$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft File: 6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json) Hash identifier: 280h41kCjNyZDNAHS20F2zK1cl3iswK99tfNH/dgMOw= Subject key identifier: 97:5B:67:8B:B0:12:D9:64:59:91:86:81:CD:5F:5B:E5:11:69:35:1E Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 Certificate issuer: /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft Manifest number: 068F Signing time: Sat 04 May 2024 23:29:50 +0000 Manifest this update: Sat 04 May 2024 23:29:50 +0000 Manifest next update: Sat 11 May 2024 23:29:50 +0000 Files and hashes: 1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: WbNkaSgJbCaRX6GfdDq+uTz9aUnJHX+PgDcYsjak9q4=) 2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: y+/QvZaI9S/VrYWnw4Ys9NMkJuCnHc3LdE91YGctBkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Validity Not Before: May 4 23:29:50 2024 GMT Not After : May 11 23:29:50 2024 GMT Subject: CN=6636c4ee-daf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:38:d0:01:71:3d:08:24:2f:7c:38:d9:27: 70:e8:44:24:91:09:c5:38:1d:28:15:c0:1d:0c:69: 9b:1a:29:23:51:5e:e4:09:28:ac:f9:8c:4e:eb:de: 15:8b:cf:aa:b2:cb:dc:97:be:0e:c2:95:95:42:57: a9:9a:d2:8e:6d:0e:64:66:cf:14:7d:67:4f:64:5e: fd:c8:86:c2:e1:8c:8e:24:f6:82:98:3c:db:ea:2a: 8e:1e:e4:6b:30:7e:8d:f5:45:ed:a1:d8:78:cf:20: 55:3d:e6:25:f0:fc:fa:38:db:af:c6:e3:60:c2:cc: b2:3f:17:f7:2e:64:4c:1c:c9:ae:11:49:b3:a3:6a: 9b:e7:2c:74:0c:73:81:14:7c:00:65:69:19:29:97: 68:72:2a:17:dc:16:41:65:af:f1:4f:d7:5c:1f:0c: 10:77:84:10:ef:10:0d:ce:3c:70:33:02:c2:c3:01: a8:49:38:b4:80:fa:63:79:cc:a5:fb:aa:e2:cb:f9: 97:38:da:27:50:cd:80:99:63:0b:46:1d:23:c9:e5: fa:69:be:c0:99:9a:8d:06:22:7b:6d:66:13:5a:c4: 4a:96:ba:05:f3:32:12:fb:8a:8d:f7:07:ff:e4:aa: 63:ef:d0:20:ee:a9:a1:a2:4c:4b:89:f9:28:9c:c7: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5B:67:8B:B0:12:D9:64:59:91:86:81:CD:5F:5B:E5:11:69:35:1E X509v3 Authority Key Identifier: keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1a:3e:bd:37:a9:32:c9:97:45:25:40:83:58:57:78:1e:08: 32:e4:61:6c:33:1f:8b:d6:03:2d:7f:b0:35:f8:1d:db:c2:02: 78:a8:5f:69:cb:15:6a:71:e8:34:01:6b:eb:bf:e1:1b:f1:15: 46:fa:f8:5e:e6:8b:73:c2:1f:d2:f0:70:4e:93:e1:12:70:f8: 3b:50:24:a3:4a:0d:bd:19:8b:7f:8e:64:ea:59:cd:e9:ff:1b: f4:73:db:75:70:87:2e:8a:fd:8d:83:0d:fb:b4:77:6a:e8:94: 54:ff:8d:3a:67:5a:e9:42:c6:c4:4a:f0:33:8f:c2:b6:1c:94: a9:c0:21:e9:06:62:f7:38:e7:cb:f5:29:de:90:50:60:80:69: bb:f5:f2:91:35:ee:34:3b:a0:85:1b:b0:ab:9a:28:3b:16:9a: 35:56:0c:2d:30:93:5c:a5:a9:e4:7a:0d:05:1b:a0:b0:a9:ad: 6b:9d:22:e5:eb:bc:af:13:49:c6:c9:02:a4:71:72:61:ed:8b: dc:63:13:a9:2b:c7:23:35:4e:04:8c:d7:c2:6f:c1:8e:34:af: ce:77:d5:69:fb:96:c5:f2:90:7e:28:40:69:f8:c9:ef:9b:67: 81:ee:ad:19:06:d8:e4:74:60:0a:5f:81:d9:f6:88:cf:4a:5c: 3f:c0:28:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGQ0IxMTAvBgNVBAUTKEU5NTEzNzFERTREQ0IxMDAyNTQ4NEQyRjE0RkRDREEy QzY0NTVCOTEwHhcNMjQwNTA0MjMyOTUwWhcNMjQwNTExMjMyOTUwWjAYMRYwFAYD VQQDEw02NjM2YzRlZS1kYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnk40AFxPQgkL3w42Sdw6EQkkQnFOB0oFcAdDGmbGikjUV7kCSis+YxO694V i8+qssvcl74OwpWVQlepmtKObQ5kZs8UfWdPZF79yIbC4YyOJPaCmDzb6iqOHuRr MH6N9UXtodh4zyBVPeYl8Pz6ONuvxuNgwsyyPxf3LmRMHMmuEUmzo2qb5yx0DHOB FHwAZWkZKZdocioX3BZBZa/xT9dcHwwQd4QQ7xANzjxwMwLCwwGoSTi0gPpjecyl +6riy/mXONonUM2AmWMLRh0jyeX6ab7AmZqNBiJ7bWYTWsRKlroF8zIS+4qN9wf/ 5Kpj79Ag7qmhokxLifkonMcwOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdbZ4uw EtlkWZGGgc1fW+URaTUeMB8GA1UdIwQYMBaAFOlRNx3k3LEAJUhNLxT9zaLGRVuR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUZDQi84ODBFNjM0MDIy QTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NRQWxTRTB2RlAzTm9zWkZX NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZWRTNIZVRjc1FBbFNFMHZGUDNOb3NaRlc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUZDQi84ODBFNjM0MDIyQTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NR QWxTRTB2RlAzTm9zWkZXNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcGj69N6kyyZdFJUCDWFd4Hggy5GFsMx+L1gMtf7A1+B3bwgJ4qF9p yxVqceg0AWvrv+Eb8RVG+vhe5otzwh/S8HBOk+EScPg7UCSjSg29GYt/jmTqWc3p /xv0c9t1cIcuiv2Ngw37tHdq6JRU/406Z1rpQsbESvAzj8K2HJSpwCHpBmL3OOfL 9SnekFBggGm79fKRNe40O6CFG7Crmig7Fpo1VgwtMJNcpankeg0FG6Cwqa1rnSLl 67yvE0nGyQKkcXJh7YvcYxOpK8cjNU4EjNfCb8GONK/Od9Vp+5bF8pB+KEBp+Mnv m2eB7q0ZBtjkdGAKX4HZ9ojPSlw/wCjD -----END CERTIFICATE-----Generated at Sun May 5 00:12:26 2024 by rpki-client on console-fra.rpki-client.org