$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: 3SdstnIhdRfcOS6uMxzv3c5D/xNRXvD3HO6Dx0PLEAY= Subject key identifier: 7D:85:41:EA:1E:AD:DE:48:7E:27:13:7C:47:D5:3E:EE:FC:53:B3:BC Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 08E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 08D3 Signing time: Sat 04 May 2024 21:36:09 +0000 Manifest this update: Sat 04 May 2024 21:36:09 +0000 Manifest next update: Sat 11 May 2024 21:36:09 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: 4+P2mjhH+ul3f7F7ZzSD4E8GqwgXm5emahC/nr6Egmw=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: ucsG3JUlQ5ojNwMw0vdbiiFMM62lab8Xx2ffPDkDaVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: May 4 21:36:09 2024 GMT Not After : May 11 21:36:09 2024 GMT Subject: CN=6636aa49-f99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:a1:72:dc:9b:47:e3:b7:c0:1e:58:9a:7e: 0c:2d:11:36:79:dc:da:52:65:5b:1a:d6:c8:25:2e: 7f:44:81:5f:1a:6d:34:e1:ea:85:d4:64:d6:9d:8b: 47:6d:ae:e2:1b:cc:14:f0:3e:c4:8a:5c:54:56:52: ac:eb:71:f5:ed:f5:c9:70:de:f8:32:94:04:36:0d: 59:6f:2c:ca:a4:76:9a:1e:9e:a7:f4:e7:32:66:0a: 26:2b:43:98:ea:de:95:a5:c7:69:1e:c5:c0:3a:40: 1b:18:93:02:5c:0f:6d:32:a7:9c:ea:64:e8:78:06: fb:d6:07:c2:08:6f:ec:f5:52:b4:e4:0c:14:62:b6: 58:76:8f:34:62:ab:9f:1a:21:f4:16:d3:86:3a:38: e7:6b:20:99:43:ab:81:af:fd:ac:a9:c0:e4:e1:b5: f0:a3:f6:dd:42:3b:fc:62:85:d0:bd:dd:8a:b5:99: c9:2b:4f:32:ea:21:3d:ab:1c:8b:d0:42:8f:c1:83: 2a:3e:b9:43:37:13:90:ad:02:df:9f:5a:52:3a:1c: f9:c2:6e:e1:23:10:c7:91:1b:09:e6:92:13:dc:21: ea:f2:5c:f4:99:d2:0e:38:48:3b:c5:c4:0a:e6:44: b4:5b:92:cb:da:05:05:1b:f2:65:02:09:c0:c5:3f: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:85:41:EA:1E:AD:DE:48:7E:27:13:7C:47:D5:3E:EE:FC:53:B3:BC X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fe:63:bc:d8:c4:35:b9:d2:e1:71:67:38:1f:40:0f:da:89: cc:03:f7:14:fe:df:a1:fa:6e:bd:a9:ab:25:99:77:07:1c:0c: 80:1f:d3:93:61:11:c0:65:88:f2:12:fa:ed:8e:f5:b5:9e:d6: ba:27:b2:9c:7e:d8:c4:50:74:1e:80:d0:53:6f:dc:d8:14:b7: 18:23:68:ce:31:29:eb:bd:26:6d:b3:be:55:35:fa:75:8b:cf: ea:5d:74:1f:90:42:00:48:dc:f2:45:ef:57:72:44:d9:9a:99: 32:2e:11:0b:fb:57:ce:95:40:1e:91:9b:f5:15:9e:3f:58:38: e1:89:09:21:5e:84:e2:dd:8a:b3:28:e1:59:40:77:61:cc:5b: 92:50:bb:45:4d:d1:16:cc:06:f3:65:92:3e:88:85:46:ad:29: 6c:95:27:ac:2e:e8:f8:bd:26:43:8a:03:33:4c:ab:26:b9:c6: 43:42:13:10:ab:04:ba:64:61:a0:5a:52:06:7d:64:c2:5b:18: 46:66:27:e5:c0:02:51:28:df:4b:72:0c:c3:06:59:b9:21:3e: c2:29:3f:aa:d3:6e:17:b3:01:03:52:b8:12:57:01:7b:22:2e: 7f:40:bf:9e:e0:da:b8:90:94:8a:ef:f1:78:66:e3:f1:79:37: 7b:6e:80:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjQwNTA0MjEzNjA5WhcNMjQwNTExMjEzNjA5WjAYMRYwFAYD VQQDEw02NjM2YWE0OS1mOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpihctybR+O3wB5Ymn4MLRE2edzaUmVbGtbIJS5/RIFfGm004eqF1GTWnYtH ba7iG8wU8D7EilxUVlKs63H17fXJcN74MpQENg1ZbyzKpHaaHp6n9OcyZgomK0OY 6t6VpcdpHsXAOkAbGJMCXA9tMqec6mToeAb71gfCCG/s9VK05AwUYrZYdo80Yquf GiH0FtOGOjjnayCZQ6uBr/2sqcDk4bXwo/bdQjv8YoXQvd2KtZnJK08y6iE9qxyL 0EKPwYMqPrlDNxOQrQLfn1pSOhz5wm7hIxDHkRsJ5pIT3CHq8lz0mdIOOEg7xcQK 5kS0W5LL2gUFG/JlAgnAxT+QswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2FQeoe rd5IficTfEfVPu78U7O8MB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/mO82MQ1udLhcWc4H0AP2onMA/cU/t+h+m69qaslmXcHHAyAH9OT YRHAZYjyEvrtjvW1nta6J7KcftjEUHQegNBTb9zYFLcYI2jOMSnrvSZts75VNfp1 i8/qXXQfkEIASNzyRe9XckTZmpkyLhEL+1fOlUAekZv1FZ4/WDjhiQkhXoTi3Yqz KOFZQHdhzFuSULtFTdEWzAbzZZI+iIVGrSlslSesLuj4vSZDigMzTKsmucZDQhMQ qwS6ZGGgWlIGfWTCWxhGZiflwAJRKN9LcgzDBlm5IT7CKT+q024XswEDUrgSVwF7 Ii5/QL+e4Nq4kJSK7/F4ZuPxeTd7boC8 -----END CERTIFICATE-----Generated at Sun May 5 00:12:20 2024 by rpki-client on console-fra.rpki-client.org