$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json) Hash identifier: FumiLqRpPmyuAHeCCc57p27Rnwjzd52K+i+BQslsEDU= Subject key identifier: 27:1B:2B:D3:7B:E9:F9:09:2F:84:54:40:81:41:82:4C:E3:3B:93:2A Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft Manifest number: 01BF Signing time: Sun 05 May 2024 04:36:47 +0000 Manifest this update: Sun 05 May 2024 04:36:47 +0000 Manifest next update: Sun 12 May 2024 04:36:47 +0000 Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: zjOH8p+fteSSSL/15T6qXrl1Io5CkmDDkyVbZXYWnlI=) 2: 941EE9A46BB911ED97343873C4F9AE02.roa (hash: qDzvgzGQxclWpp1OURC/6skua2C8LDO9yt5r6F5M+II=) 3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: Ljp5RkkUOvcKEUjLqFwchyrrEWciN3XE4LDWa+yUF8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: May 5 04:36:47 2024 GMT Not After : May 12 04:36:47 2024 GMT Subject: CN=66370cdf-5a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:57:44:bb:3f:42:c6:a7:f9:4b:30:a9:82: 20:7d:d1:6b:b4:a9:30:47:58:32:1a:df:89:56:f5: 58:3c:ac:48:28:78:85:c8:94:50:46:9c:34:5f:9d: 29:11:ff:81:27:e1:4d:97:c6:8c:57:cd:b6:22:9f: 28:ab:43:ac:29:ff:bb:bf:83:1d:b4:4f:e4:73:37: 86:82:0e:39:85:3a:9d:8a:62:92:8b:bc:a6:83:97: 96:0f:4c:7d:46:3e:b7:09:72:c6:a9:33:c5:8f:84: 6c:4e:14:09:18:7a:17:2d:a1:3d:73:5e:eb:9b:ef: a4:9e:75:01:f2:cb:6b:3c:31:53:b9:72:a4:12:53: 06:87:13:4b:e1:7d:14:aa:de:a1:e6:22:0b:82:31: a9:5c:e8:b2:b2:df:bf:97:e2:65:2f:38:7b:3e:6a: b6:56:66:1a:95:8b:2e:5f:13:b1:66:75:48:1a:72: 62:7c:ad:af:a6:d4:a6:60:cc:63:bd:a6:9d:67:56: 1f:e9:73:4b:97:d9:84:d5:07:e5:59:4c:a4:cb:1a: 65:fa:bc:59:60:ff:43:08:28:95:e2:6c:2d:cd:f1: 4f:9e:89:63:ba:53:7e:d4:95:02:1c:d4:6f:69:fa: 61:0f:b6:c5:19:ca:32:16:d5:c3:3d:09:c1:a5:97: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1B:2B:D3:7B:E9:F9:09:2F:84:54:40:81:41:82:4C:E3:3B:93:2A X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:eb:62:1a:e1:3b:51:f7:99:16:1a:68:cf:c8:83:89:8f:d9: 23:29:45:33:04:66:48:f4:3c:87:3e:18:b8:33:50:92:88:90: 73:11:ec:74:4f:b9:10:06:b5:e9:6d:86:24:e2:ae:23:87:2d: fa:08:03:35:f3:bd:17:1a:65:50:81:05:cb:76:9c:47:b0:3f: 99:f3:66:3f:63:c6:ae:3e:65:cc:0d:cc:71:0f:69:db:7f:4c: 40:71:0a:eb:98:ff:e4:48:52:54:df:7b:ef:03:d7:d0:27:c7: 3b:26:ec:75:2f:93:e4:8a:41:12:5d:17:7a:18:ac:77:be:eb: dd:38:c7:35:f2:fd:32:8f:be:03:68:f5:8a:7d:91:23:35:e8: 49:83:c8:76:e3:a0:55:f8:1d:7c:33:62:c3:da:05:b9:53:30: cb:e8:1a:5c:b0:6d:c7:69:dc:5f:ce:57:54:dc:04:a6:f8:e2: 7c:83:1f:20:5e:c7:a8:01:05:68:f4:3b:7e:4f:a5:d3:9c:11: 21:f1:03:dc:16:81:b5:08:2f:ee:cf:dd:68:4e:11:da:b2:eb: 17:6c:2b:73:92:f1:90:3a:fb:6e:13:bd:d3:2b:45:a8:6c:dc: cb:b0:a9:6f:20:0a:4b:51:3f:ed:8f:52:cf:95:a7:8a:a9:f0: 14:96:24:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjQwNTA1MDQzNjQ3WhcNMjQwNTEyMDQzNjQ3WjAYMRYwFAYD VQQDEw02NjM3MGNkZi01YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLZXRLs/Qsan+UswqYIgfdFrtKkwR1gyGt+JVvVYPKxIKHiFyJRQRpw0X50p Ef+BJ+FNl8aMV822Ip8oq0OsKf+7v4MdtE/kczeGgg45hTqdimKSi7ymg5eWD0x9 Rj63CXLGqTPFj4RsThQJGHoXLaE9c17rm++knnUB8strPDFTuXKkElMGhxNL4X0U qt6h5iILgjGpXOiyst+/l+JlLzh7Pmq2VmYalYsuXxOxZnVIGnJifK2vptSmYMxj vaadZ1Yf6XNLl9mE1QflWUykyxpl+rxZYP9DCCiV4mwtzfFPnoljulN+1JUCHNRv afphD7bFGcoyFtXDPQnBpZclFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcbK9N7 6fkJL4RUQIFBgkzjO5MqMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe62Ia4TtR95kWGmjPyIOJj9kjKUUzBGZI9DyHPhi4M1CSiJBzEex0 T7kQBrXpbYYk4q4jhy36CAM1870XGmVQgQXLdpxHsD+Z82Y/Y8auPmXMDcxxD2nb f0xAcQrrmP/kSFJU33vvA9fQJ8c7Jux1L5PkikESXRd6GKx3vuvdOMc18v0yj74D aPWKfZEjNehJg8h246BV+B18M2LD2gW5UzDL6BpcsG3HadxfzldU3ASm+OJ8gx8g XseoAQVo9Dt+T6XTnBEh8QPcFoG1CC/uz91oThHasusXbCtzkvGQOvtuE73TK0Wo bNzLsKlvIApLUT/tj1LPlaeKqfAUliTF -----END CERTIFICATE-----Generated at Sun May 5 05:30:49 2024 by rpki-client on console-ams.rpki-client.org