$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: rsZPWUlBqjt/Jhqv/8yH1Pp2+r5REjAfZXhKbQwIP/Q= Subject key identifier: 00:4B:E2:CB:2C:65:D6:93:BC:A7:A8:6F:82:33:65:3B:1C:1C:5D:AB Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 06A0 Signing time: Sat 04 May 2024 23:30:00 +0000 Manifest this update: Sat 04 May 2024 23:29:59 +0000 Manifest next update: Sat 11 May 2024 23:29:59 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: ez5h5CA1lPQGPxEsXCyB7yJgb6nu9scLcaV+viB4k5M=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: +kbsXm5swwHeJIXcmXc1zh9OpA/DbMfp8kfFaVsAFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: May 4 23:29:59 2024 GMT Not After : May 11 23:29:59 2024 GMT Subject: CN=6636c4f7-9e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:b2:56:71:6c:69:b9:aa:29:4a:df:08:70: a6:32:c3:62:41:4b:e3:16:97:84:ad:d3:f9:a6:4c: 0f:4f:63:32:67:f3:da:90:c8:9b:e2:0f:dc:3b:36: f4:9b:da:86:c9:65:c5:e5:9c:f6:f1:f9:25:c8:67: 98:e6:cf:b3:0b:ee:49:37:4f:63:a2:d8:99:12:d4: ae:79:9d:80:27:5b:48:c9:0d:91:99:9c:c3:8a:d4: 1a:a8:23:17:9e:fa:17:5f:c3:7b:d1:b7:fe:0b:be: bb:5f:d3:a4:d2:98:95:8f:a5:d3:cb:8f:8c:ef:5d: 8a:e4:e9:66:9e:d3:52:af:d6:d1:27:75:c8:b3:ff: 1a:ff:a8:b3:3b:13:b8:21:56:2f:a9:4c:53:31:63: 44:6a:6d:df:23:ac:af:43:a7:64:ef:57:22:01:5e: db:74:45:27:51:61:62:96:e9:0f:45:ee:ba:a9:0d: ee:d8:8e:85:cc:59:7c:65:ea:60:71:53:d9:ab:f9: 14:ff:02:8e:cd:f9:59:dc:a8:5d:1d:0b:f0:87:5a: 92:2a:6a:b6:99:2e:41:5d:e0:6d:22:27:47:79:68: da:88:66:f4:ea:78:e0:98:76:bc:47:18:c1:60:be: 21:fe:60:7e:04:9c:33:30:1d:29:19:c0:80:08:bc: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4B:E2:CB:2C:65:D6:93:BC:A7:A8:6F:82:33:65:3B:1C:1C:5D:AB X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9d:8c:03:9e:cd:2b:5d:6e:ff:dd:a6:6f:17:17:01:3c:6a: 7f:7b:d7:c6:40:4a:85:3d:87:ad:a8:f1:32:c0:e6:ab:1a:9f: 98:22:ae:1b:0d:2d:e1:89:70:54:2f:b3:d2:4d:e1:14:ff:d1: e9:d8:62:50:9a:16:25:2f:7e:0c:2d:27:20:ca:42:d7:e7:8b: 3f:2d:7a:52:1c:98:c4:2c:39:3d:fe:03:98:90:af:c8:9d:bc: 99:1a:db:a8:2b:d6:b3:78:82:b1:de:7b:1f:20:ea:a6:ce:3f: fa:6a:4b:a2:2a:75:a2:c8:26:17:bf:01:83:cd:4a:04:de:be: 2b:42:22:cf:b7:ff:f5:16:27:b7:53:0d:80:1c:ee:d1:76:08: db:fe:5e:0e:43:80:b6:f7:8c:26:b1:f7:39:2e:e5:83:48:0b: 46:43:7b:23:62:39:4f:7a:26:2f:b2:5e:23:d2:ad:e4:64:2c: b2:a1:77:0b:c1:80:23:1a:1a:14:42:85:19:9b:5d:51:4b:59: 6d:4b:34:96:37:97:62:67:8c:5c:54:f1:03:e1:df:4e:14:07: 23:26:68:cc:39:16:37:e3:11:26:60:70:2b:9b:82:8c:fb:33: fc:67:2b:39:79:28:6a:79:c5:24:c9:38:4d:26:78:7a:3c:f7: 33:f8:d2:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjQwNTA0MjMyOTU5WhcNMjQwNTExMjMyOTU5WjAYMRYwFAYD VQQDEw02NjM2YzRmNy05ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+yyVnFsabmqKUrfCHCmMsNiQUvjFpeErdP5pkwPT2MyZ/PakMib4g/cOzb0 m9qGyWXF5Zz28fklyGeY5s+zC+5JN09jotiZEtSueZ2AJ1tIyQ2RmZzDitQaqCMX nvoXX8N70bf+C767X9Ok0piVj6XTy4+M712K5OlmntNSr9bRJ3XIs/8a/6izOxO4 IVYvqUxTMWNEam3fI6yvQ6dk71ciAV7bdEUnUWFilukPRe66qQ3u2I6FzFl8Zepg cVPZq/kU/wKOzflZ3KhdHQvwh1qSKmq2mS5BXeBtIidHeWjaiGb06njgmHa8RxjB YL4h/mB+BJwzMB0pGcCACLx6RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABL4sss ZdaTvKeob4IzZTscHF2rMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbnYwDns0rXW7/3aZvFxcBPGp/e9fGQEqFPYetqPEywOarGp+YIq4b DS3hiXBUL7PSTeEU/9Hp2GJQmhYlL34MLScgykLX54s/LXpSHJjELDk9/gOYkK/I nbyZGtuoK9azeIKx3nsfIOqmzj/6akuiKnWiyCYXvwGDzUoE3r4rQiLPt//1Fie3 Uw2AHO7Rdgjb/l4OQ4C294wmsfc5LuWDSAtGQ3sjYjlPeiYvsl4j0q3kZCyyoXcL wYAjGhoUQoUZm11RS1ltSzSWN5diZ4xcVPED4d9OFAcjJmjMORY34xEmYHArm4KM +zP8Zys5eShqecUkyThNJnh6PPcz+NKY -----END CERTIFICATE-----Generated at Sun May 5 00:12:30 2024 by rpki-client on console-fra.rpki-client.org