$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json) Hash identifier: Oo5vemSzJL2obIcQpKSWPL0HV/GqCDVyFQffadgVqic= Subject key identifier: 82:AF:6E:6B:9B:0F:81:9F:D1:9E:C3:5F:DA:09:3F:D4:C2:DD:6D:5E Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft Manifest number: 46 Signing time: Fri 17 May 2024 08:08:54 +0000 Manifest this update: Fri 17 May 2024 08:08:53 +0000 Manifest next update: Fri 24 May 2024 08:08:53 +0000 Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: e905rfFdwdJOJF6c6pSBzSAVUoBk+wQmMS8hNN6BHgc=) 2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 9KgUBwn7ZxB41N0G+ybbb26vRb4/nvvRfm6F0NtcKGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: May 17 08:08:53 2024 GMT Not After : May 24 08:08:53 2024 GMT Subject: CN=66471095-ebf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:ea:08:fb:25:63:b4:51:d1:f4:df:58:16: 78:16:11:ed:ca:99:06:54:89:f1:8c:4d:19:f8:d2: 04:09:37:08:33:e7:6e:63:55:ad:ca:d1:ce:da:30: 2e:9c:80:31:f6:39:94:d0:06:95:9a:f8:95:5e:7c: b1:53:88:7a:f6:fd:ae:a2:aa:af:e0:77:e1:90:ea: c0:64:11:ba:89:25:8d:73:f6:21:b2:f9:48:69:a6: ae:a7:99:53:a1:8f:26:5c:ae:fd:65:ac:d5:00:ed: 00:0e:1e:06:fe:a6:a4:cf:cc:4d:6c:9f:09:ff:94: 58:34:5c:71:ba:e5:3e:c9:80:6a:fb:bc:85:23:73: 9e:06:ec:4e:ae:25:67:de:fe:ae:68:03:a4:f8:33: c2:bb:85:06:e3:94:d3:39:84:89:6d:5e:3a:c4:8f: e7:25:29:57:54:53:6a:80:1c:40:d8:e5:ae:f2:0d: eb:f6:5e:66:9d:a0:38:1c:cc:cb:b6:1e:e7:01:bd: 03:ae:70:c5:12:49:c1:44:5a:dc:93:74:ff:ce:e8: 32:34:f7:c0:88:6e:9a:2a:12:b7:e5:2d:bb:1c:df: 82:0a:a4:20:40:16:b2:fa:05:ea:1e:53:1c:7d:62: fd:e5:a9:6a:f5:ec:e4:4a:1f:b9:a7:fb:3d:07:ae: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AF:6E:6B:9B:0F:81:9F:D1:9E:C3:5F:DA:09:3F:D4:C2:DD:6D:5E X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:35:64:7f:71:e2:ff:ba:e8:56:64:c3:b5:a1:6d:02:da:da: be:d5:f7:31:cb:2f:2d:bc:d0:e6:19:e2:93:ac:d5:f2:f7:dc: c1:d7:7e:44:9e:1b:86:61:aa:b3:00:b5:b5:78:ae:8f:d1:16: 27:ff:9a:b3:48:61:00:31:b1:c2:70:69:a1:7b:b2:26:25:f9: 35:5d:37:dd:c7:e1:92:46:bb:fb:52:47:24:f7:c3:42:ed:89: f4:dc:31:cc:68:c4:14:f1:07:62:48:d2:c4:2f:c9:d5:ba:cd: 5c:f4:bc:d1:52:da:de:c9:69:ff:c8:aa:d5:a0:23:67:8a:b8: 1c:f1:20:0a:79:5e:6b:7f:ae:89:d0:aa:ed:aa:ae:bd:0e:e3: d7:94:8b:1b:dd:9a:b5:b3:0b:1b:78:68:9c:ea:a1:c7:56:1c: 32:0c:76:ea:c4:23:b3:9b:d5:f6:b3:eb:12:e5:15:db:0b:22: 2a:28:b4:6a:9b:d3:6e:69:d3:e8:93:20:0c:2b:7f:dd:4e:f9: 38:33:05:a0:5a:63:be:4b:52:4b:93:1d:66:b3:67:86:75:9d: d3:0f:78:07:5b:11:7e:94:82:3a:3f:5d:7a:d7:2e:76:d7:08: 7b:09:bf:a1:f2:ed:01:ad:7a:0d:f3:2b:0c:71:bf:a6:fc:db: 64:ef:cb:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjhFQzExMC8GA1UEBRMoMEJBOEJBNDBGODk3MzRDQzNGM0FFM0VENjc3NENCRDg0 M0UyRTc3MjAeFw0yNDA1MTcwODA4NTNaFw0yNDA1MjQwODA4NTNaMBgxFjAUBgNV BAMTDTY2NDcxMDk1LWViZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwReoI+yVjtFHR9N9YFngWEe3KmQZUifGMTRn40gQJNwgz525jVa3K0c7aMC6c gDH2OZTQBpWa+JVefLFTiHr2/a6iqq/gd+GQ6sBkEbqJJY1z9iGy+Uhppq6nmVOh jyZcrv1lrNUA7QAOHgb+pqTPzE1snwn/lFg0XHG65T7JgGr7vIUjc54G7E6uJWfe /q5oA6T4M8K7hQbjlNM5hIltXjrEj+clKVdUU2qAHEDY5a7yDev2XmadoDgczMu2 HucBvQOucMUSScFEWtyTdP/O6DI098CIbpoqErflLbsc34IKpCBAFrL6BeoeUxx9 Yv3lqWr17ORKH7mn+z0HrsYjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgq9ua5sP gZ/RnsNf2gk/1MLdbV4wHwYDVR0jBBgwFoAUC6i6QPiXNMw/OuPtZ3TL2EPi53Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2OEVDL0UwNTdFMkIwQURC NDExRUVCRUE3RTU2M0M0RjlBRTAyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzZpNlFQaVhOTXdfT3VQdFozVEwyRVBpNTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 OEVDL0UwNTdFMkIwQURCNDExRUVCRUE3RTU2M0M0RjlBRTAyL0M2aTZRUGlYTk13 X091UHRaM1RMMkVQaTUzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAc1ZH9x4v+66FZkw7WhbQLa2r7V9zHLLy280OYZ4pOs1fL33MHXfkSe G4ZhqrMAtbV4ro/RFif/mrNIYQAxscJwaaF7siYl+TVdN93H4ZJGu/tSRyT3w0Lt ifTcMcxoxBTxB2JI0sQvydW6zVz0vNFS2t7Jaf/IqtWgI2eKuBzxIAp5Xmt/ronQ qu2qrr0O49eUixvdmrWzCxt4aJzqocdWHDIMdurEI7Ob1faz6xLlFdsLIiootGqb 025p0+iTIAwrf91O+TgzBaBaY75LUkuTHWazZ4Z1ndMPeAdbEX6Ugjo/XXrXLnbX CHsJv6Hy7QGteg3zKwxxv6b822Tvy6c= -----END CERTIFICATE-----Generated at Fri May 17 08:52:50 2024 by rpki-client on console-ams.rpki-client.org