$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json) Hash identifier: 2YTYFlcvwukzN6cxBokZUC3RHAYPQSjApCQo2gwYSd4= Subject key identifier: E6:BC:29:2E:66:E0:59:B9:FF:70:A2:16:FC:A9:FC:F9:9D:71:25:58 Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft Manifest number: 0C4D Signing time: Sat 04 May 2024 19:05:43 +0000 Manifest this update: Sat 04 May 2024 19:05:43 +0000 Manifest next update: Sat 11 May 2024 19:05:43 +0000 Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: ZIrGrrBvBBPaDnCogaDZgHxWxPKgJkzaPGwzc63vRoM=) 2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: gGI/o+6AWHDKLMLvSuRNnfJa7hMNn4z6A82LgeXdoJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Validity Not Before: May 4 19:05:43 2024 GMT Not After : May 11 19:05:43 2024 GMT Subject: CN=66368707-4c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:03:f1:76:15:e6:8d:06:4a:ac:53:e8:cd: ac:64:84:68:9f:7c:1d:74:68:db:3d:b3:fb:00:0d: 9c:c5:25:d5:c2:83:4d:02:2c:b0:a3:b3:3d:60:d8: d4:84:61:58:08:cc:98:89:bc:c7:67:72:d4:03:61: b3:6d:bf:f7:92:15:87:71:65:11:4c:26:67:d8:85: 93:26:a3:3b:6c:76:4c:5d:39:78:54:d4:69:dc:8f: 21:61:64:09:81:5b:b7:f2:60:32:8b:69:45:b5:24: 58:57:94:bc:ba:ab:36:88:e7:da:38:eb:15:01:41: 1e:c1:f0:cc:9a:8a:11:b5:68:31:15:10:38:db:56: 9a:8a:a0:81:37:ea:ed:38:3c:c1:c2:99:fc:a9:31: 0a:95:8e:ba:15:1d:08:47:cc:5d:96:c0:fa:62:d7: f5:cf:fa:ad:be:cd:9a:43:57:0c:77:a4:9d:36:64: f1:59:32:ef:74:37:99:c6:65:1f:c5:81:17:91:09: fe:9e:ee:64:67:75:6f:ff:ca:9d:f8:d1:c1:9b:38: 45:78:e4:c7:4c:f4:6f:54:d7:bc:c1:b4:1a:db:17: d3:b9:ad:d0:65:28:62:59:c1:01:50:92:50:0d:54: b5:23:1a:d0:a8:01:f6:f2:7d:b4:ba:26:6b:56:76: eb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BC:29:2E:66:E0:59:B9:FF:70:A2:16:FC:A9:FC:F9:9D:71:25:58 X509v3 Authority Key Identifier: keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c2:6e:d8:54:2e:24:32:9b:02:ad:25:5a:d2:c9:e1:f3:27: 5d:b6:56:c0:ca:8b:90:68:e3:a7:a4:5e:82:9c:59:af:c9:2b: 4a:70:eb:14:13:2b:34:09:58:cc:84:de:08:76:da:18:d0:16: c7:55:71:ee:04:c8:44:d9:15:be:7b:6f:f2:63:85:03:9d:bf: 57:ee:0e:e5:c5:2b:b7:19:52:31:54:f5:98:1e:f8:fe:ed:d6: de:d7:9b:de:e3:84:74:6e:09:83:64:68:e5:37:f9:9d:7f:64: 9e:aa:7e:59:11:4b:93:b8:35:26:59:31:36:02:ad:65:c5:d6: eb:6e:c5:2d:2e:ea:cb:f7:dd:ae:19:e9:9e:10:6f:ee:ba:53: 53:ae:47:49:cb:98:b6:3b:91:13:df:9a:be:ea:44:fd:c8:f5: b6:27:75:20:27:e9:4d:2e:45:ee:c9:55:4e:df:62:55:ed:41: d0:af:e9:6d:19:73:1a:d8:66:6f:89:47:1d:37:25:81:44:8d: d5:6e:8c:92:76:19:27:f9:e7:11:9e:25:75:98:6c:ec:a0:b4: bd:03:6e:1b:9a:b9:e0:3c:1d:1f:7d:84:f7:10:63:81:43:5c: 8a:9a:e5:27:22:bd:f0:47:8f:10:3d:de:70:ce:3b:99:11:9e: 88:9f:8d:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyMkExMTAvBgNVBAUTKEIwQUU4NjFDMUVCRThCQUQ2RTY1NkQ0MDFGN0Y3NTA2 MDk0MDc0QTAwHhcNMjQwNTA0MTkwNTQzWhcNMjQwNTExMTkwNTQzWjAYMRYwFAYD VQQDEw02NjM2ODcwNy00YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWgD8XYV5o0GSqxT6M2sZIRon3wddGjbPbP7AA2cxSXVwoNNAiywo7M9YNjU hGFYCMyYibzHZ3LUA2Gzbb/3khWHcWURTCZn2IWTJqM7bHZMXTl4VNRp3I8hYWQJ gVu38mAyi2lFtSRYV5S8uqs2iOfaOOsVAUEewfDMmooRtWgxFRA421aaiqCBN+rt ODzBwpn8qTEKlY66FR0IR8xdlsD6Ytf1z/qtvs2aQ1cMd6SdNmTxWTLvdDeZxmUf xYEXkQn+nu5kZ3Vv/8qd+NHBmzhFeOTHTPRvVNe8wbQa2xfTua3QZShiWcEBUJJQ DVS1IxrQqAH28n20uiZrVnbrpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOa8KS5m 4Fm5/3CiFvyp/PmdcSVYMB8GA1UdIwQYMBaAFLCuhhwevoutbmVtQB9/dQYJQHSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzIyQS8wREMxREY3Q0RC OTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2MXVaVzFBSDM5MUJnbEFk S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLNkdIQjYtaTYxdVpXMUFIMzkxQmdsQWRLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzIyQS8wREMxREY3Q0RCOTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2 MXVaVzFBSDM5MUJnbEFkS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAswm7YVC4kMpsCrSVa0snh8yddtlbAyouQaOOnpF6CnFmvyStKcOsU Eys0CVjMhN4IdtoY0BbHVXHuBMhE2RW+e2/yY4UDnb9X7g7lxSu3GVIxVPWYHvj+ 7dbe15ve44R0bgmDZGjlN/mdf2Seqn5ZEUuTuDUmWTE2Aq1lxdbrbsUtLurL992u GemeEG/uulNTrkdJy5i2O5ET35q+6kT9yPW2J3UgJ+lNLkXuyVVO32JV7UHQr+lt GXMa2GZviUcdNyWBRI3VboySdhkn+ecRniV1mGzsoLS9A24bmrngPB0ffYT3EGOB Q1yKmuUnIr3wR48QPd5wzjuZEZ6In43a -----END CERTIFICATE-----Generated at Sat May 4 19:58:44 2024 by rpki-client on console-ams.rpki-client.org