$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json) Hash identifier: 9Nrd1z+5RkdG10XtCr264W8aNgyhuZ2bBY6yoHIx27k= Subject key identifier: 87:B2:C9:7E:A7:E5:FE:89:77:EA:E3:0B:19:23:72:19:6B:46:78:C2 Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft Manifest number: 0AE9 Signing time: Mon 06 May 2024 20:07:32 +0000 Manifest this update: Mon 06 May 2024 20:07:31 +0000 Manifest next update: Mon 13 May 2024 20:07:31 +0000 Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: H/RoJxXM1gSaaYQZn34mmSweDc3vRQqBmRpMpcyWCdA=) 2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: hz7JujBPhWg7oUnjV7Ikxd7ut5BtUg3hGIQE+2Imghk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: May 6 20:07:31 2024 GMT Not After : May 13 20:07:31 2024 GMT Subject: CN=66393884-a564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:2a:60:7c:1a:b5:8a:99:47:4d:91:e9:0f: 14:e2:e2:78:2f:1e:eb:bd:a3:31:9f:cc:c9:df:e9: b4:2e:60:89:dc:5b:c6:3f:92:ce:49:1c:cb:a7:4a: 78:81:0c:25:ad:e2:b5:d5:1b:c2:24:81:e1:d3:6a: a1:ed:60:40:06:02:a9:71:cc:da:33:10:f4:37:e9: 01:16:e6:79:6d:e6:12:02:50:b8:7a:9b:c2:15:84: 48:f1:87:9c:5f:b2:23:1a:d1:2e:cd:3e:0f:b8:c6: db:0f:eb:4f:8f:a7:32:1a:17:12:92:70:c1:5a:86: e1:e1:37:f5:f5:9d:93:f4:1b:74:e7:b3:7b:e1:d5: fd:2d:55:3d:e7:75:ba:83:38:1d:a4:b8:9e:50:f8: 55:ca:1c:0c:ab:57:5f:a0:36:57:51:c7:73:59:cd: bd:a7:f6:bf:55:28:ab:5a:24:fa:23:39:85:bd:cd: eb:06:7f:0e:e2:1c:f8:73:2e:6a:24:18:17:36:94: 47:44:26:2d:4d:59:a7:ce:6a:f1:e9:c5:af:60:fe: e8:c1:07:bd:34:cc:e1:7f:0d:02:0e:78:fe:35:48: 7f:02:29:c6:63:3e:6b:31:e6:06:62:03:32:52:b4: 5e:32:06:1e:bb:51:c9:57:38:5b:5c:af:c8:81:b7: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B2:C9:7E:A7:E5:FE:89:77:EA:E3:0B:19:23:72:19:6B:46:78:C2 X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:04:c1:35:c4:a2:7e:23:3d:b8:11:6b:11:f3:a4:78:dd:58: 36:3b:df:7b:84:4b:26:3b:36:ae:40:3d:6c:9e:be:4a:68:97: 38:b2:fd:2e:75:1f:fe:d3:c1:2b:d3:87:ab:ea:42:2d:27:e8: 4b:43:cc:dc:ed:42:65:f4:ad:03:6c:98:5c:ee:d8:b3:7a:80: 71:a6:3a:d3:b2:f0:a4:72:83:e7:ce:f2:17:66:e3:6d:da:f4: cc:9e:58:0d:41:d6:ac:cd:a2:cd:f2:2d:7a:65:68:26:ea:f0: c9:e4:f0:9d:85:78:21:8e:aa:ce:9f:1e:25:ac:fa:e7:03:58: c0:50:ce:db:a6:86:93:69:74:b6:fc:92:a5:c6:21:97:04:c6: 2f:fc:99:72:17:ac:51:46:8c:25:e4:57:17:a2:c0:f6:3a:cf: 15:51:da:da:25:66:3b:15:db:66:00:27:56:45:f6:7c:88:79: 42:af:a4:82:86:26:14:9a:55:a5:29:75:ac:9d:1b:9e:92:24: 8f:4e:93:64:bc:ea:30:aa:33:df:79:59:43:68:cb:e9:6c:55: 0a:c5:b4:4c:12:5f:be:18:f0:aa:b7:d5:04:22:59:c0:dd:e8: 68:0b:94:02:71:9b:e0:04:85:b6:dc:8a:71:d5:5f:00:fe:58: cc:00:b4:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjQwNTA2MjAwNzMxWhcNMjQwNTEzMjAwNzMxWjAYMRYwFAYD VQQDEw02NjM5Mzg4NC1hNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TAqYHwatYqZR02R6Q8U4uJ4Lx7rvaMxn8zJ3+m0LmCJ3FvGP5LOSRzLp0p4 gQwlreK11RvCJIHh02qh7WBABgKpcczaMxD0N+kBFuZ5beYSAlC4epvCFYRI8Yec X7IjGtEuzT4PuMbbD+tPj6cyGhcSknDBWobh4Tf19Z2T9Bt057N74dX9LVU953W6 gzgdpLieUPhVyhwMq1dfoDZXUcdzWc29p/a/VSirWiT6IzmFvc3rBn8O4hz4cy5q JBgXNpRHRCYtTVmnzmrx6cWvYP7owQe9NMzhfw0CDnj+NUh/AinGYz5rMeYGYgMy UrReMgYeu1HJVzhbXK/IgbcmAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeyyX6n 5f6Jd+rjCxkjchlrRnjCMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAABME1xKJ+Iz24EWsR86R43Vg2O997hEsmOzauQD1snr5KaJc4sv0u dR/+08Er04er6kItJ+hLQ8zc7UJl9K0DbJhc7tizeoBxpjrTsvCkcoPnzvIXZuNt 2vTMnlgNQdaszaLN8i16ZWgm6vDJ5PCdhXghjqrOnx4lrPrnA1jAUM7bpoaTaXS2 /JKlxiGXBMYv/JlyF6xRRowl5FcXosD2Os8VUdraJWY7FdtmACdWRfZ8iHlCr6SC hiYUmlWlKXWsnRuekiSPTpNkvOowqjPfeVlDaMvpbFUKxbRMEl++GPCqt9UEIlnA 3ehoC5QCcZvgBIW23Ipx1V8A/ljMALQg -----END CERTIFICATE-----Generated at Mon May 6 22:40:58 2024 by rpki-client on console-ams.rpki-client.org