$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft File: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json) Hash identifier: bzghR/UrT8Jt3p9P33hf+fNMFwnLwZCKPViULh+gIsQ= Subject key identifier: 03:62:A3:89:D1:10:DD:33:60:3C:1D:1B:4B:7A:2B:D1:15:94:9E:38 Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Certificate serial: 0A17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft Manifest number: 0A10 Signing time: Sat 18 May 2024 20:36:56 +0000 Manifest this update: Sat 18 May 2024 20:36:56 +0000 Manifest next update: Sat 25 May 2024 20:36:56 +0000 Files and hashes: 1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: 5S3pznSU1B9CQwwhMIfcmc3p2qDxkxIA9PsngiyzqxY=) 2: ECF9537C4FFE11EAA0E4ED42C4F9AE02.roa (hash: qBJ9Hui8D/xfnc4gS3fUXH8yHgH+HKK08Jtmay7yEw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2583 (0xa17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Validity Not Before: May 18 20:36:56 2024 GMT Not After : May 25 20:36:56 2024 GMT Subject: CN=66491168-f825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:2d:b5:db:03:f6:3a:eb:ab:76:22:05:04: 77:f1:af:48:ce:ed:60:08:ba:74:f5:6a:b1:f4:a0: e7:49:2d:05:ea:ca:28:76:f2:16:36:9d:54:ce:57: d5:ec:ea:29:c4:c4:c5:94:dc:ad:49:d2:13:ac:00: 61:53:6c:bc:c8:3b:66:f2:79:78:11:b6:df:7d:61: 53:25:46:aa:3c:ad:c2:95:14:18:8a:1a:43:71:df: d7:a2:ce:9b:d6:15:a2:6e:46:8e:b1:f4:f2:d5:76: c4:09:2c:92:63:70:5c:5f:6d:99:22:f5:6a:b9:5a: 44:9b:26:75:12:bb:26:ef:5b:b5:66:2c:1d:fa:b6: 33:e4:6b:a1:3a:36:64:05:e4:d0:a4:cf:e8:96:b9: 5e:ec:51:86:44:a5:a8:b2:55:94:15:8a:53:2a:40: dd:27:d8:65:02:e2:f4:5a:03:45:e7:21:e6:7a:0f: 3f:03:0c:55:cc:aa:96:d0:f6:96:27:f9:71:22:16: b4:0f:21:3d:65:4e:4f:3d:a6:f2:bf:e7:70:02:4c: fa:61:c4:bc:35:e4:d4:72:0b:cc:4c:a9:cb:57:8c: 52:61:4f:a1:1d:af:d7:3c:00:18:18:e7:3c:b9:98: 62:fe:6f:cd:2c:c7:74:3f:f5:38:17:4f:41:8d:2c: 39:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:62:A3:89:D1:10:DD:33:60:3C:1D:1B:4B:7A:2B:D1:15:94:9E:38 X509v3 Authority Key Identifier: keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:96:bc:35:aa:dc:b6:02:1d:f1:25:b4:97:19:6b:f5:8a:0b: a3:db:94:4c:2f:74:3c:6b:d3:c9:b8:b0:f6:cf:15:47:19:95: e6:be:e0:cd:b2:40:36:49:1e:e4:64:f9:bd:a0:36:f6:71:a3: 27:eb:23:5b:ae:fe:18:cb:8e:4c:e7:1d:af:dd:1e:a7:33:84: bb:b0:dc:f0:70:cc:3c:78:0f:2a:08:c7:69:a0:93:7c:40:b4: da:14:06:e0:62:26:89:42:a8:6c:1e:c1:17:8f:f6:9e:44:0c: ec:84:0f:4e:30:8d:fb:bc:a8:ac:fd:a6:50:c2:f3:a5:2c:9a: 45:6e:de:57:03:70:56:99:fe:60:5e:7b:c9:65:c2:af:c4:24: b7:bf:c3:7b:11:f7:81:aa:03:78:8b:bf:02:8c:1e:73:b3:26: 0b:39:72:50:12:30:51:cd:9b:62:72:9d:07:d6:92:e7:f0:18: f0:39:01:c5:3e:91:6d:35:fb:62:9b:11:4e:b5:0e:9b:b3:21: c6:48:c8:96:47:14:d7:5e:25:a1:0b:d6:b2:76:47:b7:39:e6: a2:f6:fc:53:e3:ac:c3:8c:06:90:66:b1:91:85:6f:79:f5:57: 8b:ca:78:83:86:ce:44:94:25:c2:1e:e7:06:78:df:ba:db:93: bc:85:51:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3 NTM0QzQ3MzAwHhcNMjQwNTE4MjAzNjU2WhcNMjQwNTI1MjAzNjU2WjAYMRYwFAYD VQQDEw02NjQ5MTE2OC1mODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygYttdsD9jrrq3YiBQR38a9Izu1gCLp09Wqx9KDnSS0F6soodvIWNp1UzlfV 7OopxMTFlNytSdITrABhU2y8yDtm8nl4EbbffWFTJUaqPK3ClRQYihpDcd/Xos6b 1hWibkaOsfTy1XbECSySY3BcX22ZIvVquVpEmyZ1Ersm71u1Ziwd+rYz5GuhOjZk BeTQpM/olrle7FGGRKWoslWUFYpTKkDdJ9hlAuL0WgNF5yHmeg8/AwxVzKqW0PaW J/lxIha0DyE9ZU5PPabyv+dwAkz6YcS8NeTUcgvMTKnLV4xSYU+hHa/XPAAYGOc8 uZhi/m/NLMd0P/U4F09BjSw5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANio4nR EN0zYDwdG0t6K9EVlJ44MB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTFCRS83MDA4NDc3RTRENjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4 TXhubkhJRWRoUVIxTk1SekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2lrw1qty2Ah3xJbSXGWv1iguj25RML3Q8a9PJuLD2zxVHGZXmvuDN skA2SR7kZPm9oDb2caMn6yNbrv4Yy45M5x2v3R6nM4S7sNzwcMw8eA8qCMdpoJN8 QLTaFAbgYiaJQqhsHsEXj/aeRAzshA9OMI37vKis/aZQwvOlLJpFbt5XA3BWmf5g XnvJZcKvxCS3v8N7EfeBqgN4i78CjB5zsyYLOXJQEjBRzZticp0H1pLn8BjwOQHF PpFtNftimxFOtQ6bsyHGSMiWRxTXXiWhC9aydke3Oeai9vxT46zDjAaQZrGRhW95 9VeLyniDhs5ElCXCHucGeN+625O8hVH3 -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org