$ rpki-client -vvf rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft File: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft (raw, json) Hash identifier: /tOvcJcNA1FtjovxRenJiiq+A0FLzkpTDZ6X8Rjb6fA= Subject key identifier: B1:19:38:E3:B3:4D:8B:94:C4:DA:3C:0F:98:D4:EB:90:5F:6C:0C:5B Authority key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84 Certificate issuer: /CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184 Certificate serial: 09D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft Manifest number: 09CE Signing time: Sun 28 Apr 2024 20:47:08 +0000 Manifest this update: Sun 28 Apr 2024 20:47:08 +0000 Manifest next update: Sun 05 May 2024 20:47:08 +0000 Files and hashes: 1: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl (hash: hUgBWAw2Yk8ddDV/6H3CP+LsNypFOQHQb6L6IPWN+UU=) 2: BA767AE8584A11EA91887312C4F9AE02.roa (hash: sEMY6wJOI25FATMBbFUhgjLB9MeXx5Qa7wulqNT2Y/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 18:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2515 (0x9d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184 Validity Not Before: Apr 28 20:47:08 2024 GMT Not After : May 5 20:47:08 2024 GMT Subject: CN=662eb5cc-cb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:6a:03:7c:46:37:0f:76:99:cc:2e:88:53: 0a:1b:74:dc:b7:2a:e3:67:58:b4:fb:0e:36:04:3e: 1c:8b:af:82:c5:63:21:8b:c1:62:98:29:3e:f4:51: df:06:b5:4a:eb:c9:00:f2:9c:74:a0:4e:70:52:57: 2f:fd:28:6f:43:d7:97:89:d7:63:f4:92:fd:06:ba: d0:a6:90:5a:e5:0d:7d:69:9c:e6:e7:bd:c8:1c:2b: 55:3c:13:1a:f0:0d:da:e2:70:b3:8c:92:1c:35:11: f6:ac:7e:2a:16:ac:9a:97:db:81:52:4d:8b:29:b9: af:6d:dc:1d:98:c3:a2:ac:11:61:8b:f8:d7:b7:f1: f3:30:9e:6f:b1:68:07:6a:5e:02:2e:f7:5c:5a:e5: 1c:71:be:10:d1:01:ef:f0:fa:ab:8d:df:db:ef:62: e0:cf:3c:93:b7:d4:95:4e:91:be:33:9c:b8:4a:5a: 59:56:4a:03:5f:cc:00:35:17:80:6c:32:03:89:b5: 94:7d:f4:4f:31:ed:6d:e6:6d:96:a4:20:aa:4d:8b: 5f:76:ae:14:00:ed:37:8c:12:10:a5:57:55:87:6e: 1b:ad:0e:aa:e2:c0:1a:12:04:f9:ee:c5:36:cb:12: f1:8f:8e:77:fc:42:04:02:db:17:fc:f4:d5:8b:ff: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:19:38:E3:B3:4D:8B:94:C4:DA:3C:0F:98:D4:EB:90:5F:6C:0C:5B X509v3 Authority Key Identifier: keyid:EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8e:55:9a:24:51:98:94:18:cd:a9:af:af:a1:09:12:27:c0: 2b:0f:dd:8e:b8:75:41:f6:e9:61:cd:82:17:19:0e:a9:9a:b8: d3:ad:bb:d1:17:eb:c3:00:b7:37:7f:b0:c1:49:82:7d:3f:83: 2d:62:37:94:86:88:49:77:2f:0a:13:67:ad:4d:ad:27:da:a1: 03:de:8d:f9:a3:1a:0d:15:42:6b:2e:fc:1a:2b:25:a3:bc:aa: 14:05:9b:f1:70:69:f7:b6:25:d3:ba:f1:2e:3e:a1:54:5d:bd: c3:e9:c7:39:df:f5:80:a4:2b:0b:16:3d:ad:16:df:2a:ef:d8: f0:e8:4e:f6:d3:a9:55:28:da:e8:12:4b:eb:9f:2b:44:6b:c4: a5:75:58:0d:73:1d:2e:aa:52:39:44:f6:cc:4e:d9:ea:f6:d1: ae:3f:a3:d1:4d:bd:a7:76:27:8f:fc:c7:cb:7f:0b:a8:a5:e4: 3b:6d:3e:b8:2e:cb:cf:de:9c:6b:04:70:99:99:e2:68:49:a6: f9:93:32:c4:23:f2:de:f8:cc:14:36:9e:5b:d5:43:09:62:79: 26:f1:7f:2f:d5:a2:84:b3:ca:74:46:59:26:d3:d4:a8:52:44: c3:df:1c:72:43:08:b8:9d:99:12:e6:c7:c4:38:7f:13:78:91: 10:da:ff:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MzUxMTAvBgNVBAUTKEVCRUU4MUZDNEJDOUQ2NzNEREY3NDg1NEE2NTVFRDVG QUNFNUQxODQwHhcNMjQwNDI4MjA0NzA4WhcNMjQwNTA1MjA0NzA4WjAYMRYwFAYD VQQDEw02NjJlYjVjYy1jYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV5qA3xGNw92mcwuiFMKG3TctyrjZ1i0+w42BD4ci6+CxWMhi8FimCk+9FHf BrVK68kA8px0oE5wUlcv/ShvQ9eXiddj9JL9BrrQppBa5Q19aZzm573IHCtVPBMa 8A3a4nCzjJIcNRH2rH4qFqyal9uBUk2LKbmvbdwdmMOirBFhi/jXt/HzMJ5vsWgH al4CLvdcWuUccb4Q0QHv8Pqrjd/b72LgzzyTt9SVTpG+M5y4SlpZVkoDX8wANReA bDIDibWUffRPMe1t5m2WpCCqTYtfdq4UAO03jBIQpVdVh24brQ6q4sAaEgT57sU2 yxLxj453/EIEAtsX/PTVi/9NKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEZOOOz TYuUxNo8D5jU65BfbAxbMB8GA1UdIwQYMBaAFOvugfxLydZz3fdIVKZV7V+s5dGE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYzNS9BRjBGOEQ4QTU4 NDkxMUVBQkY2QTg0MTJDNEY5QUUwMi82LTZCX0V2SjFuUGQ5MGhVcGxYdFg2emww WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYtNkJfRXZKMW5QZDkwaFVwbFh0WDZ6bDBZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYzNS9BRjBGOEQ4QTU4NDkxMUVBQkY2QTg0MTJDNEY5QUUwMi82LTZCX0V2SjFu UGQ5MGhVcGxYdFg2emwwWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbjlWaJFGYlBjNqa+voQkSJ8ArD92OuHVB9ulhzYIXGQ6pmrjTrbvR F+vDALc3f7DBSYJ9P4MtYjeUhohJdy8KE2etTa0n2qED3o35oxoNFUJrLvwaKyWj vKoUBZvxcGn3tiXTuvEuPqFUXb3D6cc53/WApCsLFj2tFt8q79jw6E7206lVKNro EkvrnytEa8SldVgNcx0uqlI5RPbMTtnq9tGuP6PRTb2ndieP/MfLfwuopeQ7bT64 LsvP3pxrBHCZmeJoSab5kzLEI/Le+MwUNp5b1UMJYnkm8X8v1aKEs8p0Rlkm09So UkTD3xxyQwi4nZkS5sfEOH8TeJEQ2v8U -----END CERTIFICATE-----Generated at Sun Apr 28 21:21:18 2024 by rpki-client on console-fra.rpki-client.org