$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: +Wd1DJKP3DL4P7unSeGuBEWnPChcwdyXluCYx5x3jT4= Subject key identifier: 53:06:A0:63:26:72:0F:C5:63:54:40:1E:0B:64:94:46:8A:91:18:35 Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 14D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 14D2 Signing time: Mon 06 May 2024 17:26:36 +0000 Manifest this update: Mon 06 May 2024 17:26:36 +0000 Manifest next update: Mon 13 May 2024 17:26:36 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: B8P5XWoAdCYJlqpZgfFZs88g7wH1KoNXdtlu7xz/3dE=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: dMpYdXxn4EAOU2tVv1lQ5PlkI4eRAaxApw0/M743aIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5337 (0x14d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: May 6 17:26:36 2024 GMT Not After : May 13 17:26:36 2024 GMT Subject: CN=663912cc-32e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:df:7b:e7:3b:d2:5f:84:70:73:c0:b0:27: 02:4a:e4:60:1c:21:c5:0d:89:9f:9f:62:c0:c6:3b: 5a:2f:a0:45:af:eb:c5:7e:3d:5a:4a:ea:67:d7:b2: 26:23:a4:7e:6e:19:07:aa:33:90:c1:b4:bb:e5:90: 3b:8e:87:9d:1b:91:c3:51:36:c2:1f:27:56:47:58: 9b:40:f3:a5:51:d7:5d:e2:af:54:cf:f8:9e:01:6a: 5c:0e:dd:02:9e:8e:c8:43:20:55:4a:66:af:59:45: aa:78:06:cd:8a:40:17:16:ae:9a:82:0a:ac:a8:61: b7:7b:cd:10:b5:03:49:68:75:bf:c3:45:b2:00:03: 4f:9d:23:3c:93:66:2b:55:1a:11:a1:7f:d9:92:2e: 9f:b7:02:43:45:bd:7c:c5:5a:95:4c:d6:cf:24:37: 64:59:67:84:80:04:3c:de:da:bd:07:c6:92:46:6e: 9b:b3:cd:be:e8:f7:77:5b:22:d2:97:47:6f:9b:4f: a7:d9:86:44:94:c3:e7:fb:09:4b:83:8d:03:2a:3e: 95:d9:cf:6e:f0:b4:72:f0:95:b8:2b:47:40:8b:61: 95:53:5b:8b:15:b5:cc:7b:c0:47:ae:d4:7d:13:43: 2f:e1:7f:2f:56:01:0b:8c:33:fe:87:66:f7:b4:56: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:06:A0:63:26:72:0F:C5:63:54:40:1E:0B:64:94:46:8A:91:18:35 X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2b:a4:eb:e0:21:83:ce:ba:5d:5f:60:c7:22:f2:6a:1f:83: d3:95:7e:07:4a:c2:b7:c7:ee:26:0c:a4:34:8a:a0:78:71:f9: f1:52:84:72:38:77:2a:aa:52:f6:bb:69:b4:0a:ce:25:3d:7e: 1c:41:55:d3:ce:96:3c:b9:8b:95:2c:54:fc:6d:8e:ef:e4:44: a3:ad:79:ed:25:14:7a:ef:70:3d:ac:eb:d3:c8:68:98:86:47: 2d:d8:3a:b4:68:3e:1c:1a:50:62:19:74:8a:e6:9d:05:16:39: a7:ec:34:b5:2e:7a:d2:15:de:50:f7:ab:d6:5e:49:31:56:6b: fd:bc:ea:d9:c9:9c:91:76:2f:2d:92:5d:45:c5:ca:f3:d2:0e: 35:a4:65:88:cc:31:af:54:0b:ef:6f:cf:f7:b8:dc:31:24:21: bf:16:c1:af:40:d0:ca:70:41:eb:47:d5:7e:f8:81:de:b6:d8: cc:2d:1e:d1:2d:f0:75:10:47:6c:28:70:6e:9a:f4:4e:35:8a: a5:04:7b:3f:0c:9d:c2:bd:9c:4a:63:d9:d9:eb:e6:cb:e3:22: 75:26:f4:78:59:98:5f:82:53:13:70:99:19:0a:9d:dc:b5:6a: 32:42:6d:c5:70:56:82:a5:21:e4:d7:97:72:ee:29:21:bb:dd: f3:67:ac:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjQwNTA2MTcyNjM2WhcNMjQwNTEzMTcyNjM2WjAYMRYwFAYD VQQDEw02NjM5MTJjYy0zMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10/fe+c70l+EcHPAsCcCSuRgHCHFDYmfn2LAxjtaL6BFr+vFfj1aSupn17Im I6R+bhkHqjOQwbS75ZA7joedG5HDUTbCHydWR1ibQPOlUddd4q9Uz/ieAWpcDt0C no7IQyBVSmavWUWqeAbNikAXFq6aggqsqGG3e80QtQNJaHW/w0WyAANPnSM8k2Yr VRoRoX/Zki6ftwJDRb18xVqVTNbPJDdkWWeEgAQ83tq9B8aSRm6bs82+6Pd3WyLS l0dvm0+n2YZElMPn+wlLg40DKj6V2c9u8LRy8JW4K0dAi2GVU1uLFbXMe8BHrtR9 E0Mv4X8vVgELjDP+h2b3tFaFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMGoGMm cg/FY1RAHgtklEaKkRg1MB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFK6Tr4CGDzrpdX2DHIvJqH4PTlX4HSsK3x+4mDKQ0iqB4cfnxUoRy OHcqqlL2u2m0Cs4lPX4cQVXTzpY8uYuVLFT8bY7v5ESjrXntJRR673A9rOvTyGiY hkct2Dq0aD4cGlBiGXSK5p0FFjmn7DS1LnrSFd5Q96vWXkkxVmv9vOrZyZyRdi8t kl1Fxcrz0g41pGWIzDGvVAvvb8/3uNwxJCG/FsGvQNDKcEHrR9V++IHettjMLR7R LfB1EEdsKHBumvRONYqlBHs/DJ3CvZxKY9nZ6+bL4yJ1JvR4WZhfglMTcJkZCp3c tWoyQm3FcFaCpSHk15dy7ikhu93zZ6xk -----END CERTIFICATE-----Generated at Mon May 6 20:19:44 2024 by rpki-client on console-ams.rpki-client.org