$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: A6k+sCtI9fRiibap4H+hhl015wFOFADkGRBWG4HUMDg= Subject key identifier: C6:7C:6D:EE:F1:31:C8:C6:40:C5:60:AC:2C:BF:67:D9:06:E8:3A:B3 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 02CD Signing time: Sun 19 May 2024 03:27:45 +0000 Manifest this update: Sun 19 May 2024 03:27:45 +0000 Manifest next update: Sun 26 May 2024 03:27:45 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: nZlkkiGBUpk5StBec9XFDThWEpyTpz/vsyYPdaHZJCI=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: Lg3+SpKwH3XIoG0VtCiPQf1LpTYqMFWp6MKCeL/5ahI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: May 19 03:27:45 2024 GMT Not After : May 26 03:27:45 2024 GMT Subject: CN=664971b1-1eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:db:7f:76:b5:a4:c8:8e:f0:cd:c3:ea:9e: 03:a9:9f:2f:05:f9:a5:16:8d:56:c7:e5:64:5b:e7: d5:dd:34:a7:54:6d:2c:af:ed:c3:a1:59:11:28:1c: 32:e5:57:31:d6:c8:ce:7f:94:c9:d7:70:d8:8b:8b: df:d5:da:53:de:39:c7:fc:53:58:e8:c2:9e:a2:b6: 8f:ff:41:a1:62:72:60:ca:66:9a:0f:c9:55:d5:3a: 8f:ba:53:c2:35:f9:b8:52:70:6d:8c:23:45:8b:f5: dd:7a:eb:92:4c:02:87:32:31:b3:38:5f:22:d1:03: b3:88:06:23:e1:6d:1c:57:b6:87:29:63:10:64:c2: 0d:d8:50:e6:62:15:74:55:5a:3b:0f:2f:f0:d3:e2: cd:8f:d4:22:5f:c5:2b:d0:7f:36:fd:7a:52:14:dd: c5:a1:6c:b1:8f:79:78:65:7f:6f:15:48:72:45:03: 59:56:9d:ee:6d:a9:c4:65:0b:6d:82:f6:e7:d0:cf: dd:3b:79:84:3b:19:3e:06:12:bd:f4:39:e7:05:8a: 40:57:6e:fb:ae:4b:1b:c6:48:57:98:45:21:5d:b1: 7e:5c:ed:74:a4:92:3b:4e:d6:59:ba:c8:5e:a3:22: b1:ba:16:db:5c:81:6f:b2:95:01:8c:b3:40:7a:32: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:6D:EE:F1:31:C8:C6:40:C5:60:AC:2C:BF:67:D9:06:E8:3A:B3 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:da:5a:03:c1:8a:51:e4:60:24:e1:5d:b4:df:ec:3a:6b:41: b6:ee:39:49:f9:3f:fc:b3:18:f0:ee:56:07:32:a1:4e:d5:06: 44:d6:40:af:c6:c1:fd:38:62:94:2a:fc:5d:dd:95:a6:3d:39: 55:7d:26:80:58:b4:5e:33:3a:df:91:9c:93:c5:b4:a1:14:d4: 03:4b:e8:b5:34:b3:e6:36:da:21:53:02:e0:be:24:4d:c4:85: 60:8a:b1:4f:69:03:6f:e0:7a:ba:d5:0b:29:8a:23:4f:0e:99: 86:3b:5a:a0:b5:38:7a:c0:5b:54:9d:ca:77:b1:55:c8:27:b5: 78:8f:c5:75:a7:73:eb:ff:be:e5:24:3c:52:a6:87:49:af:7c: c1:1a:80:d9:f9:13:5b:3e:59:59:99:7b:72:9d:8f:63:d5:06: 0a:2d:d5:14:05:86:52:12:cd:58:63:fb:e4:e9:0b:f5:36:dc: bb:58:96:4c:d1:ab:0c:23:b7:83:04:86:0d:ca:2b:99:41:90: bf:42:b1:20:c2:e7:c9:a3:a0:a6:e9:39:09:52:76:e6:59:85: 9a:05:e6:58:f5:bd:e3:d9:62:52:59:93:e6:99:db:0f:4f:0e: e1:45:fa:34:bb:48:bf:51:a2:ce:ad:9f:78:32:fa:07:12:b3: 58:02:0b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjQwNTE5MDMyNzQ1WhcNMjQwNTI2MDMyNzQ1WjAYMRYwFAYD VQQDEw02NjQ5NzFiMS0xZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXXbf3a1pMiO8M3D6p4DqZ8vBfmlFo1Wx+VkW+fV3TSnVG0sr+3DoVkRKBwy 5Vcx1sjOf5TJ13DYi4vf1dpT3jnH/FNY6MKeoraP/0GhYnJgymaaD8lV1TqPulPC Nfm4UnBtjCNFi/XdeuuSTAKHMjGzOF8i0QOziAYj4W0cV7aHKWMQZMIN2FDmYhV0 VVo7Dy/w0+LNj9QiX8Ur0H82/XpSFN3FoWyxj3l4ZX9vFUhyRQNZVp3ubanEZQtt gvbn0M/dO3mEOxk+BhK99DnnBYpAV277rksbxkhXmEUhXbF+XO10pJI7TtZZushe oyKxuhbbXIFvspUBjLNAejL52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ8be7x McjGQMVgrCy/Z9kG6DqzMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx2loDwYpR5GAk4V203+w6a0G27jlJ+T/8sxjw7lYHMqFO1QZE1kCv xsH9OGKUKvxd3ZWmPTlVfSaAWLReMzrfkZyTxbShFNQDS+i1NLPmNtohUwLgviRN xIVgirFPaQNv4Hq61QspiiNPDpmGO1qgtTh6wFtUncp3sVXIJ7V4j8V1p3Pr/77l JDxSpodJr3zBGoDZ+RNbPllZmXtynY9j1QYKLdUUBYZSEs1YY/vk6Qv1Nty7WJZM 0asMI7eDBIYNyiuZQZC/QrEgwufJo6Cm6TkJUnbmWYWaBeZY9b3j2WJSWZPmmdsP Tw7hRfo0u0i/UaLOrZ94MvoHErNYAguG -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org