$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft File: 6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json) Hash identifier: angWeKFEK3UfnCkL5NDOnlu5UY46TM9E1FxpV6YN33s= Subject key identifier: 55:F6:84:09:D3:F0:E5:70:B3:F4:38:76:CC:9D:71:06:EA:C8:DE:67 Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft Manifest number: 9A Signing time: Wed 15 May 2024 07:01:31 +0000 Manifest this update: Wed 15 May 2024 07:01:30 +0000 Manifest next update: Wed 22 May 2024 07:01:30 +0000 Files and hashes: 1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: 0uK0xJvLG/EtWbWHFjZOJxKNU7RsnO8ut3ALpgAz2mw=) 2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: BWu80tjmTtwFgBA9Gg0pNPVAxmLEbxB50FcXTkpVaVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Validity Not Before: May 15 07:01:30 2024 GMT Not After : May 22 07:01:30 2024 GMT Subject: CN=66445dcb-8941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:0e:40:d0:65:ad:79:46:eb:7c:93:28:6a: d2:f4:f2:05:60:43:3a:1a:1b:ea:eb:ab:75:c2:79: 4f:be:6c:3f:d2:d2:59:1d:7e:86:9d:d7:e1:ef:f9: 48:b8:c5:de:10:cb:09:3a:4d:69:00:1e:d6:e6:9b: 07:a4:07:ba:0a:1b:02:79:16:75:41:8c:26:0e:33: 79:40:47:53:70:f9:c3:26:00:a9:0c:d4:8d:f6:ce: 84:50:8d:fe:f7:f8:3f:02:b8:0d:f8:10:e5:21:1a: a0:87:2d:c3:dd:46:03:4b:21:10:a8:bb:ce:b9:bc: ad:e8:37:2e:75:eb:16:77:a9:e5:7b:9a:91:b5:11: 95:3c:18:1b:c6:62:02:f3:4c:3a:27:bf:d7:f4:34: 19:9a:9e:c5:2f:fe:15:a8:73:21:07:31:d6:19:98: 22:6e:d2:fd:c9:7b:d0:79:f8:d3:ca:38:7e:4e:42: 38:2e:9b:08:e7:b4:4e:e9:4d:8c:1b:eb:9a:bf:1d: 63:e9:f1:29:58:78:63:65:32:6b:b4:14:ba:da:40: b2:2d:bf:6f:e2:24:93:36:eb:f7:34:87:f5:6c:d6: 45:43:db:ee:5d:c6:ec:3e:3e:e8:bc:50:e1:7a:a6: 23:ff:4c:95:3b:78:21:12:9b:83:74:56:87:bb:f9: 90:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F6:84:09:D3:F0:E5:70:B3:F4:38:76:CC:9D:71:06:EA:C8:DE:67 X509v3 Authority Key Identifier: keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:4a:a2:2b:30:04:05:92:fb:a4:de:b5:e7:75:dc:2e:b6:44: f7:8e:99:06:ba:f1:41:53:62:8d:d7:6d:3d:44:c8:4b:8c:d6: 82:21:06:19:28:bc:0c:d1:c0:c5:3f:59:ca:c3:c9:0a:66:05: 7e:8b:fa:30:6e:79:a7:6b:26:5a:18:ca:fa:6a:bd:09:ed:43: 3a:9f:67:fa:c8:75:5a:7e:29:53:56:b8:d8:0f:05:fe:a6:b4: 5a:ea:11:d8:dc:41:ac:7e:83:22:00:13:2e:2a:af:14:ed:ce: c7:95:9f:b7:58:15:2b:10:ca:55:ca:62:0a:57:a8:27:60:2c: 30:11:3b:a2:ea:44:15:21:fa:af:79:d8:56:c2:37:cb:c1:5d: db:ae:1b:ed:10:1d:58:ed:c4:af:fc:a2:c5:1b:0e:1b:4b:88: 5e:22:fa:84:ce:a5:bb:02:e5:d8:0f:dc:4d:89:14:94:78:89: 71:b0:5e:01:c2:bc:34:25:51:42:cb:5d:76:5a:73:e0:60:20: 67:6e:88:a6:d0:e5:ba:ba:02:2c:ae:63:d1:1e:22:83:b6:44: 77:e5:d9:95:f1:bf:21:a7:06:19:66:39:0e:14:0f:b9:61:5b: 43:7d:4d:ce:6b:fe:33:67:23:fe:e8:b0:19:d9:70:59:fd:3b: 8b:97:48:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3 NDJEQ0U4MTAwHhcNMjQwNTE1MDcwMTMwWhcNMjQwNTIyMDcwMTMwWjAYMRYwFAYD VQQDEw02NjQ0NWRjYi04OTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOYOQNBlrXlG63yTKGrS9PIFYEM6Ghvq66t1wnlPvmw/0tJZHX6Gndfh7/lI uMXeEMsJOk1pAB7W5psHpAe6ChsCeRZ1QYwmDjN5QEdTcPnDJgCpDNSN9s6EUI3+ 9/g/ArgN+BDlIRqghy3D3UYDSyEQqLvOubyt6DcudesWd6nle5qRtRGVPBgbxmIC 80w6J7/X9DQZmp7FL/4VqHMhBzHWGZgibtL9yXvQefjTyjh+TkI4LpsI57RO6U2M G+uavx1j6fEpWHhjZTJrtBS62kCyLb9v4iSTNuv3NIf1bNZFQ9vuXcbsPj7ovFDh eqYj/0yVO3ghEpuDdFaHu/mQewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX2hAnT 8OVws/Q4dsydcQbqyN5nMB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3 MGZ0YlpTUzVhZFIwTGM2QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADSqIrMAQFkvuk3rXnddwutkT3jpkGuvFBU2KN1209RMhLjNaCIQYZ KLwM0cDFP1nKw8kKZgV+i/owbnmnayZaGMr6ar0J7UM6n2f6yHVafilTVrjYDwX+ prRa6hHY3EGsfoMiABMuKq8U7c7HlZ+3WBUrEMpVymIKV6gnYCwwETui6kQVIfqv edhWwjfLwV3brhvtEB1Y7cSv/KLFGw4bS4heIvqEzqW7AuXYD9xNiRSUeIlxsF4B wrw0JVFCy112WnPgYCBnboim0OW6ugIsrmPRHiKDtkR35dmV8b8hpwYZZjkOFA+5 YVtDfU3Oa/4zZyP+6LAZ2XBZ/TuLl0gX -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org