$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: HyPWstQbkU/lNVYG5Hub92cro5jIMiTyz0HVmpsiQz8= Subject key identifier: AF:46:51:68:AA:ED:4B:6D:C2:C8:9F:58:C3:A3:1C:C3:35:BE:64:A0 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0B6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0B53 Signing time: Sat 04 May 2024 19:55:06 +0000 Manifest this update: Sat 04 May 2024 19:55:06 +0000 Manifest next update: Sat 11 May 2024 19:55:06 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: 7URk+3Z9f9PX67ICapyn1DrGg3pO9wtGGRapEmIsjCQ=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: 6dFzl9s/I6pGlRFXJwxSFot9IFsaE8UBtVgNTAm3m5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2927 (0xb6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: May 4 19:55:06 2024 GMT Not After : May 11 19:55:06 2024 GMT Subject: CN=6636929a-c465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:74:44:a4:64:24:42:80:83:48:80:80:61: 96:f6:12:42:29:f3:e1:f2:52:c1:87:8a:de:84:10: bb:d8:f5:04:16:12:fa:ec:21:3b:95:7b:a7:f7:2f: b0:99:26:ef:08:32:12:c0:ca:a4:e8:88:82:ad:d8: 13:de:18:89:97:ec:fe:fe:91:27:3a:5a:9d:8a:30: c6:03:d1:c1:55:5d:3c:17:7c:d4:67:10:d1:85:41: e8:ce:58:9c:da:61:5d:fc:1d:ab:a8:1e:43:79:ba: 3c:dd:45:98:7d:58:9b:7b:48:8c:fb:62:47:e2:d9: 73:ff:af:62:6c:0f:94:14:c9:a2:71:e2:3d:23:85: 37:b8:fc:10:7e:f5:2e:5c:c0:a3:fe:4c:e6:3a:6b: 89:87:7e:0e:20:27:dc:74:23:5e:35:0c:62:98:b9: d6:08:27:83:69:88:74:e8:fb:2b:2b:d7:a0:68:b0: ea:e4:83:1e:c3:24:5d:61:0f:0a:f0:db:7d:97:ec: cb:d7:c8:89:15:b0:90:6d:13:72:a6:ae:b6:06:bf: 78:f0:de:d4:81:bc:28:9a:a1:29:0e:c7:a8:9a:75: 5f:68:33:80:c8:b0:4d:db:18:5d:4b:e3:9b:52:14: e1:a8:79:c2:a7:d8:70:20:0e:d8:97:05:be:8f:a5: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:51:68:AA:ED:4B:6D:C2:C8:9F:58:C3:A3:1C:C3:35:BE:64:A0 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:67:61:05:81:a3:d6:fa:a0:4e:1b:97:88:39:bf:d6:e1:85: 6b:af:1a:9a:0e:4a:cd:8a:d2:ea:7e:15:ce:95:b8:cf:59:e8: c4:9d:90:77:a8:69:fd:f6:8c:8b:21:de:c3:d6:2e:54:87:f0: 08:01:9b:59:4f:4d:3b:30:40:fb:f0:f6:9c:1b:1f:4b:d6:c2: 5d:b0:4e:99:45:4f:92:67:f4:52:4e:2c:91:00:a8:d8:20:6d: 49:63:e6:cd:b0:7b:16:3a:82:8d:f4:83:ba:07:70:14:b2:ab: 2c:a1:37:11:ce:03:3c:51:d6:70:15:6f:b2:7e:df:6e:86:23: 12:22:ab:d5:31:c0:bb:ed:05:d8:94:ce:d9:69:04:26:98:4b: ed:8e:76:ce:14:2a:a8:8a:c9:95:9a:02:8a:24:37:e6:6d:2d: a1:2f:c2:c8:c6:62:53:24:7a:80:93:6f:99:bc:d2:74:b1:87: 05:27:85:4b:8a:a0:7a:05:ba:dd:32:4f:0e:45:83:7b:52:03: c2:08:64:59:30:e1:25:c5:8f:30:74:45:54:9d:86:bf:66:cc: fc:72:49:66:b6:5a:b9:24:6f:ab:7c:53:0c:52:21:b8:50:5b: 2f:51:f3:bb:c5:30:8e:3c:d3:20:12:f4:80:17:5c:8d:6f:c0: 32:e5:14:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjQwNTA0MTk1NTA2WhcNMjQwNTExMTk1NTA2WjAYMRYwFAYD VQQDEw02NjM2OTI5YS1jNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5N0RKRkJEKAg0iAgGGW9hJCKfPh8lLBh4rehBC72PUEFhL67CE7lXun9y+w mSbvCDISwMqk6IiCrdgT3hiJl+z+/pEnOlqdijDGA9HBVV08F3zUZxDRhUHozlic 2mFd/B2rqB5Debo83UWYfVibe0iM+2JH4tlz/69ibA+UFMmiceI9I4U3uPwQfvUu XMCj/kzmOmuJh34OICfcdCNeNQximLnWCCeDaYh06PsrK9egaLDq5IMewyRdYQ8K 8Nt9l+zL18iJFbCQbRNypq62Br948N7UgbwomqEpDseomnVfaDOAyLBN2xhdS+Ob UhThqHnCp9hwIA7YlwW+j6VUxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9GUWiq 7UttwsifWMOjHMM1vmSgMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Z2EFgaPW+qBOG5eIOb/W4YVrrxqaDkrNitLqfhXOlbjPWejEnZB3 qGn99oyLId7D1i5Uh/AIAZtZT007MED78PacGx9L1sJdsE6ZRU+SZ/RSTiyRAKjY IG1JY+bNsHsWOoKN9IO6B3AUsqssoTcRzgM8UdZwFW+yft9uhiMSIqvVMcC77QXY lM7ZaQQmmEvtjnbOFCqoismVmgKKJDfmbS2hL8LIxmJTJHqAk2+ZvNJ0sYcFJ4VL iqB6BbrdMk8ORYN7UgPCCGRZMOElxY8wdEVUnYa/Zsz8cklmtlq5JG+rfFMMUiG4 UFsvUfO7xTCOPNMgEvSAF1yNb8Ay5RS5 -----END CERTIFICATE-----Generated at Sat May 4 21:19:29 2024 by rpki-client on console-ams.rpki-client.org