$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft File: J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json) Hash identifier: gW4QJjekr7HctH5OuHKtYVH4/b60s7XeaFNyj3pP914= Subject key identifier: 0F:5E:FD:B7:2D:C7:76:AF:89:14:FA:AD:A7:AA:14:5A:A3:D6:54:E4 Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 Certificate issuer: /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft Manifest number: 42 Signing time: Sun 19 May 2024 08:08:42 +0000 Manifest this update: Sun 19 May 2024 08:08:41 +0000 Manifest next update: Sun 26 May 2024 08:08:41 +0000 Files and hashes: 1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: bZPcFTJtmc8tgD2+dmtzqBKg4hzmV/nel38307emhjo=) 2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: SlEkJKeWiwLtr2u4eKIm9arVfuxIvf+Z6mCwVHWhjSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Validity Not Before: May 19 08:08:41 2024 GMT Not After : May 26 08:08:41 2024 GMT Subject: CN=6649b389-e781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:ed:fb:ae:08:26:f6:40:08:93:8d:42:5c: 9a:b9:8f:97:38:de:9e:36:5a:86:73:e4:c4:f1:6b: ea:c5:07:eb:2f:76:b9:81:de:20:ad:01:e6:b3:d9: 86:53:83:da:5d:ec:ca:a6:15:31:a9:43:43:71:4b: c7:65:7c:0c:26:78:a9:d6:1b:d0:c9:b1:e9:94:5d: 16:d8:98:f7:4f:dc:ca:24:9c:79:64:f0:4d:45:47: 04:21:2a:b8:d7:8d:25:2b:2f:66:77:17:b3:98:bb: 7f:c7:fd:a8:13:b9:b1:2d:8d:2a:b6:63:56:7b:77: fe:0e:25:88:b5:cf:6c:7d:55:7e:00:28:14:b5:3a: bd:3f:14:e9:46:b7:e7:c9:4c:4d:31:b5:df:34:8f: 53:d0:33:24:0e:8f:2e:9d:ca:f9:78:a4:60:f8:6d: 2d:76:f5:b9:c6:b4:49:18:50:96:10:0d:98:9d:a0: 06:d0:65:fb:77:5a:54:a6:bd:ec:16:bf:3c:93:ee: 1b:a0:39:f6:7e:92:1c:0e:cb:92:67:8c:da:76:bf: 4f:a0:be:72:c7:a3:28:7f:6d:bf:1e:f2:a9:4a:b4: 6d:b7:42:dc:70:13:39:84:f2:2c:95:a4:2a:e8:6d: ae:7c:19:82:d2:79:88:3c:36:df:d5:43:cb:de:0f: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:FD:B7:2D:C7:76:AF:89:14:FA:AD:A7:AA:14:5A:A3:D6:54:E4 X509v3 Authority Key Identifier: keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:5e:e5:e4:26:86:99:8d:c2:8a:ec:09:4c:ed:80:91:d3:47: 0f:20:7a:5a:6d:65:90:17:08:63:b7:cd:e5:0c:8d:1c:ef:e7: a7:bc:87:0e:46:34:91:81:58:4b:77:4b:5e:0b:1c:1e:04:bc: c7:2e:ca:eb:5e:ae:49:e1:34:ca:4d:11:66:e2:f1:a8:aa:5d: 73:91:63:d8:d6:e0:a5:53:4a:13:a1:5d:3b:f6:ac:e1:30:93: df:25:e9:a2:51:7c:b1:6f:9a:f1:63:87:41:f6:a9:5b:57:78: 7b:04:3f:9a:3b:a7:9e:db:5a:af:5e:27:b9:00:de:a3:ca:73: 13:6c:2b:7a:31:45:4e:e5:0e:b0:bd:07:0d:c1:8c:7f:97:47: 4a:80:4c:a0:af:12:c9:eb:14:bb:71:b6:ba:93:1d:43:c6:04: 42:80:b4:e4:83:24:bc:7e:c9:63:88:f8:d3:a6:f1:ca:5e:e3: 8e:e7:27:a9:21:f6:e2:04:31:ff:ec:33:bb:24:b6:4a:ca:74: 56:15:67:4e:51:c7:c1:30:fc:a8:77:dc:24:3d:77:2e:74:cf: 4a:ea:9d:52:02:9e:4e:c9:65:e3:30:e2:22:6e:ef:98:90:c7: 5a:8b:22:2a:93:18:bd:60:8f:16:27:c2:3f:8f:b9:be:5d:4d: a8:ef:fd:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzdFQTExMC8GA1UEBRMoMjdBMjIyMEYxQUJGQ0RDQTZDRkQ1MjIzNkVDMTBBMTEx MkE4ODM0NTAeFw0yNDA1MTkwODA4NDFaFw0yNDA1MjYwODA4NDFaMBgxFjAUBgNV BAMTDTY2NDliMzg5LWU3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Au37rggm9kAIk41CXJq5j5c43p42WoZz5MTxa+rFB+svdrmB3iCtAeaz2YZT g9pd7MqmFTGpQ0NxS8dlfAwmeKnWG9DJsemUXRbYmPdP3MoknHlk8E1FRwQhKrjX jSUrL2Z3F7OYu3/H/agTubEtjSq2Y1Z7d/4OJYi1z2x9VX4AKBS1Or0/FOlGt+fJ TE0xtd80j1PQMyQOjy6dyvl4pGD4bS129bnGtEkYUJYQDZidoAbQZft3WlSmvewW vzyT7hugOfZ+khwOy5JnjNp2v0+gvnLHoyh/bb8e8qlKtG23QtxwEzmE8iyVpCro ba58GYLSeYg8Nt/VQ8veD3zpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD179ty3H dq+JFPqtp6oUWqPWVOQwHwYDVR0jBBgwFoAUJ6IiDxq/zcps/VIjbsEKERKog0Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDN0VBL0I1Qzg3RDY4QjU3 MzExRUU4RjUwODk2Q0M0RjlBRTAyL0o2SWlEeHFfemNwc19WSWpic0VLRVJLb2cw VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjZJaUR4cV96Y3BzX1ZJamJzRUtFUktvZzBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND N0VBL0I1Qzg3RDY4QjU3MzExRUU4RjUwODk2Q0M0RjlBRTAyL0o2SWlEeHFfemNw c19WSWpic0VLRVJLb2cwVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJe5eQmhpmNworsCUztgJHTRw8gelptZZAXCGO3zeUMjRzv56e8hw5G NJGBWEt3S14LHB4EvMcuyuterknhNMpNEWbi8aiqXXORY9jW4KVTShOhXTv2rOEw k98l6aJRfLFvmvFjh0H2qVtXeHsEP5o7p57bWq9eJ7kA3qPKcxNsK3oxRU7lDrC9 Bw3BjH+XR0qATKCvEsnrFLtxtrqTHUPGBEKAtOSDJLx+yWOI+NOm8cpe447nJ6kh 9uIEMf/sM7sktkrKdFYVZ05Rx8Ew/Kh33CQ9dy50z0rqnVICnk7JZeMw4iJu75iQ x1qLIiqTGL1gjxYnwj+Pub5dTajv/Tw= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org