$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: sN0l/+WDFeHoY2Ut+EJ8Ctg4OZK5SUFxrh9P7H2I/40= Subject key identifier: D5:E6:15:67:B1:83:1E:71:7F:A1:44:6E:20:FD:C8:BA:8E:A5:56:66 Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0BBF Signing time: Sat 18 May 2024 19:10:34 +0000 Manifest this update: Sat 18 May 2024 19:10:34 +0000 Manifest next update: Sat 25 May 2024 19:10:34 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: hqjAQQVnENmOPMrbvRoryuWbCU2RuPUMAj4EEg1g4XY=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: Y6Hkp4sTJO7AZ5C1Wz7mMUSK6uq+xj1g3IXrcWStJ+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: May 18 19:10:34 2024 GMT Not After : May 25 19:10:34 2024 GMT Subject: CN=6648fd2a-bce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:fe:de:a3:72:47:d6:28:cd:e9:40:6b:6b: f5:51:ba:1f:5f:39:a7:48:8b:7e:c1:69:70:df:33: 34:e7:7b:23:3e:3f:ae:48:3c:68:9c:8c:1a:69:3c: f6:4e:84:fd:e6:9a:2a:44:e7:b1:58:e5:52:5a:2e: c2:16:50:58:ca:74:bf:f8:ac:1e:b6:41:97:b8:e9: 59:36:82:72:a7:f2:21:29:ba:f9:65:03:b6:38:bd: f2:fb:5e:92:eb:c5:12:63:8b:78:ad:16:94:1b:3b: 5f:04:e8:17:4b:e9:76:29:54:97:f5:f1:2d:9a:e0: 9d:be:77:e1:9f:56:c1:77:5f:d5:bc:8b:9d:83:c8: ce:2e:2c:b9:52:26:73:d9:11:8a:82:61:bc:c8:d0: 5a:79:a0:0c:82:ad:c6:54:fd:90:28:26:2f:16:8f: e6:a2:d8:17:5d:d2:99:b9:58:5a:37:c0:9d:ed:a2: fe:9e:c2:c4:6c:b6:4c:8d:9a:bb:39:4f:f5:cb:2d: 22:aa:bb:05:3c:a9:da:78:de:d9:af:0e:3a:14:cd: 01:f0:13:c2:ef:24:07:56:ad:4c:dc:8a:42:dc:17: f5:d0:49:3b:30:48:fa:5d:60:6c:63:01:4c:74:c2: 67:5e:ec:b4:7c:03:d5:95:0d:a7:ae:6e:11:40:9a: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E6:15:67:B1:83:1E:71:7F:A1:44:6E:20:FD:C8:BA:8E:A5:56:66 X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b5:11:ec:8a:cd:8e:ed:03:44:08:3e:c1:62:8c:dd:0a:e1: 66:95:ee:22:f0:f8:aa:32:3b:cf:7a:77:20:cb:4c:cd:b7:61: 32:39:32:c3:86:8c:0a:1d:b0:0e:3b:51:06:a8:95:1c:5c:30: 53:32:88:f9:12:b7:f8:b1:d1:1f:08:38:b6:7b:01:2d:8e:3c: 13:64:b4:4e:b5:9c:7d:8e:d8:78:65:e2:f7:53:8f:e8:74:66: 2a:a4:79:b3:20:24:0a:7b:44:52:7b:05:ee:64:97:13:d3:08: ca:14:9c:45:b3:8d:e1:cc:58:39:f4:42:4d:dd:49:da:b6:f3: 6d:77:21:cf:1e:e5:42:4a:84:95:69:4d:6e:bf:14:67:82:52: bc:9e:b3:bc:9d:85:ae:3e:98:f0:e8:d3:ff:a8:b6:27:c1:30: 51:cc:60:69:a7:ae:d3:55:a7:6c:d5:a8:62:ed:47:4a:dc:a8: 23:da:10:c2:2b:68:6f:9f:1b:bf:df:b3:09:48:c4:25:08:33: 01:33:86:3d:2a:be:45:8f:0f:ce:8d:77:cc:05:41:4c:6a:55: e5:e7:ee:52:1c:66:75:e4:dd:3e:77:b0:27:2f:a5:1b:fd:94: 21:8d:cc:44:49:43:4a:bc:29:da:fa:ad:2e:0e:fa:99:44:83: 8c:08:32:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjQwNTE4MTkxMDM0WhcNMjQwNTI1MTkxMDM0WjAYMRYwFAYD VQQDEw02NjQ4ZmQyYS1iY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6/+3qNyR9YozelAa2v1UbofXzmnSIt+wWlw3zM053sjPj+uSDxonIwaaTz2 ToT95poqROexWOVSWi7CFlBYynS/+KwetkGXuOlZNoJyp/IhKbr5ZQO2OL3y+16S 68USY4t4rRaUGztfBOgXS+l2KVSX9fEtmuCdvnfhn1bBd1/VvIudg8jOLiy5UiZz 2RGKgmG8yNBaeaAMgq3GVP2QKCYvFo/motgXXdKZuVhaN8Cd7aL+nsLEbLZMjZq7 OU/1yy0iqrsFPKnaeN7Zrw46FM0B8BPC7yQHVq1M3IpC3Bf10Ek7MEj6XWBsYwFM dMJnXuy0fAPVlQ2nrm4RQJoY+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXmFWex gx5xf6FEbiD9yLqOpVZmMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTtRHsis2O7QNECD7BYozdCuFmle4i8PiqMjvPencgy0zNt2EyOTLD howKHbAOO1EGqJUcXDBTMoj5Erf4sdEfCDi2ewEtjjwTZLROtZx9jth4ZeL3U4/o dGYqpHmzICQKe0RSewXuZJcT0wjKFJxFs43hzFg59EJN3UnatvNtdyHPHuVCSoSV aU1uvxRnglK8nrO8nYWuPpjw6NP/qLYnwTBRzGBpp67TVads1ahi7UdK3Kgj2hDC K2hvnxu/37MJSMQlCDMBM4Y9Kr5Fjw/OjXfMBUFMalXl5+5SHGZ15N0+d7AnL6Ub /ZQhjcxESUNKvCna+q0uDvqZRIOMCDJ9 -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org