$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/_G47yjx9uyiXm7eCKmmkgBuZqug.mft File: _G47yjx9uyiXm7eCKmmkgBuZqug.mft (raw, json) Hash identifier: StdkVlTmSU51e6L02rxAJub3x0YpfskoK+P0ShO4rV8= Subject key identifier: 3A:F3:63:57:12:30:93:4F:62:BB:BB:BB:55:48:DD:FD:4B:4D:DF:1D Authority key identifier: FC:6E:3B:CA:3C:7D:BB:28:97:9B:B7:82:2A:69:A4:80:1B:99:AA:E8 Certificate issuer: /CN=A91B46B5/serialNumber=FC6E3BCA3C7DBB28979BB7822A69A4801B99AAE8 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_G47yjx9uyiXm7eCKmmkgBuZqug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/_G47yjx9uyiXm7eCKmmkgBuZqug.mft Manifest number: 06C9 Signing time: Thu 30 May 2024 23:40:50 +0000 Manifest this update: Thu 30 May 2024 23:40:50 +0000 Manifest next update: Thu 06 Jun 2024 23:40:50 +0000 Files and hashes: 1: _G47yjx9uyiXm7eCKmmkgBuZqug.crl (hash: 4dr4gljdZcxwYWBDnBhcg1xeBkxxIRMln8L+tBeKnrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/_G47yjx9uyiXm7eCKmmkgBuZqug.crl rsync://rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/_G47yjx9uyiXm7eCKmmkgBuZqug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_G47yjx9uyiXm7eCKmmkgBuZqug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B46B5/serialNumber=FC6E3BCA3C7DBB28979BB7822A69A4801B99AAE8 Validity Not Before: May 30 23:40:50 2024 GMT Not After : Jun 6 23:40:50 2024 GMT Subject: CN=66590e82-baa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:eb:44:32:db:99:20:4d:6c:bb:db:14:7c: 41:65:c2:9a:5b:41:6f:dd:33:b3:09:3a:e3:8a:c7: 25:07:b0:47:b0:7f:14:96:40:07:2c:c0:87:a4:41: 0e:25:84:2f:85:42:29:14:3a:f3:f4:b3:52:b2:1d: d9:83:4f:2c:9e:94:46:e8:f0:c9:6d:b9:85:ca:14: 22:f3:48:5a:6d:a3:a0:c5:ed:7a:0a:bd:ec:18:6f: aa:2c:04:74:24:21:68:e8:5a:2a:81:66:ca:28:60: e1:98:4b:ef:da:12:59:83:50:f8:56:14:ac:2d:3e: 38:a7:17:9c:03:cf:47:08:89:60:2e:b7:7e:58:f5: 58:65:bd:4e:1a:76:db:f0:25:28:d4:31:03:f6:ff: 5e:96:ec:09:76:7a:33:b9:b3:3a:91:70:85:92:30: 55:84:b0:a1:21:e5:25:30:37:cd:4b:24:2f:e9:d3: f2:4d:83:7a:62:75:75:88:3f:0d:60:7b:cd:17:f7: d5:e8:5b:c0:ef:7f:22:7a:60:d5:63:0e:11:2d:ad: b2:0c:45:97:b7:5b:10:da:93:a0:13:32:e9:c3:7d: 04:c8:28:19:e7:30:ca:cb:33:82:b7:e1:d5:ca:d9: 00:32:72:80:b0:05:c1:54:77:b9:61:23:07:f3:06: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F3:63:57:12:30:93:4F:62:BB:BB:BB:55:48:DD:FD:4B:4D:DF:1D X509v3 Authority Key Identifier: keyid:FC:6E:3B:CA:3C:7D:BB:28:97:9B:B7:82:2A:69:A4:80:1B:99:AA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/_G47yjx9uyiXm7eCKmmkgBuZqug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_G47yjx9uyiXm7eCKmmkgBuZqug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/_G47yjx9uyiXm7eCKmmkgBuZqug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3f:d4:c8:90:8a:0a:7e:c6:d3:c7:59:e6:35:e7:23:f3:17: 81:f8:d6:41:57:e8:56:32:2e:26:19:9b:55:63:80:f4:f9:ad: 9c:e9:fa:6e:6c:48:66:e0:66:7d:a0:71:a0:ae:b2:af:fe:b2: d5:66:56:67:a9:ad:67:f6:ba:2c:5c:57:99:94:9c:2f:d6:45: ee:b0:8c:ac:2f:9f:8a:5d:1a:84:a7:c0:26:a2:77:87:24:0d: dc:4f:80:5e:71:8c:12:a2:66:49:c4:4e:50:90:8b:0b:79:bd: a7:f9:66:8d:93:5b:34:62:8b:9d:d1:92:0f:59:18:76:d7:a3: 9e:6a:ac:76:de:1b:20:75:2d:16:58:79:12:ec:d4:f0:be:79: d3:cc:e4:16:ef:5a:da:26:ec:f4:d0:44:41:b8:88:b7:f0:df: a9:97:7f:f1:bd:9d:02:71:b4:8c:62:bc:b9:9d:70:f1:41:dc: a2:59:7a:49:3c:50:d9:d7:9e:86:c5:d4:fe:b5:a0:84:3b:7d: ce:00:4c:d0:ce:17:dd:6a:87:37:14:7f:7b:5b:05:62:58:d9: 9d:72:17:fe:8c:58:51:3c:d9:cc:1a:f2:89:e6:4c:60:f6:2c: 10:82:47:32:bc:37:49:96:61:f6:de:75:4c:18:fc:8d:bd:ba: b7:05:2f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ2QjUxMTAvBgNVBAUTKEZDNkUzQkNBM0M3REJCMjg5NzlCQjc4MjJBNjlBNDgw MUI5OUFBRTgwHhcNMjQwNTMwMjM0MDUwWhcNMjQwNjA2MjM0MDUwWjAYMRYwFAYD VQQDEw02NjU5MGU4Mi1iYWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0M3rRDLbmSBNbLvbFHxBZcKaW0Fv3TOzCTrjisclB7BHsH8UlkAHLMCHpEEO JYQvhUIpFDrz9LNSsh3Zg08snpRG6PDJbbmFyhQi80habaOgxe16Cr3sGG+qLAR0 JCFo6FoqgWbKKGDhmEvv2hJZg1D4VhSsLT44pxecA89HCIlgLrd+WPVYZb1OGnbb 8CUo1DED9v9eluwJdnozubM6kXCFkjBVhLChIeUlMDfNSyQv6dPyTYN6YnV1iD8N YHvNF/fV6FvA738iemDVYw4RLa2yDEWXt1sQ2pOgEzLpw30EyCgZ5zDKyzOCt+HV ytkAMnKAsAXBVHe5YSMH8wbtkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrzY1cS MJNPYru7u1VI3f1LTd8dMB8GA1UdIwQYMBaAFPxuO8o8fbsol5u3gipppIAbmaro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDZCNS9EMTg2RkUwQTE4 RDUxMUVCODFCNkU0NDFDNEY5QUUwMi9fRzQ3eWp4OXV5aVhtN2VDS21ta2dCdVpx dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19HNDd5ang5dXlpWG03ZUNLbW1rZ0J1WnF1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDZCNS9EMTg2RkUwQTE4RDUxMUVCODFCNkU0NDFDNEY5QUUwMi9fRzQ3eWp4OXV5 aVhtN2VDS21ta2dCdVpxdWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNP9TIkIoKfsbTx1nmNecj8xeB+NZBV+hWMi4mGZtVY4D0+a2c6fpu bEhm4GZ9oHGgrrKv/rLVZlZnqa1n9rosXFeZlJwv1kXusIysL5+KXRqEp8AmoneH JA3cT4BecYwSomZJxE5QkIsLeb2n+WaNk1s0Youd0ZIPWRh216Oeaqx23hsgdS0W WHkS7NTwvnnTzOQW71raJuz00ERBuIi38N+pl3/xvZ0CcbSMYry5nXDxQdyiWXpJ PFDZ156GxdT+taCEO33OAEzQzhfdaoc3FH97WwViWNmdchf+jFhRPNnMGvKJ5kxg 9iwQgkcyvDdJlmH23nVMGPyNvbq3BS/w -----END CERTIFICATE-----Generated at Fri May 31 00:28:52 2024 by rpki-client on console-fra.rpki-client.org