$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft File: 6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json) Hash identifier: CuEaUw0ZCmaDOAvp3Da5dIeczNvxfZ+PJnWhXorTozQ= Subject key identifier: 26:27:26:54:5E:36:42:0E:F7:05:66:D3:D5:0D:17:00:6D:E6:35:94 Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C Certificate issuer: /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft Manifest number: 57 Signing time: Wed 15 May 2024 07:57:41 +0000 Manifest this update: Wed 15 May 2024 07:57:40 +0000 Manifest next update: Wed 22 May 2024 07:57:40 +0000 Files and hashes: 1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: OYVV0pr+wvgYR7Y03ljZlFhEs3WuyqyAK84Az11Ipac=) 2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: jdKNkbE0ibPB2nvtmodu1J/dZdyn7ruEv14OUToJSQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Validity Not Before: May 15 07:57:40 2024 GMT Not After : May 22 07:57:40 2024 GMT Subject: CN=66446af4-7b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:e8:73:9a:67:df:eb:fe:99:94:3d:a9:ef: 65:37:5e:35:ff:ed:9f:a6:1b:26:61:39:7d:dd:6a: 1b:4f:77:c2:30:e3:d3:72:b1:dd:fe:f0:a2:4d:82: ef:0a:aa:42:66:9b:70:9c:18:5f:f5:87:28:8b:44: b2:27:71:6d:8b:ca:05:88:18:4e:7a:31:94:3c:54: 8e:a6:75:46:af:d5:77:4d:24:cc:56:03:ba:70:2c: 93:e1:36:0f:7a:45:6f:eb:0b:26:22:88:af:ff:2f: de:23:d1:16:60:57:ed:2e:78:a7:f8:65:d7:ac:69: 5f:cc:2a:be:12:ce:21:60:e0:d5:cb:ba:5b:a8:49: 40:bb:bd:71:4b:e1:96:63:d2:c3:66:20:1a:19:2b: 31:16:c4:66:63:42:bd:b3:80:6c:a2:1e:42:cc:29: e9:c4:ae:fe:02:d0:58:d4:0f:4a:ab:d6:a7:3b:39: ce:5b:86:76:43:99:1a:80:0d:38:81:d8:71:f0:fd: 9c:e9:e7:8d:5b:4e:96:05:26:2c:66:e5:40:2b:ff: 9a:26:5d:30:b4:18:36:d3:7a:86:7e:e2:f5:01:9d: 50:d2:e1:dd:b6:5b:be:70:6f:ac:e7:e2:69:53:42: 9e:1c:a5:09:8d:4e:93:67:0e:63:52:ca:66:3c:bf: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:27:26:54:5E:36:42:0E:F7:05:66:D3:D5:0D:17:00:6D:E6:35:94 X509v3 Authority Key Identifier: keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:83:3e:47:c8:75:2e:e1:3e:31:cd:75:32:a7:31:66:82:48: c0:0e:c6:6a:ff:26:66:66:99:4c:a0:ac:48:d7:3f:7f:ee:93: 0a:8f:23:0b:ff:13:59:51:ed:48:2b:64:26:94:b7:5c:88:f2: 34:ed:08:c8:05:5e:5e:62:07:99:52:95:96:b7:59:fb:20:65: f9:65:cd:14:5a:b2:00:3a:e1:4c:f2:9d:2e:f2:39:18:db:41: 3f:d1:73:fa:87:24:f4:97:00:a1:06:c2:c7:3d:d1:09:00:1c: a3:69:64:54:47:20:1d:11:3b:24:70:e4:94:2b:e5:69:66:ee: 2a:ea:27:4f:e7:20:67:47:9e:e9:be:49:b0:b3:18:c8:d8:4d: dd:69:de:6f:57:b9:65:2f:16:67:c6:58:a5:5a:d8:7f:2b:b9: 17:7e:6f:ab:48:6a:28:25:48:8f:60:54:61:97:5d:35:3b:4b: 11:67:90:e2:62:78:37:24:16:f9:ce:5b:df:7e:d9:cb:10:fa: 67:1d:c5:8e:33:8a:ad:f4:29:2c:a5:e1:2c:f1:2b:83:60:01: 62:94:83:9a:8d:0c:c3:e0:7e:61:a0:dc:eb:f8:61:42:d9:af: de:35:2e:06:b9:95:8f:3a:8a:84:10:cc:b2:03:12:b3:b8:c8: 30:20:43:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkMyRTExMC8GA1UEBRMoRThCMDhBRENGNDlDNjBDQkFEOTFEMUVENkQzN0JEODQ0 M0FEQkQ0QzAeFw0yNDA1MTUwNzU3NDBaFw0yNDA1MjIwNzU3NDBaMBgxFjAUBgNV BAMTDTY2NDQ2YWY0LTdiMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/tehzmmff6/6ZlD2p72U3XjX/7Z+mGyZhOX3dahtPd8Iw49Nysd3+8KJNgu8K qkJmm3CcGF/1hyiLRLIncW2LygWIGE56MZQ8VI6mdUav1XdNJMxWA7pwLJPhNg96 RW/rCyYiiK//L94j0RZgV+0ueKf4ZdesaV/MKr4SziFg4NXLuluoSUC7vXFL4ZZj 0sNmIBoZKzEWxGZjQr2zgGyiHkLMKenErv4C0FjUD0qr1qc7Oc5bhnZDmRqADTiB 2HHw/Zzp541bTpYFJixm5UAr/5omXTC0GDbTeoZ+4vUBnVDS4d22W75wb6zn4mlT Qp4cpQmNTpNnDmNSymY8v5TbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJicmVF42 Qg73BWbT1Q0XAG3mNZQwHwYDVR0jBBgwFoAU6LCK3PScYMutkdHtbTe9hEOtvUww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzJFLzgxOEZEQTQ2OTM0 MDExRUU4NDNGODM3NEM0RjlBRTAyLzZMQ0szUFNjWU11dGtkSHRiVGU5aEVPdHZV dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkxDSzNQU2NZTXV0a2RIdGJUZTloRU90dlV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzJFLzgxOEZEQTQ2OTM0MDExRUU4NDNGODM3NEM0RjlBRTAyLzZMQ0szUFNjWU11 dGtkSHRiVGU5aEVPdHZVdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6DPkfIdS7hPjHNdTKnMWaCSMAOxmr/JmZmmUygrEjXP3/ukwqPIwv/ E1lR7UgrZCaUt1yI8jTtCMgFXl5iB5lSlZa3WfsgZfllzRRasgA64UzynS7yORjb QT/Rc/qHJPSXAKEGwsc90QkAHKNpZFRHIB0ROyRw5JQr5Wlm7irqJ0/nIGdHnum+ SbCzGMjYTd1p3m9XuWUvFmfGWKVa2H8ruRd+b6tIaiglSI9gVGGXXTU7SxFnkOJi eDckFvnOW99+2csQ+mcdxY4ziq30KSyl4SzxK4NgAWKUg5qNDMPgfmGg3Ov4YULZ r941Lga5lY86ioQQzLIDErO4yDAgQ1A= -----END CERTIFICATE-----Generated at Wed May 15 09:28:16 2024 by rpki-client on console-fra.rpki-client.org