$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json) Hash identifier: bWQZeTgstkjkcBsHcGo41oMFnKKpjgvbTq7Kup9FhlI= Subject key identifier: 8B:B7:DB:28:59:71:0F:40:00:A1:F6:81:3B:4B:B2:E8:F0:83:49:F7 Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft Manifest number: 43 Signing time: Fri 17 May 2024 08:18:17 +0000 Manifest this update: Fri 17 May 2024 08:18:17 +0000 Manifest next update: Fri 24 May 2024 08:18:17 +0000 Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: 36eHretO2MT5ClQmoHgLeFFsDM1d1QTaoG4n+cFyGCs=) 2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: eaJ/+41Y17jpA221CA5Azh5X2Cjo4uasGG6BRZBrij8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Validity Not Before: May 17 08:18:17 2024 GMT Not After : May 24 08:18:17 2024 GMT Subject: CN=664712c9-85fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:35:48:05:32:bc:38:71:02:2e:41:19:36: 8f:c2:e7:63:3b:e0:f0:96:d7:e4:f3:ff:c8:dd:4f: c6:74:95:2e:d9:29:a1:75:35:14:d9:a8:f3:d4:86: fc:95:67:cd:a8:3c:d0:17:7e:40:3f:a2:d4:18:ab: 18:64:1d:58:0b:f6:9e:79:c4:86:64:ef:c6:80:94: be:9d:5e:24:90:14:fc:77:3d:c8:7e:6b:35:0b:3a: f7:dd:a6:fb:36:87:f1:3f:73:13:de:18:b6:5d:87: e9:7d:3b:ac:b4:ca:64:81:64:b4:ae:70:6a:72:3f: d0:da:83:92:84:20:69:d3:60:c7:84:e2:46:d9:21: 77:91:90:7c:af:d4:74:e3:27:21:2b:a4:ae:1b:a3: 75:61:5f:72:db:07:f6:e0:8c:c2:c7:7a:b0:6d:43: 67:e3:77:f2:b6:d4:64:2d:8f:7e:c0:b7:06:22:21: 63:5f:b4:60:6b:88:c7:e1:94:88:50:56:64:4e:89: 5a:e2:84:2f:c1:f5:a9:fa:a8:4b:c9:37:56:09:5b: ca:8a:82:60:ec:2b:7c:65:38:7e:db:9f:0b:6f:12: 72:1e:22:a8:6c:8c:78:a6:76:1f:ae:19:f9:cd:5d: 6e:48:50:18:00:55:9a:3e:c4:ff:4f:2d:ad:b7:3a: b5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B7:DB:28:59:71:0F:40:00:A1:F6:81:3B:4B:B2:E8:F0:83:49:F7 X509v3 Authority Key Identifier: keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:04:81:95:11:35:42:67:29:eb:83:74:1a:d1:68:44:a2:d8: 7e:a5:3d:0d:aa:92:e4:c2:e7:17:fa:6b:68:fb:8b:55:3e:ca: 61:12:84:1d:71:3d:76:af:81:f1:74:96:ad:06:01:bc:0c:01: 87:55:26:07:3b:ab:86:5e:c2:bc:43:6b:b2:ec:7e:a7:14:90: 06:8f:24:cd:c8:2d:89:37:85:ca:9a:a9:1d:d8:ee:31:c1:0c: 51:1d:ff:bb:45:73:37:e3:8a:3e:53:06:d0:16:ad:01:03:2c: 00:77:2e:4c:55:b4:63:08:92:12:92:60:70:fd:da:12:41:d7: 86:da:cb:df:22:d5:ab:56:7c:b3:9a:e1:26:f0:5f:03:0e:15: 5b:25:0d:16:32:ab:4b:44:7a:80:36:72:ad:cc:f8:8e:13:ad: d0:2b:9a:b1:2d:7e:a6:4a:f5:6a:57:d1:bd:ea:25:94:6e:cb: 45:65:56:21:b8:68:93:b9:a6:70:ee:f1:89:44:94:57:83:1f: 73:d1:1c:07:96:b4:6b:cb:3b:92:3b:87:9e:98:1a:c8:e5:ce: 8d:9d:58:c2:67:19:a5:6d:69:71:04:37:f2:c4:e2:62:ec:a2: 01:e0:9e:05:c3:88:0f:4e:12:97:02:e2:86:fc:b1:4b:48:98: 85:bf:9c:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUNCMjExMC8GA1UEBRMoRTg4ODYxRkY0QTQ1MzgwMjY3QTgxQjU4RkE5OUU0ODlB RDAwMUJCRDAeFw0yNDA1MTcwODE4MTdaFw0yNDA1MjQwODE4MTdaMBgxFjAUBgNV BAMTDTY2NDcxMmM5LTg1ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7gjVIBTK8OHECLkEZNo/C52M74PCW1+Tz/8jdT8Z0lS7ZKaF1NRTZqPPUhvyV Z82oPNAXfkA/otQYqxhkHVgL9p55xIZk78aAlL6dXiSQFPx3Pch+azULOvfdpvs2 h/E/cxPeGLZdh+l9O6y0ymSBZLSucGpyP9Dag5KEIGnTYMeE4kbZIXeRkHyv1HTj JyErpK4bo3VhX3LbB/bgjMLHerBtQ2fjd/K21GQtj37AtwYiIWNftGBriMfhlIhQ VmROiVrihC/B9an6qEvJN1YJW8qKgmDsK3xlOH7bnwtvEnIeIqhsjHimdh+uGfnN XW5IUBgAVZo+xP9PLa23OrXhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi7fbKFlx D0AAofaBO0uy6PCDSfcwHwYDVR0jBBgwFoAU6Ihh/0pFOAJnqBtY+pnkia0AG70w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQ0IyLzlGRTc2MEE2Qjgz QzExRUU4NzQxOTAyRUM0RjlBRTAyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkloaF8wcEZPQUpucUJ0WS1wbmtpYTBBRzcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB Q0IyLzlGRTc2MEE2QjgzQzExRUU4NzQxOTAyRUM0RjlBRTAyLzZJaGhfMHBGT0FK bnFCdFktcG5raWEwQUc3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYEgZURNUJnKeuDdBrRaESi2H6lPQ2qkuTC5xf6a2j7i1U+ymEShB1x PXavgfF0lq0GAbwMAYdVJgc7q4ZewrxDa7LsfqcUkAaPJM3ILYk3hcqaqR3Y7jHB DFEd/7tFczfjij5TBtAWrQEDLAB3LkxVtGMIkhKSYHD92hJB14bay98i1atWfLOa 4SbwXwMOFVslDRYyq0tEeoA2cq3M+I4TrdArmrEtfqZK9WpX0b3qJZRuy0VlViG4 aJO5pnDu8YlElFeDH3PRHAeWtGvLO5I7h56YGsjlzo2dWMJnGaVtaXEEN/LE4mLs ogHgngXDiA9OEpcC4ob8sUtImIW/nAY= -----END CERTIFICATE-----Generated at Fri May 17 08:52:51 2024 by rpki-client on console-ams.rpki-client.org