$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: OqjQjRDiZhR4wy3eFn1Pba1X4LgNMXdb3drYftJx9Ko= Subject key identifier: 54:E3:8B:56:4C:1F:D4:00:49:12:0B:C8:CB:01:67:85:07:4D:7C:EB Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 1405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 13FD Signing time: Mon 06 May 2024 17:31:24 +0000 Manifest this update: Mon 06 May 2024 17:31:24 +0000 Manifest next update: Mon 13 May 2024 17:31:24 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: BGmXGlQl9Bj1lyXNRTQy/g50Bu3wbGtDhOUJdp57Jlk=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: g1Ey78q+65RMEYzYcXo4zq8pc9gKCFeqv/xkXIxZaLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5125 (0x1405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: May 6 17:31:24 2024 GMT Not After : May 13 17:31:24 2024 GMT Subject: CN=663913ec-ade6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:ec:cd:26:26:97:e6:29:e9:1d:35:66:13: 9b:cd:8d:c3:8a:cd:99:d0:5c:5b:15:8f:c1:65:92: 33:74:fa:f4:e0:a9:c4:e5:19:b0:72:f8:a2:66:05: 17:16:15:02:ff:f0:49:5e:f0:0e:09:6e:09:3b:a6: 33:a8:c7:a8:02:3c:c8:d4:0a:01:6f:47:23:15:71: 8f:b7:f6:c2:b6:9f:d4:0a:ff:08:e7:e1:6c:8d:39: 1b:0a:c8:62:f4:2c:c5:72:8d:71:e9:fa:d2:34:2c: 02:0a:69:f9:bd:4e:16:07:79:b3:63:00:73:0e:73: 29:ea:6d:4e:f2:0b:ed:db:10:22:ee:7e:1e:16:dc: 21:8d:d6:c4:54:9a:60:c1:51:a5:07:96:90:db:07: 67:ac:72:d1:21:2e:d4:f9:f2:1e:72:5c:18:3a:8f: d6:58:65:fb:87:f3:cf:01:d8:e7:d3:e8:5e:96:e2: eb:27:f6:5d:2b:59:62:f5:ad:68:c7:4f:a3:09:96: 40:d3:44:30:43:b5:05:80:c5:56:f9:1a:4f:28:95: a3:d6:cf:a8:d0:59:bc:b4:06:e6:46:0f:56:51:84: 44:2c:1e:19:0b:c9:e4:bc:57:ce:64:fd:13:bc:a8: 21:b6:96:6f:d7:1c:2c:69:63:59:8b:04:57:6e:4f: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E3:8B:56:4C:1F:D4:00:49:12:0B:C8:CB:01:67:85:07:4D:7C:EB X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:65:f0:04:5f:c4:a3:a5:cc:4b:b7:df:d2:6f:8c:f3:3c:62: aa:07:a8:db:c8:f7:a0:01:e0:cc:3c:45:dc:9e:52:f8:ce:a9: 37:8f:4c:0c:7f:a9:c1:de:6d:62:5c:c8:8c:49:92:2c:6f:0a: 30:70:11:b8:48:c9:8f:d0:74:49:22:9d:22:2e:15:f0:23:9e: ce:af:32:54:67:cf:05:71:f7:0d:11:8a:99:53:41:4d:bf:9e: e6:d1:5a:49:bf:82:b1:d7:32:8d:3e:81:17:37:21:b9:8a:3d: b9:37:a0:82:57:f1:12:c7:94:05:06:c1:a2:db:ba:d2:67:8c: 8c:30:49:39:9a:0b:12:1d:81:c8:ad:d5:c4:3f:b2:06:07:73: 8c:74:bf:b4:78:62:d7:5f:c4:8f:1a:f5:cb:f4:e6:fe:85:9d: b8:b5:73:ff:a8:1e:c2:15:84:27:e4:c0:08:78:6c:5e:ad:b6: 6d:c4:64:5f:5e:38:c1:af:1c:78:c1:40:46:7f:03:ac:34:47: dd:83:1d:fb:f4:29:02:4f:12:72:2c:9a:16:d6:28:e9:d0:19: 69:91:11:fb:a1:97:00:14:1a:c1:ea:77:a6:8c:a4:99:5c:9c: 88:17:0f:57:8e:36:ff:70:a3:60:5c:2f:94:a0:c0:8c:70:c9: 3b:d7:c7:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjQwNTA2MTczMTI0WhcNMjQwNTEzMTczMTI0WjAYMRYwFAYD VQQDEw02NjM5MTNlYy1hZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6XszSYml+Yp6R01ZhObzY3Dis2Z0FxbFY/BZZIzdPr04KnE5RmwcviiZgUX FhUC//BJXvAOCW4JO6YzqMeoAjzI1AoBb0cjFXGPt/bCtp/UCv8I5+FsjTkbCshi 9CzFco1x6frSNCwCCmn5vU4WB3mzYwBzDnMp6m1O8gvt2xAi7n4eFtwhjdbEVJpg wVGlB5aQ2wdnrHLRIS7U+fIeclwYOo/WWGX7h/PPAdjn0+heluLrJ/ZdK1li9a1o x0+jCZZA00QwQ7UFgMVW+RpPKJWj1s+o0Fm8tAbmRg9WUYRELB4ZC8nkvFfOZP0T vKghtpZv1xwsaWNZiwRXbk+C6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTji1ZM H9QASRILyMsBZ4UHTXzrMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4ZfAEX8SjpcxLt9/Sb4zzPGKqB6jbyPegAeDMPEXcnlL4zqk3j0wM f6nB3m1iXMiMSZIsbwowcBG4SMmP0HRJIp0iLhXwI57OrzJUZ88FcfcNEYqZU0FN v57m0VpJv4Kx1zKNPoEXNyG5ij25N6CCV/ESx5QFBsGi27rSZ4yMMEk5mgsSHYHI rdXEP7IGB3OMdL+0eGLXX8SPGvXL9Ob+hZ24tXP/qB7CFYQn5MAIeGxerbZtxGRf XjjBrxx4wUBGfwOsNEfdgx379CkCTxJyLJoW1ijp0BlpkRH7oZcAFBrB6nemjKSZ XJyIFw9Xjjb/cKNgXC+UoMCMcMk718cN -----END CERTIFICATE-----Generated at Mon May 6 20:19:44 2024 by rpki-client on console-ams.rpki-client.org