$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft File: 6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json) Hash identifier: BQnMxz/f/a6N2WLA2Lrh9aSaX8oK4rf4Gg75/NITm70= Subject key identifier: 68:8B:11:77:F4:7F:C7:85:28:E5:9E:BB:F4:FC:CE:A3:0E:C8:28:C6 Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft Manifest number: 56 Signing time: Fri 17 May 2024 07:53:52 +0000 Manifest this update: Fri 17 May 2024 07:53:51 +0000 Manifest next update: Fri 24 May 2024 07:53:51 +0000 Files and hashes: 1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: SBSTs7FXQ0TEV0/KxMsxxVLAiAUlcvqu6qKEzlFNXnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Validity Not Before: May 17 07:53:51 2024 GMT Not After : May 24 07:53:51 2024 GMT Subject: CN=66470d10-5f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:94:47:e5:07:b2:2c:e4:be:3a:00:8c:a1:60: 7e:61:84:a2:ea:ac:73:c9:1e:58:a6:7f:21:f2:c5: 64:e9:d0:da:bc:4c:6a:a2:86:03:84:1d:21:a0:d9: 1c:0e:9f:aa:b7:71:0d:e2:5e:9f:8a:51:13:c9:92: 09:a6:18:01:e2:24:a0:6e:03:61:55:32:e4:f3:07: db:a3:70:25:b2:34:29:6f:19:8e:33:18:15:5d:4d: af:d8:c9:46:71:dc:39:86:90:81:96:27:8b:4c:05: 73:a0:e6:b8:6b:a5:aa:82:e3:2a:47:14:8e:cb:4c: 49:af:8c:6e:56:3f:93:07:4c:03:f0:53:a3:1c:a3: b0:0d:7e:c8:90:0b:c7:9f:02:56:fc:42:2b:0f:c6: 3f:a6:a3:75:e5:0a:16:2e:5b:9c:06:4f:b2:f6:03: f1:2e:69:37:ff:c1:ed:b1:9c:cd:9f:74:2e:17:21: 27:aa:5a:5c:14:aa:9e:74:74:84:d4:49:e4:f8:56: 0d:48:d7:f0:5b:61:d7:52:a7:44:1e:f5:51:03:91: 8f:61:27:07:c1:71:89:ac:50:b7:f7:dc:b9:fa:9b: 0a:16:f2:2d:a3:0f:c5:83:f6:de:8c:9a:ab:d8:9b: 44:92:03:7f:e1:98:3b:93:93:70:89:28:d9:a4:91: dd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8B:11:77:F4:7F:C7:85:28:E5:9E:BB:F4:FC:CE:A3:0E:C8:28:C6 X509v3 Authority Key Identifier: keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bf:62:74:22:71:19:df:83:e0:b9:fc:21:e6:cd:5f:63:88: 10:c5:61:86:c1:d4:76:89:dd:6a:c8:c2:e7:a7:f6:e5:d4:07: 8d:c8:de:0a:79:ac:ca:81:2a:63:55:94:0e:bb:a6:c7:f4:93: cb:ed:72:34:ba:99:61:63:42:c0:33:e5:3c:4a:1d:b0:a9:72: 16:a9:6f:64:97:cc:fe:d2:ae:86:da:2c:3e:cd:94:4b:d6:bd: 6c:82:07:e8:2a:88:53:67:85:90:d0:18:ef:49:2c:2a:aa:79: 60:1d:cf:7c:1c:35:69:e4:0e:d0:df:7e:9e:ac:f4:72:9a:3f: ba:c3:48:d0:a9:0f:0f:97:5b:37:33:32:b2:36:68:34:80:4c: 4f:1e:a2:5f:a5:af:1f:d2:44:3e:fc:c0:36:2b:b6:5f:0b:22: 83:c4:60:e2:c1:39:95:a3:d4:7f:c5:bb:be:c9:96:7b:49:e5: 1c:4c:78:0f:2b:f8:51:a4:57:27:b3:46:40:69:88:0f:8e:cb: 4e:04:1c:37:85:7a:59:4c:a6:10:01:64:83:b3:e2:f1:5d:cb: 39:10:fc:fd:b8:d2:cf:95:44:29:f7:5d:52:97:3d:bb:d8:69: cd:44:7b:20:35:1b:c8:3c:f1:6f:f0:e8:28:2c:ea:bf:c3:ce: 9b:4b:80:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzBERTExMC8GA1UEBRMoRUFFMkJDRTgzNUU0MkIxMTVGMThCM0ZFMEU4RjI3Rjg0 QTQ3NDk5NjAeFw0yNDA1MTcwNzUzNTFaFw0yNDA1MjQwNzUzNTFaMBgxFjAUBgNV BAMTDTY2NDcwZDEwLTVmMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZlEflB7Is5L46AIyhYH5hhKLqrHPJHlimfyHyxWTp0Nq8TGqihgOEHSGg2RwO n6q3cQ3iXp+KURPJkgmmGAHiJKBuA2FVMuTzB9ujcCWyNClvGY4zGBVdTa/YyUZx 3DmGkIGWJ4tMBXOg5rhrpaqC4ypHFI7LTEmvjG5WP5MHTAPwU6Mco7ANfsiQC8ef Alb8QisPxj+mo3XlChYuW5wGT7L2A/EuaTf/we2xnM2fdC4XISeqWlwUqp50dITU SeT4Vg1I1/BbYddSp0Qe9VEDkY9hJwfBcYmsULf33Ln6mwoW8i2jD8WD9t6MmqvY m0SSA3/hmDuTk3CJKNmkkd2tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaIsRd/R/ x4Uo5Z679PzOow7IKMYwHwYDVR0jBBgwFoAU6uK86DXkKxFfGLP+Do8n+EpHSZYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDMERFL0U0NzQ0M0Q2OEZF RTExRUU5MDM4OUUxQ0M0RjlBRTAyLzZ1Szg2RFhrS3hGZkdMUC1EbzhuLUVwSFNa WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnVLODZEWGtLeEZmR0xQLURvOG4tRXBIU1pZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD MERFL0U0NzQ0M0Q2OEZFRTExRUU5MDM4OUUxQ0M0RjlBRTAyLzZ1Szg2RFhrS3hG ZkdMUC1EbzhuLUVwSFNaWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACy/YnQicRnfg+C5/CHmzV9jiBDFYYbB1HaJ3WrIwuen9uXUB43I3gp5 rMqBKmNVlA67psf0k8vtcjS6mWFjQsAz5TxKHbCpchapb2SXzP7SrobaLD7NlEvW vWyCB+gqiFNnhZDQGO9JLCqqeWAdz3wcNWnkDtDffp6s9HKaP7rDSNCpDw+XWzcz MrI2aDSATE8eol+lrx/SRD78wDYrtl8LIoPEYOLBOZWj1H/Fu77JlntJ5RxMeA8r +FGkVyezRkBpiA+Oy04EHDeFellMphABZIOz4vFdyzkQ/P240s+VRCn3XVKXPbvY ac1EeyA1G8g88W/w6Cgs6r/DzptLgD0= -----END CERTIFICATE-----Generated at Fri May 17 10:10:48 2024 by rpki-client on console-fra.rpki-client.org