$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json) Hash identifier: 6TG8yB+dxGoUrlo9yz9p5+WmQb5FBeBYV0oDT+iBBmI= Subject key identifier: 90:9A:5C:8F:86:66:1C:38:5D:46:93:AF:EA:DB:4A:27:CA:A1:A3:30 Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Certificate serial: 19F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft Manifest number: 19DC Signing time: Sat 18 May 2024 16:47:34 +0000 Manifest this update: Sat 18 May 2024 16:47:34 +0000 Manifest next update: Sat 25 May 2024 16:47:34 +0000 Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: nL1jiobv0tjOlSFvJ87ypBGoBhkd3AnvENqi8ytInjU=) 2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: a50jvf311yVZMkPnjaiz9q3CIoz1l3rrtN0kJY6XaHw=) 3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: wicxmyDsQY1EUaRSvIw0q7r/W3oZXB3XiX+qbwHrohc=) 4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: JpM+ZOwLo9Asr0nWPQM+Gm4pd97au8FBgj/Ulqyq59s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6642 (0x19f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Validity Not Before: May 18 16:47:34 2024 GMT Not After : May 25 16:47:34 2024 GMT Subject: CN=6648dba6-c02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:a0:2e:14:48:fc:09:26:90:7c:c6:3b:ca: 08:6e:93:47:f8:8d:74:47:26:a5:2d:d8:e4:37:fc: 31:b4:b1:d4:1d:ce:d3:fa:c4:19:3e:eb:ba:f6:02: f6:03:01:76:08:78:27:15:ad:22:49:61:d3:51:f4: e9:85:87:6d:c2:0f:81:5d:e1:9e:7c:7f:ec:bc:89: 9e:11:14:c9:7b:fc:ea:fc:01:09:bb:6e:c9:a6:15: 0e:19:a1:81:20:f4:97:7a:16:ac:f8:69:bf:5a:44: 1f:99:88:a0:52:9a:a5:08:49:70:e7:9e:0f:1c:15: 47:f6:65:65:0a:7b:ac:ce:d9:01:97:fe:64:14:c4: c8:c9:7a:8a:c6:c4:36:c5:e3:4e:2c:53:c2:52:03: cf:f0:1e:dc:fe:1f:e5:ff:28:35:d6:09:36:b5:13: ce:48:5a:f7:a4:b8:d0:33:89:b6:b9:c4:90:95:a1: f2:69:eb:d3:39:61:f0:5c:6c:51:d2:78:b1:bf:61: 1e:7d:52:45:90:be:34:b9:29:86:7c:02:f4:24:17: 61:cf:b7:09:01:04:b9:59:52:c7:8a:14:46:ff:3e: 01:76:81:5e:af:77:fd:4d:11:a3:12:07:7e:7d:95: 73:5f:36:e1:86:9f:24:e5:45:a4:af:cb:0a:9e:38: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9A:5C:8F:86:66:1C:38:5D:46:93:AF:EA:DB:4A:27:CA:A1:A3:30 X509v3 Authority Key Identifier: keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:dd:05:a1:67:e6:54:0d:f8:83:c6:e8:f3:ee:b0:b9:75:cf: 18:bb:9c:41:4d:85:a7:96:5a:fd:a7:96:86:e6:70:09:79:8f: 07:05:30:00:d7:bd:9a:b6:21:8a:31:e8:61:86:5c:58:6d:b6: fd:b6:a1:c6:fc:9c:e1:82:e0:cd:3d:48:6f:dd:64:12:40:5b: c3:25:db:87:2f:3b:22:b2:b6:fd:64:44:fa:80:7b:c9:b5:5b: 7c:11:e5:38:ce:38:76:c2:45:cb:7d:77:ec:f9:90:81:68:d2: a6:e0:8a:cb:84:11:c6:76:16:04:ff:00:f1:94:59:65:c9:bb: 5d:ec:95:4f:36:c9:e4:ba:0b:34:67:9f:f9:bd:5b:fa:d3:8d: 39:00:fe:7f:4c:12:65:3b:af:54:e0:e6:aa:08:0e:e6:ff:79: 39:db:7f:43:b6:76:81:77:ff:ff:4e:f9:1a:61:6d:09:67:38: 76:46:2f:e1:cf:e6:92:46:f2:b2:a0:f2:85:7d:fc:0e:f5:bb: f5:48:5c:a8:05:1d:5b:c0:28:41:01:dc:19:e4:73:48:2f:09: 18:9f:91:1c:69:b4:9b:a5:53:89:2b:f3:a4:c9:ac:bd:06:4a: 89:31:c9:cd:fd:fa:a8:86:ee:fb:55:9c:05:3c:48:1a:0c:7b: 6c:81:19:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3OUMxMTAvBgNVBAUTKDBCQTM0RTY0MzBCMTBFNkE3RjJEMjk5NjQ0MjVEMUY3 MTRBRjg2NUMwHhcNMjQwNTE4MTY0NzM0WhcNMjQwNTI1MTY0NzM0WjAYMRYwFAYD VQQDEw02NjQ4ZGJhNi1jMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoSgLhRI/AkmkHzGO8oIbpNH+I10RyalLdjkN/wxtLHUHc7T+sQZPuu69gL2 AwF2CHgnFa0iSWHTUfTphYdtwg+BXeGefH/svImeERTJe/zq/AEJu27JphUOGaGB IPSXehas+Gm/WkQfmYigUpqlCElw554PHBVH9mVlCnusztkBl/5kFMTIyXqKxsQ2 xeNOLFPCUgPP8B7c/h/l/yg11gk2tRPOSFr3pLjQM4m2ucSQlaHyaevTOWHwXGxR 0nixv2EefVJFkL40uSmGfAL0JBdhz7cJAQS5WVLHihRG/z4BdoFer3f9TRGjEgd+ fZVzXzbhhp8k5UWkr8sKnjjF6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCaXI+G Zhw4XUaTr+rbSifKoaMwMB8GA1UdIwQYMBaAFAujTmQwsQ5qfy0plkQl0fcUr4Zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjc5Qy8xQ0VCNzcxODMz NTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERtcF9MU21XUkNYUjl4U3Zo bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2Tk9aREN4RG1wX0xTbVdSQ1hSOXhTdmhsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjc5Qy8xQ0VCNzcxODMzNTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERt cF9MU21XUkNYUjl4U3ZobHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT3QWhZ+ZUDfiDxujz7rC5dc8Yu5xBTYWnllr9p5aG5nAJeY8HBTAA 172atiGKMehhhlxYbbb9tqHG/JzhguDNPUhv3WQSQFvDJduHLzsisrb9ZET6gHvJ tVt8EeU4zjh2wkXLfXfs+ZCBaNKm4IrLhBHGdhYE/wDxlFllybtd7JVPNsnkugs0 Z5/5vVv60405AP5/TBJlO69U4OaqCA7m/3k5239DtnaBd///TvkaYW0JZzh2Ri/h z+aSRvKyoPKFffwO9bv1SFyoBR1bwChBAdwZ5HNILwkYn5EcabSbpVOJK/Okyay9 BkqJMcnN/fqohu77VZwFPEgaDHtsgRnn -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org