$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: t3pkwxjEnwnSibjiIVbalCjxsDZtHtdReSOk5pKXt0U= Subject key identifier: 08:20:04:CD:9C:1F:79:0B:15:D9:E0:48:F9:3D:D1:59:2D:B9:85:F6 Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 011E Signing time: Wed 01 May 2024 05:38:37 +0000 Manifest this update: Wed 01 May 2024 05:38:37 +0000 Manifest next update: Wed 08 May 2024 05:38:37 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: b1PFqxu357bn3d56ZSu8P/K+owMFB6Fgh58TLu0q2V0=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: uxp2G2bghn9NecpAe+byqEWG3Y6T1GBL3cmiQ22tnnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 05:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: May 1 05:38:37 2024 GMT Not After : May 8 05:38:37 2024 GMT Subject: CN=6631d55d-eba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:f0:06:8a:ce:03:bf:f4:54:2d:e1:96:84: ac:b2:84:97:ae:50:56:2a:3f:56:b7:e1:a8:3a:e1: 92:ef:30:62:62:e5:aa:18:25:37:d9:2a:aa:b8:f1: ac:1e:0e:34:7f:25:16:09:e6:ce:26:97:73:30:1c: a7:76:d4:1c:e0:ac:2a:39:f7:56:1a:fb:75:58:af: 1a:36:13:fe:96:2c:93:fb:9b:d3:77:f0:0a:62:37: c2:df:98:8c:15:1a:63:85:5e:af:68:63:3d:28:0b: da:c1:97:12:86:29:2e:86:3f:70:28:fd:25:8f:56: 86:41:ab:16:ea:aa:68:14:2c:cd:f6:85:d7:82:15: f7:b3:1f:e8:5c:e0:e2:8b:b9:03:74:5c:18:b7:a3: f3:be:9b:0e:f6:b2:90:61:60:08:d3:4b:36:8c:1a: 9b:c7:48:56:4b:ab:96:25:e8:f0:b7:91:6e:03:2a: da:1b:ac:82:75:4c:e9:1b:59:61:55:c8:e7:65:68: 72:08:a5:a3:ec:d2:eb:1c:3c:77:7a:ee:36:f8:70: 15:d7:e9:d9:4f:5a:c2:9e:c2:98:5d:69:78:d1:89: 76:b9:1c:49:0c:21:d0:ee:5f:31:25:ca:44:5f:86: 23:fa:28:7d:8e:8e:66:ae:ed:bf:37:88:ea:e8:ea: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:20:04:CD:9C:1F:79:0B:15:D9:E0:48:F9:3D:D1:59:2D:B9:85:F6 X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:af:f5:54:7f:d8:db:73:88:58:63:62:6f:9f:f0:50:e1:82: 86:c8:73:60:14:77:f0:f8:d6:94:07:d6:8e:6c:1f:38:9b:c3: 76:1a:b0:94:5e:6b:ba:43:8b:6c:19:89:d2:9d:96:a1:10:59: cf:9c:c1:bb:dc:c3:2c:0b:83:94:82:0b:ca:4d:98:31:ac:84: 7b:78:b5:2c:51:63:29:10:f8:d2:af:6f:a8:b5:6f:95:6b:d0: 8a:7c:cf:8d:36:83:51:a4:49:0d:6b:4a:c3:d5:8b:f4:12:ad: 58:a5:d5:f1:15:79:e6:e6:0b:4c:39:21:1a:98:7f:a7:6f:38: 23:ee:8b:d8:a2:6c:26:38:68:4a:86:7e:54:b1:07:c9:2d:8c: 3b:d8:6c:91:0f:aa:e8:5a:ee:53:82:5a:d2:00:b8:49:c7:e6: 12:42:89:d7:a1:c4:28:32:3f:42:da:e7:3c:ae:2e:0e:4c:75: 9b:13:d9:d2:d1:ed:12:57:dd:81:b8:02:7a:5f:3b:23:61:30: 93:a6:f7:99:bd:dd:a5:0f:15:f5:8d:75:91:3b:dc:40:e0:ab: 76:ec:3c:57:0f:37:f5:d0:b8:78:e6:10:d8:87:d5:93:c4:01: 67:6e:9b:ea:85:4e:07:f6:34:f8:ca:7a:8a:65:5d:85:0c:7c: bb:d9:eb:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjQwNTAxMDUzODM3WhcNMjQwNTA4MDUzODM3WjAYMRYwFAYD VQQDEw02NjMxZDU1ZC1lYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb/wBorOA7/0VC3hloSssoSXrlBWKj9Wt+GoOuGS7zBiYuWqGCU32SqquPGs Hg40fyUWCebOJpdzMByndtQc4KwqOfdWGvt1WK8aNhP+liyT+5vTd/AKYjfC35iM FRpjhV6vaGM9KAvawZcShikuhj9wKP0lj1aGQasW6qpoFCzN9oXXghX3sx/oXODi i7kDdFwYt6PzvpsO9rKQYWAI00s2jBqbx0hWS6uWJejwt5FuAyraG6yCdUzpG1lh VcjnZWhyCKWj7NLrHDx3eu42+HAV1+nZT1rCnsKYXWl40Yl2uRxJDCHQ7l8xJcpE X4Yj+ih9jo5mru2/N4jq6OqNxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAggBM2c H3kLFdngSPk90VktuYX2MB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4r/VUf9jbc4hYY2Jvn/BQ4YKGyHNgFHfw+NaUB9aObB84m8N2GrCU Xmu6Q4tsGYnSnZahEFnPnMG73MMsC4OUggvKTZgxrIR7eLUsUWMpEPjSr2+otW+V a9CKfM+NNoNRpEkNa0rD1Yv0Eq1YpdXxFXnm5gtMOSEamH+nbzgj7ovYomwmOGhK hn5UsQfJLYw72GyRD6roWu5TglrSALhJx+YSQonXocQoMj9C2uc8ri4OTHWbE9nS 0e0SV92BuAJ6XzsjYTCTpveZvd2lDxX1jXWRO9xA4Kt27DxXDzf10Lh45hDYh9WT xAFnbpvqhU4H9jT4ynqKZV2FDHy72et8 -----END CERTIFICATE-----Generated at Wed May 1 07:06:28 2024 by rpki-client on console-fra.rpki-client.org