$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: XMkZxBMXx8zDP+CIcaelkT9x6PwJq0aBGfLjS0i0PoI= Subject key identifier: 50:E7:33:01:BB:63:8D:7D:87:38:72:D8:F9:D0:37:3E:96:45:24:08 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 1FBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 1F9A Signing time: Sat 18 May 2024 16:21:23 +0000 Manifest this update: Sat 18 May 2024 16:21:23 +0000 Manifest next update: Sat 25 May 2024 16:21:23 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: IaudwGEVuJH/AM22z0uqtnnhMGZU/jypfhrjlgvd3L8=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: cB5K4RAWWm6jyN967X4ARrcjpdGZ4aQCuC+1ziDpDCo=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 9bK3vePkX1h8tNppvkA1+AI2c+bNKaWwr/2Co9UEt9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8125 (0x1fbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: May 18 16:21:23 2024 GMT Not After : May 25 16:21:23 2024 GMT Subject: CN=6648d583-e692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ab:a2:c1:b0:b1:32:18:00:b5:35:30:3a:83: 8e:a7:ac:be:49:d2:eb:67:be:19:c4:e6:fd:b8:8a: 70:2a:76:d1:1e:dd:de:4a:9a:a7:c1:21:1f:f5:89: 14:5e:da:fd:39:f5:c7:0d:63:93:12:1f:d6:82:52: 24:f2:be:15:4b:4f:66:27:bb:b4:c6:f4:45:39:e4: 83:c1:4e:e2:1d:f7:a0:5a:bf:63:98:bd:8e:a4:c2: 12:ce:84:f2:86:71:86:be:18:d5:8e:97:ad:12:84: 3f:ba:35:b7:49:87:3c:91:01:af:c4:f2:7a:27:42: 28:26:4b:df:b0:d7:f2:b6:53:01:ff:27:96:70:7d: 79:c4:a5:de:9f:ce:50:79:9c:8c:82:8a:71:91:b5: b6:4a:eb:51:05:f5:9a:6d:35:a5:2a:7c:d7:75:f2: f8:2e:ed:1b:66:2f:a1:da:17:34:31:01:8b:1f:dd: 41:63:ea:bf:93:24:f1:5c:68:5f:14:79:27:fe:30: b9:50:b2:47:13:3f:54:ce:7f:74:a4:c9:70:dc:bb: 56:8e:ed:2b:5f:8e:e1:c3:29:27:cb:dd:42:35:fc: af:f0:b8:95:65:ec:7f:0c:cc:b0:01:13:34:9b:d3: d0:28:aa:a2:69:36:96:70:ab:88:a0:cf:31:d2:1b: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E7:33:01:BB:63:8D:7D:87:38:72:D8:F9:D0:37:3E:96:45:24:08 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:3f:64:fb:e5:a0:f2:b4:17:ad:3b:93:39:72:59:e6:4f:b0: 38:d0:2b:16:00:bf:76:57:20:c7:55:43:cd:2c:71:0e:16:bf: c7:86:20:b5:f7:5b:9d:ac:f5:01:b0:5d:e7:13:90:81:1d:75: 63:72:be:ed:96:17:0b:2b:47:ce:ae:e1:b8:d0:7b:5b:07:2b: a8:11:86:2b:50:51:c4:f7:6e:eb:40:e8:fd:0f:38:63:85:b3: a1:f9:54:dc:68:54:c9:96:e4:72:b2:d6:f7:22:bf:6d:5c:d2: 1a:a0:2d:cf:f7:53:89:4b:50:65:05:0a:9b:7f:d4:1b:de:50: 02:8f:24:31:f4:37:d2:ee:1e:8b:ad:62:cb:c1:63:b0:3d:f0: 69:ad:56:37:99:ae:8e:9f:30:d8:74:15:a5:64:81:93:77:b7: e5:b2:e5:4f:f2:6b:92:37:1b:12:47:60:5c:05:ad:b0:04:b4: de:46:e8:0f:a6:98:51:8c:a8:9b:62:f4:ac:f5:d3:e4:38:d2: f7:81:a1:b7:e1:11:c1:10:6a:b2:0b:01:f7:53:2f:f3:73:89: 4b:4d:39:40:1a:c4:25:1c:25:76:9e:32:ac:fd:b6:c3:72:a7: 8d:21:6d:26:ea:39:0e:da:cf:24:a8:5e:53:b5:95:56:ca:18: cb:50:75:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjQwNTE4MTYyMTIzWhcNMjQwNTI1MTYyMTIzWjAYMRYwFAYD VQQDEw02NjQ4ZDU4My1lNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KuiwbCxMhgAtTUwOoOOp6y+SdLrZ74ZxOb9uIpwKnbRHt3eSpqnwSEf9YkU Xtr9OfXHDWOTEh/WglIk8r4VS09mJ7u0xvRFOeSDwU7iHfegWr9jmL2OpMISzoTy hnGGvhjVjpetEoQ/ujW3SYc8kQGvxPJ6J0IoJkvfsNfytlMB/yeWcH15xKXen85Q eZyMgopxkbW2SutRBfWabTWlKnzXdfL4Lu0bZi+h2hc0MQGLH91BY+q/kyTxXGhf FHkn/jC5ULJHEz9Uzn90pMlw3LtWju0rX47hwykny91CNfyv8LiVZex/DMywARM0 m9PQKKqiaTaWcKuIoM8x0huBTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDnMwG7 Y419hzhy2PnQNz6WRSQIMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlP2T75aDytBetO5M5clnmT7A40CsWAL92VyDHVUPNLHEOFr/HhiC1 91udrPUBsF3nE5CBHXVjcr7tlhcLK0fOruG40HtbByuoEYYrUFHE927rQOj9Dzhj hbOh+VTcaFTJluRystb3Ir9tXNIaoC3P91OJS1BlBQqbf9Qb3lACjyQx9DfS7h6L rWLLwWOwPfBprVY3ma6OnzDYdBWlZIGTd7flsuVP8muSNxsSR2BcBa2wBLTeRugP pphRjKibYvSs9dPkONL3gaG34RHBEGqyCwH3Uy/zc4lLTTlAGsQlHCV2njKs/bbD cqeNIW0m6jkO2s8kqF5TtZVWyhjLUHUw -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org