$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: eWJ/+9ycVJs5K110nUmNM/tE/pvQgdB6WY9rGFqXEu4= Subject key identifier: 7A:12:D2:BC:13:7F:B3:9E:3D:F4:9E:D1:6C:19:3A:16:2E:53:92:F4 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 6A Signing time: Thu 16 May 2024 17:08:45 +0000 Manifest this update: Thu 16 May 2024 17:08:45 +0000 Manifest next update: Thu 23 May 2024 17:08:45 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: H3E5NGzLgoQtk0olAy/tsKdcSW2rqIyi9XWz82NHJdI=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: t4KWE6nOao0jySz++9neoQOUBn9gNyPYtoMj0+W/YSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: May 16 17:08:45 2024 GMT Not After : May 23 17:08:45 2024 GMT Subject: CN=66463d9d-aef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:e3:ca:24:ed:7f:49:57:58:e9:c3:fa:f0: 69:9c:a6:e4:16:52:4a:17:c0:4c:3d:f1:41:b5:92: 5b:ef:aa:fd:82:e2:35:80:f2:34:9f:d8:a9:f7:e3: 8d:cd:77:2b:11:da:a1:76:c7:8a:fa:f1:29:da:94: 36:3b:ad:b7:bf:91:41:e3:e7:93:01:9b:aa:87:00: 51:9d:31:18:11:4d:ea:a5:c1:fc:e8:a7:03:0a:9d: 90:61:25:ed:90:89:6c:c9:9e:ba:6d:66:7a:f7:19: 95:77:da:d5:f1:8c:50:a8:31:3b:ba:bc:b2:06:b4: dc:f8:7f:3e:0d:e2:61:7f:65:33:2e:36:5d:85:45: cb:15:fc:47:7f:47:d2:6f:c6:d9:57:ea:14:cf:a0: 1d:55:03:fc:b0:e7:59:7c:71:8d:b9:9b:52:b2:7c: 6f:47:a8:39:a0:d4:e2:b1:1c:48:46:bc:7d:af:b8: 44:25:ec:93:7c:23:9f:da:99:eb:d2:6f:ad:1d:8d: 4a:4c:2d:a4:6a:8d:b5:e3:7f:ac:52:6f:b4:cd:2c: 61:6a:24:a4:eb:54:1d:a5:05:33:26:e2:b5:e1:9d: f6:f5:55:fe:24:1f:0c:74:71:9f:5d:52:02:f9:9d: c3:b7:35:d1:a0:17:18:5f:e8:75:c8:89:9b:fb:df: f0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:12:D2:BC:13:7F:B3:9E:3D:F4:9E:D1:6C:19:3A:16:2E:53:92:F4 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cd:00:62:8e:0e:ec:52:64:c8:4e:e4:2a:e3:6f:53:4e:33: 96:15:ee:9e:4a:9e:78:0b:91:fa:dc:88:cd:76:9a:c2:aa:8a: 22:10:fe:ad:67:bf:41:25:c6:cc:3c:91:8e:fe:de:ba:b1:fd: f0:ff:3f:d5:81:43:fe:bb:39:ce:10:80:60:97:84:10:b0:1e: 7e:ff:42:33:0e:d7:0a:8a:ef:c0:ca:43:be:05:fb:f9:47:9e: dd:9f:de:f6:13:ad:4d:75:a7:c1:39:ae:5d:ca:1b:68:ba:19: a1:78:0f:24:29:d2:c8:72:f2:a9:79:e7:f6:ec:19:11:68:d4: 62:b1:1c:65:51:12:95:95:79:05:4a:a4:c2:34:72:85:3a:d0: bf:4e:25:e9:4a:ae:dc:c9:51:60:cd:1a:69:60:26:f7:f7:39: 6e:80:a7:bf:cf:08:02:f9:f5:7e:f2:b6:7b:86:a3:a7:9c:c1: fe:bf:a1:7b:87:e6:b8:34:4c:e9:b1:74:2f:d0:30:e8:67:88: 85:dd:c9:e1:96:05:f7:f7:fc:a5:ef:f4:38:a0:57:a4:7f:e7: 0a:0e:44:f7:96:1f:6a:fe:3e:72:f9:3e:17:ff:9b:86:b5:24: 01:89:a0:3b:8a:83:a4:65:b6:7f:e1:ad:57:35:f4:7f:b7:4c: 0f:10:8f:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDM2QTExMC8GA1UEBRMoN0I5Q0VEQzgzMjgwMjhBNzQ1NkU5QzQxNEJCNzdEQUZF QkNFNzY1RjAeFw0yNDA1MTYxNzA4NDVaFw0yNDA1MjMxNzA4NDVaMBgxFjAUBgNV BAMTDTY2NDYzZDlkLWFlZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLfOPKJO1/SVdY6cP68GmcpuQWUkoXwEw98UG1klvvqv2C4jWA8jSf2Kn3443N dysR2qF2x4r68SnalDY7rbe/kUHj55MBm6qHAFGdMRgRTeqlwfzopwMKnZBhJe2Q iWzJnrptZnr3GZV32tXxjFCoMTu6vLIGtNz4fz4N4mF/ZTMuNl2FRcsV/Ed/R9Jv xtlX6hTPoB1VA/yw51l8cY25m1KyfG9HqDmg1OKxHEhGvH2vuEQl7JN8I5/amevS b60djUpMLaRqjbXjf6xSb7TNLGFqJKTrVB2lBTMm4rXhnfb1Vf4kHwx0cZ9dUgL5 ncO3NdGgFxhf6HXIiZv73/CzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUehLSvBN/ s5499J7RbBk6Fi5TkvQwHwYDVR0jBBgwFoAUe5ztyDKAKKdFbpxBS7d9r+vOdl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMzZBL0M2REQ1MUI0NzM2 RjExRUU5MTdEMDMzNEM0RjlBRTAyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2Rs OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTV6dHlES0FLS2RGYnB4QlM3ZDlyLXZPZGw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE MzZBL0M2REQ1MUI0NzM2RjExRUU5MTdEMDMzNEM0RjlBRTAyL2U1enR5REtBS0tk RmJweEJTN2Q5ci12T2RsOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADvNAGKODuxSZMhO5Crjb1NOM5YV7p5KnngLkfrciM12msKqiiIQ/q1n v0Elxsw8kY7+3rqx/fD/P9WBQ/67Oc4QgGCXhBCwHn7/QjMO1wqK78DKQ74F+/lH nt2f3vYTrU11p8E5rl3KG2i6GaF4DyQp0shy8ql55/bsGRFo1GKxHGVREpWVeQVK pMI0coU60L9OJelKrtzJUWDNGmlgJvf3OW6Ap7/PCAL59X7ytnuGo6ecwf6/oXuH 5rg0TOmxdC/QMOhniIXdyeGWBff3/KXv9DigV6R/5woORPeWH2r+PnL5Phf/m4a1 JAGJoDuKg6Rltn/hrVc19H+3TA8Qj4Y= -----END CERTIFICATE-----Generated at Thu May 16 17:51:21 2024 by rpki-client on console-ams.rpki-client.org