$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft File: c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json) Hash identifier: +q/MJbpEJqImnd2zMwkkZAAbWRfqOkQcc5d/UCUjA6I= Subject key identifier: 00:FA:70:FB:09:83:A7:06:8D:FD:8E:1A:C1:D8:EC:C6:BA:BD:53:12 Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB Certificate issuer: /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft Manifest number: D6 Signing time: Sat 01 Jun 2024 07:37:50 +0000 Manifest this update: Sat 01 Jun 2024 07:37:49 +0000 Manifest next update: Sat 08 Jun 2024 07:37:49 +0000 Files and hashes: 1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: dH9S13DBCzMmRXNO3bU8zRbS6vpxSIy4UFYO2fKifJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Validity Not Before: Jun 1 07:37:49 2024 GMT Not After : Jun 8 07:37:49 2024 GMT Subject: CN=665acfce-89b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:a2:21:24:e4:fc:8a:08:73:fb:23:a6:63: 91:b4:f3:6d:af:ee:23:e1:cf:43:ef:77:49:20:ec: f7:32:b5:b0:d8:a8:ae:a4:d6:bf:01:18:58:05:20: 39:99:87:a4:39:e7:52:48:bd:da:77:b2:39:6a:da: 00:62:56:f4:c1:1f:af:ca:e7:b5:5b:be:c6:de:1b: 59:53:81:a7:28:d7:6a:cb:db:a2:39:6e:8e:b9:8a: ca:af:4e:a5:a3:59:cc:98:5d:cd:83:00:8e:9b:b7: 3f:11:5b:ed:93:45:46:bb:7c:4a:95:45:21:85:5c: 4d:29:93:6e:e8:5b:65:a4:ed:44:29:35:50:ec:ac: 1c:79:59:fa:ea:63:8a:48:40:da:a3:ab:c2:e2:22: 01:54:9d:47:57:fd:14:12:49:26:02:2f:13:01:b8: 7b:cd:11:7e:81:1c:1b:fb:c3:63:85:86:45:1e:21: 5a:e6:17:01:2e:ac:7e:3f:73:20:aa:b6:f8:75:fe: 48:2b:97:e8:6c:51:1a:f5:b1:57:6d:63:da:0e:71: 60:09:de:91:1b:78:50:26:80:c8:61:25:62:22:32: f4:90:43:fb:85:d5:db:0e:60:22:13:20:a5:89:18: bb:3e:84:53:1e:ea:82:d6:09:4a:8b:d6:13:12:ce: 52:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:70:FB:09:83:A7:06:8D:FD:8E:1A:C1:D8:EC:C6:BA:BD:53:12 X509v3 Authority Key Identifier: keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:86:94:89:fa:0a:3c:d0:e3:45:c9:59:97:e5:9f:bd:e1:29: 61:28:cb:af:ed:51:49:a9:60:4e:ba:0c:df:b1:8f:ef:58:64: d4:27:0f:f1:43:57:74:28:b5:05:24:08:d2:fc:10:80:be:80: a5:d1:69:e3:65:39:61:7b:d0:4c:6b:67:73:8a:05:35:c7:a6: 7b:fc:54:5c:85:16:e6:95:b9:8d:f3:34:9f:45:b9:a4:cb:ff: 2d:71:b5:d9:44:79:04:db:2f:0e:d3:70:b2:fd:38:3d:ad:81: 7c:3c:6d:53:75:64:84:94:ae:f5:96:ab:5f:fb:b1:a1:4d:40: a2:02:e2:36:3e:4d:52:ee:f7:30:d3:75:06:82:7c:9c:94:73: 27:17:a3:1d:81:5f:be:b7:fe:92:e4:8a:c6:11:6a:f0:4e:06: 87:85:ba:cb:99:d6:e9:6a:9f:41:85:e0:b8:f7:4a:28:61:7f: 31:db:a5:a8:b8:f7:54:b0:ae:10:8a:0c:c7:1e:78:38:44:5c: 66:b4:2a:a7:df:87:c5:58:d9:08:ec:0e:19:a5:68:fc:c2:7c: a3:73:5f:10:1f:76:cb:3a:c2:46:95:a2:86:b9:07:b3:db:f5: b2:78:ec:ac:b7:99:9c:09:47:b6:87:e2:d1:c5:da:7d:3d:9e: c5:40:59:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTZFNjExMC8GA1UEBRMoNzM5MEJBNDY1RTAyMjJFRTMxNDA3RTU1MDlFNkRFOUUz RkE5MTBEQjAeFw0yNDA2MDEwNzM3NDlaFw0yNDA2MDgwNzM3NDlaMBgxFjAUBgNV BAMTDTY2NWFjZmNlLTg5YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTD6IhJOT8ighz+yOmY5G0822v7iPhz0Pvd0kg7PcytbDYqK6k1r8BGFgFIDmZ h6Q551JIvdp3sjlq2gBiVvTBH6/K57VbvsbeG1lTgaco12rL26I5bo65isqvTqWj WcyYXc2DAI6btz8RW+2TRUa7fEqVRSGFXE0pk27oW2Wk7UQpNVDsrBx5WfrqY4pI QNqjq8LiIgFUnUdX/RQSSSYCLxMBuHvNEX6BHBv7w2OFhkUeIVrmFwEurH4/cyCq tvh1/kgrl+hsURr1sVdtY9oOcWAJ3pEbeFAmgMhhJWIiMvSQQ/uF1dsOYCITIKWJ GLs+hFMe6oLWCUqL1hMSzlJbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAPpw+wmD pwaN/Y4awdjsxrq9UxIwHwYDVR0jBBgwFoAUc5C6Rl4CIu4xQH5VCebenj+pENsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNkU2LzNCODNBRkUwRjBE MDExRUQ4MDUwNzY2QUM0RjlBRTAyL2M1QzZSbDRDSXU0eFFINVZDZWJlbmotcEVO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzVDNlJsNENJdTR4UUg1VkNlYmVuai1wRU5zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NkU2LzNCODNBRkUwRjBEMDExRUQ4MDUwNzY2QUM0RjlBRTAyL2M1QzZSbDRDSXU0 eFFINVZDZWJlbmotcEVOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH2GlIn6CjzQ40XJWZfln73hKWEoy6/tUUmpYE66DN+xj+9YZNQnD/FD V3QotQUkCNL8EIC+gKXRaeNlOWF70ExrZ3OKBTXHpnv8VFyFFuaVuY3zNJ9FuaTL /y1xtdlEeQTbLw7TcLL9OD2tgXw8bVN1ZISUrvWWq1/7saFNQKIC4jY+TVLu9zDT dQaCfJyUcycXox2BX763/pLkisYRavBOBoeFusuZ1ulqn0GF4Lj3SihhfzHbpai4 91SwrhCKDMceeDhEXGa0Kqffh8VY2QjsDhmlaPzCfKNzXxAfdss6wkaVooa5B7Pb 9bJ47Ky3mZwJR7aH4tHF2n09nsVAWVI= -----END CERTIFICATE-----Generated at Sat Jun 1 08:16:03 2024 by rpki-client on console-ams.rpki-client.org