$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json) Hash identifier: gkz4V/0pr5o6fTehq7tE5w5SaJF4uSDVVE/o80ZyizQ= Subject key identifier: 6A:0C:E1:3F:26:FC:81:34:F6:3B:7A:21:E2:1C:1F:03:C5:A1:F5:AE Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68 Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft Manifest number: 06BC Signing time: Thu 02 May 2024 23:13:47 +0000 Manifest this update: Thu 02 May 2024 23:13:46 +0000 Manifest next update: Thu 09 May 2024 23:13:46 +0000 Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: AQFIh5hs9cpl5q3r7I7E/d9N72N9zjQyFpsxnvDci28=) 2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: X8l5WKdTykN4pkEEFbxZ8zv5lBUZDC68tJ50QcKI1zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568 Validity Not Before: May 2 23:13:46 2024 GMT Not After : May 9 23:13:46 2024 GMT Subject: CN=66341e2b-7828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:76:ae:b1:40:f1:d2:e3:01:42:fc:1b:76: a1:8d:19:74:a1:82:73:de:89:31:ff:67:e5:03:e2: d5:7e:27:2f:58:83:b4:74:c6:9e:9e:c1:33:5f:58: 58:6d:91:77:d2:98:92:e9:99:ce:0b:71:06:55:b6: 65:ff:0a:c7:5a:d4:da:f5:ae:c3:1a:fa:b3:84:2c: 8d:30:d2:0f:dc:af:69:d2:a3:e2:e8:cc:21:66:83: d2:5a:21:5e:77:fd:25:81:19:0b:3f:6c:af:e8:c8: 43:87:8b:ac:1d:a7:14:1f:1e:fc:d2:4e:d7:39:36: 09:4c:ac:6f:a2:9f:1e:0e:2c:b6:48:c2:b3:5f:07: e6:43:15:63:a0:4a:65:b9:e4:f6:7b:5f:f6:7a:e8: e9:22:b0:f8:3f:4c:cd:ed:dc:b2:db:20:73:96:ff: d6:6c:40:28:c3:a2:23:db:4f:a3:00:1c:a8:af:1a: fa:0d:2f:6f:90:3c:53:a9:b4:7a:c3:61:9d:41:cb: f5:7e:04:50:51:d1:25:ee:6f:d0:91:0f:93:3a:7e: da:b0:da:96:27:06:a5:26:02:6d:92:b3:74:f4:ed: 6b:9a:76:63:50:c4:39:62:7c:7d:d1:37:b9:0c:d1: d6:d9:5e:71:0c:f7:c4:e6:ae:ee:fc:27:57:0b:eb: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0C:E1:3F:26:FC:81:34:F6:3B:7A:21:E2:1C:1F:03:C5:A1:F5:AE X509v3 Authority Key Identifier: keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2e:84:3d:71:9d:19:f8:9f:3b:26:02:1d:7e:d1:cf:ac:98: e2:f8:20:63:e2:dc:0a:dd:60:b0:7f:b7:50:73:ea:49:b9:b7: b4:4a:80:d1:3e:fe:67:ac:fe:13:70:36:9e:ea:ed:f3:2f:1e: 41:2b:bd:8b:97:e5:b8:36:20:34:06:9e:0b:d2:83:cc:de:99: 86:04:29:27:31:09:f0:d7:bc:8e:1e:31:45:36:3e:68:58:f9: af:b1:11:f7:e6:f8:fa:f3:e1:c2:a8:53:e1:5d:66:f4:7d:9f: ed:6b:41:8f:6d:81:5c:73:ea:12:14:1a:f9:81:59:3c:9e:d2: 35:6d:b0:8f:4a:b1:0c:a6:8d:ba:fd:35:fe:15:bd:68:a0:9b: c2:81:8b:75:93:1d:aa:11:19:23:c9:86:70:ae:ed:25:f8:1a: 24:e4:dd:3a:4b:c0:12:39:d8:7a:d5:20:e1:6e:37:e8:b4:ed: 53:f0:5d:ae:73:eb:1f:09:e4:0d:68:16:6c:1f:6d:29:b4:b3: 5e:9c:15:8b:6e:e4:c9:0e:52:66:84:29:72:46:47:6b:ff:c5: 3d:e6:9d:eb:53:83:07:e4:4d:5a:f7:e9:98:7c:c6:37:37:2e: 27:e1:77:bc:5d:fd:df:d9:f5:bf:fa:86:5f:78:ae:06:58:5a: 0b:dd:fd:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QkIxMTAvBgNVBAUTKEI0OUU4RUU4MTcwM0E0QTBCQUNDQTgyNDM3ODAyRkI1 QzMwQjY1NjgwHhcNMjQwNTAyMjMxMzQ2WhcNMjQwNTA5MjMxMzQ2WjAYMRYwFAYD VQQDEw02NjM0MWUyYi03ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkR2rrFA8dLjAUL8G3ahjRl0oYJz3okx/2flA+LVficvWIO0dMaensEzX1hY bZF30piS6ZnOC3EGVbZl/wrHWtTa9a7DGvqzhCyNMNIP3K9p0qPi6MwhZoPSWiFe d/0lgRkLP2yv6MhDh4usHacUHx780k7XOTYJTKxvop8eDiy2SMKzXwfmQxVjoEpl ueT2e1/2eujpIrD4P0zN7dyy2yBzlv/WbEAow6Ij20+jAByorxr6DS9vkDxTqbR6 w2GdQcv1fgRQUdEl7m/QkQ+TOn7asNqWJwalJgJtkrN09O1rmnZjUMQ5Ynx90Te5 DNHW2V5xDPfE5q7u/CdXC+vEHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoM4T8m /IE09jt6IeIcHwPFofWuMB8GA1UdIwQYMBaAFLSejugXA6SgusyoJDeAL7XDC2Vo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCQi9GQzczRkEwNjEw RTYxMUVCQjRBMjUyMURDNEY5QUUwMi90SjZPNkJjRHBLQzZ6S2drTjRBdnRjTUxa V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RKNk82QmNEcEtDNnpLZ2tONEF2dGNNTFpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCQi9GQzczRkEwNjEwRTYxMUVCQjRBMjUyMURDNEY5QUUwMi90SjZPNkJjRHBL QzZ6S2drTjRBdnRjTUxaV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuLoQ9cZ0Z+J87JgIdftHPrJji+CBj4twK3WCwf7dQc+pJube0SoDR Pv5nrP4TcDae6u3zLx5BK72Ll+W4NiA0Bp4L0oPM3pmGBCknMQnw17yOHjFFNj5o WPmvsRH35vj68+HCqFPhXWb0fZ/ta0GPbYFcc+oSFBr5gVk8ntI1bbCPSrEMpo26 /TX+Fb1ooJvCgYt1kx2qERkjyYZwru0l+Bok5N06S8ASOdh61SDhbjfotO1T8F2u c+sfCeQNaBZsH20ptLNenBWLbuTJDlJmhClyRkdr/8U95p3rU4MH5E1a9+mYfMY3 Ny4n4Xe8Xf3f2fW/+oZfeK4GWFoL3f09 -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org