$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json) Hash identifier: YLaVXOrtKc4ttY0icEsYzX0W+tA/mjA1fJJv2GfuVnQ= Subject key identifier: A3:0B:4B:63:3C:C5:3C:C8:B2:22:D7:88:FD:1A:71:B1:65:EE:B3:60 Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft Manifest number: 03EB Signing time: Fri 03 May 2024 02:21:05 +0000 Manifest this update: Fri 03 May 2024 02:21:04 +0000 Manifest next update: Fri 10 May 2024 02:21:04 +0000 Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: Njm3x2RlfgDyHh9HN43JzvzLafYqw8p49UxwCVQcIjo=) 2: A231B9362CEA11EC8F99F486C4F9AE02.roa (hash: hcSDxQ7jASPumqxS7qH+G66MJXzqjFck0zdTgBn6uEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Validity Not Before: May 3 02:21:04 2024 GMT Not After : May 10 02:21:04 2024 GMT Subject: CN=66344a10-08b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:4e:1a:40:53:f4:c0:73:86:cc:49:ee:41: 01:79:fa:b3:95:82:62:67:f2:c6:7b:cb:6d:eb:6a: 64:20:8b:1d:65:38:7e:40:4b:f1:b2:04:f3:0f:06: ee:a0:6b:f9:4b:48:1b:6c:2c:07:2d:43:4a:f2:51: 85:da:9d:43:cc:ff:19:80:ff:4c:b6:b5:98:df:4d: 19:f5:44:16:95:f9:a2:a9:aa:22:f7:ff:21:6d:2c: 40:39:d8:7a:08:aa:cf:fd:29:17:20:57:28:bc:7e: 58:96:fa:df:fe:0f:41:29:c5:26:c5:7d:c9:d3:4f: 0b:0a:c4:83:02:2c:85:06:31:fd:12:81:eb:74:e5: 5b:d0:ad:b9:f9:05:a9:30:cb:9c:d1:cb:24:a4:95: bd:d7:3a:5c:71:6f:22:04:c6:e5:01:c7:cb:ab:72: 4b:02:dc:62:a4:95:68:20:7b:82:22:de:b2:1d:c0: 5d:0f:64:b9:50:67:3c:09:0b:2a:53:8b:63:59:a6: 2f:b7:30:9a:31:8e:3f:0f:89:4e:c7:3b:3e:d0:66: de:3e:99:7a:14:26:55:b7:9c:fd:8c:d1:da:2b:05: 0a:ff:55:ba:bf:59:40:cd:11:8e:9e:86:83:2a:40: f4:2c:63:cd:79:60:0a:da:fd:b7:e1:c1:b3:b0:3b: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0B:4B:63:3C:C5:3C:C8:B2:22:D7:88:FD:1A:71:B1:65:EE:B3:60 X509v3 Authority Key Identifier: keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3d:ba:d2:95:01:86:71:47:af:e8:25:9a:16:6d:70:70:57: 96:1c:11:a2:cd:a9:71:0d:c7:4b:09:64:26:e0:2f:f7:17:46: 8a:8d:47:ce:36:3f:1f:be:44:0f:8c:59:0b:ba:2a:f2:0b:36: 8d:28:7d:b5:2b:61:14:5f:2a:86:08:5d:e1:78:7d:cd:45:7e: b3:a2:73:28:e0:7a:1c:e3:53:f2:90:bd:7e:34:60:a7:d5:1a: 08:3c:dd:c3:6a:59:e5:45:83:ac:dd:29:28:87:28:4a:21:1e: 52:8b:de:e1:da:5a:5a:b8:af:71:80:82:2a:50:df:d4:5d:6d: 06:ef:ee:be:6b:9f:84:31:5b:80:a5:73:15:fa:e6:d9:83:28: 41:9f:2a:b9:98:3e:31:d2:1d:10:f2:b0:81:bb:59:0d:7f:96: 27:5f:4f:cf:05:9f:11:9e:6d:19:07:62:53:38:23:1a:2c:1d: 87:1a:6b:f4:1e:52:70:cd:2e:39:3e:22:16:70:6c:eb:59:76: 4b:d9:4c:ca:f9:85:ec:7b:18:1f:84:c0:38:7b:fa:44:0c:66: 91:9c:31:e4:b8:d5:c0:35:16:3e:a5:fd:5a:f6:81:73:9b:16: 36:4e:ce:8d:57:f3:44:aa:ef:bb:fa:9a:40:16:46:33:44:4a: 13:45:6a:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQzIxMTAvBgNVBAUTKEVCMkIwQzZCOUM4QjdGMDk0NzcxODI2NzQ2QUY3RDQ2 MEVEQzQ3QUEwHhcNMjQwNTAzMDIyMTA0WhcNMjQwNTEwMDIyMTA0WjAYMRYwFAYD VQQDEw02NjM0NGExMC0wOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wdOGkBT9MBzhsxJ7kEBefqzlYJiZ/LGe8tt62pkIIsdZTh+QEvxsgTzDwbu oGv5S0gbbCwHLUNK8lGF2p1DzP8ZgP9MtrWY300Z9UQWlfmiqaoi9/8hbSxAOdh6 CKrP/SkXIFcovH5Ylvrf/g9BKcUmxX3J008LCsSDAiyFBjH9EoHrdOVb0K25+QWp MMuc0cskpJW91zpccW8iBMblAcfLq3JLAtxipJVoIHuCIt6yHcBdD2S5UGc8CQsq U4tjWaYvtzCaMY4/D4lOxzs+0GbePpl6FCZVt5z9jNHaKwUK/1W6v1lAzRGOnoaD KkD0LGPNeWAK2v234cGzsDu0AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMLS2M8 xTzIsiLXiP0acbFl7rNgMB8GA1UdIwQYMBaAFOsrDGuci38JR3GCZ0avfUYO3Eeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNDMi81QUY3RkQ3NjJD RTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3bEhjWUpuUnE5OVJnN2NS Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5c01hNXlMZndsSGNZSm5ScTk5Umc3Y1I2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNDMi81QUY3RkQ3NjJDRTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3 bEhjWUpuUnE5OVJnN2NSNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuPbrSlQGGcUev6CWaFm1wcFeWHBGizalxDcdLCWQm4C/3F0aKjUfO Nj8fvkQPjFkLuiryCzaNKH21K2EUXyqGCF3heH3NRX6zonMo4Hoc41PykL1+NGCn 1RoIPN3DalnlRYOs3SkohyhKIR5Si97h2lpauK9xgIIqUN/UXW0G7+6+a5+EMVuA pXMV+ubZgyhBnyq5mD4x0h0Q8rCBu1kNf5YnX0/PBZ8Rnm0ZB2JTOCMaLB2HGmv0 HlJwzS45PiIWcGzrWXZL2UzK+YXsexgfhMA4e/pEDGaRnDHkuNXANRY+pf1a9oFz mxY2Ts6NV/NEqu+7+ppAFkYzREoTRWpL -----END CERTIFICATE-----Generated at Fri May 3 03:10:53 2024 by rpki-client on console-ams.rpki-client.org