN12Dg+e8EcYqCXGfbjIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Validity Not Before: May 29 08:26:35 2024 GMT Not After : Jun 5 08:26:35 2024 GMT Subject: CN=6656e6bb-4d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:eb:8c:fd:f1:10:bc:bf:36:98:1a:c6:36: c3:39:0d:9a:10:93:77:ca:9a:2b:cc:ff:bf:4b:6a: 8a:c9:60:0b:ae:f5:58:de:aa:60:84:61:e2:0d:5f: a6:e4:0f:83:9a:a2:57:28:db:bf:c5:d1:8d:bc:a2: 4d:d5:31:f4:27:db:b5:3c:6b:8f:94:0c:31:49:7d: 92:37:3b:e7:3e:00:23:cf:a6:37:7f:8b:2f:37:67: dd:86:53:38:92:77:29:7d:9a:9d:bd:96:a1:94:e5: fc:96:00:1a:3d:c4:c3:34:b4:03:51:6a:19:d2:32: 85:65:29:ab:89:a5:a9:27:68:5f:ea:7f:73:bb:0a: 60:15:20:45:1b:47:4e:33:a0:fb:ba:c1:98:f7:84: 24:b3:f4:b9:d9:95:d5:54:d6:f1:a9:85:f6:91:5a: 22:23:28:0a:ac:36:ef:e1:9a:50:4c:ee:3f:29:56: 06:eb:06:02:07:44:90:50:6f:23:75:ca:88:41:5c: 0f:e6:bb:7b:38:b2:3e:76:d3:d0:7f:40:ba:5a:04: 81:32:eb:e3:88:00:4e:ad:8c:5a:d4:0e:87:a0:d6: 2c:91:ba:88:4f:bd:bd:bd:b9:f2:a5:9d:1a:6e:62: 1d:5a:dd:9e:6b:55:64:a5:f8:ee:b6:45:47:e5:75: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:55:F6:2E:8A:EF:C9:EA:F0:BD:BE:43:1C:63:2D:9B:7F:50:D0:D3 X509v3 Authority Key Identifier: keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f9:87:be:fa:73:71:26:fe:0f:4c:0f:e2:a2:7b:93:17:5a: 2d:2e:e4:b7:c6:43:20:93:6c:7b:65:5f:3a:a7:75:7d:89:e8: 6a:f0:1a:25:ea:54:30:5c:5c:dd:ba:98:93:b3:a2:53:98:94: a7:de:ad:2a:3d:63:4d:ae:e4:fd:bb:32:6c:19:22:9f:dc:df: 9a:75:6b:67:b0:44:9b:af:79:fe:0e:3a:c2:38:23:74:0c:8d: cd:b5:92:3d:a9:e9:85:71:14:28:37:ee:d5:9f:e3:f4:e2:66: 5f:8c:46:cc:87:51:0d:b9:ff:42:ae:d3:6e:d4:4a:a8:e1:aa: 20:ee:86:f6:3e:0a:35:f6:bf:a0:66:1d:de:64:cc:65:2e:fe: c6:21:4e:3e:c9:cb:23:79:41:3e:9f:b3:25:20:c3:f7:a9:ac: ee:c1:63:99:44:98:83:68:96:49:5a:58:e8:99:90:e4:11:70: bc:f9:bd:51:cb:95:0e:06:9a:8d:c0:19:34:d4:9d:6a:64:41: c3:a2:a0:fe:1e:a4:42:42:c9:20:47:87:a6:3f:d5:b4:48:b6: 3c:45:d0:cb:81:cb:56:9f:95:f8:8c:26:32:5a:10:84:e7:98: 77:f3:e5:3f:2b:1b:f8:85:f5:49:d8:d9:08:1d:8c:7a:5a:08: ea:ad:56:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzNCNzExMC8GA1UEBRMoOEZBNjk4NjUxQzdBQzI0REI4MjdEMjM5RDBGQzhCMkM4 REEzNjZCODAeFw0yNDA1MjkwODI2MzVaFw0yNDA2MDUwODI2MzVaMBgxFjAUBgNV BAMTDTY2NTZlNmJiLTRkNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXN+uM/fEQvL82mBrGNsM5DZoQk3fKmivM/79LaorJYAuu9VjeqmCEYeINX6bk D4Oaolco27/F0Y28ok3VMfQn27U8a4+UDDFJfZI3O+c+ACPPpjd/iy83Z92GUziS dyl9mp29lqGU5fyWABo9xMM0tANRahnSMoVlKauJpaknaF/qf3O7CmAVIEUbR04z oPu6wZj3hCSz9LnZldVU1vGphfaRWiIjKAqsNu/hmlBM7j8pVgbrBgIHRJBQbyN1 yohBXA/mu3s4sj5209B/QLpaBIEy6+OIAE6tjFrUDoeg1iyRuohPvb29ufKlnRpu Yh1a3Z5rVWSl+O62RUfldVq1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu1X2Lorv yerwvb5DHGMtm39Q0NMwHwYDVR0jBBgwFoAUj6aYZRx6wk24J9I50PyLLI2jZrgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDM0I3LzFFNjc3N0FBOTMy NTExRUVCRTk4N0Y2MEM0RjlBRTAyL2o2YVlaUng2d2syNEo5STUwUHlMTEkyalpy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZhWVpSeDZ3azI0SjlJNTBQeUxMSTJqWnJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD M0I3LzFFNjc3N0FBOTMyNTExRUVCRTk4N0Y2MEM0RjlBRTAyL2o2YVlaUng2d2sy NEo5STUwUHlMTEkyalpyZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD75h776c3Em/g9MD+Kie5MXWi0u5LfGQyCTbHtlXzqndX2J6GrwGiXq VDBcXN26mJOzolOYlKferSo9Y02u5P27MmwZIp/c35p1a2ewRJuvef4OOsI4I3QM jc21kj2p6YVxFCg37tWf4/TiZl+MRsyHUQ25/0Ku027USqjhqiDuhvY+CjX2v6Bm Hd5kzGUu/sYhTj7JyyN5QT6fsyUgw/eprO7BY5lEmINolklaWOiZkOQRcLz5vVHL lQ4Gmo3AGTTUnWpkQcOioP4epEJCySBHh6Y/1bRItjxF0MuBy1aflfiMJjJaEITn mHfz5T8rG/iF9UnY2QgdjHpaCOqtVng= -----END CERTIFICATE-----Generated at Wed May 29 09:16:22 2024 by rpki-client on console-fra.rpki-client.org