$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: x3VB14OMqRAMKMJNjwDe+wvLKQgZQx6nmVdEKUI/9lI= Subject key identifier: 18:4A:4C:01:87:9B:2D:B8:1E:12:AF:03:3D:DC:53:03:F0:61:59:44 Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 2934 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 2927 Signing time: Mon 06 May 2024 14:21:30 +0000 Manifest this update: Mon 06 May 2024 14:21:29 +0000 Manifest next update: Mon 13 May 2024 14:21:29 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: G6mTHQ4iEERhggYZ2ynEJxNT8mr6XIXmdqj7KEuwuns=) 2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: /HPPmmFykZW5v3XdGcZXXi6wBnasoJsG4/b4AV7xkYs=) 3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: RueahHW0YYQICZr1Iyrl4vDSbOuoH/cPEdDeupB9ebc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10548 (0x2934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: May 6 14:21:29 2024 GMT Not After : May 13 14:21:29 2024 GMT Subject: CN=6638e769-adb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:04:0f:3a:8d:4a:71:d5:d9:f4:e5:cf:35: ac:3c:fa:03:2a:26:d9:67:44:f6:b1:93:2e:6f:4f: 8c:ba:85:3c:a0:f0:79:8f:72:83:fc:91:f9:26:b3: 4f:5c:c1:db:60:40:c1:2d:f9:81:de:48:5d:51:11: ed:77:d9:b8:b8:46:ce:9c:2e:0d:f5:63:73:08:21: c4:21:e6:75:b3:2e:13:28:21:a9:4b:9a:0f:7c:19: 3f:c8:36:ba:88:c7:f3:30:8a:17:3b:1e:9d:80:13: 1e:de:08:b5:17:bf:26:19:d0:92:10:ec:39:4a:89: 24:38:15:02:1f:91:90:cb:7c:5e:d3:af:40:13:77: cd:f0:a4:06:7a:9e:15:e0:18:68:ae:1a:2a:ac:13: aa:39:12:ff:45:88:1a:7e:ea:06:3f:f2:4f:39:4f: de:a0:e9:31:80:ae:6d:ec:9a:7a:05:29:e7:03:0d: 5c:8c:8b:13:a5:3e:1f:8c:f7:c6:75:b1:30:96:28: 22:c1:e1:b0:42:bb:55:d6:c1:65:3f:a6:6f:48:90: 67:d4:35:e8:62:74:2a:35:07:6c:d0:4e:73:88:00: 9b:28:ef:41:c4:ce:9f:ea:75:c3:ce:68:e9:d4:74: cd:ba:cb:40:95:ee:cf:38:7f:95:1b:43:50:d0:ef: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4A:4C:01:87:9B:2D:B8:1E:12:AF:03:3D:DC:53:03:F0:61:59:44 X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c4:c5:c4:59:82:16:b8:65:28:a9:84:e0:0e:4e:25:17:8f: 8e:0b:8a:fa:88:3f:16:37:61:87:84:cb:d8:71:d6:fd:76:1d: 2d:bd:c7:51:bd:2c:21:49:e9:d6:46:e3:ed:39:1b:f6:e6:ef: 24:89:b8:3e:af:e2:a1:02:ec:08:0b:c4:4f:c8:7d:e2:25:ef: 6b:81:4b:96:cf:0d:7f:d2:48:b5:27:1a:21:e2:33:be:f0:06: c8:4c:2f:4c:98:d3:e1:fb:6a:01:36:6a:be:73:4e:6c:28:5a: 7d:c5:c3:a1:6b:08:3d:37:95:04:08:49:32:eb:71:50:5c:46: ee:ce:30:85:ba:2a:23:65:e2:5f:8c:19:d8:a7:5c:3b:e0:dd: 9f:89:3b:8f:e3:83:b0:f5:96:f1:f3:f2:36:1d:73:5b:70:4c: c2:5a:28:7a:60:1d:60:24:7d:85:7a:62:d1:30:f2:d9:65:11: fd:5e:6e:13:a4:57:06:97:88:8d:3b:4d:b2:47:6c:11:91:e6: ce:85:c9:2f:c8:c8:16:20:2a:ad:01:dd:be:44:d7:02:35:41: c0:b3:b6:dc:6f:40:3a:57:01:c9:af:0a:88:1b:b8:f8:60:9f: 51:24:2d:b3:f8:22:be:b2:12:4f:78:04:2b:9e:99:fb:f2:95: a0:59:5d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjQwNTA2MTQyMTI5WhcNMjQwNTEzMTQyMTI5WjAYMRYwFAYD VQQDEw02NjM4ZTc2OS1hZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRwEDzqNSnHV2fTlzzWsPPoDKibZZ0T2sZMub0+MuoU8oPB5j3KD/JH5JrNP XMHbYEDBLfmB3khdURHtd9m4uEbOnC4N9WNzCCHEIeZ1sy4TKCGpS5oPfBk/yDa6 iMfzMIoXOx6dgBMe3gi1F78mGdCSEOw5SokkOBUCH5GQy3xe069AE3fN8KQGep4V 4BhorhoqrBOqORL/RYgafuoGP/JPOU/eoOkxgK5t7Jp6BSnnAw1cjIsTpT4fjPfG dbEwligiweGwQrtV1sFlP6ZvSJBn1DXoYnQqNQds0E5ziACbKO9BxM6f6nXDzmjp 1HTNustAle7POH+VG0NQ0O91/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhKTAGH my24HhKvAz3cUwPwYVlEMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4xMXEWYIWuGUoqYTgDk4lF4+OC4r6iD8WN2GHhMvYcdb9dh0tvcdR vSwhSenWRuPtORv25u8kibg+r+KhAuwIC8RPyH3iJe9rgUuWzw1/0ki1Jxoh4jO+ 8AbITC9MmNPh+2oBNmq+c05sKFp9xcOhawg9N5UECEky63FQXEbuzjCFuiojZeJf jBnYp1w74N2fiTuP44Ow9Zbx8/I2HXNbcEzCWih6YB1gJH2FemLRMPLZZRH9Xm4T pFcGl4iNO02yR2wRkebOhckvyMgWICqtAd2+RNcCNUHAs7bcb0A6VwHJrwqIG7j4 YJ9RJC2z+CK+shJPeAQrnpn78pWgWV3z -----END CERTIFICATE-----Generated at Mon May 6 17:35:36 2024 by rpki-client on console-fra.rpki-client.org