$ rpki-client -vvf rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft File: n6-DQWde9DiWQZk2JUJXLIkoVAw.mft (raw, json) Hash identifier: iCWuwM98NOxTzLcu/FyWfruw2rXZ8T97OprA/y8wyTw= Subject key identifier: 49:87:9A:CF:D9:A6:2B:0B:70:70:BE:19:F3:EA:C0:D7:C4:D0:EB:CD Authority key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C Certificate issuer: /CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft Manifest number: 2D Signing time: Sun 19 May 2024 08:30:34 +0000 Manifest this update: Sun 19 May 2024 08:30:34 +0000 Manifest next update: Sun 26 May 2024 08:30:33 +0000 Files and hashes: 1: n6-DQWde9DiWQZk2JUJXLIkoVAw.crl (hash: FUdCtVFjYTzAfd5A4LhykRSFdm5L4q1OQeBYpHAxvEY=) 2: 86019882E2A311EEA6A97425C4F9AE02.roa (hash: Ci/8PiMZrulXsQO4Qd2WcbZeMIH3HFyiEST6ddlLdZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C Validity Not Before: May 19 08:30:34 2024 GMT Not After : May 26 08:30:33 2024 GMT Subject: CN=6649b8aa-b183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:8f:d1:47:fd:b8:b9:b3:e2:72:e3:f1:6f: 82:5a:ba:47:b0:37:ee:64:ec:f8:0a:4f:92:16:aa: 00:4a:ba:53:d7:9e:f1:c1:52:1c:3a:4a:a7:47:5b: 11:00:4a:d0:89:c5:9e:92:59:d7:93:88:8c:59:38: 76:0a:7d:eb:d8:93:e3:5b:86:bf:7a:61:a9:a4:26: d2:e3:e1:a4:2b:f3:6d:6d:09:38:f6:14:f3:8a:55: 0b:fe:f6:0f:b6:9a:1b:b8:7e:ee:b8:30:e4:42:3a: 58:11:e2:5b:c0:8a:9a:39:61:1a:98:71:b8:80:d5: 0c:aa:55:e8:86:bb:49:d2:b3:b9:9f:e8:6e:27:27: 98:d3:ec:de:9f:ba:31:30:04:84:5f:dc:42:4a:e8: a4:53:66:cb:e1:4d:4e:6c:56:b6:2a:6c:d7:e3:a0: bd:28:50:3c:cc:f0:b1:9c:4c:ba:ad:5c:03:bb:66: 0d:e4:f4:65:a1:0e:2f:a7:f2:79:82:c5:7d:4b:e2: ff:f4:cb:ee:bc:47:d6:4b:ab:0a:70:b7:47:6d:f3: 1b:c8:82:91:b2:a8:6a:27:42:7d:22:d3:e8:43:a9: 0d:ce:a4:46:54:9d:94:1c:ad:db:38:56:82:58:a0: b1:23:43:b6:23:0d:61:83:8e:cf:eb:fb:e7:3d:9a: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:87:9A:CF:D9:A6:2B:0B:70:70:BE:19:F3:EA:C0:D7:C4:D0:EB:CD X509v3 Authority Key Identifier: keyid:9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:12:9d:10:dd:04:fe:dd:58:c7:b7:74:2b:82:21:0e:ef:9a: 2b:2d:75:2f:db:a5:b2:52:2b:f0:3f:d1:27:94:0b:77:ef:4c: 32:1c:4e:f8:56:ab:9e:a4:76:8f:48:d7:f2:06:36:fe:b8:1f: 64:96:90:a2:8b:7f:7e:cf:69:ce:bf:a1:e3:db:10:7c:17:4e: 88:45:ea:66:bc:60:91:7f:25:c8:7e:ec:30:0d:b9:b8:20:68: 4b:bc:f3:ef:a1:45:c9:68:d9:9a:a2:22:a9:10:f5:f3:06:c2: fd:a4:d0:21:57:88:1f:17:1f:ff:1f:87:7e:29:a4:96:3a:3e: 5b:ce:70:5d:f4:8d:a1:5e:b5:d3:aa:d8:df:c0:e5:ae:61:1c: ee:47:4c:c8:b3:20:60:1e:f2:7c:cd:a3:5f:74:30:8c:43:ac: 01:65:70:f3:a7:9d:87:90:ff:51:ff:be:90:6a:27:e2:e4:95: 68:82:c6:db:36:b9:88:6e:5d:c7:e4:ca:43:28:f4:3a:d4:74: 2b:a7:9b:43:1b:da:9f:52:e5:f5:bf:33:ff:b6:08:b3:a5:ae: b8:01:4c:12:3c:fa:65:8a:c7:00:ed:cc:69:15:c6:8a:7d:7b: a5:f0:41:ea:36:0f:a6:0b:94:c0:6b:f1:ef:7b:4c:38:69:f5: 0b:e3:0f:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTE3QzExMC8GA1UEBRMoOUZBRjgzNDE2NzVFRjQzODk2NDE5OTM2MjU0MjU3MkM4 OTI4NTQwQzAeFw0yNDA1MTkwODMwMzRaFw0yNDA1MjYwODMwMzNaMBgxFjAUBgNV BAMTDTY2NDliOGFhLWIxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCweo/RR/24ubPicuPxb4JaukewN+5k7PgKT5IWqgBKulPXnvHBUhw6SqdHWxEA StCJxZ6SWdeTiIxZOHYKfevYk+Nbhr96YamkJtLj4aQr821tCTj2FPOKVQv+9g+2 mhu4fu64MORCOlgR4lvAipo5YRqYcbiA1QyqVeiGu0nSs7mf6G4nJ5jT7N6fujEw BIRf3EJK6KRTZsvhTU5sVrYqbNfjoL0oUDzM8LGcTLqtXAO7Zg3k9GWhDi+n8nmC xX1L4v/0y+68R9ZLqwpwt0dt8xvIgpGyqGonQn0i0+hDqQ3OpEZUnZQcrds4VoJY oLEjQ7YjDWGDjs/r++c9mhAbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSYeaz9mm KwtwcL4Z8+rA18TQ680wHwYDVR0jBBgwFoAUn6+DQWde9DiWQZk2JUJXLIkoVAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1MTdDL0NEMzc2M0U2RENF RDExRUVCREUwMEUzMEM0RjlBRTAyL242LURRV2RlOURpV1FaazJKVUpYTElrb1ZB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjYtRFFXZGU5RGlXUVprMkpVSlhMSWtvVkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 MTdDL0NEMzc2M0U2RENFRDExRUVCREUwMEUzMEM0RjlBRTAyL242LURRV2RlOURp V1FaazJKVUpYTElrb1ZBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALQSnRDdBP7dWMe3dCuCIQ7vmistdS/bpbJSK/A/0SeUC3fvTDIcTvhW q56kdo9I1/IGNv64H2SWkKKLf37Pac6/oePbEHwXTohF6ma8YJF/Jch+7DANubgg aEu88++hRclo2ZqiIqkQ9fMGwv2k0CFXiB8XH/8fh34ppJY6PlvOcF30jaFetdOq 2N/A5a5hHO5HTMizIGAe8nzNo190MIxDrAFlcPOnnYeQ/1H/vpBqJ+LklWiCxts2 uYhuXcfkykMo9DrUdCunm0Mb2p9S5fW/M/+2CLOlrrgBTBI8+mWKxwDtzGkVxop9 e6XwQeo2D6YLlMBr8e97TDhp9QvjDwU= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org