$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft File: 6AKchCosGw6rjSFi239_RN4ccCg.mft (raw, json) Hash identifier: z4Bt5wi9ZiPYFT4BMmKIObdqC/nRkd+ophBlw+deTrQ= Subject key identifier: F9:B0:CD:13:FE:3E:88:DC:12:59:0A:AB:B2:5C:B0:BC:5B:2B:73:3A Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28 Certificate issuer: /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft Manifest number: 98 Signing time: Sun 19 May 2024 06:52:35 +0000 Manifest this update: Sun 19 May 2024 06:52:34 +0000 Manifest next update: Sun 26 May 2024 06:52:34 +0000 Files and hashes: 1: 6AKchCosGw6rjSFi239_RN4ccCg.crl (hash: BW2TwCr6NPkgKXqETvNI8RRQ4qesvqokUyXu2V+x7xQ=) 2: 63884D122F5911EE8D896A87C4F9AE02.roa (hash: 2/gS1Ur7dJJf5ZDU1v4+87+nOeiqSxg5Qxi76bv6NNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028 Validity Not Before: May 19 06:52:34 2024 GMT Not After : May 26 06:52:34 2024 GMT Subject: CN=6649a1b2-db7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:f1:32:ee:ca:1f:34:37:d1:fa:7f:51:72: 4b:19:88:e3:e4:93:87:39:ff:2b:ac:31:1b:8e:1c: 9c:76:96:b3:a1:61:6e:c4:93:dd:46:fd:12:a8:1f: f2:b3:9d:76:67:09:20:80:e5:2f:49:4c:ed:90:e4: 1c:97:e7:48:5a:58:7f:14:5b:79:00:5b:86:34:db: 75:4a:9b:46:b4:43:70:ca:dc:ff:2c:22:f7:50:0d: 36:b7:6f:af:94:71:17:4a:05:9a:89:6d:8f:72:de: 29:d2:ae:49:43:89:83:0c:fe:41:06:c5:fc:e6:2e: 49:2d:32:4f:cd:76:e5:eb:bc:85:d8:d0:ae:bb:e8: 1b:43:e6:a3:bf:a9:c3:be:84:5d:61:74:af:36:da: 95:54:4d:42:75:7b:5d:43:cc:0a:45:3a:08:98:44: 34:90:a5:d7:ba:ac:4f:46:89:cb:2e:d4:cb:67:96: 45:a7:fc:83:96:ce:23:6e:11:35:56:3f:f2:b7:b4: eb:f1:15:6c:2c:20:3a:68:33:ca:10:d0:b3:12:07: 2d:59:d9:6b:9f:80:02:cb:05:91:58:56:63:5a:84: 43:90:88:0e:77:68:33:f3:4c:74:be:eb:ab:de:13: 83:6c:5f:e6:40:b4:f2:a4:4f:d4:9e:2c:b3:b4:b5: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B0:CD:13:FE:3E:88:DC:12:59:0A:AB:B2:5C:B0:BC:5B:2B:73:3A X509v3 Authority Key Identifier: keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:65:d5:37:88:0e:5c:5f:da:c6:92:a8:01:be:9b:a4:43:9c: be:d7:62:d1:55:69:37:4a:c4:4e:b2:3c:4b:92:ab:26:05:74: 00:d5:2b:9a:e7:ce:88:35:16:fa:be:9e:84:aa:05:8a:96:66: 99:5a:63:2b:e9:33:60:67:81:b5:8f:7f:21:69:64:f9:01:93: 0e:eb:ca:a1:14:1f:c2:94:99:ef:66:a5:27:37:3d:3f:5f:47: 06:2a:a5:92:b6:a7:7d:46:56:78:a5:d1:71:b3:17:68:80:81: 11:a0:c9:b8:36:9d:f1:fd:fe:39:d8:20:13:fb:c1:b8:3b:3e: 2d:1e:c2:29:d5:e6:34:f9:77:22:7f:59:64:9b:cf:44:a7:f8: f7:c7:32:d9:71:a7:ee:37:1b:10:af:d1:8a:f6:d5:dc:2f:91: 94:6b:ba:8e:89:d0:a2:bc:17:95:f0:8e:f2:3e:ec:82:19:2b: 3e:33:d3:b0:8d:22:a2:f8:cb:da:16:61:7c:c9:7d:76:8e:3d: 80:f0:53:62:08:fd:37:51:94:79:54:b5:15:6e:58:e2:58:4c: c0:06:ee:10:5c:93:0d:d5:bb:49:58:bc:86:f8:98:ec:e3:bb: 40:d6:27:d6:03:00:97:0b:cb:ff:92:fb:76:59:3c:b3:3f:a2: bc:1b:52:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzNTUxMTAvBgNVBAUTKEU4MDI5Qzg0MkEyQzFCMEVBQjhEMjE2MkRCN0Y3RjQ0 REUxQzcwMjgwHhcNMjQwNTE5MDY1MjM0WhcNMjQwNTI2MDY1MjM0WjAYMRYwFAYD VQQDEw02NjQ5YTFiMi1kYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWDxMu7KHzQ30fp/UXJLGYjj5JOHOf8rrDEbjhycdpazoWFuxJPdRv0SqB/y s512ZwkggOUvSUztkOQcl+dIWlh/FFt5AFuGNNt1SptGtENwytz/LCL3UA02t2+v lHEXSgWaiW2Pct4p0q5JQ4mDDP5BBsX85i5JLTJPzXbl67yF2NCuu+gbQ+ajv6nD voRdYXSvNtqVVE1CdXtdQ8wKRToImEQ0kKXXuqxPRonLLtTLZ5ZFp/yDls4jbhE1 Vj/yt7Tr8RVsLCA6aDPKENCzEgctWdlrn4ACywWRWFZjWoRDkIgOd2gz80x0vuur 3hODbF/mQLTypE/UniyztLWKtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmwzRP+ PojcElkKq7JcsLxbK3M6MB8GA1UdIwQYMBaAFOgCnIQqLBsOq40hYtt/f0TeHHAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzM1NS8yMkU3NkI0NDJG NTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3NnJqU0ZpMjM5X1JONGNj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZBS2NoQ29zR3c2cmpTRmkyMzlfUk40Y2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzM1NS8yMkU3NkI0NDJGNTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3 NnJqU0ZpMjM5X1JONGNjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLZdU3iA5cX9rGkqgBvpukQ5y+12LRVWk3SsROsjxLkqsmBXQA1Sua 586INRb6vp6EqgWKlmaZWmMr6TNgZ4G1j38haWT5AZMO68qhFB/ClJnvZqUnNz0/ X0cGKqWStqd9RlZ4pdFxsxdogIERoMm4Np3x/f452CAT+8G4Oz4tHsIp1eY0+Xci f1lkm89Ep/j3xzLZcafuNxsQr9GK9tXcL5GUa7qOidCivBeV8I7yPuyCGSs+M9Ow jSKi+MvaFmF8yX12jj2A8FNiCP03UZR5VLUVbljiWEzABu4QXJMN1btJWLyG+Jjs 47tA1ifWAwCXC8v/kvt2WTyzP6K8G1IA -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org