$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json) Hash identifier: zZnqXFhpCKyKMJ58RCzikLuL4z8F0v8nB5X14wRLSCU= Subject key identifier: 68:AC:32:A1:D4:A9:C3:F9:BD:0D:D7:0C:F9:61:AC:EE:78:DE:FD:51 Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Certificate serial: 1CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft Manifest number: 1C98 Signing time: Thu 02 May 2024 16:36:21 +0000 Manifest this update: Thu 02 May 2024 16:36:20 +0000 Manifest next update: Thu 09 May 2024 16:36:20 +0000 Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: /MRprJ3fyy3h3FXuWQ5LELkDVrAG5d4Yqnc5cGYiDuM=) 2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: +5YNfegr0aeFYU1zjDr+2ZPXVIvdnERfdvdcdTrCvKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7334 (0x1ca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Validity Not Before: May 2 16:36:20 2024 GMT Not After : May 9 16:36:20 2024 GMT Subject: CN=6633c105-3ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:a3:25:7e:e5:29:8a:ee:04:70:7a:ce:5f: f8:b4:d8:7e:45:9c:fe:c2:9a:fb:d2:3d:c8:39:d6: c9:6a:7a:d0:46:fd:cd:37:24:8b:3d:9d:8f:9b:0f: 5f:c8:2d:10:49:b6:8a:07:b3:8d:f4:49:cc:37:98: b2:fa:60:bb:31:87:8f:4d:06:d8:fb:11:75:f8:03: f0:6b:e1:94:a5:87:a4:9c:a3:9f:72:24:52:ef:f2: 17:28:a5:f7:b4:b2:d9:7e:c6:58:4d:b4:bf:32:e8: 21:a3:85:83:40:69:34:97:68:9a:3a:61:59:06:43: 8f:d4:bd:e3:ed:b3:d7:9e:79:f8:fb:37:69:5a:f0: b9:2d:11:09:1b:72:41:8c:d6:44:ff:e7:5f:63:f1: 4e:6e:33:05:51:8a:94:3e:93:f0:4c:3a:26:43:de: 04:d8:32:c4:9a:b4:2b:e0:e7:6a:cd:94:c5:11:5a: 15:f4:9e:76:5b:25:6a:82:50:be:bc:30:94:34:45: 6b:dd:22:c6:7b:b5:33:b4:d0:f3:9e:7d:89:ec:90: 28:50:a8:2e:55:23:1b:c3:03:a3:af:77:d9:30:1e: 63:76:3e:d0:1a:4c:62:55:63:7a:0d:12:ad:9f:41: e4:1e:2c:3e:24:5c:d1:00:ab:45:9b:f7:86:5f:ca: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AC:32:A1:D4:A9:C3:F9:BD:0D:D7:0C:F9:61:AC:EE:78:DE:FD:51 X509v3 Authority Key Identifier: keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:34:01:83:16:de:a8:d4:95:87:65:cf:94:b7:fd:2c:c1:d4: 5c:b0:e2:36:75:fb:dd:b8:51:69:62:01:d2:9d:74:07:96:35: 29:f8:bd:d7:34:60:3e:57:10:71:f7:d4:71:e9:6b:64:4d:1c: 07:e9:9a:88:df:25:84:26:6e:05:ee:64:4b:27:8a:eb:04:4e: 17:05:4d:54:ab:ee:4e:48:02:31:c5:90:03:56:35:de:2b:07: af:cf:de:87:81:f7:6b:b4:4b:3a:91:22:76:e4:aa:b8:3d:dd: 1a:4a:0f:1a:c5:f1:c3:9c:13:42:80:bd:04:81:e9:49:d7:4f: d0:57:d2:19:85:1e:99:3e:ba:1a:62:43:0f:77:21:32:e3:36: 1b:6c:80:00:1e:b2:5d:1f:ad:7e:91:be:7d:fd:e8:b2:9d:9f: 2b:f3:24:46:be:06:29:89:67:26:9c:a7:0d:7e:e4:8e:ba:36: 74:cb:c5:b5:95:7a:d5:e3:3c:da:0c:81:02:5e:0c:7a:28:41: 2e:b7:7e:b6:94:85:92:d3:bb:89:08:a6:80:c0:37:b6:92:86: 85:21:ca:5a:b7:92:8a:e8:b5:01:51:57:dc:15:10:86:ac:7f: 8f:f3:60:72:45:56:37:92:75:62:e0:de:3c:90:01:7e:86:2f: ec:e1:fa:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2 RjUzRTdDNTcwHhcNMjQwNTAyMTYzNjIwWhcNMjQwNTA5MTYzNjIwWjAYMRYwFAYD VQQDEw02NjMzYzEwNS0zY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYmjJX7lKYruBHB6zl/4tNh+RZz+wpr70j3IOdbJanrQRv3NNySLPZ2Pmw9f yC0QSbaKB7ON9EnMN5iy+mC7MYePTQbY+xF1+APwa+GUpYeknKOfciRS7/IXKKX3 tLLZfsZYTbS/Mugho4WDQGk0l2iaOmFZBkOP1L3j7bPXnnn4+zdpWvC5LREJG3JB jNZE/+dfY/FObjMFUYqUPpPwTDomQ94E2DLEmrQr4OdqzZTFEVoV9J52WyVqglC+ vDCUNEVr3SLGe7UztNDznn2J7JAoUKguVSMbwwOjr3fZMB5jdj7QGkxiVWN6DRKt n0HkHiw+JFzRAKtFm/eGX8pi7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGisMqHU qcP5vQ3XDPlhrO543v1RMB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTZCNS9DQTZBNTVFQ0FBNUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNk eURYUWZwZ0VYdlJ2VS1mRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWNAGDFt6o1JWHZc+Ut/0swdRcsOI2dfvduFFpYgHSnXQHljUp+L3X NGA+VxBx99Rx6WtkTRwH6ZqI3yWEJm4F7mRLJ4rrBE4XBU1Uq+5OSAIxxZADVjXe Kwevz96HgfdrtEs6kSJ25Kq4Pd0aSg8axfHDnBNCgL0EgelJ10/QV9IZhR6ZProa YkMPdyEy4zYbbIAAHrJdH61+kb59/eiynZ8r8yRGvgYpiWcmnKcNfuSOujZ0y8W1 lXrV4zzaDIECXgx6KEEut362lIWS07uJCKaAwDe2koaFIcpat5KK6LUBUVfcFRCG rH+P82ByRVY3knVi4N48kAF+hi/s4frK -----END CERTIFICATE-----Generated at Thu May 2 17:43:49 2024 by rpki-client on console-fra.rpki-client.org