$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft File: t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json) Hash identifier: ay9IqYb6adlM6w4dlVkqdNrk0xaYXzsExV1a4IhkDpw= Subject key identifier: FA:46:0D:75:FF:37:AD:A3:E6:6F:92:D7:1B:AC:0D:52:5C:02:4C:D6 Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Certificate serial: 1A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft Manifest number: 1A1F Signing time: Thu 30 May 2024 17:05:44 +0000 Manifest this update: Thu 30 May 2024 17:05:44 +0000 Manifest next update: Thu 06 Jun 2024 17:05:44 +0000 Files and hashes: 1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: df334dRkzq6wQtkic2MoybLbvkl/cQfIuKgNd8SHprY=) 2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: F/S8AioHMhl/X8J3CcnYUHXIULmRySNS41JHCMugVlY=) 3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: becdUlU0pzm+rTWjvZx42/pYjskuy1zBf2rR0ajjah0=) 4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: AVwqpX6FayZNpFX6kyIsTun1sVHL/w/miYCG6ceUG/g=) 5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: shZ1SoLVzfeL8x+bbIRO6LB79qQKbmIOeQclikjQj88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 17:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6757 (0x1a65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Validity Not Before: May 30 17:05:44 2024 GMT Not After : Jun 6 17:05:44 2024 GMT Subject: CN=6658b1e8-d59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:97:e3:13:04:07:b6:03:f9:e5:dc:7a:9b: 80:d2:ff:c8:ae:7d:c3:63:ec:b2:a5:54:58:09:df: 25:a1:dd:a6:9a:9b:77:f7:cf:c2:0c:7c:ac:3b:d2: 8b:aa:01:53:93:50:69:2f:52:65:4b:0c:ea:c0:f6: 3d:f1:b2:f8:61:b9:4a:7c:8a:0c:44:c8:06:5a:f7: 48:0e:63:7c:db:24:97:d8:56:7b:06:3a:a9:da:40: a8:ce:7b:72:14:81:de:d2:02:64:b6:90:46:e6:ff: 11:31:08:8f:04:24:f1:8a:9b:5e:4a:97:dc:0a:e2: 2a:65:76:2d:a1:70:db:96:eb:67:fb:c7:0c:e4:85: b7:34:ca:08:ab:27:cb:98:f1:86:a9:58:15:65:89: db:85:03:f5:22:f1:08:ab:81:dd:d5:7d:16:d3:8c: 7f:f1:23:c2:85:bb:24:e1:c3:37:74:83:fa:3b:cc: 9a:bc:99:8e:cd:9c:80:ea:be:bb:61:cb:19:1e:9b: f2:47:f1:cf:87:40:ba:da:c2:5c:97:75:db:8c:9e: 9f:86:86:0b:42:77:aa:ef:bb:5e:01:87:aa:33:fb: 22:2e:63:40:38:38:fa:b0:a9:fd:d7:19:af:5e:88: e6:55:30:30:67:83:cb:dd:88:f9:f1:3f:52:cf:cf: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:46:0D:75:FF:37:AD:A3:E6:6F:92:D7:1B:AC:0D:52:5C:02:4C:D6 X509v3 Authority Key Identifier: keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:0f:52:28:b3:68:aa:35:96:67:51:7e:61:6c:32:18:dc:8e: 54:b7:ce:8d:16:7f:83:d2:e4:d2:10:f5:24:a7:bd:bd:08:a5: d3:1f:ce:78:8f:fa:59:98:f2:53:1f:53:ab:4a:2c:aa:d7:7d: ce:5c:17:5b:40:8e:16:4c:a1:3b:21:28:1d:fe:2f:72:96:2e: 92:cf:f4:04:48:02:6c:c7:80:3c:9b:9d:79:22:3f:68:d6:db: 2a:8d:b9:1d:21:12:0e:41:f6:52:c6:a1:9b:a9:98:92:69:59: 01:48:f5:98:51:7f:73:18:b6:9b:1a:1e:7b:a2:f8:77:e2:41: 39:a2:e1:c2:bf:96:15:04:33:05:52:7d:28:90:38:23:d2:94: df:a5:c5:10:25:70:9e:59:50:2d:fb:81:e7:f9:f3:23:fe:9d: 37:4c:41:d6:14:08:0c:fc:2b:86:a2:54:e8:e5:10:90:71:fc: 9b:92:2b:42:b9:76:a6:62:0d:37:be:0c:03:2c:fd:32:5f:11: 74:a0:6b:f3:6e:a5:09:07:b5:a9:06:98:57:f4:2a:b0:8a:5c: d9:41:e8:6d:25:a5:40:3a:88:1c:27:18:b4:33:66:37:65:ed: cd:66:2c:22:3f:90:75:3e:31:ec:ac:aa:0b:5d:6d:24:cf:61: bf:f2:f8:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2 ODYxNjc4RkQwHhcNMjQwNTMwMTcwNTQ0WhcNMjQwNjA2MTcwNTQ0WjAYMRYwFAYD VQQDEw02NjU4YjFlOC1kNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBCX4xMEB7YD+eXcepuA0v/Irn3DY+yypVRYCd8lod2mmpt398/CDHysO9KL qgFTk1BpL1JlSwzqwPY98bL4YblKfIoMRMgGWvdIDmN82ySX2FZ7Bjqp2kCoznty FIHe0gJktpBG5v8RMQiPBCTxipteSpfcCuIqZXYtoXDblutn+8cM5IW3NMoIqyfL mPGGqVgVZYnbhQP1IvEIq4Hd1X0W04x/8SPChbsk4cM3dIP6O8yavJmOzZyA6r67 YcsZHpvyR/HPh0C62sJcl3XbjJ6fhoYLQneq77teAYeqM/siLmNAODj6sKn91xmv XojmVTAwZ4PL3Yj58T9Sz8+n5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpGDXX/ N62j5m+S1xusDVJcAkzWMB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA4My9BMENGMDU5QTJFNjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRX U09ZenZNUWcwNzFvWVdlUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARD1Ios2iqNZZnUX5hbDIY3I5Ut86NFn+D0uTSEPUkp729CKXTH854 j/pZmPJTH1OrSiyq133OXBdbQI4WTKE7ISgd/i9yli6Sz/QESAJsx4A8m515Ij9o 1tsqjbkdIRIOQfZSxqGbqZiSaVkBSPWYUX9zGLabGh57ovh34kE5ouHCv5YVBDMF Un0okDgj0pTfpcUQJXCeWVAt+4Hn+fMj/p03TEHWFAgM/CuGolTo5RCQcfybkitC uXamYg03vgwDLP0yXxF0oGvzbqUJB7WpBphX9CqwilzZQehtJaVAOogcJxi0M2Y3 Ze3NZiwiP5B1PjHsrKoLXW0kz2G/8viP -----END CERTIFICATE-----Generated at Thu May 30 18:46:45 2024 by rpki-client on console-ams.rpki-client.org