$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: diAbIEt+040ksJ0tQfDUmxGG5uJNx0qhEojvjTHCYMA= Subject key identifier: 18:8E:D0:56:29:A8:57:9B:97:FB:9E:99:87:B4:72:E3:96:44:3A:89 Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: 12 Signing time: Thu 27 Jun 2024 07:45:17 +0000 Manifest this update: Thu 27 Jun 2024 07:45:17 +0000 Manifest next update: Thu 04 Jul 2024 07:45:17 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: g93E58s6NsPoNkw/4KHTXFSEeQs7XQSR2MDyaMNZyCU=) 2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: jbkM/r/watiK5IRPpyDh7RHx4Sadi2EA9iYD/7NrFLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Jun 27 07:45:17 2024 GMT Not After : Jul 4 07:45:17 2024 GMT Subject: CN=667d188d-1293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:17:26:7d:a7:d3:3b:59:30:75:50:db:8f: 73:be:e0:11:b8:b5:df:95:ba:42:9e:56:f2:33:fc: 2f:d7:11:d9:6d:78:28:8e:1d:69:8e:e0:a4:73:76: e0:66:2a:f1:33:65:58:22:97:02:d9:54:0b:43:ff: 89:db:1a:6d:da:3a:fa:c9:5a:0d:a8:8b:7d:99:ed: 65:c1:b9:12:39:70:cf:01:dc:c6:45:66:74:a1:59: 06:fa:24:fd:56:16:1a:59:ae:ce:bf:48:90:48:3f: 45:95:0a:bb:9a:2a:d2:ab:2c:20:91:c5:75:f0:9c: 63:00:45:84:53:bd:7d:a0:99:f0:c0:60:c0:27:4f: d5:df:8f:a4:20:db:5b:ba:80:43:2b:93:96:6a:3e: f4:de:71:33:8f:43:7c:08:a2:40:90:46:0b:4b:96: 89:3e:08:44:ff:1c:64:ea:6a:29:49:1c:d6:84:d1: 79:ad:28:24:0b:88:cb:1c:1e:f1:c4:8d:af:df:a4: fc:19:03:c8:fc:0d:e0:b6:e6:36:f0:65:e6:a1:6d: 5b:12:ba:2a:21:5e:34:9e:eb:28:47:c1:10:ad:5c: c0:ba:00:6c:42:b1:a8:b7:be:ff:5f:d7:1e:a7:52: 13:bf:c5:2c:e1:37:5f:c9:b7:ba:7d:da:8a:77:9a: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8E:D0:56:29:A8:57:9B:97:FB:9E:99:87:B4:72:E3:96:44:3A:89 X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:56:ff:4d:bb:f4:5d:68:85:e7:d0:f5:76:8e:70:fa:10:46: 7f:b8:3e:55:da:e3:ad:68:46:63:30:0a:be:68:a1:32:1a:11: 29:fc:13:a2:38:48:76:56:c6:23:4b:4c:28:a2:d2:88:6c:35: 7f:c8:8e:31:bf:de:a6:30:3c:58:bf:9e:e5:42:b8:66:3a:ea: 38:12:8a:bb:7d:e5:56:9e:98:82:97:d1:f0:56:99:86:32:fd: 91:4a:fe:44:67:4b:b1:c7:eb:1a:98:84:2f:63:26:6d:c3:ad: 73:b8:89:d3:3e:ec:d9:f1:97:94:e3:44:85:cd:f4:67:c9:e1: a0:48:17:ec:cb:3b:1a:35:fa:80:c1:4b:0e:a6:ef:32:85:fd: 53:dc:5c:80:e5:7f:ae:c5:f1:46:1b:ed:f7:43:86:b1:22:25: 27:d5:ba:ee:d6:15:48:cb:74:70:4c:ac:6b:2b:57:24:c6:c5: df:92:43:58:0b:8e:8d:30:57:4d:c3:2b:92:d8:ce:35:1c:83: 72:18:d4:e7:3b:e2:20:50:22:4c:5f:6b:e4:6b:ae:3d:d7:b1: 12:51:3d:b2:08:65:c7:6b:29:94:c5:f2:9b:02:50:24:a5:4f: 09:13:09:1e:5d:53:8f:0e:68:e3:28:fc:2f:8c:10:7d:5f:9a: ae:0f:40:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzVCRDExMC8GA1UEBRMoRTk3N0E5MjI2MjIwRThDNzhBMUQxQjNCRTA0RDYwQ0RD QzhBMjE4ODAeFw0yNDA2MjcwNzQ1MTdaFw0yNDA3MDQwNzQ1MTdaMBgxFjAUBgNV BAMTDTY2N2QxODhkLTEyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2OBcmfafTO1kwdVDbj3O+4BG4td+VukKeVvIz/C/XEdlteCiOHWmO4KRzduBm KvEzZVgilwLZVAtD/4nbGm3aOvrJWg2oi32Z7WXBuRI5cM8B3MZFZnShWQb6JP1W FhpZrs6/SJBIP0WVCruaKtKrLCCRxXXwnGMARYRTvX2gmfDAYMAnT9Xfj6Qg21u6 gEMrk5ZqPvTecTOPQ3wIokCQRgtLlok+CET/HGTqailJHNaE0XmtKCQLiMscHvHE ja/fpPwZA8j8DeC25jbwZeahbVsSuiohXjSe6yhHwRCtXMC6AGxCsai3vv9f1x6n UhO/xSzhN1/Jt7p92op3mrYPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGI7QVimo V5uX+56Zh7Ry45ZEOokwHwYDVR0jBBgwFoAU6XepImIg6MeKHRs74E1gzcyKIYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNUJELzc2QzJDNzJFMUNF QjExRUY4NURGRDc3NkM0RjlBRTAyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNlhlcEltSWc2TWVLSFJzNzRFMWd6Y3lLSVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD NUJELzc2QzJDNzJFMUNFQjExRUY4NURGRDc3NkM0RjlBRTAyLzZYZXBJbUlnNk1l S0hSczc0RTFnemN5S0lZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJW/0279F1ohefQ9XaOcPoQRn+4PlXa461oRmMwCr5ooTIaESn8E6I4 SHZWxiNLTCii0ohsNX/IjjG/3qYwPFi/nuVCuGY66jgSirt95VaemIKX0fBWmYYy /ZFK/kRnS7HH6xqYhC9jJm3DrXO4idM+7Nnxl5TjRIXN9GfJ4aBIF+zLOxo1+oDB Sw6m7zKF/VPcXIDlf67F8UYb7fdDhrEiJSfVuu7WFUjLdHBMrGsrVyTGxd+SQ1gL jo0wV03DK5LYzjUcg3IY1Oc74iBQIkxfa+Rrrj3XsRJRPbIIZcdrKZTF8psCUCSl TwkTCR5dU48OaOMo/C+MEH1fmq4PQIA= -----END CERTIFICATE-----Generated at Thu Jun 27 11:24:54 2024 by rpki-client on console-fra.rpki-client.org