$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft File: 6tNqfTCwZhVrgDAlqqpf-SetdcI.mft (raw, json) Hash identifier: euNzUJ4gXNbI2vjBnsEVU2QRYLtoxeD05Vv2wjmFJYE= Subject key identifier: 69:26:8E:02:77:0B:E4:70:19:BC:C1:B4:FE:36:B3:29:CF:AA:1D:BD Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Certificate serial: 15A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft Manifest number: 15A3 Signing time: Mon 06 May 2024 17:20:46 +0000 Manifest this update: Mon 06 May 2024 17:20:45 +0000 Manifest next update: Mon 13 May 2024 17:20:45 +0000 Files and hashes: 1: 6tNqfTCwZhVrgDAlqqpf-SetdcI.crl (hash: Yat1Taz+pnrCzkn67+7vOUzvJTcAEzVPMq4rT7QnC/I=) 2: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (hash: /qosAUFjTR/Oysa3vkH6q4cvDQEajvhVRt1iG/L2ATQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5545 (0x15a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Validity Not Before: May 6 17:20:45 2024 GMT Not After : May 13 17:20:45 2024 GMT Subject: CN=6639116d-2de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:91:4b:78:b0:49:13:0f:78:ca:b7:7b:ef:35: ca:4f:c8:6a:2c:69:d2:8c:dd:21:8e:17:0b:af:e9: e7:8a:c7:56:5c:6c:1e:53:f9:ab:48:b1:58:54:96: 46:c1:91:6c:ee:04:c9:16:21:4f:48:66:d2:2d:b6: af:3b:33:55:ed:9c:54:c1:f7:45:e1:96:50:5b:98: 65:40:90:90:0c:24:25:58:df:5e:02:be:ff:c8:42: 14:e2:a3:fb:97:85:0a:fe:44:73:b2:b7:83:59:9d: 2f:94:ed:ce:ad:f4:22:2e:27:6f:1e:5b:67:4d:06: 4d:93:55:37:f3:3d:58:2d:13:65:d4:6e:f5:b7:de: 2f:f7:5e:55:ac:ff:2d:19:e4:ab:35:03:29:3f:40: 0d:88:f4:ef:17:5a:29:97:5e:6e:aa:a8:e6:69:bc: 3a:0a:25:16:70:19:c4:f9:d3:f7:33:1d:d2:d3:f4: 15:58:d5:dc:12:51:a5:33:1e:3c:88:52:24:53:f8: 4a:fd:c2:27:2b:3b:71:f0:3d:7c:c4:7e:01:7f:78: 84:8b:d4:03:e9:e6:bb:d4:c0:da:02:7c:c9:16:73: ea:82:ad:7a:b9:62:3d:52:12:d4:00:6b:43:c9:56: be:f3:db:fd:8a:c7:33:26:59:f8:22:37:8e:87:ef: d8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:26:8E:02:77:0B:E4:70:19:BC:C1:B4:FE:36:B3:29:CF:AA:1D:BD X509v3 Authority Key Identifier: keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:19:df:ad:1b:07:e1:55:19:37:d9:fd:b2:03:e7:11:8d:77: 12:62:ef:42:fc:ee:0e:0b:05:e5:d7:e3:34:2e:1b:a7:a3:70: b4:d3:53:85:37:5b:ef:c1:9a:4e:09:6a:b0:e3:33:ed:1b:92: 88:d7:b0:21:9c:62:fc:cb:80:3b:33:e4:51:66:2d:68:df:8c: 75:e5:fd:d7:db:4f:4a:10:93:6e:5a:77:ea:97:5c:b6:b0:ac: e0:09:79:cb:12:a1:79:99:f7:8d:2a:4a:c0:b4:a9:f6:f7:76: 29:4e:51:d6:33:c4:df:0c:ed:96:1d:75:6d:2e:db:a9:93:af: ee:c8:86:d2:07:f3:30:69:c4:c4:ee:73:6b:23:21:37:4d:9c: 8b:26:11:8e:82:9e:67:01:90:89:a0:6c:27:34:7b:0f:24:d2: 5c:aa:6b:fe:81:c0:b7:ed:5d:8f:14:e9:68:39:96:c7:46:d5: 55:e0:ef:ce:ee:5b:8f:e4:aa:47:82:11:56:2e:2b:2c:52:dd: 52:9f:a6:c1:e1:59:bb:0a:ea:56:77:76:c6:35:57:85:0b:82: bb:66:4d:a8:0d:4e:f3:d1:74:f5:9c:b4:8d:65:b6:90:47:59: 99:16:82:dd:30:9b:26:c4:dc:3d:5f:54:d0:3a:e9:1a:b2:7d: d1:81:a3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5 MjdBRDc1QzIwHhcNMjQwNTA2MTcyMDQ1WhcNMjQwNTEzMTcyMDQ1WjAYMRYwFAYD VQQDEw02NjM5MTE2ZC0yZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JFLeLBJEw94yrd77zXKT8hqLGnSjN0hjhcLr+nnisdWXGweU/mrSLFYVJZG wZFs7gTJFiFPSGbSLbavOzNV7ZxUwfdF4ZZQW5hlQJCQDCQlWN9eAr7/yEIU4qP7 l4UK/kRzsreDWZ0vlO3OrfQiLidvHltnTQZNk1U38z1YLRNl1G71t94v915VrP8t GeSrNQMpP0ANiPTvF1opl15uqqjmabw6CiUWcBnE+dP3Mx3S0/QVWNXcElGlMx48 iFIkU/hK/cInKztx8D18xH4Bf3iEi9QD6ea71MDaAnzJFnPqgq16uWI9UhLUAGtD yVa+89v9isczJln4IjeOh+/Y2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkmjgJ3 C+RwGbzBtP42synPqh29MB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3 QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjJDMy8xNTIzRDJFNDA3QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1po VnJnREFscXFwZi1TZXRkY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbGd+tGwfhVRk32f2yA+cRjXcSYu9C/O4OCwXl1+M0Lhuno3C001OF N1vvwZpOCWqw4zPtG5KI17AhnGL8y4A7M+RRZi1o34x15f3X209KEJNuWnfql1y2 sKzgCXnLEqF5mfeNKkrAtKn293YpTlHWM8TfDO2WHXVtLtupk6/uyIbSB/MwacTE 7nNrIyE3TZyLJhGOgp5nAZCJoGwnNHsPJNJcqmv+gcC37V2PFOloOZbHRtVV4O/O 7luP5KpHghFWLissUt1Sn6bB4Vm7CupWd3bGNVeFC4K7Zk2oDU7z0XT1nLSNZbaQ R1mZFoLdMJsmxNw9X1TQOukasn3RgaOF -----END CERTIFICATE-----Generated at Mon May 6 20:19:40 2024 by rpki-client on console-ams.rpki-client.org