$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft File: 6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json) Hash identifier: /h6oiMZV/GEFtqV6NKK82jdxLBBSyNkyRMHcM/s5F+w= Subject key identifier: 25:C1:4B:17:47:E8:4E:0B:F1:C3:4C:52:B4:E3:96:54:3F:0D:D8:8B Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A Certificate issuer: /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A Certificate serial: 1157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft Manifest number: 114D Signing time: Sat 18 May 2024 17:48:26 +0000 Manifest this update: Sat 18 May 2024 17:48:26 +0000 Manifest next update: Sat 25 May 2024 17:48:26 +0000 Files and hashes: 1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: 42EIxgs1A5s91JB5Z24aLTmWTDc8Bc+EqN60e1UxexU=) 2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: +UsLaBkhFwcti/c5ghFmOJlq0cM2PjEjygr1LO39+QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4439 (0x1157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A Validity Not Before: May 18 17:48:26 2024 GMT Not After : May 25 17:48:26 2024 GMT Subject: CN=6648e9ea-c820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:98:fc:2d:c1:05:4a:7a:6c:c4:12:60:c5: b9:4e:2f:84:70:01:d3:4d:6b:22:b2:78:fe:85:d3: 0b:0a:f0:b8:f6:d2:bb:8e:82:d9:75:ee:2d:de:99: bb:07:a7:ab:69:a6:ba:6b:9c:b2:a0:65:df:31:d0: de:c6:1d:aa:46:64:09:28:3a:8a:5f:50:a8:21:bb: bd:60:2c:78:ea:37:a5:69:cc:ad:02:7d:71:c9:05: 4b:f5:a8:cd:d1:91:fa:e3:de:af:97:28:69:7e:d6: b1:2d:fd:1d:76:d0:9f:7e:f2:b1:ba:b7:55:ca:2c: 2d:5a:56:41:b0:7d:90:70:0a:8d:ca:89:ed:d4:32: b6:e6:bb:e5:28:41:4f:48:ca:7b:4c:b2:87:2c:dc: 5f:7b:ae:30:6f:66:2b:97:54:fc:90:6d:13:6b:30: 28:6c:27:d1:36:b7:dc:a2:66:06:8b:e9:6f:02:bb: 78:9c:c4:09:35:b6:aa:49:19:58:aa:ff:26:b5:16: d9:81:3e:d1:6b:b0:5c:13:82:c5:a7:57:b6:e7:52: 6e:80:20:cf:ef:26:a6:61:99:7f:1c:8e:ed:63:3b: b1:08:9d:8c:ff:75:18:27:0c:f7:ee:6b:06:56:e6: c6:a8:e4:45:0b:c5:d9:2a:ed:d3:d4:a5:fd:7d:a7: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C1:4B:17:47:E8:4E:0B:F1:C3:4C:52:B4:E3:96:54:3F:0D:D8:8B X509v3 Authority Key Identifier: keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c5:82:1e:4b:93:78:49:0b:ac:95:5a:c1:79:df:40:18:16: 79:c6:3a:11:69:8b:07:f5:3d:28:81:33:d7:4c:74:27:5e:8a: 4e:7a:2d:f9:85:6f:4b:64:31:02:17:3a:e3:1c:8c:04:89:20: af:6d:a6:ff:4a:2f:b1:a7:4a:10:30:71:44:5a:11:71:85:49: a7:92:b2:c5:66:9e:59:9e:0c:4e:19:60:40:3a:27:02:54:00: e5:b5:2c:e0:09:a7:99:ca:e3:2f:b8:a7:95:5f:a5:35:04:0b: 9b:06:9b:77:26:36:ec:2c:55:d2:2b:d5:a5:12:58:c9:72:19: 1a:87:5d:f0:17:04:21:92:64:24:d6:cf:db:69:a5:be:e6:d4: 11:af:9d:7b:f7:8a:5e:e3:fb:52:af:cd:ae:fb:83:91:b7:d3: 9d:75:60:b9:b6:2c:69:82:4c:4f:52:f5:0b:3e:ac:88:b9:97: e1:e6:36:db:84:6a:41:ce:a8:8d:49:3d:3b:90:ea:56:90:fe: d3:00:6f:4f:54:6f:7b:34:57:45:80:de:72:da:02:f7:78:49: 48:9c:d7:a2:db:33:52:09:b5:9b:5d:fe:5d:5d:3e:34:68:bf: 59:ea:b5:6b:c8:b1:ed:cb:b1:4d:88:f3:ea:68:1c:64:a1:60: 1d:17:bd:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMTQxMTAvBgNVBAUTKEU4NkMwRjcyMEU5NkExRDVGMDYwRDk2MEFFNDIyMjEy NTU2MERDNEEwHhcNMjQwNTE4MTc0ODI2WhcNMjQwNTI1MTc0ODI2WjAYMRYwFAYD VQQDEw02NjQ4ZTllYS1jODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjmY/C3BBUp6bMQSYMW5Ti+EcAHTTWsisnj+hdMLCvC49tK7joLZde4t3pm7 B6eraaa6a5yyoGXfMdDexh2qRmQJKDqKX1CoIbu9YCx46jelacytAn1xyQVL9ajN 0ZH6496vlyhpftaxLf0ddtCffvKxurdVyiwtWlZBsH2QcAqNyont1DK25rvlKEFP SMp7TLKHLNxfe64wb2Yrl1T8kG0TazAobCfRNrfcomYGi+lvArt4nMQJNbaqSRlY qv8mtRbZgT7Ra7BcE4LFp1e251JugCDP7yamYZl/HI7tYzuxCJ2M/3UYJwz37msG VubGqORFC8XZKu3T1KX9facwGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXBSxdH 6E4L8cNMUrTjllQ/DdiLMB8GA1UdIwQYMBaAFOhsD3IOlqHV8GDZYK5CIhJVYNxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMxNC85NkZFMzAwNkUw RDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29kWHdZTmxncmtJaUVsVmcz RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHd1BjZzZXb2RYd1lObGdya0lpRWxWZzNFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMxNC85NkZFMzAwNkUwRDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29k WHdZTmxncmtJaUVsVmczRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArxYIeS5N4SQuslVrBed9AGBZ5xjoRaYsH9T0ogTPXTHQnXopOei35 hW9LZDECFzrjHIwEiSCvbab/Si+xp0oQMHFEWhFxhUmnkrLFZp5ZngxOGWBAOicC VADltSzgCaeZyuMvuKeVX6U1BAubBpt3JjbsLFXSK9WlEljJchkah13wFwQhkmQk 1s/baaW+5tQRr51794pe4/tSr82u+4ORt9OddWC5tixpgkxPUvULPqyIuZfh5jbb hGpBzqiNST07kOpWkP7TAG9PVG97NFdFgN5y2gL3eElInNei2zNSCbWbXf5dXT40 aL9Z6rVryLHty7FNiPPqaBxkoWAdF71n -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org