$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: cSc2BOlEtoeZz1o25ubUU73NrHm4R4cuaaVwsHeSH4o= Subject key identifier: 10:E1:64:7A:EF:04:B5:AB:23:C4:C0:88:6A:72:E7:AF:3A:72:78:DC Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 06BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 06A6 Signing time: Sat 18 May 2024 23:19:06 +0000 Manifest this update: Sat 18 May 2024 23:19:05 +0000 Manifest next update: Sat 25 May 2024 23:19:05 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: Djt2U2yTBM9Hzk3MaC4xVT8RkUXQccqDfgH+FXsdLks=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: +kbsXm5swwHeJIXcmXc1zh9OpA/DbMfp8kfFaVsAFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1722 (0x6ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: May 18 23:19:05 2024 GMT Not After : May 25 23:19:05 2024 GMT Subject: CN=66493769-74a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:88:cd:65:94:80:67:3f:68:81:8d:8a:7d: 10:fc:91:74:b8:5f:a0:9a:2b:46:aa:56:55:12:c1: 72:0c:da:fc:8a:8d:54:43:f5:00:ff:56:0f:6b:f3: cc:ba:88:28:a3:bf:fe:7c:51:f3:22:d8:28:51:91: d8:2f:12:db:39:18:0d:98:de:6f:d3:aa:6b:d5:99: a3:60:eb:c2:7b:e0:29:26:b0:50:5e:8f:ee:ad:12: 22:18:b8:40:05:73:d4:17:55:23:fc:49:01:66:b6: 26:10:f5:a7:cf:85:c8:6d:04:c6:ed:8f:97:df:2e: 6e:c4:bc:7b:82:21:65:81:77:b3:cc:86:86:38:86: 9b:19:b7:03:77:46:7b:2d:ae:38:b4:3c:78:7f:36: 08:f6:86:47:9f:6e:da:60:26:53:e7:f8:2c:16:34: 95:1e:c2:4d:2f:9e:0a:00:fd:1a:7a:73:8b:9e:23: c0:d1:4d:63:a4:6d:d4:c6:40:69:24:c0:85:c4:5e: 73:f6:88:fb:02:89:b4:e3:31:38:3c:fc:ba:aa:fa: 12:5a:be:4b:53:ee:89:64:a1:b1:28:cf:3a:93:3e: fa:ef:e1:c5:7f:6e:87:23:af:9c:4f:d3:68:e2:fb: 68:2f:68:ce:7b:5e:13:e9:0a:bb:44:12:c9:be:ad: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E1:64:7A:EF:04:B5:AB:23:C4:C0:88:6A:72:E7:AF:3A:72:78:DC X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:2e:11:8c:10:41:aa:ee:5c:53:58:78:bd:f7:00:83:4c:72: 5c:0c:d7:03:8b:31:f0:98:e7:06:51:d9:0d:bc:8c:8f:5b:b9: 6a:ae:10:8e:57:17:9f:42:97:33:6c:ee:dd:50:10:50:d4:9a: eb:b6:e8:ce:5a:62:67:46:94:e6:d9:4f:cd:20:ef:53:65:1f: 57:6a:0a:22:ad:93:e9:3f:2c:8f:19:26:99:65:a0:25:d5:ab: 7b:a0:02:d9:6c:e9:26:e0:c0:9b:1b:f2:f9:ee:dd:23:02:9f: 8c:70:82:5f:71:51:50:8b:5c:c4:0c:c7:64:cd:bc:93:1f:24: c1:32:94:35:9e:cc:27:d0:e4:e0:92:00:b1:f7:4d:36:1c:9e: 41:ad:91:54:c4:f0:10:35:5d:84:75:69:17:76:cd:50:53:63: a7:47:0c:3d:c9:5a:0c:d1:36:ef:ad:71:23:09:49:87:83:5b: 68:5e:9e:bc:32:10:74:6b:11:26:14:af:8e:1e:8c:ae:7f:22: 98:df:d5:30:b6:81:75:07:c9:0f:8b:50:2c:41:25:6e:30:29: 1c:19:c9:f2:14:1a:7b:0f:a6:8a:2b:d8:7c:6c:27:d4:9a:e2: fa:5a:73:6a:bd:8b:1d:5b:2a:ec:14:b8:2e:dd:b6:c2:c7:bf: 8b:b5:db:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjQwNTE4MjMxOTA1WhcNMjQwNTI1MjMxOTA1WjAYMRYwFAYD VQQDEw02NjQ5Mzc2OS03NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntmIzWWUgGc/aIGNin0Q/JF0uF+gmitGqlZVEsFyDNr8io1UQ/UA/1YPa/PM uogoo7/+fFHzItgoUZHYLxLbORgNmN5v06pr1ZmjYOvCe+ApJrBQXo/urRIiGLhA BXPUF1Uj/EkBZrYmEPWnz4XIbQTG7Y+X3y5uxLx7giFlgXezzIaGOIabGbcDd0Z7 La44tDx4fzYI9oZHn27aYCZT5/gsFjSVHsJNL54KAP0aenOLniPA0U1jpG3UxkBp JMCFxF5z9oj7Aom04zE4PPy6qvoSWr5LU+6JZKGxKM86kz767+HFf26HI6+cT9No 4vtoL2jOe14T6Qq7RBLJvq3ghwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDhZHrv BLWrI8TAiGpy5686cnjcMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDALhGMEEGq7lxTWHi99wCDTHJcDNcDizHwmOcGUdkNvIyPW7lqrhCO VxefQpczbO7dUBBQ1JrrtujOWmJnRpTm2U/NIO9TZR9XagoirZPpPyyPGSaZZaAl 1at7oALZbOkm4MCbG/L57t0jAp+McIJfcVFQi1zEDMdkzbyTHyTBMpQ1nswn0OTg kgCx9002HJ5BrZFUxPAQNV2EdWkXds1QU2OnRww9yVoM0TbvrXEjCUmHg1toXp68 MhB0axEmFK+OHoyufyKY39UwtoF1B8kPi1AsQSVuMCkcGcnyFBp7D6aKK9h8bCfU muL6WnNqvYsdWyrsFLgu3bbCx7+LtduZ -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org