$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: liebpmlKP2rwY9AZ2izYsSo7vYmpQs1UjJarWjNr7Yg= Subject key identifier: F0:9C:D3:F9:87:AB:C9:9A:1A:FB:E0:82:07:01:B4:81:0F:59:2D:01 Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0BB4 Signing time: Fri 26 Apr 2024 19:10:53 +0000 Manifest this update: Fri 26 Apr 2024 19:10:52 +0000 Manifest next update: Fri 03 May 2024 19:10:52 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: Sclt84jfPAXUpKVPi3oyc8euIvtChrTVvXBuf0892ew=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: Y6Hkp4sTJO7AZ5C1Wz7mMUSK6uq+xj1g3IXrcWStJ+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: Apr 26 19:10:52 2024 GMT Not After : May 3 19:10:52 2024 GMT Subject: CN=662bfc3c-2593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ed:1f:5c:30:c2:6e:38:fa:6d:56:2f:64:c4: eb:11:bb:0d:b7:3a:be:9b:5f:8d:9f:c0:f1:37:d4: 69:6d:56:58:8a:ed:3f:58:31:bc:19:ef:f7:90:2f: f1:64:19:8e:b7:d7:df:c8:07:53:10:f6:db:5d:be: a9:37:a9:cb:04:8c:67:f7:9f:a3:72:63:a4:3c:91: 49:64:2e:fd:0e:7a:62:95:65:d6:27:40:d3:dc:c5: 46:00:67:38:1b:a8:e1:c7:a1:a8:5a:02:9c:3c:38: 8f:10:cd:12:c4:ab:96:8d:25:da:84:51:fe:90:da: ac:fb:2b:85:d2:ef:6a:b6:73:f0:72:b6:74:cb:84: 61:81:73:75:63:76:75:97:ba:95:af:e4:6d:72:c1: 73:0d:fd:74:d4:f2:58:0a:60:fc:77:4f:10:03:f3: 82:05:eb:1e:0d:16:85:89:b9:54:a3:71:ec:94:9f: 5e:a7:70:56:84:d4:2c:b4:b0:3b:09:2a:f8:6e:47: 40:3f:2e:f1:9c:25:61:b3:2d:a9:ec:53:59:45:1b: f3:fc:5c:50:c6:8b:02:6c:bb:f6:08:d3:41:96:65: 98:e0:2d:9f:36:8b:b9:c7:31:09:b3:d3:fd:33:f8: 53:5b:b8:ae:e6:88:ab:75:0e:6c:e4:1b:26:0e:c0: 8e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9C:D3:F9:87:AB:C9:9A:1A:FB:E0:82:07:01:B4:81:0F:59:2D:01 X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:43:96:43:25:d9:fe:d2:17:ef:a1:84:d7:76:19:6d:c5:95: a0:d8:ad:22:43:91:a5:d9:cf:b7:98:21:e6:ff:fc:03:00:07: 39:05:ba:7b:f8:42:78:3b:cb:60:e1:55:d7:d2:a2:9b:d0:5c: 1f:71:6d:c6:55:fa:e4:c8:68:4e:f1:dc:f9:e8:e8:d1:21:c2: 3c:e9:e3:a1:3b:70:89:50:9a:cb:fc:0a:2f:f7:46:4d:eb:55: 28:56:5a:63:a7:52:8e:40:03:fb:60:95:81:02:df:cb:71:61: 56:f2:63:ab:77:74:87:d3:b0:c7:48:5f:73:48:84:fc:38:33: 66:73:66:93:02:d2:bd:29:ed:4c:0e:96:ca:cd:d3:33:94:b7: ae:22:5d:70:79:e2:12:37:91:53:f6:c9:85:45:7b:7f:47:9d: c3:18:41:01:49:09:6e:84:40:cb:09:c7:19:c6:b5:eb:b5:ae: 41:ee:83:55:5c:e6:59:1b:bd:2a:f3:96:22:a9:47:67:40:95: 4d:5a:1f:c3:da:a1:ca:54:14:6b:89:4a:0b:85:03:6f:f1:47: b9:f7:9d:73:ea:c7:05:93:2f:25:88:c7:e0:e4:f6:3b:d0:1e: bd:50:77:99:7b:c7:39:0c:6e:ca:1c:58:87:54:f7:a4:06:64: 87:29:ff:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjQwNDI2MTkxMDUyWhcNMjQwNTAzMTkxMDUyWjAYMRYwFAYD VQQDEw02NjJiZmMzYy0yNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3u0fXDDCbjj6bVYvZMTrEbsNtzq+m1+Nn8DxN9RpbVZYiu0/WDG8Ge/3kC/x ZBmOt9ffyAdTEPbbXb6pN6nLBIxn95+jcmOkPJFJZC79DnpilWXWJ0DT3MVGAGc4 G6jhx6GoWgKcPDiPEM0SxKuWjSXahFH+kNqs+yuF0u9qtnPwcrZ0y4RhgXN1Y3Z1 l7qVr+RtcsFzDf101PJYCmD8d08QA/OCBeseDRaFiblUo3HslJ9ep3BWhNQstLA7 CSr4bkdAPy7xnCVhsy2p7FNZRRvz/FxQxosCbLv2CNNBlmWY4C2fNou5xzEJs9P9 M/hTW7iu5oirdQ5s5BsmDsCOXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCc0/mH q8maGvvgggcBtIEPWS0BMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTQ5ZDJdn+0hfvoYTXdhltxZWg2K0iQ5Gl2c+3mCHm//wDAAc5Bbp7 +EJ4O8tg4VXX0qKb0FwfcW3GVfrkyGhO8dz56OjRIcI86eOhO3CJUJrL/Aov90ZN 61UoVlpjp1KOQAP7YJWBAt/LcWFW8mOrd3SH07DHSF9zSIT8ODNmc2aTAtK9Ke1M DpbKzdMzlLeuIl1weeISN5FT9smFRXt/R53DGEEBSQluhEDLCccZxrXrta5B7oNV XOZZG70q85YiqUdnQJVNWh/D2qHKVBRriUoLhQNv8Ue5951z6scFky8liMfg5PY7 0B69UHeZe8c5DG7KHFiHVPekBmSHKf/y -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:21 2024 by rpki-client on console-ams.rpki-client.org