$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json) Hash identifier: UNOvTznIgCsSig3fYmds0nfthOeIh9hbJwYNHpXr4p0= Subject key identifier: 16:83:60:31:9C:5F:9F:07:45:26:F6:28:E2:79:BC:43:64:AE:3E:80 Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft Manifest number: 2A Signing time: Sun 19 May 2024 08:33:57 +0000 Manifest this update: Sun 19 May 2024 08:33:56 +0000 Manifest next update: Sun 26 May 2024 08:33:56 +0000 Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: DONfF0ukn2YtgtqExB3tOeMUkqs0Xwa3HpvMxcRjMfs=) 2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: IUegl9QiYcZ57UxkwHSmB0h6cmqmY+Zp4XaCYHUowN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: May 19 08:33:56 2024 GMT Not After : May 26 08:33:56 2024 GMT Subject: CN=6649b975-5342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:5b:29:a2:4e:50:28:9b:d0:3e:55:a1:7c: 3d:ef:a9:11:77:3b:32:3e:c4:bd:e8:4b:00:ae:70: e3:d6:cd:2b:23:5b:f6:de:ce:6a:06:ed:b4:61:c3: c1:b3:c1:21:72:7a:f6:1a:f0:d2:8e:ce:0f:14:73: 6a:31:1a:9d:24:5c:29:71:77:ac:3c:65:0f:4c:c6: 4e:51:12:5c:3a:4f:07:5d:cc:d0:dc:c6:56:2b:b6: 13:fb:70:88:4d:7e:ef:5f:7c:98:35:e4:e3:5e:6c: 92:4b:1d:f0:14:ff:41:92:c4:4d:7b:47:b6:e9:2b: b1:52:0d:81:25:e4:dc:12:2c:92:24:b4:3b:63:32: 89:e9:64:c5:f9:11:0c:38:ee:3f:74:64:10:42:4f: dd:97:4f:89:02:ad:3c:bf:2c:dc:51:78:4f:1f:75: 06:61:5b:03:8c:a8:c8:bc:c4:2e:1c:8c:7a:c8:97: 5e:d1:e4:16:a3:30:c5:b5:d6:fb:04:e9:a8:f6:c3: 5a:88:38:52:53:1d:e0:b4:a0:f1:07:16:88:72:cc: 29:ea:03:ff:0c:ef:7f:d8:59:f3:f1:c3:04:63:32: 9b:59:7a:bd:dc:4f:87:88:74:db:b9:05:44:40:b8: cf:5e:2e:03:a8:28:8b:8b:ec:e4:e9:40:0b:97:76: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:83:60:31:9C:5F:9F:07:45:26:F6:28:E2:79:BC:43:64:AE:3E:80 X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:32:18:c3:99:75:34:c0:d5:0d:ab:c2:eb:bb:1a:27:e2:ff: 96:fb:f2:5f:29:01:75:4a:1b:d8:11:4f:31:48:4e:77:ee:d9: 5d:72:ff:f2:43:9e:71:a4:f3:f3:9e:7f:37:75:db:1c:4b:84: 84:d6:83:81:e1:c0:8c:31:a6:48:a8:99:cf:da:74:e2:ca:e5: aa:45:39:4a:67:d6:81:30:c5:b8:6d:c0:68:6d:ab:e3:a9:1d: 5d:10:ec:53:97:8c:f0:ec:43:77:27:78:58:0d:77:2c:f9:fa: 4c:a0:b4:37:ba:a7:92:a8:d2:86:c5:1f:88:70:7b:56:07:5e: cf:5d:41:f0:50:fb:c9:9e:c1:45:a9:8f:ad:7b:d6:17:16:19: 93:b9:c3:cf:ba:90:69:e4:ae:c3:0b:11:35:cf:55:87:2f:7f: 51:c6:a4:c0:5f:52:28:a1:1c:e5:a6:14:8b:a9:56:08:13:bc: c2:46:72:bc:5d:2e:19:45:28:ab:0a:a5:53:98:9a:5f:b4:fe: 5b:84:15:d2:70:66:6e:d6:32:00:d3:82:fc:b3:c3:08:2d:1e: 3c:62:d7:02:4a:2b:36:4e:ca:03:18:c8:11:93:cd:07:b4:53: 2a:9b:2a:dc:3e:13:03:fc:ef:fe:3c:e6:91:de:a2:04:32:69: 76:51:68:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzdCODExMC8GA1UEBRMoNkJBOTlFRDYzOTFBNjdDQ0E2MTBFNTY1RjQ1M0VCMDkx MjUxNEYwRTAeFw0yNDA1MTkwODMzNTZaFw0yNDA1MjYwODMzNTZaMBgxFjAUBgNV BAMTDTY2NDliOTc1LTUzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1o1spok5QKJvQPlWhfD3vqRF3OzI+xL3oSwCucOPWzSsjW/bezmoG7bRhw8Gz wSFyevYa8NKOzg8Uc2oxGp0kXClxd6w8ZQ9Mxk5RElw6TwddzNDcxlYrthP7cIhN fu9ffJg15ONebJJLHfAU/0GSxE17R7bpK7FSDYEl5NwSLJIktDtjMonpZMX5EQw4 7j90ZBBCT92XT4kCrTy/LNxReE8fdQZhWwOMqMi8xC4cjHrIl17R5BajMMW11vsE 6aj2w1qIOFJTHeC0oPEHFohyzCnqA/8M73/YWfPxwwRjMptZer3cT4eIdNu5BURA uM9eLgOoKIuL7OTpQAuXdlMHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFoNgMZxf nwdFJvYo4nm8Q2SuPoAwHwYDVR0jBBgwFoAUa6me1jkaZ8ymEOVl9FPrCRJRTw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3N0I4LzBBQjA3NDA0RTFG MDExRUU5MDFBNjA4NUM0RjlBRTAyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTZtZTFqa2FaOHltRU9WbDlGUHJDUkpSVHc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 N0I4LzBBQjA3NDA0RTFGMDExRUU5MDFBNjA4NUM0RjlBRTAyL2E2bWUxamthWjh5 bUVPVmw5RlByQ1JKUlR3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADUyGMOZdTTA1Q2rwuu7Gifi/5b78l8pAXVKG9gRTzFITnfu2V1y//JD nnGk8/Oefzd12xxLhITWg4HhwIwxpkiomc/adOLK5apFOUpn1oEwxbhtwGhtq+Op HV0Q7FOXjPDsQ3cneFgNdyz5+kygtDe6p5Ko0obFH4hwe1YHXs9dQfBQ+8mewUWp j6171hcWGZO5w8+6kGnkrsMLETXPVYcvf1HGpMBfUiihHOWmFIupVggTvMJGcrxd LhlFKKsKpVOYml+0/luEFdJwZm7WMgDTgvyzwwgtHjxi1wJKKzZOygMYyBGTzQe0 UyqbKtw+EwP87/485pHeogQyaXZRaKw= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org