$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: p6cWCGE7NJVogUJHE63C2tjeuPn/q4/BKv4a174DO+8= Subject key identifier: D6:3C:33:D5:FD:25:6E:1C:03:0F:F8:E2:EF:FC:51:18:D9:17:F2:AA Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 032A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 0323 Signing time: Fri 03 May 2024 03:08:28 +0000 Manifest this update: Fri 03 May 2024 03:08:27 +0000 Manifest next update: Fri 10 May 2024 03:08:27 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: Y5ZYar4n7wa5AAHj1SQmURIKSMdSxPeGrRY1dMqqIX4=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: Ia+t11bwzeFSnidT+Txw3RneKFNlzClO5q3mp6PPWGM=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: s7La7AzKs62exHQeYK290Giop8oTpAbMjlkT19F5an4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: May 3 03:08:27 2024 GMT Not After : May 10 03:08:27 2024 GMT Subject: CN=6634552b-b505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:13:ac:3b:d0:9d:ce:e6:7e:f2:ee:57:d2: 1e:0f:f0:bc:1a:20:52:f3:a7:7c:7b:a6:1e:9c:30: ca:68:6d:f9:c4:4d:41:ac:82:9c:2b:09:db:80:26: 9a:26:b0:a6:3c:05:c5:35:52:a8:97:21:6b:ea:17: ba:d7:ed:85:9d:8b:3a:e8:84:18:04:39:4d:d8:9d: 84:ab:fb:11:d9:58:bd:5b:82:e4:14:99:d2:2d:b8: 2f:b2:2e:dd:fd:3a:9f:a2:ba:15:c2:25:29:ce:e0: 26:c0:b2:35:0f:87:96:3e:05:33:e1:97:17:49:d7: e4:e0:3f:ba:24:28:1c:20:0a:66:91:12:58:fd:48: 0e:f7:b0:24:9a:bb:cc:bc:42:f6:6c:61:46:0e:ed: 2b:80:75:07:09:a8:ba:0d:ca:67:c3:76:e7:4a:63: ef:5f:2c:90:44:41:df:8a:42:4c:82:69:58:0d:ab: 46:69:57:a9:23:c1:a8:09:6c:c9:41:d3:37:86:fe: e3:00:0d:f2:52:c8:bc:da:3f:45:f3:0f:d7:89:fe: 2c:a6:2d:f1:75:79:fb:9b:23:96:11:e2:72:c2:dd: ba:df:73:4d:62:d5:02:46:dc:18:eb:97:33:4d:75: 9c:a1:69:74:9f:85:7a:5f:dd:d2:00:cb:6a:0a:3b: f2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3C:33:D5:FD:25:6E:1C:03:0F:F8:E2:EF:FC:51:18:D9:17:F2:AA X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:be:7e:49:3e:f4:bf:b2:60:b7:f0:2d:a6:7c:c6:bf:60:94: e6:02:75:75:ad:d5:d7:eb:50:89:0e:45:87:3a:2e:d4:74:30: ab:58:86:bb:08:70:d2:d7:83:93:de:7f:d7:7e:00:59:d1:4a: de:07:01:8e:bd:52:db:d5:17:3c:8f:12:95:ab:03:01:a4:89: 1e:f8:48:22:00:34:06:f0:21:71:32:a4:1d:f7:ca:d9:52:6f: 01:e9:86:d1:1a:5a:34:a9:93:b6:6b:64:d8:3d:84:4f:45:46: 8a:c2:61:29:72:9a:28:d3:77:4f:e2:84:ce:48:3c:3c:c0:25: 5a:e2:2f:f0:c8:8b:b9:05:11:c6:8e:28:72:68:de:7e:07:77: c8:dc:76:3f:12:30:e4:3e:36:ab:f9:4a:98:2c:f2:6a:38:c5: 5e:ca:20:c2:a0:02:48:b5:5a:77:cf:d5:e6:5b:81:8f:6f:88: d1:b2:7a:27:0b:45:73:69:85:e5:b8:2f:47:0f:df:20:c8:48: d9:40:f1:7e:c8:04:d2:92:fb:a6:54:b4:54:77:0c:5a:f0:37: 79:17:a6:4c:69:c6:e1:4e:71:9c:53:17:17:ce:a3:c0:36:43: b5:1d:f8:ee:a6:7c:f0:90:b4:ad:42:2b:3b:d0:21:08:aa:5f: bc:93:3d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjQwNTAzMDMwODI3WhcNMjQwNTEwMDMwODI3WjAYMRYwFAYD VQQDEw02NjM0NTUyYi1iNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkYTrDvQnc7mfvLuV9IeD/C8GiBS86d8e6YenDDKaG35xE1BrIKcKwnbgCaa JrCmPAXFNVKolyFr6he61+2FnYs66IQYBDlN2J2Eq/sR2Vi9W4LkFJnSLbgvsi7d /TqforoVwiUpzuAmwLI1D4eWPgUz4ZcXSdfk4D+6JCgcIApmkRJY/UgO97AkmrvM vEL2bGFGDu0rgHUHCai6Dcpnw3bnSmPvXyyQREHfikJMgmlYDatGaVepI8GoCWzJ QdM3hv7jAA3yUsi82j9F8w/Xif4spi3xdXn7myOWEeJywt2633NNYtUCRtwY65cz TXWcoWl0n4V6X93SAMtqCjvyawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNY8M9X9 JW4cAw/44u/8URjZF/KqMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwvn5JPvS/smC38C2mfMa/YJTmAnV1rdXX61CJDkWHOi7UdDCrWIa7 CHDS14OT3n/XfgBZ0UreBwGOvVLb1Rc8jxKVqwMBpIke+EgiADQG8CFxMqQd98rZ Um8B6YbRGlo0qZO2a2TYPYRPRUaKwmEpcpoo03dP4oTOSDw8wCVa4i/wyIu5BRHG jihyaN5+B3fI3HY/EjDkPjar+UqYLPJqOMVeyiDCoAJItVp3z9XmW4GPb4jRsnon C0VzaYXluC9HD98gyEjZQPF+yATSkvumVLRUdwxa8Dd5F6ZMacbhTnGcUxcXzqPA NkO1HfjupnzwkLStQis70CEIql+8kz1q -----END CERTIFICATE-----Generated at Fri May 3 04:36:47 2024 by rpki-client on console-ams.rpki-client.org