$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: YdJqroZCgo/fiYOS0JsGPHplC5nAQoVqoWOdz6ceUmU= Subject key identifier: 96:D7:8D:39:81:AB:4C:B1:4B:D2:07:D5:5C:F1:81:5D:05:DE:19:7E Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 33C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 33C0 Signing time: Thu 02 May 2024 14:57:19 +0000 Manifest this update: Thu 02 May 2024 14:57:19 +0000 Manifest next update: Thu 09 May 2024 14:57:19 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: 0SJcJtRwSrCdG28jywbCfnEHi6OOu++H3UrrdSg/fpI=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: n3vOwUJUoWCR75yw1bvlHI6uJ2Fk4FKWZcFIvFpXKwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13251 (0x33c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: May 2 14:57:19 2024 GMT Not After : May 9 14:57:19 2024 GMT Subject: CN=6633a9cf-36f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:e0:2f:f2:02:58:87:aa:c1:f0:2e:b9:76: 6e:f3:1c:d8:74:94:9c:a6:89:c6:18:33:17:a7:f0: 01:08:9b:7d:b2:ee:a2:74:7e:c2:4b:38:46:0b:2e: 2f:56:52:73:0f:b8:58:c0:5d:42:6e:cc:71:f8:90: ac:88:8c:d6:51:78:8a:1d:2b:3e:98:2e:f4:51:4d: 78:7d:66:33:f9:1b:9e:84:82:a8:86:d3:d4:f8:b2: 9c:88:97:23:3f:b7:61:d5:6c:6c:33:26:19:1c:b7: 47:40:33:d9:15:6d:aa:ba:c9:25:cb:f1:6c:49:4a: ff:02:dd:63:be:5a:df:2a:9e:18:f8:c7:f2:88:21: ed:40:b1:cf:e2:1f:56:5c:22:9c:39:e1:d3:7d:4a: e0:b7:37:68:a3:80:4a:84:87:d9:bb:2b:e0:64:9c: 5f:c5:97:cc:a1:6d:af:97:68:90:46:2c:be:b7:09: 3c:34:12:79:fc:f5:d3:0c:ff:21:ef:dc:4a:1d:40: 02:8e:2f:a7:c6:0d:06:f3:bc:70:0b:77:5e:4f:79: 9e:e3:d8:c8:d4:b5:72:c4:1f:ac:4a:d2:ca:d2:12: 04:36:d3:15:e4:06:28:c9:34:78:08:64:db:82:3f: 53:dc:88:79:f7:94:52:75:1e:b0:b5:52:84:06:13: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D7:8D:39:81:AB:4C:B1:4B:D2:07:D5:5C:F1:81:5D:05:DE:19:7E X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ea:72:c7:8f:73:37:8a:2e:6f:03:41:af:13:a0:b6:3e:88: ee:32:77:90:d8:e7:60:9d:e9:21:58:91:b1:8e:87:2d:e5:f7: 27:b9:26:dc:dc:cb:e4:2b:90:5d:3f:34:fb:40:4e:d5:da:08: 58:76:47:cd:f0:07:9c:39:4c:1f:c8:af:03:ba:b0:a6:c3:05: 15:ad:7d:c8:16:14:a5:fd:9a:01:6a:51:31:88:d4:d9:df:c6: eb:e3:71:34:d0:be:b8:20:fc:54:71:62:b9:c2:f8:8f:10:a8: cb:1e:9d:fb:a7:cd:6c:6c:8b:7f:95:69:e9:ef:e3:ef:ec:4c: bd:8c:ae:17:26:6d:77:f2:02:4c:fc:25:d3:a9:55:c6:25:06: e9:a8:be:fb:e3:c6:35:01:42:04:d0:f0:1e:02:33:4c:50:c7: 70:bd:41:45:fc:9b:78:a0:19:49:42:f7:32:4c:8a:c5:ce:c5: c6:49:bc:af:c7:69:f9:fb:55:dc:a4:b9:81:67:37:51:bf:5f: bd:3c:9e:60:c9:2a:14:46:3d:1b:1e:82:8b:93:91:e6:b0:a9: 0d:1c:90:77:2c:e4:37:c2:31:77:32:e5:7b:d1:b0:8f:8e:3b: 2f:74:d6:bf:56:06:59:30:ee:27:41:92:14:40:57:a9:b8:60: 14:d0:cc:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjQwNTAyMTQ1NzE5WhcNMjQwNTA5MTQ1NzE5WjAYMRYwFAYD VQQDEw02NjMzYTljZi0zNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU3gL/ICWIeqwfAuuXZu8xzYdJScponGGDMXp/ABCJt9su6idH7CSzhGCy4v VlJzD7hYwF1Cbsxx+JCsiIzWUXiKHSs+mC70UU14fWYz+RuehIKohtPU+LKciJcj P7dh1WxsMyYZHLdHQDPZFW2quskly/FsSUr/At1jvlrfKp4Y+MfyiCHtQLHP4h9W XCKcOeHTfUrgtzdoo4BKhIfZuyvgZJxfxZfMoW2vl2iQRiy+twk8NBJ5/PXTDP8h 79xKHUACji+nxg0G87xwC3deT3me49jI1LVyxB+sStLK0hIENtMV5AYoyTR4CGTb gj9T3Ih595RSdR6wtVKEBhMO6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbXjTmB q0yxS9IH1VzxgV0F3hl+MB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm6nLHj3M3ii5vA0GvE6C2PojuMneQ2OdgnekhWJGxjoct5fcnuSbc 3MvkK5BdPzT7QE7V2ghYdkfN8AecOUwfyK8DurCmwwUVrX3IFhSl/ZoBalExiNTZ 38br43E00L64IPxUcWK5wviPEKjLHp37p81sbIt/lWnp7+Pv7Ey9jK4XJm138gJM /CXTqVXGJQbpqL7748Y1AUIE0PAeAjNMUMdwvUFF/Jt4oBlJQvcyTIrFzsXGSbyv x2n5+1XcpLmBZzdRv1+9PJ5gySoURj0bHoKLk5HmsKkNHJB3LOQ3wjF3MuV70bCP jjsvdNa/VgZZMO4nQZIUQFepuGAU0MxX -----END CERTIFICATE-----Generated at Thu May 2 17:43:11 2024 by rpki-client on console-fra.rpki-client.org