$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft File: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft (raw, json) Hash identifier: J1JSCQapf95VlZ3hgnl5slkuDp4sv95uvwRp6XocQT8= Subject key identifier: E4:93:D3:E4:D1:8C:77:79:B6:94:27:09:59:6B:F8:3B:61:D7:34:C3 Authority key identifier: EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 Certificate issuer: /CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Certificate serial: 0907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft Manifest number: 0902 Signing time: Wed 20 Sep 2023 20:23:49 +0000 Manifest this update: Wed 20 Sep 2023 20:23:48 +0000 Manifest next update: Wed 27 Sep 2023 20:23:48 +0000 Files and hashes: 1: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl (hash: ufuoUr/wiWaO+yH8HRhbi94XNFnh6AWK7GC23olwujs=) 2: 685E441A69BC11EA97D4FE67C4F9AE02.roa (hash: bkMEDJ6Mw6DdvcBG25uO4MnQlHqZJlYhha7omdMvr74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Sep 2023 20:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311 (0x907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Validity Not Before: Sep 20 20:23:48 2023 GMT Not After : Sep 27 20:23:48 2023 GMT Subject: CN=650b54d5-e6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:23:1a:ac:6f:c9:13:46:ed:dc:2b:ee:2d:51: 00:fa:15:7d:72:bd:29:d9:80:31:7c:e7:63:a5:e3: 7b:6d:dc:6f:a2:18:10:77:d1:20:2e:67:2a:ae:a9: 70:a3:4b:c8:4d:3f:fc:96:74:b7:56:aa:58:a6:bf: 90:11:b7:2b:f9:b7:42:ea:14:d0:85:59:15:58:d1: 29:71:8c:1f:cc:67:87:66:6f:de:4a:0c:3e:67:93: 35:f0:d2:5d:bc:93:8f:35:81:ff:41:b5:c9:4d:83: d4:13:99:bb:29:37:0e:f6:e8:f7:c1:fb:60:7e:c1: 7c:af:5c:66:9e:af:27:65:76:57:96:78:cd:17:ff: f3:ed:38:f6:de:37:d3:33:20:b9:c4:60:a1:8e:79: 1c:4d:9a:6a:09:d8:b0:b3:3f:4c:69:d6:a0:d0:cb: 70:30:d8:a0:ed:ea:bf:89:fc:40:d7:4e:ed:9a:dc: 7f:e6:b5:63:2e:3b:06:d2:a0:fe:19:83:7c:50:7a: 3d:42:ff:70:e9:ca:aa:79:e5:5b:fc:7b:0d:9d:6b: 20:46:59:f0:43:fc:7e:1f:c6:11:f6:67:e5:37:8d: 53:4d:a3:91:ad:16:30:49:45:f5:80:35:39:ec:18: c2:c7:11:c2:3e:55:ea:90:ba:88:f6:65:58:0e:0e: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:D3:E4:D1:8C:77:79:B6:94:27:09:59:6B:F8:3B:61:D7:34:C3 X509v3 Authority Key Identifier: keyid:EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:aa:99:7f:c1:c0:cd:5d:e9:be:13:2a:ec:8c:50:fc:a0:b1: df:71:1b:0b:e6:0e:14:db:53:73:e3:63:5f:51:f4:a1:13:61: 09:28:0c:bf:65:18:b6:de:57:60:57:74:08:34:da:67:c7:7f: 0c:00:28:cc:73:d4:91:97:6d:04:6c:1d:bf:58:58:a9:ba:0c: e6:69:dd:4b:56:5d:13:ae:10:09:bf:b1:db:d4:0e:13:46:39: f1:05:59:df:aa:aa:16:37:81:df:1b:bb:4c:ec:64:fb:48:b3: 8a:e9:d3:26:98:b9:ca:88:d7:a2:6f:63:9e:e9:32:c2:6f:33: b6:61:5b:3f:c5:93:f9:07:3c:ff:67:ec:7b:ac:f3:cd:65:10: 07:c3:14:c8:74:76:12:54:60:11:0f:39:08:21:5e:5f:17:7a: eb:b7:21:8d:b1:c6:e5:36:2e:60:3d:45:9e:aa:95:52:07:2d: eb:93:d7:80:c5:fc:2d:8d:6d:18:07:ff:67:82:b5:45:92:70: d3:47:34:4d:a8:6a:ef:7d:42:fa:ae:d7:04:59:9c:d6:f6:77: 05:67:2f:fb:2b:1d:45:a9:01:56:0f:f4:9e:40:4d:55:da:1a: 16:91:a2:de:1b:0a:d4:8a:8d:ea:b6:7d:53:09:d5:b5:79:65: 0d:32:e3:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzRTQxMTAvBgNVBAUTKEVBQTc5MkY5Njg4NjNDM0ZGQjlFQkQxNjcxQTA2QzE0 NUExQjIxNjQwHhcNMjMwOTIwMjAyMzQ4WhcNMjMwOTI3MjAyMzQ4WjAYMRYwFAYD VQQDEw02NTBiNTRkNS1lNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CMarG/JE0bt3CvuLVEA+hV9cr0p2YAxfOdjpeN7bdxvohgQd9EgLmcqrqlw o0vITT/8lnS3VqpYpr+QEbcr+bdC6hTQhVkVWNEpcYwfzGeHZm/eSgw+Z5M18NJd vJOPNYH/QbXJTYPUE5m7KTcO9uj3wftgfsF8r1xmnq8nZXZXlnjNF//z7Tj23jfT MyC5xGChjnkcTZpqCdiwsz9Madag0MtwMNig7eq/ifxA107tmtx/5rVjLjsG0qD+ GYN8UHo9Qv9w6cqqeeVb/HsNnWsgRlnwQ/x+H8YR9mflN41TTaORrRYwSUX1gDU5 7BjCxxHCPlXqkLqI9mVYDg4gMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOST0+TR jHd5tpQnCVlr+Dth1zTDMB8GA1UdIwQYMBaAFOqnkvlohjw/+569FnGgbBRaGyFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFNC9GNjk4ODFERTY5 QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BEXzducjBXY2FCc0ZGb2JJ V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxZVMtV2lHUERfN25yMFdjYUJzRkZvYklXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjNFNC9GNjk4ODFERTY5QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BE XzducjBXY2FCc0ZGb2JJV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADqpl/wcDNXem+EyrsjFD8oLHfcRsL5g4U21Nz42NfUfShE2EJKAy/ ZRi23ldgV3QINNpnx38MACjMc9SRl20EbB2/WFipugzmad1LVl0TrhAJv7Hb1A4T RjnxBVnfqqoWN4HfG7tM7GT7SLOK6dMmmLnKiNeib2Oe6TLCbzO2YVs/xZP5Bzz/ Z+x7rPPNZRAHwxTIdHYSVGARDzkIIV5fF3rrtyGNscblNi5gPUWeqpVSBy3rk9eA xfwtjW0YB/9ngrVFknDTRzRNqGrvfUL6rtcEWZzW9ncFZy/7Kx1FqQFWD/SeQE1V 2hoWkaLeGwrUio3qtn1TCdW1eWUNMuOd -----END CERTIFICATE-----Generated at Wed Sep 20 20:45:24 2023 by rpki-client on console-fra.rpki-client.org