$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: 0mcR7Ko7DqGYUL4cxkflBYaf4qRrVy8mDWY/uZ32ngM= Subject key identifier: 7D:49:11:7C:DB:ED:65:1F:CA:A2:60:4C:BB:4F:0D:AE:94:6F:75:40 Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: E6 Signing time: Wed 01 May 2024 06:08:05 +0000 Manifest this update: Wed 01 May 2024 06:08:05 +0000 Manifest next update: Wed 08 May 2024 06:08:05 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: o/goOMYgepF5VaH7C1OVTssBTEPt7XOoAu9OH9/LhpI=) 2: 11F911FAA8D811ED90192E3CC4F9AE02.roa (hash: sH6RSBzgF8O7XXFI0vDSzB0+2iLMaRJT/qc++pD4NXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: May 1 06:08:05 2024 GMT Not After : May 8 06:08:05 2024 GMT Subject: CN=6631dc45-81d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:a5:c2:4f:d9:a0:ca:42:10:d5:5f:cc:95: 60:0f:91:bd:39:8d:40:db:ad:a2:26:6e:ff:58:a6: f8:66:e0:6e:15:1f:76:74:83:54:66:5d:ff:98:de: b3:b6:21:38:8f:12:29:5e:66:86:b6:65:54:f1:b4: bd:31:47:b7:f4:94:ee:82:9a:25:c9:70:31:fa:ab: 42:25:1e:62:9c:0a:18:8c:25:71:6b:ef:10:4b:a4: 09:ed:a2:3c:be:3a:01:72:a5:f2:61:36:20:6d:19: 2d:76:48:c6:86:53:b6:3b:63:8e:14:82:c4:c4:fd: 52:31:ee:7e:85:5c:c5:8b:47:ec:93:73:13:2e:a3: 9d:55:91:d6:06:98:05:b1:a4:f2:36:ef:d8:02:74: dc:55:43:3a:2f:6c:d1:5d:df:29:ee:b9:1a:f6:bd: 39:18:45:7a:4d:a6:bd:5e:17:11:07:79:d5:24:c1: 38:5d:f5:71:96:8a:6c:35:4e:2e:3b:07:97:13:19: 71:fd:a6:46:27:e6:93:3b:ac:12:1c:e7:fe:78:3d: 80:0a:a7:4d:fe:22:25:91:10:91:55:f9:66:f4:ee: ec:44:95:08:bf:d8:5d:44:dc:06:9b:d1:e4:48:09: 7a:7f:45:bf:74:46:2d:c7:43:9b:b9:06:c9:52:d7: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:49:11:7C:DB:ED:65:1F:CA:A2:60:4C:BB:4F:0D:AE:94:6F:75:40 X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c4:8a:18:98:5c:56:01:11:82:cc:b9:0e:84:bb:42:50:64: c2:f5:b2:68:f4:e6:18:e7:4d:eb:19:ce:f1:6d:cc:ac:43:96: e1:3f:61:d7:16:a7:18:75:0f:f0:a4:11:cc:89:c3:e3:30:7c: 6d:77:ff:63:7f:8d:e6:e2:72:9d:99:e3:6b:a5:df:33:bb:80: c9:1e:e2:7a:df:9b:3a:10:44:16:57:de:28:b5:0a:b7:ba:dd: ea:5f:c4:a9:31:7f:ed:05:8d:52:92:1d:a5:72:00:74:3d:59: 4a:15:b0:ec:a3:aa:40:71:e2:96:35:11:0d:7f:e9:fb:f5:b1: 7b:75:eb:89:01:3d:c3:07:ed:2f:6c:8f:e3:21:79:19:de:65: cf:34:ab:7c:2a:54:26:59:d1:66:6f:35:8f:de:dc:9c:28:43: 42:a1:cb:3c:8a:9f:74:f9:a4:7b:88:0e:4b:0a:a0:7f:1a:02: 89:49:31:c4:b1:7b:35:cd:8b:46:e9:1c:2f:ce:28:bf:58:9b: 95:b6:58:35:52:04:09:c1:a7:8e:72:ab:b3:a1:bc:d6:2b:1b: 8d:c4:e2:81:c5:53:09:c6:7e:fb:12:3d:32:60:4a:6b:c1:6c: f1:0d:8a:f0:61:bf:eb:ae:af:73:01:bf:9d:2d:22:01:4d:96: f5:9e:01:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjQwNTAxMDYwODA1WhcNMjQwNTA4MDYwODA1WjAYMRYwFAYD VQQDEw02NjMxZGM0NS04MWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHWlwk/ZoMpCENVfzJVgD5G9OY1A262iJm7/WKb4ZuBuFR92dINUZl3/mN6z tiE4jxIpXmaGtmVU8bS9MUe39JTugpolyXAx+qtCJR5inAoYjCVxa+8QS6QJ7aI8 vjoBcqXyYTYgbRktdkjGhlO2O2OOFILExP1SMe5+hVzFi0fsk3MTLqOdVZHWBpgF saTyNu/YAnTcVUM6L2zRXd8p7rka9r05GEV6Taa9XhcRB3nVJME4XfVxlopsNU4u OweXExlx/aZGJ+aTO6wSHOf+eD2ACqdN/iIlkRCRVflm9O7sRJUIv9hdRNwGm9Hk SAl6f0W/dEYtx0ObuQbJUteNzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1JEXzb 7WUfyqJgTLtPDa6Ub3VAMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwxIoYmFxWARGCzLkOhLtCUGTC9bJo9OYY503rGc7xbcysQ5bhP2HX FqcYdQ/wpBHMicPjMHxtd/9jf43m4nKdmeNrpd8zu4DJHuJ635s6EEQWV94otQq3 ut3qX8SpMX/tBY1Skh2lcgB0PVlKFbDso6pAceKWNRENf+n79bF7deuJAT3DB+0v bI/jIXkZ3mXPNKt8KlQmWdFmbzWP3tycKENCocs8ip90+aR7iA5LCqB/GgKJSTHE sXs1zYtG6Rwvzii/WJuVtlg1UgQJwaeOcquzobzWKxuNxOKBxVMJxn77Ej0yYEpr wWzxDYrwYb/rrq9zAb+dLSIBTZb1ngEU -----END CERTIFICATE-----Generated at Wed May 1 07:07:06 2024 by rpki-client on console-fra.rpki-client.org