$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EF0/5809C7BA567D11EC90A21644C4F9AE02/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.mft File: 6h6dYWis8Hs5qz6S-Dx7NL7y4k4.mft (raw, json) Hash identifier: yv+R/ZUodNcYzrtrvCXBOpiOcmGpWFObwZuiSxP12ws= Subject key identifier: 35:11:EE:10:23:D9:E0:88:2D:13:81:71:32:C7:C8:E7:2D:7C:C0:F8 Authority key identifier: EA:1E:9D:61:68:AC:F0:7B:39:AB:3E:92:F8:3C:7B:34:BE:F2:E2:4E Certificate issuer: /CN=A9131EF0/serialNumber=EA1E9D6168ACF07B39AB3E92F83C7B34BEF2E24E Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131EF0/5809C7BA567D11EC90A21644C4F9AE02/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.mft Manifest number: 0381 Signing time: Wed 01 May 2024 02:59:55 +0000 Manifest this update: Wed 01 May 2024 02:59:54 +0000 Manifest next update: Wed 08 May 2024 02:59:54 +0000 Files and hashes: 1: 6h6dYWis8Hs5qz6S-Dx7NL7y4k4.crl (hash: eyIl+L4P95ALggKzntzm5OZwggZehvtReXY1AJ6WEVE=) 2: 0D5FCB16568111EC8C98BA6FC4F9AE02.roa (hash: pnH+/pzT5RqGTiL+72ewCgH8cuDW4K2YEYqeVoPGZ/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131EF0/5809C7BA567D11EC90A21644C4F9AE02/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.crl rsync://rpki.apnic.net/member_repository/A9131EF0/5809C7BA567D11EC90A21644C4F9AE02/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131EF0/serialNumber=EA1E9D6168ACF07B39AB3E92F83C7B34BEF2E24E Validity Not Before: May 1 02:59:54 2024 GMT Not After : May 8 02:59:54 2024 GMT Subject: CN=6631b02b-4b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:91:c9:a1:d0:d2:f3:57:68:a2:6d:9a:35: 29:6d:7c:57:31:78:9f:1f:20:69:46:eb:19:a7:32: 4a:11:15:41:9d:ee:a4:dd:96:5b:f6:a7:f7:14:9c: 8d:7b:47:78:ba:3c:55:64:59:ee:01:77:33:a4:39: 44:63:fe:31:35:0d:71:b6:cf:bf:cf:2e:bc:77:c0: fb:d4:23:fe:cc:20:f1:cd:b6:06:f0:03:f7:24:38: e5:0d:17:97:e2:bf:db:d7:ae:33:f9:43:35:a2:d3: 11:f0:e3:b3:24:55:69:ea:c2:b2:9e:0e:1b:50:61: cf:c6:1a:d7:b6:e7:04:53:c9:99:d6:4d:30:5c:f7: 16:82:d5:0d:4a:ae:11:34:15:cb:b7:cc:bf:4e:e3: 00:56:f2:ef:c1:3f:1c:c2:fe:c8:18:d7:f7:56:33: 39:cb:f5:30:c3:75:d7:a3:27:1b:e0:3e:a9:bb:00: cf:43:78:47:f7:33:d6:ef:8b:82:eb:3b:29:4e:78: 02:cb:23:15:52:42:f7:1a:77:e0:a0:ac:68:d5:42: 42:12:ed:c9:13:c9:f9:89:70:e3:09:4f:c0:ff:fb: 9e:94:bd:dc:9a:ea:8c:76:2c:29:1b:22:b0:f2:6b: e8:1c:24:63:62:54:0e:48:3e:4f:d9:21:76:56:28: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:11:EE:10:23:D9:E0:88:2D:13:81:71:32:C7:C8:E7:2D:7C:C0:F8 X509v3 Authority Key Identifier: keyid:EA:1E:9D:61:68:AC:F0:7B:39:AB:3E:92:F8:3C:7B:34:BE:F2:E2:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131EF0/5809C7BA567D11EC90A21644C4F9AE02/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EF0/5809C7BA567D11EC90A21644C4F9AE02/6h6dYWis8Hs5qz6S-Dx7NL7y4k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b2:ad:68:85:c3:e0:78:68:02:7b:f2:56:63:d8:7a:4a:4e: c2:c0:c4:71:78:2c:35:df:63:a1:86:fa:88:55:3b:dd:75:3c: 01:6f:d4:78:0a:69:8d:ee:45:a8:e1:e7:3d:ff:5b:ee:37:fb: 3c:0c:f4:b8:85:79:1f:ab:ac:ee:37:d4:3a:9a:bd:84:85:61: 63:15:d9:c7:ef:d8:22:55:01:cc:4c:88:c8:c9:d2:66:42:49: f3:29:89:bf:a8:89:07:dd:57:51:4b:07:47:65:55:c9:c3:93: e0:2f:15:af:3c:1c:7c:77:f6:cf:d3:2d:f6:2c:1b:70:7b:f7: 66:61:ff:43:29:52:67:05:95:c8:85:18:e6:f8:9e:87:68:93: e0:3e:d9:1b:ac:f8:03:e2:a7:13:24:41:bf:f5:09:3e:ec:1f: 98:46:eb:a8:7b:89:86:3a:40:13:29:84:35:ab:3e:a7:98:35: 9d:45:de:3b:fc:fd:8b:38:90:50:90:af:89:1f:50:a5:41:34: 61:14:26:71:64:ac:99:76:25:26:c5:d4:0e:9c:94:a3:75:56: 91:f6:9f:41:76:e3:77:6f:43:ba:20:4e:47:a9:5b:d5:5f:f7: 8b:f7:f0:05:e9:7e:90:4b:cc:2a:e2:b8:5f:35:55:e5:c5:c0: 6a:fd:5a:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFFRjAxMTAvBgNVBAUTKEVBMUU5RDYxNjhBQ0YwN0IzOUFCM0U5MkY4M0M3QjM0 QkVGMkUyNEUwHhcNMjQwNTAxMDI1OTU0WhcNMjQwNTA4MDI1OTU0WjAYMRYwFAYD VQQDEw02NjMxYjAyYi00YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAeRyaHQ0vNXaKJtmjUpbXxXMXifHyBpRusZpzJKERVBne6k3ZZb9qf3FJyN e0d4ujxVZFnuAXczpDlEY/4xNQ1xts+/zy68d8D71CP+zCDxzbYG8AP3JDjlDReX 4r/b164z+UM1otMR8OOzJFVp6sKyng4bUGHPxhrXtucEU8mZ1k0wXPcWgtUNSq4R NBXLt8y/TuMAVvLvwT8cwv7IGNf3VjM5y/Uww3XXoycb4D6puwDPQ3hH9zPW74uC 6zspTngCyyMVUkL3GnfgoKxo1UJCEu3JE8n5iXDjCU/A//uelL3cmuqMdiwpGyKw 8mvoHCRjYlQOSD5P2SF2ViiTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUR7hAj 2eCILROBcTLHyOctfMD4MB8GA1UdIwQYMBaAFOoenWForPB7Oas+kvg8ezS+8uJO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUVGMC81ODA5QzdCQTU2 N0QxMUVDOTBBMjE2NDRDNEY5QUUwMi82aDZkWVdpczhIczVxejZTLUR4N05MN3k0 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZoNmRZV2lzOEhzNXF6NlMtRHg3Tkw3eTRrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUVGMC81ODA5QzdCQTU2N0QxMUVDOTBBMjE2NDRDNEY5QUUwMi82aDZkWVdpczhI czVxejZTLUR4N05MN3k0azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6sq1ohcPgeGgCe/JWY9h6Sk7CwMRxeCw132OhhvqIVTvddTwBb9R4 CmmN7kWo4ec9/1vuN/s8DPS4hXkfq6zuN9Q6mr2EhWFjFdnH79giVQHMTIjIydJm QknzKYm/qIkH3VdRSwdHZVXJw5PgLxWvPBx8d/bP0y32LBtwe/dmYf9DKVJnBZXI hRjm+J6HaJPgPtkbrPgD4qcTJEG/9Qk+7B+YRuuoe4mGOkATKYQ1qz6nmDWdRd47 /P2LOJBQkK+JH1ClQTRhFCZxZKyZdiUmxdQOnJSjdVaR9p9BduN3b0O6IE5HqVvV X/eL9/AF6X6QS8wq4rhfNVXlxcBq/VoK -----END CERTIFICATE-----Generated at Wed May 1 04:49:20 2024 by rpki-client on console-ams.rpki-client.org