$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft File: k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json) Hash identifier: G1GErhA7x0jhMDTAoWM6+4OUKcyO6V8y1WWnyI62xa8= Subject key identifier: 43:BC:05:E2:7F:A8:51:05:2A:AE:74:9F:33:EF:C8:CB:E7:71:0A:81 Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 Certificate issuer: /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft Manifest number: 0FA2 Signing time: Sat 04 May 2024 21:16:45 +0000 Manifest this update: Sat 04 May 2024 21:16:44 +0000 Manifest next update: Sat 11 May 2024 21:16:44 +0000 Files and hashes: 1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: y5U+UmDREgtKG/y39RiqxdvM7bYl7NvNOSt6nzI7oF0=) 2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: js92WdHTgwYeYUJwq8GTDLtVj0ldWBn8KlPdiu7W0Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Validity Not Before: May 4 21:16:44 2024 GMT Not After : May 11 21:16:44 2024 GMT Subject: CN=6636a5bc-5977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:0c:4b:08:54:17:d3:f6:b8:e6:20:22:41: 22:0e:04:b1:3e:69:f7:b1:4e:d1:60:99:4a:24:14: 91:bd:58:60:ac:55:fe:e4:5d:0b:db:c3:7b:2b:07: 74:cc:5f:ef:91:be:10:f7:a0:42:f0:6a:19:fa:55: ee:63:ca:11:8e:41:ca:27:3d:52:30:84:b0:55:f1: 12:cd:af:7c:67:10:81:2b:ba:f6:24:56:50:4d:60: 00:28:22:6e:63:5c:20:18:ac:05:f5:20:25:31:24: 5f:4a:60:e9:64:5d:27:b2:b8:39:04:79:9d:8f:5d: 0e:a9:07:d5:83:50:d1:2b:35:87:b6:bc:ff:1c:ce: e5:8a:d8:63:19:9c:0c:c6:c4:9c:5d:aa:57:21:62: 5c:c5:46:80:bb:18:70:4b:87:d0:18:18:ac:63:6e: 5b:80:15:42:59:55:61:cd:66:49:0b:63:1a:0d:b3: df:85:12:ab:0d:2d:c4:4a:97:e2:03:4c:59:8b:86: a1:ec:8d:67:f9:20:98:43:c8:80:e7:a9:4f:3f:06: e7:83:d0:1e:5c:11:ee:5a:63:ae:b6:ab:83:fd:a5: b3:56:4b:fd:f1:b3:35:cd:75:bc:4c:70:ce:8b:4d: 00:5c:99:7a:58:0f:eb:75:3e:c9:46:ba:ab:02:2b: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:05:E2:7F:A8:51:05:2A:AE:74:9F:33:EF:C8:CB:E7:71:0A:81 X509v3 Authority Key Identifier: keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:37:03:fc:78:f7:1c:2b:9f:53:26:18:63:6d:3a:22:01:03: c9:57:01:e0:da:76:2c:7f:2b:21:c9:4f:35:29:d9:61:7f:40: 24:06:a6:4a:5b:35:c2:40:4d:6b:27:10:be:03:84:0b:03:27: 49:08:1d:13:db:be:28:0f:c6:94:52:31:22:75:43:1e:41:fe: 09:c9:fb:1e:2a:a7:27:6f:74:40:28:6c:99:43:1a:7f:e1:43: c6:ea:3f:19:50:5c:03:a6:09:72:1f:63:30:ae:0b:2c:8c:cd: 74:3f:86:5f:dc:2d:9a:8f:db:9b:a8:a2:93:37:65:be:b3:6a: 16:5f:5e:4d:ac:cd:7a:b1:89:20:c5:41:c4:db:cf:b7:43:10: 78:d1:63:d0:b2:c4:25:a4:a8:e9:a7:58:5f:4f:71:82:e9:19: 4c:1d:e5:45:e1:ae:93:4b:0a:63:47:b5:3f:39:fd:00:9a:21: 6b:7e:00:c6:10:27:27:a2:da:80:91:69:4c:07:90:7f:38:49: ec:48:ce:fb:1f:b0:cc:2c:80:71:26:6b:88:e0:62:a8:b0:78: 22:e2:61:f2:27:8d:b9:52:cb:bd:85:fa:5c:7a:cb:85:fa:be: 2e:ee:e5:84:b9:9a:df:bd:c0:68:7d:4a:d5:27:a3:15:d6:04: 3a:12:12:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDkzQTdEODM1RTEzODU4QkI1OTk1MUMzOTlBNUY5RUFC MEUyRUI5MzEwHhcNMjQwNTA0MjExNjQ0WhcNMjQwNTExMjExNjQ0WjAYMRYwFAYD VQQDEw02NjM2YTViYy01OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLMMSwhUF9P2uOYgIkEiDgSxPmn3sU7RYJlKJBSRvVhgrFX+5F0L28N7Kwd0 zF/vkb4Q96BC8GoZ+lXuY8oRjkHKJz1SMISwVfESza98ZxCBK7r2JFZQTWAAKCJu Y1wgGKwF9SAlMSRfSmDpZF0nsrg5BHmdj10OqQfVg1DRKzWHtrz/HM7lithjGZwM xsScXapXIWJcxUaAuxhwS4fQGBisY25bgBVCWVVhzWZJC2MaDbPfhRKrDS3ESpfi A0xZi4ah7I1n+SCYQ8iA56lPPwbng9AeXBHuWmOutquD/aWzVkv98bM1zXW8THDO i00AXJl6WA/rdT7JRrqrAishbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO8BeJ/ qFEFKq50nzPvyMvncQqBMB8GA1UdIwQYMBaAFJOn2DXhOFi7WZUcOZpfnqsOLrkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdMdFpsUnc1bWwtZXF3NHV1 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s2ZllOZUU0V0x0WmxSdzVtbC1lcXc0dXVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdM dFpsUnc1bWwtZXF3NHV1VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCINwP8ePccK59TJhhjbToiAQPJVwHg2nYsfyshyU81Kdlhf0AkBqZK WzXCQE1rJxC+A4QLAydJCB0T274oD8aUUjEidUMeQf4JyfseKqcnb3RAKGyZQxp/ 4UPG6j8ZUFwDpglyH2MwrgssjM10P4Zf3C2aj9ubqKKTN2W+s2oWX15NrM16sYkg xUHE28+3QxB40WPQssQlpKjpp1hfT3GC6RlMHeVF4a6TSwpjR7U/Of0AmiFrfgDG ECcnotqAkWlMB5B/OEnsSM77H7DMLIBxJmuI4GKosHgi4mHyJ425Usu9hfpcesuF +r4u7uWEuZrfvcBofUrVJ6MV1gQ6EhIR -----END CERTIFICATE-----Generated at Sat May 4 22:06:51 2024 by rpki-client on console-ams.rpki-client.org