$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: Xd1VRmKpb8z/gBJglW1AKSuT5gRZkKpME/lyivkwYk0= Subject key identifier: 0C:44:5F:95:34:41:6C:B3:B5:79:41:A2:5C:C1:FC:29:83:1B:6D:A8 Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 117E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 1178 Signing time: Sat 18 May 2024 17:47:06 +0000 Manifest this update: Sat 18 May 2024 17:47:06 +0000 Manifest next update: Sat 25 May 2024 17:47:06 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: YwV313FpigA5TNBSxWzDGY3PpdR+3hLiQ3XbmD9fprM=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: +szOYx+Q3+AezQ08mU9olGDq3G2uogPJHsHw1wNri78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4478 (0x117e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: May 18 17:47:06 2024 GMT Not After : May 25 17:47:06 2024 GMT Subject: CN=6648e99a-4ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:10:1c:4a:05:1c:94:7a:97:d2:f1:68:6e: 29:60:0a:dd:60:fe:9f:56:d3:b2:5f:36:84:89:d7: 39:da:9a:1b:e5:4f:2c:ab:27:e9:eb:4b:73:c3:1e: d5:bf:6b:1b:00:09:10:8b:eb:15:03:5c:8c:1e:d1: 53:f8:72:92:4f:4f:56:5a:d6:bd:ed:c5:58:b1:ab: 94:90:2c:f5:c8:36:5a:6c:29:b1:97:ad:fd:43:2d: 02:15:33:d1:88:a9:f1:c7:82:ab:b5:1a:aa:22:48: 46:cd:63:d0:df:87:1d:35:69:9d:f2:61:35:ac:89: 5b:73:58:89:9f:f8:45:4d:20:f1:04:14:97:e9:cf: 17:22:5c:65:ed:96:53:4d:0f:8b:e1:99:45:9a:65: d1:e9:af:67:1c:e8:33:9c:4a:8a:73:7b:69:a9:9f: a2:78:db:dc:02:2d:7b:c4:d9:09:28:c5:6c:02:35: 32:96:20:c6:27:07:50:e2:60:e4:96:af:3d:bc:4f: 5a:c4:07:14:33:37:d3:87:e7:eb:4c:5c:fc:4a:58: 4d:d4:ae:c1:03:79:08:88:99:55:9f:bf:df:09:7d: 7a:4c:d1:fc:b1:6e:4a:10:07:3e:8f:15:4f:2d:9d: 36:60:e7:f6:96:6c:97:bb:c1:2e:bc:62:24:3f:33: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:44:5F:95:34:41:6C:B3:B5:79:41:A2:5C:C1:FC:29:83:1B:6D:A8 X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:da:03:ea:82:8f:18:de:84:29:6c:d6:d1:e2:e2:b3:05:2f: fb:fd:a6:26:1a:04:53:f8:c8:8b:30:aa:4a:71:a5:26:3f:b6: be:46:70:e4:64:94:b8:57:f7:4f:25:a1:d2:77:25:10:68:ee: 37:ea:b2:58:98:f0:6f:38:58:e2:53:b4:fb:83:90:23:48:47: d1:c5:f0:cc:ea:be:f3:91:c5:87:83:63:7a:1c:39:08:33:ff: 91:40:0f:db:22:47:9a:94:24:c8:8b:76:e7:7c:37:f7:b8:f7: bd:55:7c:7a:0b:7c:5c:55:08:9d:df:c6:52:8f:57:0c:11:8c: ee:c8:ac:03:5e:26:dc:31:7a:b0:e0:c1:80:1f:df:00:1a:8b: ba:8c:d6:84:3f:3c:1a:71:ea:6d:96:48:62:e9:6d:d1:0f:9e: a2:bf:68:ea:26:5e:d8:4e:22:bf:37:f5:f0:1a:5c:4b:4f:17: 81:69:d4:6b:df:e8:db:31:dc:85:cf:5a:46:64:ea:82:a7:ca: 4e:d0:52:a7:02:d6:fc:7f:7b:c0:01:80:3a:1e:d3:8f:7e:38: 5d:04:21:51:bc:48:3a:d9:a1:c6:59:2c:15:14:0a:49:75:bb: cb:8e:89:3a:af:19:59:0e:f8:f5:c8:de:95:02:28:d2:46:75: 95:43:c2:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjQwNTE4MTc0NzA2WhcNMjQwNTI1MTc0NzA2WjAYMRYwFAYD VQQDEw02NjQ4ZTk5YS00YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VUQHEoFHJR6l9LxaG4pYArdYP6fVtOyXzaEidc52pob5U8sqyfp60tzwx7V v2sbAAkQi+sVA1yMHtFT+HKST09WWta97cVYsauUkCz1yDZabCmxl639Qy0CFTPR iKnxx4KrtRqqIkhGzWPQ34cdNWmd8mE1rIlbc1iJn/hFTSDxBBSX6c8XIlxl7ZZT TQ+L4ZlFmmXR6a9nHOgznEqKc3tpqZ+ieNvcAi17xNkJKMVsAjUyliDGJwdQ4mDk lq89vE9axAcUMzfTh+frTFz8SlhN1K7BA3kIiJlVn7/fCX16TNH8sW5KEAc+jxVP LZ02YOf2lmyXu8EuvGIkPzMYnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxEX5U0 QWyztXlBolzB/CmDG22oMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW2gPqgo8Y3oQpbNbR4uKzBS/7/aYmGgRT+MiLMKpKcaUmP7a+RnDk ZJS4V/dPJaHSdyUQaO436rJYmPBvOFjiU7T7g5AjSEfRxfDM6r7zkcWHg2N6HDkI M/+RQA/bIkealCTIi3bnfDf3uPe9VXx6C3xcVQid38ZSj1cMEYzuyKwDXibcMXqw 4MGAH98AGou6jNaEPzwaceptlkhi6W3RD56iv2jqJl7YTiK/N/XwGlxLTxeBadRr 3+jbMdyFz1pGZOqCp8pO0FKnAtb8f3vAAYA6HtOPfjhdBCFRvEg62aHGWSwVFApJ dbvLjok6rxlZDvj1yN6VAijSRnWVQ8Kb -----END CERTIFICATE-----Generated at Sat May 18 18:12:34 2024 by rpki-client on console-fra.rpki-client.org