$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft File: 6PktayopMPClvq9TBEyF2OreHro.mft (raw, json) Hash identifier: u8TI2uhz8tqKMqpYWSeRkICi/dyqf0UqTYFNAslDBVg= Subject key identifier: 48:8F:E8:2A:8A:94:BB:96:F3:1D:F3:AA:2F:A7:71:33:2E:8E:9A:DC Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA Certificate issuer: /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft Manifest number: 036D Signing time: Sun 05 May 2024 02:57:30 +0000 Manifest this update: Sun 05 May 2024 02:57:29 +0000 Manifest next update: Sun 12 May 2024 02:57:29 +0000 Files and hashes: 1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: v3yPQeycfKAJgRL/JW2dwuZgQDnw5kV5WHABpkXB1jI=) 2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: GwOW8h2i4EDL83P7tP6XgtCLfPJIB+UmcBgvYuLEgxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Validity Not Before: May 5 02:57:29 2024 GMT Not After : May 12 02:57:29 2024 GMT Subject: CN=6636f59a-d426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:0d:b7:e5:53:09:49:78:cd:6c:b8:76:62: 05:7a:9f:df:1e:e1:1f:4f:72:c4:96:f1:2d:35:7c: 3b:29:70:a9:69:80:e4:97:fe:bb:ae:e4:5f:4e:ac: 87:bd:06:ff:34:c3:68:15:6b:50:f5:78:51:ad:70: 96:7d:61:eb:75:0f:72:a7:47:23:6f:30:6c:0d:6f: db:ac:a1:24:2a:ed:48:5e:c0:f7:01:37:de:db:b8: 47:d1:e4:00:80:94:7f:30:99:d0:54:a9:dd:56:0f: 02:37:96:41:3a:94:9e:34:30:5c:b1:79:a4:ac:4f: 5f:9b:dd:3b:3e:17:81:da:28:39:35:77:93:9e:04: 6d:4c:c0:55:6b:22:24:b2:c8:f4:5d:00:bd:97:45: ea:10:95:dd:e9:7d:9a:ae:b5:c6:d3:ea:6c:16:2a: 57:ec:1a:9a:3e:bc:24:07:da:4c:ec:cd:4e:35:84: cc:ab:81:23:74:a6:df:c9:30:31:69:ce:eb:c1:13: dd:26:f3:2b:a4:8a:e2:8b:73:36:a5:7d:bf:e5:03: d3:d9:30:74:81:fe:c0:1f:16:17:6b:b2:5c:bf:95: 13:18:1b:19:09:33:da:81:8b:fe:3a:d8:f1:f6:20: db:63:f7:1d:39:a1:9c:63:d4:ae:ae:2d:a8:4a:88: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:E8:2A:8A:94:BB:96:F3:1D:F3:AA:2F:A7:71:33:2E:8E:9A:DC X509v3 Authority Key Identifier: keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d8:cb:fc:ba:32:08:13:1f:ac:7e:a4:43:d8:36:21:bc:04: 7c:d4:fe:ce:14:37:43:ae:8e:54:c1:47:84:73:ad:b3:bd:01: b2:cd:4c:83:55:94:0a:af:0d:af:b6:62:57:46:96:94:c0:aa: 00:17:ba:78:1c:8d:a4:ba:b7:1e:77:b5:91:c0:94:a9:86:3c: 4d:cc:d3:ef:9b:cf:32:5f:eb:fe:9e:02:85:a9:76:12:a6:bf: dc:51:74:9d:7d:c2:58:fa:9b:9a:b3:5c:89:2b:aa:e5:43:fe: 06:b9:59:05:63:09:5b:33:a8:79:e3:c6:d7:27:4d:f5:9d:86: aa:e5:e2:7d:32:8d:22:27:84:2f:83:23:31:3b:e7:b9:6c:cf: df:28:99:93:fb:0a:3b:fc:1f:3e:b0:ae:97:88:c0:ac:8d:e9: 16:50:04:1b:d2:d5:3b:18:69:b7:ff:4d:8c:4d:d9:e5:78:e1: 4c:64:48:93:c1:ef:28:44:9d:59:c4:af:3a:a0:54:99:83:6a: 5e:f5:2a:7a:4b:a3:4e:d1:64:5d:92:e2:91:2a:1b:be:2e:97: 26:8c:d5:62:46:0a:bf:9b:7e:59:cb:d9:d0:ea:bc:9f:cc:94: 4e:48:dd:2e:6a:25:27:6d:98:e8:b9:e2:ad:81:ef:f1:c7:f9: 04:f4:90:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlDODcxMTAvBgNVBAUTKEU4RjkyRDZCMkEyOTMwRjBBNUJFQUY1MzA0NEM4NUQ4 RUFERTFFQkEwHhcNMjQwNTA1MDI1NzI5WhcNMjQwNTEyMDI1NzI5WjAYMRYwFAYD VQQDEw02NjM2ZjU5YS1kNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuMNt+VTCUl4zWy4dmIFep/fHuEfT3LElvEtNXw7KXCpaYDkl/67ruRfTqyH vQb/NMNoFWtQ9XhRrXCWfWHrdQ9yp0cjbzBsDW/brKEkKu1IXsD3ATfe27hH0eQA gJR/MJnQVKndVg8CN5ZBOpSeNDBcsXmkrE9fm907PheB2ig5NXeTngRtTMBVayIk ssj0XQC9l0XqEJXd6X2arrXG0+psFipX7BqaPrwkB9pM7M1ONYTMq4EjdKbfyTAx ac7rwRPdJvMrpIrii3M2pX2/5QPT2TB0gf7AHxYXa7Jcv5UTGBsZCTPagYv+Otjx 9iDbY/cdOaGcY9Suri2oSogVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiP6CqK lLuW8x3zqi+ncTMujprcMB8GA1UdIwQYMBaAFOj5LWsqKTDwpb6vUwRMhdjq3h66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUM4Ny9GRDA4M0Y1ODVF RUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1QQ2x2cTlUQkV5RjJPcmVI cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZQa3RheW9wTVBDbHZxOVRCRXlGMk9yZUhyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUM4Ny9GRDA4M0Y1ODVFRUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1Q Q2x2cTlUQkV5RjJPcmVIcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL2Mv8ujIIEx+sfqRD2DYhvAR81P7OFDdDro5UwUeEc62zvQGyzUyD VZQKrw2vtmJXRpaUwKoAF7p4HI2kurced7WRwJSphjxNzNPvm88yX+v+ngKFqXYS pr/cUXSdfcJY+puas1yJK6rlQ/4GuVkFYwlbM6h548bXJ031nYaq5eJ9Mo0iJ4Qv gyMxO+e5bM/fKJmT+wo7/B8+sK6XiMCsjekWUAQb0tU7GGm3/02MTdnleOFMZEiT we8oRJ1ZxK86oFSZg2pe9Sp6S6NO0WRdkuKRKhu+LpcmjNViRgq/m35Zy9nQ6ryf zJROSN0uaiUnbZjoueKtge/xx/kE9JBb -----END CERTIFICATE-----Generated at Sun May 5 03:52:17 2024 by rpki-client on console-ams.rpki-client.org