$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: 1BIM5zCFuEQr06S48mFCasEFCuod6hpVyG0KY27ra2k= Subject key identifier: B8:29:37:4C:03:4F:75:25:85:3E:CF:E9:F1:1D:64:B0:50:D0:C2:AC Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 0111 Signing time: Fri 03 May 2024 05:27:32 +0000 Manifest this update: Fri 03 May 2024 05:27:31 +0000 Manifest next update: Fri 10 May 2024 05:27:31 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: vADn8XCju2T1T/4fJzItscba88cc50XaKK9iUFfwNkg=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: G5aYGJ5hYMaTHp+CkhwntaH/uhVAh40+cD1liOdU1Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: May 3 05:27:31 2024 GMT Not After : May 10 05:27:31 2024 GMT Subject: CN=663475c4-1d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dd:6b:1d:0a:90:66:3f:78:ac:78:62:03:47: 66:86:ca:c3:30:e8:2c:76:0f:7a:e3:9d:fe:fa:c8: a4:29:17:31:4b:09:14:13:a8:d5:82:ab:54:a8:dc: 21:2c:ca:d0:8a:6e:8a:f3:c7:da:21:e0:49:9b:8b: 6f:90:76:db:99:cc:a3:6c:a8:19:12:2b:c7:45:1c: 74:23:42:be:5f:96:3a:cf:51:27:6a:f1:76:76:af: cc:b7:29:53:6b:b2:4b:64:bc:10:73:c7:a5:55:e6: e1:ab:40:73:84:d0:cd:11:22:14:04:d8:9e:3a:34: 3b:a3:9e:5b:d4:e9:1d:e1:fe:32:67:30:fd:6e:97: 30:b1:2d:d7:41:42:d9:1e:9a:16:38:09:72:05:9b: 61:99:7a:1e:7b:59:c5:1b:b0:bd:6b:45:23:24:03: e9:da:91:99:2d:f5:a2:41:13:06:3c:f1:1f:78:21: d7:99:26:a6:36:47:ef:04:60:f3:d9:3f:ba:69:2d: 9c:9f:ef:4e:ae:e0:34:c4:10:49:60:8b:c8:cd:98: 9b:12:62:89:bf:f2:d1:89:37:7f:f7:9e:3a:bb:79: 6a:95:b5:6c:4b:56:a2:f7:fa:77:00:94:61:a4:95: 08:4a:b8:69:a4:94:f5:7d:c1:59:51:9a:b1:5f:e5: 81:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:29:37:4C:03:4F:75:25:85:3E:CF:E9:F1:1D:64:B0:50:D0:C2:AC X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:85:8a:3e:ea:45:7c:8d:9d:e1:be:2a:a6:af:fa:f9:cd:89: 80:27:d5:82:5d:72:bc:9c:5d:31:e0:37:28:03:96:5c:b6:a6: 02:bf:b1:73:c8:c1:c9:c3:3d:bc:82:0a:4c:d2:9a:15:20:17: af:89:23:0a:59:e2:99:8f:fd:db:60:e4:71:c4:7c:fd:01:0c: a3:4d:05:f3:63:7f:33:c0:bc:4f:4e:a4:7c:13:c8:20:ca:7a: dc:cf:58:95:a4:ce:a4:37:d1:60:73:8a:19:0d:4f:0b:c2:31: 83:9e:e8:82:87:b8:0e:50:8f:85:09:ae:2d:75:82:57:11:7c: 5d:e6:56:8a:1d:ad:51:69:d5:4a:c1:74:dc:1a:95:36:cf:d1: 7e:8f:b3:31:6f:21:45:76:ea:9e:bb:e4:4d:1d:8e:e7:84:04: a3:6a:1d:e1:3a:02:00:f7:d3:b4:92:b3:30:93:bc:81:d6:d3: 7d:8d:a5:b4:46:d1:5c:88:49:ef:72:f0:95:b9:50:a3:e5:68: 69:dd:48:40:8e:5d:20:bf:92:4c:e9:67:15:03:62:ac:85:5f: 65:22:f9:a2:e7:6c:84:6a:c8:fe:f3:50:62:9f:11:e4:d4:51: bd:98:6f:04:f5:b8:6e:ec:d4:cc:f7:08:61:38:a1:20:6e:d0: a6:71:61:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjQwNTAzMDUyNzMxWhcNMjQwNTEwMDUyNzMxWjAYMRYwFAYD VQQDEw02NjM0NzVjNC0xZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0t1rHQqQZj94rHhiA0dmhsrDMOgsdg96453++sikKRcxSwkUE6jVgqtUqNwh LMrQim6K88faIeBJm4tvkHbbmcyjbKgZEivHRRx0I0K+X5Y6z1EnavF2dq/MtylT a7JLZLwQc8elVebhq0BzhNDNESIUBNieOjQ7o55b1Okd4f4yZzD9bpcwsS3XQULZ HpoWOAlyBZthmXoee1nFG7C9a0UjJAPp2pGZLfWiQRMGPPEfeCHXmSamNkfvBGDz 2T+6aS2cn+9OruA0xBBJYIvIzZibEmKJv/LRiTd/9546u3lqlbVsS1ai9/p3AJRh pJUISrhppJT1fcFZUZqxX+WB/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgpN0wD T3UlhT7P6fEdZLBQ0MKsMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnhYo+6kV8jZ3hviqmr/r5zYmAJ9WCXXK8nF0x4DcoA5ZctqYCv7Fz yMHJwz28ggpM0poVIBeviSMKWeKZj/3bYORxxHz9AQyjTQXzY38zwLxPTqR8E8gg ynrcz1iVpM6kN9Fgc4oZDU8LwjGDnuiCh7gOUI+FCa4tdYJXEXxd5laKHa1RadVK wXTcGpU2z9F+j7MxbyFFduqeu+RNHY7nhASjah3hOgIA99O0krMwk7yB1tN9jaW0 RtFciEnvcvCVuVCj5Whp3UhAjl0gv5JM6WcVA2KshV9lIvmi52yEasj+81BinxHk 1FG9mG8E9bhu7NTM9whhOKEgbtCmcWFU -----END CERTIFICATE-----Generated at Fri May 3 06:18:54 2024 by rpki-client on console-ams.rpki-client.org