$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: 5rIcdcO0+KgRgIjuLWqruQiacXafRMnLsLgdD11zies= Subject key identifier: A6:6E:DC:B9:15:AF:CB:E1:9D:9F:2F:01:22:75:3E:0B:85:7A:47:0C Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 0742 Signing time: Sat 04 May 2024 22:34:57 +0000 Manifest this update: Sat 04 May 2024 22:34:57 +0000 Manifest next update: Sat 11 May 2024 22:34:57 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: 1Bubx9xd8Njn8Vilq1BYk+ZGXrP6EVjkMSwiKP5oTAU=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: e+X2E/kxDiU8pSgU8YKgyDms1vm+liCnTUPi1IAPKOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: May 4 22:34:57 2024 GMT Not After : May 11 22:34:57 2024 GMT Subject: CN=6636b811-2205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:f6:9a:c6:8c:cc:64:49:d3:40:97:06:ee: c3:0a:e3:c4:e4:e8:0b:4f:bb:96:dc:20:f0:27:7e: 57:f3:8f:a4:a9:b8:84:b0:60:ea:85:0f:2d:e1:8d: f3:e4:f2:78:a0:f7:8b:f8:29:ac:da:00:4c:6d:90: de:b8:94:e5:fc:91:9c:48:bb:6e:f3:46:f5:a6:0a: b2:94:9f:eb:c4:b5:94:1b:d4:d6:94:bc:89:2b:4d: 2c:73:67:2b:7a:ac:16:54:a0:52:fc:52:f4:6f:02: 68:bc:7f:8f:c5:25:2c:65:8b:6d:be:b6:b7:2f:d2: b2:d8:94:65:d9:1f:a0:e1:78:d1:a8:ba:34:a4:72: 71:97:c9:bd:fd:ef:a5:e6:4c:84:3f:fa:81:af:5e: 95:8b:42:af:fa:ea:0a:39:46:22:41:30:b2:41:b6: 2f:f9:23:c0:61:77:ac:19:eb:7e:de:20:5e:29:c7: 51:71:c3:6a:b7:fb:c6:5e:a4:23:26:3d:09:d4:67: d4:f5:63:fb:6c:ce:70:53:c8:1d:4d:1d:6a:67:97: 52:c3:d9:93:40:e9:2d:97:5a:8c:5f:4f:3b:eb:e2: bb:b5:fa:0a:27:88:34:8f:a1:21:b0:8d:42:80:e0: 03:85:fe:dc:67:cd:d5:1b:74:57:65:98:a6:fb:07: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6E:DC:B9:15:AF:CB:E1:9D:9F:2F:01:22:75:3E:0B:85:7A:47:0C X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:db:2f:42:28:20:31:33:2d:e7:9a:3b:08:0d:67:02:01:93: 81:26:a2:32:f2:a3:f6:6c:2c:23:d0:f4:ff:20:a7:3e:e6:a7: b4:11:1f:dd:87:4a:74:00:a9:93:95:ef:43:aa:62:1e:c2:aa: 1a:54:34:9e:8a:f3:4a:b7:3b:ae:e0:0d:e8:e5:dd:f4:db:b0: d5:e7:26:6b:a9:a8:91:49:36:ce:bd:2b:7a:c0:95:ae:e3:c2: fc:30:14:f0:00:b3:ca:0a:0f:b7:3f:ac:39:41:cb:15:8a:41: b0:ef:ba:de:47:bf:1c:67:57:e1:b1:f0:e5:7f:02:91:28:34: 34:0b:b1:06:48:46:b1:6a:2c:a5:fd:07:01:09:fa:e0:89:b9: c9:dd:b0:74:59:32:c0:62:0f:de:17:50:01:5b:65:31:82:c1: ed:82:c1:68:60:ce:42:40:a9:ab:4e:e6:a3:d8:35:88:d8:11: 72:c7:f6:9a:a7:93:7f:4c:df:88:07:8f:43:60:e8:9c:5e:8a: 47:a4:94:43:f7:8b:4e:4d:09:cc:d7:1f:d0:5e:dc:58:be:ff: 5c:fc:0c:1b:4e:a8:20:b4:92:bd:1f:54:03:21:10:6e:d5:be: 7f:87:aa:15:f4:ba:1e:8e:ae:49:27:2c:a0:f3:fe:37:20:67: 87:2f:76:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjQwNTA0MjIzNDU3WhcNMjQwNTExMjIzNDU3WjAYMRYwFAYD VQQDEw02NjM2YjgxMS0yMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQb2msaMzGRJ00CXBu7DCuPE5OgLT7uW3CDwJ35X84+kqbiEsGDqhQ8t4Y3z 5PJ4oPeL+Cms2gBMbZDeuJTl/JGcSLtu80b1pgqylJ/rxLWUG9TWlLyJK00sc2cr eqwWVKBS/FL0bwJovH+PxSUsZYttvra3L9Ky2JRl2R+g4XjRqLo0pHJxl8m9/e+l 5kyEP/qBr16Vi0Kv+uoKOUYiQTCyQbYv+SPAYXesGet+3iBeKcdRccNqt/vGXqQj Jj0J1GfU9WP7bM5wU8gdTR1qZ5dSw9mTQOktl1qMX0876+K7tfoKJ4g0j6EhsI1C gOADhf7cZ83VG3RXZZim+wc3YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZu3LkV r8vhnZ8vASJ1PguFekcMMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm2y9CKCAxMy3nmjsIDWcCAZOBJqIy8qP2bCwj0PT/IKc+5qe0ER/d h0p0AKmTle9DqmIewqoaVDSeivNKtzuu4A3o5d3027DV5yZrqaiRSTbOvSt6wJWu 48L8MBTwALPKCg+3P6w5QcsVikGw77reR78cZ1fhsfDlfwKRKDQ0C7EGSEaxaiyl /QcBCfrgibnJ3bB0WTLAYg/eF1ABW2UxgsHtgsFoYM5CQKmrTuaj2DWI2BFyx/aa p5N/TN+IB49DYOicXopHpJRD94tOTQnM1x/QXtxYvv9c/AwbTqggtJK9H1QDIRBu 1b5/h6oV9Loejq5JJyyg8/43IGeHL3ap -----END CERTIFICATE-----Generated at Sun May 5 00:14:43 2024 by rpki-client on console-ams.rpki-client.org