$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft File: 6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json) Hash identifier: bB3EiIgQeUKgDZqRi1+C1dd/U3gbS3v9QGWJ9+xWML0= Subject key identifier: 07:6C:20:4D:F8:EB:CC:2E:1F:9C:1D:C2:97:56:B0:68:D4:88:3B:72 Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 Certificate issuer: /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft Manifest number: 17 Signing time: Wed 15 May 2024 08:53:09 +0000 Manifest this update: Wed 15 May 2024 08:53:08 +0000 Manifest next update: Wed 22 May 2024 08:53:08 +0000 Files and hashes: 1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: xPJsl4ivpGf86muBGx2zNqImI4Qk7Qi0P2vtakD07wo=) 2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: s6P4CG/Z0X/yIq3+GVwhH8LKJhuD7YhzpQtQWWAe748=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Validity Not Before: May 15 08:53:08 2024 GMT Not After : May 22 08:53:08 2024 GMT Subject: CN=664477f5-32c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:0d:93:fe:0f:cd:68:2e:55:2c:13:02:da: b9:9e:6e:7f:25:ad:b1:ca:8e:21:5e:63:cf:3b:47: d7:31:d1:36:47:fe:ae:f8:5c:2b:f1:f3:24:62:29: aa:58:76:2c:eb:65:c3:61:ff:8b:24:c2:01:75:d0: 3a:73:86:c4:9b:ce:c7:c0:66:e7:cc:dd:63:4f:d4: 64:a8:a1:dd:71:a9:f1:1b:a1:9c:00:8f:f4:40:dc: a1:a9:ba:a1:83:40:f9:c9:1c:aa:3b:8f:be:af:29: 5a:6a:9e:0f:1d:29:df:fb:05:a7:93:93:b9:c7:24: 28:78:f4:2a:b8:9d:10:3b:ba:42:5b:76:a8:7e:11: f6:d3:86:f6:71:53:84:d6:2b:4e:1d:55:ca:f4:0e: 0e:97:ee:f1:56:75:66:4c:f9:d8:9c:a8:e9:93:d0: 44:da:15:a9:97:3d:b9:7c:97:2b:21:46:f0:a1:db: 52:ae:f0:39:91:d4:d6:01:8a:ec:77:d8:98:9f:ad: bf:51:f1:9c:dc:4c:d4:e2:ef:e0:b8:c0:c5:ab:07: 90:27:1d:e9:89:d2:83:68:31:86:46:33:51:e8:91: 14:a9:34:31:71:58:98:84:82:15:e0:42:8e:f5:35: bc:e4:06:7d:59:d9:09:d9:ae:c1:e8:dc:39:80:27: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6C:20:4D:F8:EB:CC:2E:1F:9C:1D:C2:97:56:B0:68:D4:88:3B:72 X509v3 Authority Key Identifier: keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:41:3f:f2:2c:d7:93:c8:6f:15:d8:ac:b7:13:c7:91:1b:9b: 01:31:55:75:9f:64:bc:84:25:11:d3:cd:7a:c4:44:d2:cc:c5: 34:27:70:df:87:c8:b5:9b:c1:c0:f9:56:d9:0c:26:eb:b9:65: e3:02:3f:0b:68:ba:24:62:58:40:2f:de:b2:67:fe:90:59:dd: c4:b1:2b:55:d3:7d:f7:ed:14:42:92:88:2b:74:62:6d:6e:e8: 7d:08:95:a8:1d:00:e3:64:06:f1:14:10:55:1b:c0:a7:ce:62: a6:a9:d2:a2:43:4f:8d:b9:79:9d:f7:87:10:d8:ea:7c:c0:6d: a8:a4:75:2c:44:61:74:01:c0:b1:b9:75:a0:02:d4:e9:01:a5: 2e:2e:fc:1d:4a:5b:25:2c:72:f2:f6:a2:75:1e:22:d1:4d:33: ca:29:87:e2:eb:71:ec:53:ee:c5:df:68:d4:09:43:6a:50:df: 99:98:f9:68:5f:be:d8:16:11:9f:2f:8a:19:1e:44:51:54:7e: 51:f1:50:8d:fb:ef:ef:e2:08:24:e9:47:f3:72:de:11:d8:81: 10:29:25:a2:7f:38:80:1d:27:b9:a0:0a:57:31:cd:f4:b2:c6: 8f:00:1d:65:05:56:91:fc:a6:be:c4:31:12:e3:eb:31:71:76: 60:fa:30:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODZEMzExMC8GA1UEBRMoRUFDQTgyQUU1MkE0RkYxODBEMzM2MTc5RjgzOTUwQTVB QjBCQzdCMzAeFw0yNDA1MTUwODUzMDhaFw0yNDA1MjIwODUzMDhaMBgxFjAUBgNV BAMTDTY2NDQ3N2Y1LTMyYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqUA2T/g/NaC5VLBMC2rmebn8lrbHKjiFeY887R9cx0TZH/q74XCvx8yRiKapY dizrZcNh/4skwgF10DpzhsSbzsfAZufM3WNP1GSood1xqfEboZwAj/RA3KGpuqGD QPnJHKo7j76vKVpqng8dKd/7BaeTk7nHJCh49Cq4nRA7ukJbdqh+EfbThvZxU4TW K04dVcr0Dg6X7vFWdWZM+dicqOmT0ETaFamXPbl8lyshRvCh21Ku8DmR1NYBiux3 2Jifrb9R8ZzcTNTi7+C4wMWrB5AnHemJ0oNoMYZGM1HokRSpNDFxWJiEghXgQo71 NbzkBn1Z2QnZrsHo3DmAJ7iTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB2wgTfjr zC4fnB3Cl1awaNSIO3IwHwYDVR0jBBgwFoAU6sqCrlKk/xgNM2F5+DlQpasLx7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4NkQzLzFGQTI5MTE0RUVD MzExRUVCMkRCRkIxQkM0RjlBRTAyLzZzcUNybEtrX3hnTk0yRjUtRGxRcGFzTHg3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnNxQ3JsS2tfeGdOTTJGNS1EbFFwYXNMeDdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 NkQzLzFGQTI5MTE0RUVDMzExRUVCMkRCRkIxQkM0RjlBRTAyLzZzcUNybEtrX3hn Tk0yRjUtRGxRcGFzTHg3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAZBP/Is15PIbxXYrLcTx5EbmwExVXWfZLyEJRHTzXrERNLMxTQncN+H yLWbwcD5VtkMJuu5ZeMCPwtouiRiWEAv3rJn/pBZ3cSxK1XTffftFEKSiCt0Ym1u 6H0IlagdAONkBvEUEFUbwKfOYqap0qJDT425eZ33hxDY6nzAbaikdSxEYXQBwLG5 daAC1OkBpS4u/B1KWyUscvL2onUeItFNM8oph+LrcexT7sXfaNQJQ2pQ35mY+Whf vtgWEZ8vihkeRFFUflHxUI377+/iCCTpR/Ny3hHYgRApJaJ/OIAdJ7mgClcxzfSy xo8AHWUFVpH8pr7EMRLj6zFxdmD6MPA= -----END CERTIFICATE-----Generated at Wed May 15 09:27:31 2024 by rpki-client on console-fra.rpki-client.org