$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json) Hash identifier: wzNoCbLMO77qbBUGqN2A6Q/AA2hmfAfz1HR0PA4qTHI= Subject key identifier: EB:DC:E2:3C:44:E7:A1:69:28:7B:85:A3:53:06:EA:3B:07:89:47:0E Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Certificate serial: 33C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft Manifest number: 33BD Signing time: Fri 26 Apr 2024 14:43:25 +0000 Manifest this update: Fri 26 Apr 2024 14:43:25 +0000 Manifest next update: Fri 03 May 2024 14:43:25 +0000 Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: Fq+kA1hwabv0opKAEkbP9AFZciuwAU8EV1gY+ioH5J8=) 2: 054DC680CE7411EAA3A39A3EC4F9AE02.roa (hash: jI5iigQ8cUJcsIOhuxWoRnC6qmQEBFHvEIO07FBDO0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13251 (0x33c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Validity Not Before: Apr 26 14:43:25 2024 GMT Not After : May 3 14:43:25 2024 GMT Subject: CN=662bbd8d-a0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:5c:bb:18:b1:ba:19:cb:08:84:47:c4:e5: 8e:1d:ea:09:d6:46:90:df:f3:56:bb:48:e5:67:f6: 80:18:53:d7:c0:77:65:4b:5b:c5:31:1e:12:fb:d8: 4d:e7:32:56:18:ad:5c:5c:2b:2a:72:a2:ee:21:2e: da:fa:c4:81:9e:8d:41:19:cd:9e:89:ba:5b:e5:b8: 9c:e4:72:5d:20:5e:af:b3:41:74:f2:00:f3:e5:9c: 16:09:37:3c:32:ab:9c:12:be:4c:40:3d:54:dc:50: 05:af:34:d3:26:e3:89:bb:39:7c:55:7d:26:1b:f2: 76:15:df:06:52:51:54:51:d7:14:f9:0b:91:20:64: 6a:ac:42:ff:35:65:61:5c:cd:9f:43:ae:fd:14:5d: 56:df:58:fe:b0:b5:4b:f7:ba:39:92:a5:46:7b:62: 85:8b:74:91:bb:97:e7:e9:0f:15:84:92:4e:68:95: d0:fd:40:0b:fe:41:a3:00:05:da:4e:b7:e8:60:c1: 15:42:92:67:65:ea:b3:4f:85:1b:ba:13:ca:b8:8e: b7:db:50:49:d5:d4:f3:0a:6d:10:ec:d6:24:4c:e8: e5:ac:0d:bb:5c:e9:35:fb:ad:4d:d2:28:7a:23:ec: 51:02:71:f1:dd:83:3e:2c:67:29:1e:0a:83:5a:33: 1c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DC:E2:3C:44:E7:A1:69:28:7B:85:A3:53:06:EA:3B:07:89:47:0E X509v3 Authority Key Identifier: keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3e:72:78:d3:d1:70:e5:74:fd:92:2f:71:94:9d:d8:12:72: 08:0a:84:56:39:cb:4e:e9:e7:52:2a:27:54:86:1e:4f:23:59: 37:97:c6:d8:23:1b:7a:f7:81:57:89:52:78:ee:54:da:0b:61: e6:bb:33:67:4f:26:e1:d6:3e:36:02:2d:94:5d:4a:e6:28:92: f5:fe:84:0b:06:72:06:0c:d5:00:8d:14:68:44:0b:cd:1c:5f: 22:0f:7c:1f:78:93:65:7b:d8:0c:5a:84:4e:97:84:34:bb:76: da:f7:0f:c0:6e:06:de:62:bb:15:1b:15:73:2b:e2:71:c7:e6: aa:ea:3b:6e:b4:87:6e:0d:15:71:c4:a9:d9:81:ca:46:73:e8: 81:40:62:87:cd:4d:33:0c:03:af:5c:e2:58:78:5e:94:57:a0: d8:7f:07:e2:ed:33:a1:25:6c:07:57:50:9f:13:7f:59:94:6f: 6e:f4:99:42:61:49:7d:fd:67:c8:63:e3:06:5d:59:f6:bb:94: 1f:3a:b8:3e:c6:50:43:3a:cc:59:5f:c9:9e:aa:6a:34:7a:0f: c0:cf:81:8e:58:4d:64:23:75:d4:92:52:90:17:12:00:9b:86: 62:12:0e:2a:0f:f7:9c:3b:a7:2c:31:b6:40:d2:3f:e9:d8:aa: ef:1a:d8:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz M0UzRDI0NzkwHhcNMjQwNDI2MTQ0MzI1WhcNMjQwNTAzMTQ0MzI1WjAYMRYwFAYD VQQDEw02NjJiYmQ4ZC1hMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO5cuxixuhnLCIRHxOWOHeoJ1kaQ3/NWu0jlZ/aAGFPXwHdlS1vFMR4S+9hN 5zJWGK1cXCsqcqLuIS7a+sSBno1BGc2eibpb5bic5HJdIF6vs0F08gDz5ZwWCTc8 MqucEr5MQD1U3FAFrzTTJuOJuzl8VX0mG/J2Fd8GUlFUUdcU+QuRIGRqrEL/NWVh XM2fQ679FF1W31j+sLVL97o5kqVGe2KFi3SRu5fn6Q8VhJJOaJXQ/UAL/kGjAAXa TrfoYMEVQpJnZeqzT4UbuhPKuI6321BJ1dTzCm0Q7NYkTOjlrA27XOk1+61N0ih6 I+xRAnHx3YM+LGcpHgqDWjMcyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvc4jxE 56FpKHuFo1MG6jsHiUcOMB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjlDQi82RjZFREM2MDFEOEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2Jj M0ZiUENIYTcxQkV6NDlKSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLPnJ409Fw5XT9ki9xlJ3YEnIICoRWOctO6edSKidUhh5PI1k3l8bY Ixt694FXiVJ47lTaC2HmuzNnTybh1j42Ai2UXUrmKJL1/oQLBnIGDNUAjRRoRAvN HF8iD3wfeJNle9gMWoROl4Q0u3ba9w/AbgbeYrsVGxVzK+Jxx+aq6jtutIduDRVx xKnZgcpGc+iBQGKHzU0zDAOvXOJYeF6UV6DYfwfi7TOhJWwHV1CfE39ZlG9u9JlC YUl9/WfIY+MGXVn2u5QfOrg+xlBDOsxZX8meqmo0eg/Az4GOWE1kI3XUklKQFxIA m4ZiEg4qD/ecO6csMbZA0j/p2KrvGtgU -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:15 2024 by rpki-client on console-ams.rpki-client.org