$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft File: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft (raw, json) Hash identifier: 5wOWY9LgrP4ZPRFQUaIscoSNALhIF6EVxXdrZZpZ/ko= Subject key identifier: 09:8E:F6:1B:DD:D6:E9:E2:26:E6:23:27:FC:33:B1:A3:EF:19:D5:C1 Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 Certificate issuer: /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft Manifest number: 01E8 Signing time: Sat 27 Apr 2024 04:10:30 +0000 Manifest this update: Sat 27 Apr 2024 04:10:30 +0000 Manifest next update: Sat 04 May 2024 04:10:30 +0000 Files and hashes: 1: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl (hash: Ki/Cp84UiEgo77f1yKIRVkiTpouCUqVgnncxikp8j1U=) 2: CB5ED75AF62811EC9205771CC4F9AE02.roa (hash: KcmTCxVwQvib6TDmroOgeBie9t+keN5GE3tu3JF3pyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Validity Not Before: Apr 27 04:10:30 2024 GMT Not After : May 4 04:10:30 2024 GMT Subject: CN=662c7ab6-cc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fc:5f:fb:19:a8:d8:74:ba:54:d0:1a:43:9e: 89:fb:1c:7f:4e:be:c0:e5:24:ab:5f:7c:5a:da:96: 28:c1:f8:97:14:45:d1:58:fe:53:7d:88:ec:6f:b6: e2:b0:5c:00:79:0b:8e:8a:65:df:0a:84:8d:00:47: f2:1f:26:6f:4e:a6:a7:ae:74:cf:95:df:f7:1e:5a: 60:f3:ff:0f:f6:b9:75:e3:72:5b:ba:a9:dd:87:f3: ff:a7:8e:c5:1b:25:08:b0:36:fc:59:40:1a:a0:73: 02:bd:f7:a7:20:25:a6:5c:a8:79:8d:ba:d3:3d:a0: af:df:e9:4e:4a:63:4a:f3:a0:ce:26:d3:81:af:01: 43:b5:47:bc:f6:9c:dc:4b:c7:81:c2:26:71:11:9f: cd:7f:79:f0:b9:8b:a5:36:76:7c:bd:f3:79:ea:7e: 69:8e:f6:8e:08:bd:23:2d:aa:d3:ef:1b:51:cf:07: 18:8f:51:93:1a:b5:55:a2:4a:d5:a0:a8:b1:6d:68: cb:30:61:e4:6e:73:3b:2d:3e:3e:96:42:29:04:ff: 77:2e:ac:8b:7e:a4:aa:59:b7:5c:ac:a7:b3:e6:88: 2b:5c:43:05:f5:a6:7e:bf:61:7f:38:92:12:84:9b: fa:46:8c:16:2d:72:b2:59:4f:82:ee:da:b4:68:a8: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8E:F6:1B:DD:D6:E9:E2:26:E6:23:27:FC:33:B1:A3:EF:19:D5:C1 X509v3 Authority Key Identifier: keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2a:44:c5:7d:1f:44:04:38:45:fc:c3:35:59:18:aa:96:5a: fe:40:a1:61:c9:2c:5a:bb:e5:f3:b0:f0:a8:35:29:6e:19:35: 8e:ef:b5:94:4e:c6:99:1c:c5:4f:e1:ec:54:af:a8:e3:5c:a5: 56:c1:b5:f5:4c:90:7d:eb:3c:e5:a1:6c:68:31:f3:42:e0:b5: 33:93:2b:d4:28:a9:cf:24:b0:96:f8:79:64:dd:6b:8a:3f:94: 9c:18:27:b5:81:fc:bd:8f:ed:c7:a5:d3:bd:e7:46:a1:c7:db: 33:57:1a:61:e1:30:a5:6c:15:80:16:24:10:71:2c:fd:a7:fa: 33:b0:18:57:04:3e:cd:54:39:b9:82:17:c8:11:5f:64:8b:c5: 2c:c9:d0:2e:f4:d2:4c:f9:92:28:a9:0d:17:8f:51:51:eb:74: c5:89:c8:ce:29:88:29:d8:51:30:97:9a:02:4c:1e:93:2b:bb: a7:a7:e4:2d:2b:92:9c:7a:5e:04:cb:fe:cb:71:51:7e:10:f2: dc:e1:95:3c:aa:26:55:c7:12:5e:8c:27:5f:44:b0:58:12:58: 5f:53:39:8e:d5:ff:a3:06:ec:98:25:9e:39:f3:aa:3a:31:35: 76:bf:a3:bb:b1:87:8a:ff:3c:b9:de:37:39:17:75:f2:59:ac: b6:b0:93:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcwNUUxMTAvBgNVBAUTKDgzQUNCNTBGOTZGNjQ0M0Y0QjgzRDM5MUY4NTdCRTdD QjU3RTM0QzEwHhcNMjQwNDI3MDQxMDMwWhcNMjQwNTA0MDQxMDMwWjAYMRYwFAYD VQQDEw02NjJjN2FiNi1jYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fxf+xmo2HS6VNAaQ56J+xx/Tr7A5SSrX3xa2pYowfiXFEXRWP5TfYjsb7bi sFwAeQuOimXfCoSNAEfyHyZvTqanrnTPld/3Hlpg8/8P9rl143Jbuqndh/P/p47F GyUIsDb8WUAaoHMCvfenICWmXKh5jbrTPaCv3+lOSmNK86DOJtOBrwFDtUe89pzc S8eBwiZxEZ/Nf3nwuYulNnZ8vfN56n5pjvaOCL0jLarT7xtRzwcYj1GTGrVVokrV oKixbWjLMGHkbnM7LT4+lkIpBP93LqyLfqSqWbdcrKez5ogrXEMF9aZ+v2F/OJIS hJv6RowWLXKyWU+C7tq0aKgJeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmO9hvd 1uniJuYjJ/wzsaPvGdXBMB8GA1UdIwQYMBaAFIOstQ+W9kQ/S4PTkfhXvny1fjTB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzA1RS8zNERENEVFNkY2 MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJEOUxnOU9SLUZlLWZMVi1O TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c2eTFENWIyUkQ5TGc5T1ItRmUtZkxWLU5NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzA1RS8zNERENEVFNkY2MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJE OUxnOU9SLUZlLWZMVi1OTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOKkTFfR9EBDhF/MM1WRiqllr+QKFhySxau+XzsPCoNSluGTWO77WU TsaZHMVP4exUr6jjXKVWwbX1TJB96zzloWxoMfNC4LUzkyvUKKnPJLCW+Hlk3WuK P5ScGCe1gfy9j+3HpdO950ahx9szVxph4TClbBWAFiQQcSz9p/ozsBhXBD7NVDm5 ghfIEV9ki8UsydAu9NJM+ZIoqQ0Xj1FR63TFicjOKYgp2FEwl5oCTB6TK7unp+Qt K5Kcel4Ey/7LcVF+EPLc4ZU8qiZVxxJejCdfRLBYElhfUzmO1f+jBuyYJZ4586o6 MTV2v6O7sYeK/zy53jc5F3XyWay2sJO1 -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:27 2024 by rpki-client on console-ams.rpki-client.org