$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json) Hash identifier: aKnaImMQU8sTP9VB6lLEWdDWFJ5/B5Z6wrroi78p0AI= Subject key identifier: 20:DC:43:CA:23:62:77:D1:AF:66:5A:4C:88:41:29:02:4E:13:EE:7B Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft Manifest number: 02B9 Signing time: Wed 01 May 2024 03:51:07 +0000 Manifest this update: Wed 01 May 2024 03:51:06 +0000 Manifest next update: Wed 08 May 2024 03:51:06 +0000 Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: KkVibkVr1tp5BAy74H8fnNCFKxRnGFGhB1+JgLJIwpY=) 2: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: kJm8d3VofUWXIWfNiZo1kT5zH3QjOUC6vapBgoKHOjg=) 3: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: cOVcwLcju5hPwYRcSfzpE7ERuwxFBHY7e9C8ABr7pMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Validity Not Before: May 1 03:51:06 2024 GMT Not After : May 8 03:51:06 2024 GMT Subject: CN=6631bc2a-feae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:7a:b5:e3:f2:97:b3:5a:59:80:66:17:08: 54:42:d3:61:ac:e0:81:e8:27:c4:8e:b2:f0:ce:68: 65:5b:49:7e:87:44:04:c2:43:60:2f:8f:3c:b0:2c: ea:c2:7e:2d:3f:4a:27:e3:d4:8b:6f:cd:b3:f3:ee: 0c:f5:1a:ee:7d:e8:d0:4b:04:93:8a:28:4e:c2:0e: 35:66:da:9a:16:bf:28:24:fc:43:76:74:fc:c3:e2: c0:99:55:fb:cf:7a:f8:42:59:15:eb:53:b4:0f:00: bc:0b:bb:0c:fb:f8:57:12:83:a3:c9:2b:e5:80:6c: d5:7f:f1:2c:50:9b:3b:bc:5b:9e:f7:84:95:0e:e1: c4:86:41:28:35:87:a3:da:6f:b9:c5:ef:05:6f:83: 44:f5:b4:fa:2a:e3:63:8b:f1:0b:8e:6c:3b:54:13: 42:60:c6:56:3e:8d:5e:21:13:bb:c1:a9:c7:d9:c9: 6f:e2:2c:9f:b4:73:14:15:38:df:f0:08:0e:c6:bc: c7:0d:55:cf:03:dc:f0:e7:d8:72:4c:2f:9f:ad:9e: b9:13:3c:90:80:3e:de:8d:de:25:df:ae:bd:17:75: bb:ae:45:3f:92:09:3d:26:4c:e9:83:8a:41:a0:05: 77:d9:1c:81:3c:99:bb:01:96:3c:39:d2:14:ba:ba: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:43:CA:23:62:77:D1:AF:66:5A:4C:88:41:29:02:4E:13:EE:7B X509v3 Authority Key Identifier: keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2b:0d:24:53:b2:3e:3a:e3:7d:0a:bf:b5:a8:93:29:78:f9: 7c:ee:4c:3e:bb:c3:4c:63:fb:b7:b3:7c:fb:24:63:98:cf:97: d8:4e:ea:7b:33:e1:73:65:97:3c:d1:fd:33:5d:f3:7b:98:16: c4:9a:01:a1:2b:1d:ef:b0:55:27:03:08:f5:c5:b6:3e:de:3f: 41:3c:e2:5f:aa:9d:f7:bb:9c:93:a1:32:55:e1:19:f8:6c:b1: 1a:75:b1:53:d5:ec:61:61:54:2b:2a:4e:36:f6:fb:b9:ef:d4: 75:4a:78:5a:6f:c4:8f:85:6c:c1:29:6e:f0:28:f9:10:c3:40: 7e:93:57:f8:d2:4d:ba:99:ba:6b:b6:04:21:a5:ad:f4:f4:96: 05:f0:62:a0:87:a1:29:1f:a6:a2:cd:74:63:97:f9:ab:b3:45: 2f:d7:db:01:1c:a7:54:ed:80:0b:5f:a0:38:d4:01:f7:93:97: 39:b2:a8:43:95:7d:bc:d6:c9:1a:8d:6c:64:63:e9:b9:39:db: e1:55:b2:3f:2b:73:cd:84:cb:e8:fe:55:bf:e7:76:d7:74:ae: 52:4e:39:84:68:57:b4:86:4c:3e:04:02:24:65:da:66:20:1d: bf:49:32:4e:f3:1d:92:a2:fc:c7:e1:03:e0:8e:f5:7d:9e:9c: ea:73:69:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREREYxMTAvBgNVBAUTKEU4NjcxNzUwMzQ0RjE4QzJBRjc0N0ZGQUYyNTU4NTBF QkM3OUQwMUYwHhcNMjQwNTAxMDM1MTA2WhcNMjQwNTA4MDM1MTA2WjAYMRYwFAYD VQQDEw02NjMxYmMyYS1mZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKt6tePyl7NaWYBmFwhUQtNhrOCB6CfEjrLwzmhlW0l+h0QEwkNgL488sCzq wn4tP0on49SLb82z8+4M9RrufejQSwSTiihOwg41ZtqaFr8oJPxDdnT8w+LAmVX7 z3r4QlkV61O0DwC8C7sM+/hXEoOjySvlgGzVf/EsUJs7vFue94SVDuHEhkEoNYej 2m+5xe8Fb4NE9bT6KuNji/ELjmw7VBNCYMZWPo1eIRO7wanH2clv4iyftHMUFTjf 8AgOxrzHDVXPA9zw59hyTC+frZ65EzyQgD7ejd4l3669F3W7rkU/kgk9Jkzpg4pB oAV32RyBPJm7AZY8OdIUurrEfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDcQ8oj YnfRr2ZaTIhBKQJOE+57MB8GA1UdIwQYMBaAFOhnF1A0TxjCr3R/+vJVhQ68edAf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERERi81QjA2RkVGMkE1 MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdNS3ZkSF82OGxXRkRyeDUw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHY1hVRFJQR01LdmRIXzY4bFdGRHJ4NTBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERERi81QjA2RkVGMkE1MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdN S3ZkSF82OGxXRkRyeDUwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlKw0kU7I+OuN9Cr+1qJMpePl87kw+u8NMY/u3s3z7JGOYz5fYTup7 M+FzZZc80f0zXfN7mBbEmgGhKx3vsFUnAwj1xbY+3j9BPOJfqp33u5yToTJV4Rn4 bLEadbFT1exhYVQrKk429vu579R1Snhab8SPhWzBKW7wKPkQw0B+k1f40k26mbpr tgQhpa309JYF8GKgh6EpH6aizXRjl/mrs0Uv19sBHKdU7YALX6A41AH3k5c5sqhD lX281skajWxkY+m5OdvhVbI/K3PNhMvo/lW/53bXdK5STjmEaFe0hkw+BAIkZdpm IB2/STJO8x2SovzH4QPgjvV9npzqc2nB -----END CERTIFICATE-----Generated at Wed May 1 04:49:19 2024 by rpki-client on console-ams.rpki-client.org