$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft File: x6CGcqgQDaMwwSIxURVYe-YRDfE.mft (raw, json) Hash identifier: 3ACg9wbz263T3ngHxHIo6hH2f9xXNp87s3tHp8aBeL8= Subject key identifier: EF:03:E7:BC:1F:82:D8:08:34:84:8A:16:F9:03:A8:21:5E:61:E3:09 Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft Manifest number: 061A Signing time: Sat 04 May 2024 23:56:40 +0000 Manifest this update: Sat 04 May 2024 23:56:40 +0000 Manifest next update: Sat 11 May 2024 23:56:40 +0000 Files and hashes: 1: x6CGcqgQDaMwwSIxURVYe-YRDfE.crl (hash: foxzsw9cOAr61+ak8Jlz2B4RI5n41oJBlYEivCNsSEU=) 2: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (hash: lGneckyUhTQuwYh6XGjp5LQ8QZF1NYFAjZHaCvuKpEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Validity Not Before: May 4 23:56:40 2024 GMT Not After : May 11 23:56:40 2024 GMT Subject: CN=6636cb38-dcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:cd:1d:86:b7:0c:6c:6c:d0:b4:87:83:9d: 69:e2:5a:c4:de:08:c9:33:6a:74:7e:98:cd:42:d2: 2b:c9:8a:14:16:46:92:0b:0f:77:89:4b:88:60:ba: 8b:92:73:0e:68:87:24:ee:95:d3:2e:e4:2c:75:8d: 43:35:86:5c:43:ef:9e:d4:bc:83:b9:52:d5:da:7e: 44:43:29:9f:47:c9:7d:2e:b7:11:25:cf:a7:af:06: dd:aa:21:97:47:a8:c7:b7:a4:d0:68:f5:13:dc:d8: e3:a0:3d:8e:27:5c:ca:c1:11:3f:db:39:9a:68:6b: 0f:5f:10:22:27:f9:37:b4:56:53:d1:c5:71:74:f8: f2:9a:d9:6d:54:26:45:5b:b9:95:7d:1e:ac:d3:34: 1b:f1:bc:8a:11:e4:14:fa:f1:cb:f7:31:e4:6a:ec: b0:6e:47:35:0d:1e:95:98:02:cc:d4:6d:70:17:86: d2:dd:e0:f7:37:0b:81:21:3b:e0:46:12:3b:78:e1: 52:98:f1:50:b7:ff:71:62:37:1f:9f:fe:19:8d:3d: df:d3:2b:4a:73:90:5b:33:fc:2a:64:45:13:06:09: cf:65:eb:33:93:38:c7:5e:fd:2f:be:44:96:90:da: 1b:13:de:f8:73:55:cb:fe:87:06:02:5e:e8:87:d4: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:03:E7:BC:1F:82:D8:08:34:84:8A:16:F9:03:A8:21:5E:61:E3:09 X509v3 Authority Key Identifier: keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:ba:9b:12:18:47:30:b5:f0:a9:49:a4:5d:69:a7:3d:b7:14: bc:fc:f7:88:2c:5d:a3:b8:a3:69:a6:48:5a:06:3e:3f:77:b4: 6f:0e:b9:24:5f:7e:de:c1:bb:e1:b2:83:85:dc:01:92:24:cd: 8a:46:86:97:83:5c:b0:0a:ca:ce:1a:8a:8b:b0:25:a1:19:f6: d7:32:3c:48:e5:4a:c3:77:89:04:1f:9a:69:74:cf:18:77:80: a7:89:fb:a4:f7:17:a0:f5:45:e3:37:fa:2f:5f:7f:01:80:47: 0a:d2:e5:5c:02:0b:49:00:6c:64:47:35:3e:af:92:22:da:4a: 69:b7:c0:e5:2d:e3:83:51:1f:29:82:b0:97:72:a0:94:a8:fc: 42:9c:61:55:27:49:28:eb:17:c0:e0:17:9c:cf:22:a1:ae:8f: ca:25:22:26:25:2c:77:2e:ee:f9:46:c7:80:7f:3b:57:ed:a5: 61:cb:c0:14:f2:a0:6a:1c:4e:60:d4:b6:2d:73:14:4f:de:38: 31:17:78:81:28:10:56:0d:55:be:6f:17:0d:d0:53:61:ac:66: c6:e3:6c:8f:84:09:d4:5c:b1:ae:6b:b6:8b:51:d7:c0:c7:38: ab:53:f5:ba:fb:9e:b6:94:68:ce:a8:08:ad:c1:c2:bb:9c:18: 66:5b:40:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC RTYxMTBERjEwHhcNMjQwNTA0MjM1NjQwWhcNMjQwNTExMjM1NjQwWjAYMRYwFAYD VQQDEw02NjM2Y2IzOC1kY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4rNHYa3DGxs0LSHg51p4lrE3gjJM2p0fpjNQtIryYoUFkaSCw93iUuIYLqL knMOaIck7pXTLuQsdY1DNYZcQ++e1LyDuVLV2n5EQymfR8l9LrcRJc+nrwbdqiGX R6jHt6TQaPUT3NjjoD2OJ1zKwRE/2zmaaGsPXxAiJ/k3tFZT0cVxdPjymtltVCZF W7mVfR6s0zQb8byKEeQU+vHL9zHkauywbkc1DR6VmALM1G1wF4bS3eD3NwuBITvg RhI7eOFSmPFQt/9xYjcfn/4ZjT3f0ytKc5BbM/wqZEUTBgnPZeszkzjHXv0vvkSW kNobE974c1XL/ocGAl7oh9Tp3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8D57wf gtgINISKFvkDqCFeYeMJMB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNBOS9FRUQ3NDhENjRGMTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURh TXd3U0l4VVJWWWUtWVJEZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHupsSGEcwtfCpSaRdaac9txS8/PeILF2juKNppkhaBj4/d7RvDrkk X37ewbvhsoOF3AGSJM2KRoaXg1ywCsrOGoqLsCWhGfbXMjxI5UrDd4kEH5ppdM8Y d4Cnifuk9xeg9UXjN/ovX38BgEcK0uVcAgtJAGxkRzU+r5Ii2kppt8DlLeODUR8p grCXcqCUqPxCnGFVJ0ko6xfA4BeczyKhro/KJSImJSx3Lu75RseAfztX7aVhy8AU 8qBqHE5g1LYtcxRP3jgxF3iBKBBWDVW+bxcN0FNhrGbG42yPhAnUXLGua7aLUdfA xzirU/W6+562lGjOqAitwcK7nBhmW0A7 -----END CERTIFICATE-----Generated at Sun May 5 01:13:18 2024 by rpki-client on console-ams.rpki-client.org