$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft File: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json) Hash identifier: jpvvwOIEp3S0a15OPzKj+2KI5uY0JROgDh3c9HKa+9o= Subject key identifier: 78:D0:CC:46:6D:B4:28:34:CB:81:5C:3F:30:9A:FC:F7:E0:14:57:C8 Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 Certificate issuer: /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Certificate serial: 1B4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft Manifest number: 1B42 Signing time: Sat 04 May 2024 16:43:01 +0000 Manifest this update: Sat 04 May 2024 16:43:00 +0000 Manifest next update: Sat 11 May 2024 16:43:00 +0000 Files and hashes: 1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: Tn59XZdVZsupS00KzkNaLsTdU2tm5yC4cFxWiYodTy8=) 2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: X8AQp7odAt1JQqP19nbrCZ2OfUpP0Ns8/BfHaNDUuYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6990 (0x1b4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Validity Not Before: May 4 16:43:00 2024 GMT Not After : May 11 16:43:00 2024 GMT Subject: CN=66366595-fdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:63:07:32:3e:2c:18:da:46:a3:61:88:19: bc:6a:c0:36:24:59:0e:6a:9c:42:df:5d:96:8f:d2: 7d:ce:bb:22:28:8b:c0:1d:17:be:fb:6e:e8:77:c7: 4c:0f:d9:43:17:88:cd:91:0c:44:23:c7:66:3e:ff: 88:b2:1d:d4:29:e8:9a:f4:53:0f:e2:2d:07:66:14: 79:06:00:4a:d0:63:99:57:09:84:1b:33:bf:fd:c1: 4f:59:92:61:b4:8a:e1:78:f1:de:2b:aa:d1:8d:a1: 0e:a4:d7:f5:47:db:4a:8e:f0:4c:04:9a:b9:00:7f: e5:66:74:80:74:fc:07:17:ea:b5:be:99:f3:7c:47: 72:09:f4:3d:93:d5:ce:74:87:65:8b:73:2f:9e:7f: 50:bb:46:72:03:12:d7:d2:88:ff:b2:6f:b5:a1:62: 41:fd:52:ce:31:fb:b3:6d:c6:55:77:12:bc:08:3f: 47:a2:40:d0:f3:ea:ff:e1:4e:54:b7:b4:80:90:29: e5:0b:d2:85:16:71:ef:9d:2d:f7:14:9b:35:76:47: 9a:7a:7a:e1:14:20:54:a9:34:e9:26:1a:f7:d7:4f: 40:51:f5:16:e9:91:33:3f:55:5c:55:e1:6b:a3:67: 4a:a3:d8:c9:b0:5d:42:23:5b:66:b4:05:49:f7:9e: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D0:CC:46:6D:B4:28:34:CB:81:5C:3F:30:9A:FC:F7:E0:14:57:C8 X509v3 Authority Key Identifier: keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:53:42:e8:6e:d6:c5:01:11:10:c3:54:5d:aa:6d:cb:8e:8f: bc:a2:71:96:c3:3e:1e:1b:2a:60:11:3e:e0:ce:12:bd:73:f4: b0:70:d4:c8:44:7a:aa:08:9e:79:2b:6b:67:1d:13:06:a8:ca: c7:a3:0d:1c:2e:26:8d:8c:7f:58:f3:d9:7f:a2:ca:b1:91:12: 21:e1:0d:f5:1d:94:fc:dd:2e:2d:22:43:78:1c:d0:4c:be:0d: e4:31:23:fe:fd:e3:ee:33:94:4d:89:b2:0e:74:8d:b0:88:2f: d8:0c:4b:1b:80:ab:68:d1:dc:ca:09:3a:81:9e:3f:4c:88:05: 91:7f:5d:be:30:54:c0:47:48:1f:73:61:2f:44:f1:11:cb:7f: 5d:14:86:a2:9c:a7:c8:7c:67:0c:94:39:5c:31:f1:57:f2:5c: b5:be:15:22:1d:4c:63:9f:58:98:c4:4b:43:71:65:c3:0f:e4: 93:59:ad:44:fa:9c:0b:17:99:42:94:c6:48:30:2e:ff:e0:74: 01:7f:1f:b7:48:6f:83:64:a9:da:27:ba:16:b8:60:66:01:ff: 4e:86:6d:78:ad:81:d2:be:cf:67:a6:f2:04:d2:95:85:e6:44: 16:bc:89:e2:00:b2:df:66:26:1e:df:05:2d:81:08:bd:06:47: 98:54:bb:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MEQxMTAvBgNVBAUTKDFCQUY4MjUxRDFBMTNGNDE4ODA2MEFCMTlBMDMwRDM2 Q0FBN0FCRDQwHhcNMjQwNTA0MTY0MzAwWhcNMjQwNTExMTY0MzAwWjAYMRYwFAYD VQQDEw02NjM2NjU5NS1mZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp1jBzI+LBjaRqNhiBm8asA2JFkOapxC312Wj9J9zrsiKIvAHRe++27od8dM D9lDF4jNkQxEI8dmPv+Ish3UKeia9FMP4i0HZhR5BgBK0GOZVwmEGzO//cFPWZJh tIrhePHeK6rRjaEOpNf1R9tKjvBMBJq5AH/lZnSAdPwHF+q1vpnzfEdyCfQ9k9XO dIdli3Mvnn9Qu0ZyAxLX0oj/sm+1oWJB/VLOMfuzbcZVdxK8CD9HokDQ8+r/4U5U t7SAkCnlC9KFFnHvnS33FJs1dkeaenrhFCBUqTTpJhr3109AUfUW6ZEzP1VcVeFr o2dKo9jJsF1CI1tmtAVJ95587wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjQzEZt tCg0y4FcPzCa/PfgFFfIMB8GA1UdIwQYMBaAFBuvglHRoT9BiAYKsZoDDTbKp6vU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcwRC8xNzZENDExNEVE MjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAwR0lCZ3F4bWdNTk5zcW5x OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c2LUNVZEdoUDBHSUJncXhtZ01OTnNxbnE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcwRC8xNzZENDExNEVEMjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAw R0lCZ3F4bWdNTk5zcW5xOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrU0LobtbFAREQw1Rdqm3Ljo+8onGWwz4eGypgET7gzhK9c/SwcNTI RHqqCJ55K2tnHRMGqMrHow0cLiaNjH9Y89l/osqxkRIh4Q31HZT83S4tIkN4HNBM vg3kMSP+/ePuM5RNibIOdI2wiC/YDEsbgKto0dzKCTqBnj9MiAWRf12+MFTAR0gf c2EvRPERy39dFIainKfIfGcMlDlcMfFX8ly1vhUiHUxjn1iYxEtDcWXDD+STWa1E +pwLF5lClMZIMC7/4HQBfx+3SG+DZKnaJ7oWuGBmAf9Ohm14rYHSvs9npvIE0pWF 5kQWvIniALLfZiYe3wUtgQi9BkeYVLsq -----END CERTIFICATE-----Generated at Sat May 4 17:44:40 2024 by rpki-client on console-ams.rpki-client.org