$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft File: 6w67ZlG90AYnOWdC_xoLTqD94uU.mft (raw, json) Hash identifier: lGaqrqP8JC/rMmN2eoUq/GXHjo++5k5M9HwEZdQPyoc= Subject key identifier: AA:5C:63:B1:25:98:6C:C2:BA:90:56:11:9B:A6:89:08:DC:69:6E:0C Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5 Certificate issuer: /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5 Certificate serial: 17E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft Manifest number: 17DC Signing time: Wed 08 May 2024 17:04:16 +0000 Manifest this update: Wed 08 May 2024 17:04:16 +0000 Manifest next update: Wed 15 May 2024 17:04:16 +0000 Files and hashes: 1: 6w67ZlG90AYnOWdC_xoLTqD94uU.crl (hash: GqJzDhGxpCROvqqNyBjofdJh8KFj5WNRtkZjLrPNxh4=) 2: C00CB30A87A711EA94E5CF22C4F9AE02.roa (hash: H7UiCPtCv14knct6AsSW1QeCOme/Hfazm/MFSslpfgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6121 (0x17e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5 Validity Not Before: May 8 17:04:16 2024 GMT Not After : May 15 17:04:16 2024 GMT Subject: CN=663bb090-05ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:d2:d8:93:5f:8a:9a:98:d4:4e:79:eb:c0: 54:94:db:2f:59:18:39:cd:d0:cf:db:cc:7e:04:35: 68:d2:84:f2:b0:e8:33:07:e5:e5:62:cd:59:5b:ad: e1:9f:0d:07:78:ff:58:17:82:8b:24:0c:60:87:31: 58:a9:e9:b2:5e:6b:b8:18:db:83:44:a3:1a:4c:ef: a3:8a:3c:83:24:83:e7:fe:91:c9:d3:6e:05:ab:ef: 81:ca:8a:68:16:8a:dd:12:2b:04:10:2a:d2:1a:96: 09:24:3a:cb:44:6c:97:8f:23:74:d8:59:e3:29:d6: f7:2f:f4:6b:fa:c8:73:9a:be:ec:bb:1b:25:99:47: b3:1d:8a:ac:d1:fb:84:66:d7:93:37:2f:ce:ed:93: 5f:e6:90:07:fb:9b:71:b3:5e:f3:a1:c7:d4:58:ff: 1e:5b:39:37:0e:97:8c:f4:08:fb:b7:ef:a1:4a:fa: a4:36:50:8c:c5:8c:ca:13:76:24:1b:f8:85:39:88: a9:a4:47:a1:fa:fe:fe:68:ca:27:29:cc:9a:03:7b: 9a:38:d2:d9:4e:8c:db:34:78:f3:b0:87:05:72:11: b1:38:f3:bb:9e:5b:bf:06:26:bc:d6:75:90:04:0d: 82:cf:4b:f6:ac:21:ff:37:07:7b:0d:b4:d1:8f:6d: e1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:63:B1:25:98:6C:C2:BA:90:56:11:9B:A6:89:08:DC:69:6E:0C X509v3 Authority Key Identifier: keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:52:74:01:0e:ea:bb:16:b1:72:7d:92:ee:4b:4c:a1:d0:0b: 12:40:b0:f6:0c:54:ba:48:09:a7:e9:8b:37:ed:52:98:81:2b: 61:3a:94:35:18:7d:e9:dd:a5:fb:4d:4c:7e:5d:81:45:e1:04: 72:76:1f:f3:22:32:a4:29:18:52:7f:64:78:c0:df:65:bd:24: d0:30:33:b4:cd:ea:0d:44:50:64:37:f2:48:0b:7c:aa:c0:14: 6a:75:10:14:6d:2b:06:c8:f6:6a:a8:18:d4:9e:8d:05:a0:05: c2:8c:03:4f:91:c6:da:98:34:c5:76:63:e1:21:72:e6:e8:73: 48:7a:c6:e8:cf:7d:9d:74:b0:07:2c:fe:c9:5b:62:00:d8:f5: 5e:ea:09:b6:ee:6f:c0:38:40:da:d7:d1:fb:ca:97:09:ff:ea: 5c:53:41:ec:b7:00:6a:90:3e:92:56:4e:c0:ef:49:6c:07:1d: de:0a:e6:d1:a2:6d:f2:52:21:01:fc:20:9f:26:52:97:7c:ad: 3e:02:73:83:00:55:56:9d:69:be:e3:5f:04:e5:3a:2c:1d:e3: ab:3e:0b:52:53:7d:fb:71:e9:1f:8b:94:7b:9a:88:35:ab:07: e8:e8:5f:be:9f:78:10:60:d3:7a:a0:61:59:04:79:45:99:9b: 03:17:e8:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U1MDQxMTAvBgNVBAUTKEVCMEVCQjY2NTFCREQwMDYyNzM5Njc0MkZGMUEwQjRF QTBGREUyRTUwHhcNMjQwNTA4MTcwNDE2WhcNMjQwNTE1MTcwNDE2WjAYMRYwFAYD VQQDEw02NjNiYjA5MC0wNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEzS2JNfipqY1E5568BUlNsvWRg5zdDP28x+BDVo0oTysOgzB+XlYs1ZW63h nw0HeP9YF4KLJAxghzFYqemyXmu4GNuDRKMaTO+jijyDJIPn/pHJ024Fq++Byopo FordEisEECrSGpYJJDrLRGyXjyN02FnjKdb3L/Rr+shzmr7suxslmUezHYqs0fuE ZteTNy/O7ZNf5pAH+5txs17zocfUWP8eWzk3DpeM9Aj7t++hSvqkNlCMxYzKE3Yk G/iFOYippEeh+v7+aMonKcyaA3uaONLZTozbNHjzsIcFchGxOPO7nlu/Bia81nWQ BA2Cz0v2rCH/Nwd7DbTRj23hUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpcY7El mGzCupBWEZumiQjcaW4MMB8GA1UdIwQYMBaAFOsOu2ZRvdAGJzlnQv8aC06g/eLl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTUwNC9BMDhBMkM3Njk4 M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxHOTBBWW5PV2RDX3hvTFRxRDk0 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3NjdabEc5MEFZbk9XZENfeG9MVHFEOTR1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTUwNC9BMDhBMkM3Njk4M0QxMUU3QTM3RkQ0NzhDNEY5QUUwMi82dzY3WmxHOTBB WW5PV2RDX3hvTFRxRDk0dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkUnQBDuq7FrFyfZLuS0yh0AsSQLD2DFS6SAmn6Ys37VKYgSthOpQ1 GH3p3aX7TUx+XYFF4QRydh/zIjKkKRhSf2R4wN9lvSTQMDO0zeoNRFBkN/JIC3yq wBRqdRAUbSsGyPZqqBjUno0FoAXCjANPkcbamDTFdmPhIXLm6HNIesboz32ddLAH LP7JW2IA2PVe6gm27m/AOEDa19H7ypcJ/+pcU0HstwBqkD6SVk7A70lsBx3eCubR om3yUiEB/CCfJlKXfK0+AnODAFVWnWm+418E5TosHeOrPgtSU337cekfi5R7mog1 qwfo6F++n3gQYNN6oGFZBHlFmZsDF+hb -----END CERTIFICATE-----Generated at Wed May 8 20:35:50 2024 by rpki-client on console-ams.rpki-client.org