$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json) Hash identifier: DPE5jfMJy4xcRK4t0Mon8yPacZvJWjfuVWmnNCcg280= Subject key identifier: 6F:7C:23:40:8B:49:BF:59:D6:FE:CF:7E:EF:C2:2E:F8:AD:54:A3:D3 Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Certificate serial: 1CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft Manifest number: 1CA0 Signing time: Sat 18 May 2024 16:32:44 +0000 Manifest this update: Sat 18 May 2024 16:32:43 +0000 Manifest next update: Sat 25 May 2024 16:32:43 +0000 Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: u9smR9seVw3oi4OopHBvrj/4z8z78YrikHgiv8NedLo=) 2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: +5YNfegr0aeFYU1zjDr+2ZPXVIvdnERfdvdcdTrCvKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7342 (0x1cae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Validity Not Before: May 18 16:32:43 2024 GMT Not After : May 25 16:32:43 2024 GMT Subject: CN=6648d82b-92a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:32:a5:cd:e4:b7:32:56:ea:97:af:9f:a1: f6:c9:03:77:bb:85:2e:52:3c:7a:36:e0:d8:8e:62: b8:f9:3a:2e:18:6e:09:9e:ae:76:ef:35:0d:07:54: 85:97:b3:e2:4a:3f:fd:33:ca:a5:16:6b:c0:06:9b: 8f:4f:5d:1f:37:db:ba:34:cc:a4:8d:34:ba:dc:cd: c5:f0:10:8d:3f:ce:16:1b:32:05:9b:97:e6:a7:f1: e8:c8:41:4c:23:ad:4d:0d:0e:a9:57:59:47:9d:48: 5b:99:54:a8:d2:22:dd:f0:41:4c:a7:a3:59:8c:73: 1a:a3:0b:e3:47:9e:61:02:d5:76:e7:d3:4d:d5:71: aa:15:7f:c3:0f:be:fc:e9:b1:8d:3e:a7:d1:94:97: 90:96:df:2e:1a:21:42:10:0b:d5:df:46:74:63:1a: e3:fc:04:d1:3b:5c:49:d6:f8:fe:e2:36:54:68:2e: 7f:d3:dd:cb:dc:a9:9c:b1:ce:c3:15:fa:55:3f:71: 5d:a5:e0:e3:df:bf:12:f6:11:7d:14:e3:14:18:d4: 21:8e:81:b8:fa:4d:05:ed:e3:fc:b5:b3:74:1c:7d: 58:bb:95:47:48:bc:36:2d:56:ea:00:ac:91:83:2c: 6b:1e:23:c3:41:7b:02:4e:72:fe:1b:41:59:20:0f: be:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7C:23:40:8B:49:BF:59:D6:FE:CF:7E:EF:C2:2E:F8:AD:54:A3:D3 X509v3 Authority Key Identifier: keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:aa:8e:89:24:87:41:4b:26:49:39:02:77:3f:66:59:ac:25: bc:a5:fd:c0:88:f3:bc:16:3a:98:64:88:95:73:2f:5c:96:dc: 38:f8:3f:9c:29:85:3e:ef:71:ff:9d:59:b7:a7:11:40:65:42: f8:eb:04:56:f3:25:6d:0f:b3:9f:51:72:8f:7a:fa:92:c9:b3: d5:c3:b7:ba:13:71:49:16:1c:b0:25:b4:6d:f5:4a:02:85:d4: d0:84:f4:da:a9:e0:0c:70:84:b1:c4:30:78:1a:4d:bd:cc:fe: 90:e5:d8:27:6b:d4:19:d2:3d:44:55:16:32:89:ea:3d:f5:c1: 34:4e:e7:08:2a:f4:d1:42:53:e4:8a:ab:0d:d0:14:77:80:d0: cd:11:75:87:ff:f6:54:5d:1e:4b:fd:0c:6d:d3:ab:13:e8:ae: fa:c0:8f:a1:8d:98:dc:dc:d4:4e:72:7e:c2:fb:8a:7f:1b:96: 29:78:e5:44:5c:e7:e6:0c:62:ab:ea:97:e9:bf:ba:42:21:7b: 4b:73:a6:71:58:ec:44:73:e2:82:16:c9:78:16:36:53:88:ce: c0:90:fa:8e:61:5d:3f:25:df:09:e0:2b:4a:e2:88:4a:22:ee: f9:96:0d:80:06:40:91:a4:27:e5:fc:d0:17:74:96:dc:d5:51: 38:2a:ff:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2 RjUzRTdDNTcwHhcNMjQwNTE4MTYzMjQzWhcNMjQwNTI1MTYzMjQzWjAYMRYwFAYD VQQDEw02NjQ4ZDgyYi05MmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYcypc3ktzJW6pevn6H2yQN3u4UuUjx6NuDYjmK4+TouGG4Jnq527zUNB1SF l7PiSj/9M8qlFmvABpuPT10fN9u6NMykjTS63M3F8BCNP84WGzIFm5fmp/HoyEFM I61NDQ6pV1lHnUhbmVSo0iLd8EFMp6NZjHMaowvjR55hAtV259NN1XGqFX/DD778 6bGNPqfRlJeQlt8uGiFCEAvV30Z0Yxrj/ATRO1xJ1vj+4jZUaC5/093L3Kmcsc7D FfpVP3FdpeDj378S9hF9FOMUGNQhjoG4+k0F7eP8tbN0HH1Yu5VHSLw2LVbqAKyR gyxrHiPDQXsCTnL+G0FZIA++EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG98I0CL Sb9Z1v7Pfu/CLvitVKPTMB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTZCNS9DQTZBNTVFQ0FBNUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNk eURYUWZwZ0VYdlJ2VS1mRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWqo6JJIdBSyZJOQJ3P2ZZrCW8pf3AiPO8FjqYZIiVcy9cltw4+D+c KYU+73H/nVm3pxFAZUL46wRW8yVtD7OfUXKPevqSybPVw7e6E3FJFhywJbRt9UoC hdTQhPTaqeAMcISxxDB4Gk29zP6Q5dgna9QZ0j1EVRYyieo99cE0TucIKvTRQlPk iqsN0BR3gNDNEXWH//ZUXR5L/Qxt06sT6K76wI+hjZjc3NROcn7C+4p/G5YpeOVE XOfmDGKr6pfpv7pCIXtLc6ZxWOxEc+KCFsl4FjZTiM7AkPqOYV0/Jd8J4CtK4ohK Iu75lg2ABkCRpCfl/NAXdJbc1VE4Kv97 -----END CERTIFICATE-----Generated at Sat May 18 17:20:35 2024 by rpki-client on console-ams.rpki-client.org