$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json) Hash identifier: MVSj22C3ugvh4qYQs7G3xRj/Z4Nmxp7w+UwCehaqFs0= Subject key identifier: 97:46:BE:AB:EC:A4:BF:D8:06:40:8D:12:64:E3:33:C2:EB:2A:F5:E7 Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft Manifest number: 046C Signing time: Fri 03 May 2024 01:51:30 +0000 Manifest this update: Fri 03 May 2024 01:51:29 +0000 Manifest next update: Fri 10 May 2024 01:51:29 +0000 Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: lR52U55Ny+Bwl47/1sUJ3uPax6UXvZC5CRSwYKpRCes=) 2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: kfl/Obx3h4m/hFbttNdroqHInQVOadvgrPgoBvG+n0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: May 3 01:51:29 2024 GMT Not After : May 10 01:51:29 2024 GMT Subject: CN=66344322-05ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:ae:14:09:e3:c5:7c:4d:4a:c5:ed:b2:60: 90:1e:48:a6:58:35:ef:fe:b6:fe:78:17:d5:d4:f7: 59:95:c8:41:df:cc:b3:c3:1f:e2:7c:c1:e9:ba:2a: d4:9a:60:ad:83:eb:5c:ce:b4:c8:1d:83:34:fe:1f: dc:8c:fb:ee:c3:90:af:5a:68:33:9d:2f:b1:29:ad: 2b:ae:ca:c5:4c:82:89:e5:04:a4:3d:40:94:fc:04: 20:aa:16:eb:08:e5:58:65:37:85:ce:af:3d:49:5b: 09:82:21:d4:0a:2e:90:e0:bb:3d:eb:ec:19:d8:d1: ce:1e:06:e6:b2:cc:34:70:cb:89:20:5a:6f:f1:4d: e9:9f:09:e8:7e:6f:5e:cf:eb:54:a8:05:74:37:92: 67:e9:7d:70:6c:d1:3d:39:88:4c:c0:17:ed:c3:96: 23:12:03:a9:e1:21:90:b1:57:6a:4c:9b:a4:0a:ca: d2:95:03:52:8d:e0:c3:3e:ef:0f:bc:e9:81:53:e2: d7:1d:50:b6:a2:e5:9e:e0:ba:e4:5d:e3:eb:75:d4: ed:47:59:4f:3f:d8:3e:02:f3:2f:2f:22:db:49:e0: 76:03:51:11:72:09:6a:85:42:18:98:ad:b7:0e:dd: 64:1f:c2:80:0a:24:2f:60:bd:46:ab:6f:e8:19:7a: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:46:BE:AB:EC:A4:BF:D8:06:40:8D:12:64:E3:33:C2:EB:2A:F5:E7 X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:06:b5:b2:f3:e2:ef:9d:29:81:ef:9c:19:ba:c9:5c:fe:83: 54:e7:4b:4d:6b:99:90:88:56:82:2f:43:03:55:9e:b3:05:23: 72:88:13:27:ab:66:49:53:62:66:fe:05:b9:e6:01:61:39:d8: 26:1c:cb:1e:4c:d2:94:79:58:38:07:86:57:6e:cf:27:4f:ba: 1a:0e:5f:f6:78:ff:e9:c5:0e:f7:a9:ef:91:c6:2a:e2:d2:3c: 2f:8f:62:50:19:d0:5a:17:cc:da:0b:be:26:9d:23:7b:e7:40: 33:ba:1e:ba:62:8a:28:c5:f8:c4:a4:5e:b1:ff:f2:43:dd:6c: cc:23:2e:72:38:a5:c4:04:33:1f:bf:a8:85:19:1d:40:ed:79: fb:b7:a1:bc:1e:9c:ac:5c:8b:e1:a7:23:c0:a2:cf:ca:19:55: 04:17:9d:57:52:98:6b:8c:df:2d:2a:73:20:8b:07:90:96:fd: 20:7f:7a:19:a5:7a:73:e0:8c:76:83:4c:37:a9:0f:df:f4:79: ff:e5:32:fd:0a:7d:77:78:72:cb:9a:18:ed:4b:3f:19:43:59: 70:ba:f4:4d:e5:c4:b1:e3:65:5d:84:f4:45:6e:90:5a:31:06: 25:bf:34:fc:34:61:c9:4e:54:0f:11:a3:23:ea:c4:86:29:be: af:a4:5f:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjQwNTAzMDE1MTI5WhcNMjQwNTEwMDE1MTI5WjAYMRYwFAYD VQQDEw02NjM0NDMyMi0wNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcOuFAnjxXxNSsXtsmCQHkimWDXv/rb+eBfV1PdZlchB38yzwx/ifMHpuirU mmCtg+tczrTIHYM0/h/cjPvuw5CvWmgznS+xKa0rrsrFTIKJ5QSkPUCU/AQgqhbr COVYZTeFzq89SVsJgiHUCi6Q4Ls96+wZ2NHOHgbmssw0cMuJIFpv8U3pnwnofm9e z+tUqAV0N5Jn6X1wbNE9OYhMwBftw5YjEgOp4SGQsVdqTJukCsrSlQNSjeDDPu8P vOmBU+LXHVC2ouWe4LrkXePrddTtR1lPP9g+AvMvLyLbSeB2A1ERcglqhUIYmK23 Dt1kH8KACiQvYL1Gq2/oGXo3BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdGvqvs pL/YBkCNEmTjM8LrKvXnMB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0OC81MEVGRDg3NkY5RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNi bmtRemdsRGFQV1RZQm9lZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgBrWy8+LvnSmB75wZuslc/oNU50tNa5mQiFaCL0MDVZ6zBSNyiBMn q2ZJU2Jm/gW55gFhOdgmHMseTNKUeVg4B4ZXbs8nT7oaDl/2eP/pxQ73qe+Rxiri 0jwvj2JQGdBaF8zaC74mnSN750Azuh66YoooxfjEpF6x//JD3WzMIy5yOKXEBDMf v6iFGR1A7Xn7t6G8HpysXIvhpyPAos/KGVUEF51XUphrjN8tKnMgiweQlv0gf3oZ pXpz4Ix2g0w3qQ/f9Hn/5TL9Cn13eHLLmhjtSz8ZQ1lwuvRN5cSx42VdhPRFbpBa MQYlvzT8NGHJTlQPEaMj6sSGKb6vpF+v -----END CERTIFICATE-----Generated at Fri May 3 03:10:47 2024 by rpki-client on console-ams.rpki-client.org