$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: SqIRF9TBu3HwCn+ph+v5eXqtWfBhX0Eee+xnDsXEj2Q= Subject key identifier: C0:A0:51:11:7E:1F:36:41:A7:9B:96:FB:1B:95:E2:D7:3F:70:3B:FB Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 0118 Signing time: Sun 19 May 2024 05:19:18 +0000 Manifest this update: Sun 19 May 2024 05:19:18 +0000 Manifest next update: Sun 26 May 2024 05:19:18 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: 2FxlbMNAx7atdfRMimBpan3lpF2Bffk+T+TmojXH1q0=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: G5aYGJ5hYMaTHp+CkhwntaH/uhVAh40+cD1liOdU1Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: May 19 05:19:18 2024 GMT Not After : May 26 05:19:18 2024 GMT Subject: CN=66498bd6-867e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:f2:c6:4b:db:80:ab:01:42:bc:be:70:e8: 2d:5e:6e:7b:f1:d3:b7:af:4d:ea:0d:45:e3:12:66: e7:b7:1a:3a:81:7e:f1:6b:a3:73:bd:d5:74:a1:7c: d3:fe:13:22:82:54:d5:5a:26:58:58:0b:1a:7c:20: 1b:27:c2:77:c8:77:36:e9:89:84:e6:ec:01:bd:64: a8:cb:e1:85:f6:5a:b0:45:28:75:e6:f1:47:c0:22: 3a:85:a2:ba:4d:fd:91:cc:69:08:ee:d0:39:18:1b: 88:aa:69:5c:bc:13:7f:1c:7d:85:d0:85:d9:88:10: ab:7c:d2:8c:90:8c:74:8f:eb:90:3f:70:be:e8:57: 26:67:6f:0f:d2:e4:bc:00:57:5e:34:f9:a2:eb:4f: d1:6f:1c:8f:53:9e:8d:0f:8d:9e:5e:a4:a8:74:55: 59:45:9e:88:79:59:20:fa:20:30:07:c7:c0:09:e9: c6:30:22:c6:5f:3c:f0:ac:49:12:b4:49:a2:e1:6c: 25:5d:dd:14:f8:8d:85:e6:fe:4f:35:12:76:c9:8f: e6:5d:b6:00:d3:04:19:a5:d4:1d:2b:88:10:93:fa: 9b:cf:85:69:e0:ca:89:f9:1b:04:d1:15:d1:bb:a0: 8c:ea:e6:15:ca:4a:d3:5f:93:6e:be:8a:c3:45:79: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A0:51:11:7E:1F:36:41:A7:9B:96:FB:1B:95:E2:D7:3F:70:3B:FB X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:4e:30:56:24:8b:49:4d:c2:19:a3:31:b7:e1:17:8f:88:b4: fa:81:77:3e:93:96:d2:98:b1:1e:b3:a7:25:9e:e6:ee:24:ab: 8b:7e:80:41:67:a6:12:1c:cf:3f:b0:37:d7:97:2d:89:6b:ff: 9c:95:68:81:08:e8:81:d4:5a:ab:e7:4c:dd:98:0c:49:43:d1: dc:d1:4f:ff:87:b4:b1:7c:0b:71:46:07:37:42:f5:ac:8e:da: fe:b1:3d:a4:5f:10:61:04:8c:c0:d1:0f:57:10:5b:0e:61:df: 91:b3:55:57:cf:7e:1a:c4:61:19:13:41:80:b1:98:b5:b7:3e: 04:97:50:bc:6a:18:04:a1:1f:ac:1d:ce:ac:6c:6f:8c:3f:0b: 6b:98:72:20:86:9d:17:95:93:73:32:cd:20:2c:11:a4:ef:af: c6:e9:bc:92:64:81:2d:1f:c6:14:5b:dc:04:a5:34:aa:87:ba: 05:62:fa:51:8a:93:90:a2:1b:17:76:4d:e6:2d:75:75:13:05: 35:bb:bc:3c:b6:a1:c4:80:1a:64:bd:2a:50:43:66:95:eb:b9: 20:d9:68:f4:c6:da:a6:27:1f:32:fc:8d:11:ab:3e:a3:27:b8: 50:cc:49:b4:f7:d9:19:3e:e7:2c:2a:7e:7f:5d:76:5e:28:bf: af:c8:15:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjQwNTE5MDUxOTE4WhcNMjQwNTI2MDUxOTE4WjAYMRYwFAYD VQQDEw02NjQ5OGJkNi04NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUHyxkvbgKsBQry+cOgtXm578dO3r03qDUXjEmbntxo6gX7xa6NzvdV0oXzT /hMiglTVWiZYWAsafCAbJ8J3yHc26YmE5uwBvWSoy+GF9lqwRSh15vFHwCI6haK6 Tf2RzGkI7tA5GBuIqmlcvBN/HH2F0IXZiBCrfNKMkIx0j+uQP3C+6FcmZ28P0uS8 AFdeNPmi60/RbxyPU56ND42eXqSodFVZRZ6IeVkg+iAwB8fACenGMCLGXzzwrEkS tEmi4WwlXd0U+I2F5v5PNRJ2yY/mXbYA0wQZpdQdK4gQk/qbz4Vp4MqJ+RsE0RXR u6CM6uYVykrTX5NuvorDRXkgXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCgURF+ HzZBp5uW+xuV4tc/cDv7MB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoTjBWJItJTcIZozG34RePiLT6gXc+k5bSmLEes6clnubuJKuLfoBB Z6YSHM8/sDfXly2Ja/+clWiBCOiB1Fqr50zdmAxJQ9Hc0U//h7SxfAtxRgc3QvWs jtr+sT2kXxBhBIzA0Q9XEFsOYd+Rs1VXz34axGEZE0GAsZi1tz4El1C8ahgEoR+s Hc6sbG+MPwtrmHIghp0XlZNzMs0gLBGk76/G6bySZIEtH8YUW9wEpTSqh7oFYvpR ipOQohsXdk3mLXV1EwU1u7w8tqHEgBpkvSpQQ2aV67kg2Wj0xtqmJx8y/I0Rqz6j J7hQzEm099kZPucsKn5/XXZeKL+vyBV9 -----END CERTIFICATE-----Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org