$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft File: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json) Hash identifier: wOjXEd9P0v4kxoUi/mzd1ObVdC5rz2AmDggDJ0xJGcQ= Subject key identifier: 96:E8:C3:2B:DD:7A:CD:C9:44:87:5B:50:DA:B1:F4:99:03:47:64:C5 Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 Certificate issuer: /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft Manifest number: 011D Signing time: Wed 01 May 2024 05:28:22 +0000 Manifest this update: Wed 01 May 2024 05:28:21 +0000 Manifest next update: Wed 08 May 2024 05:28:21 +0000 Files and hashes: 1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: f3dJA56LHnOon7MlpaKDtwGgcGc8kiuw+qCb4ZnKM1o=) 2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: L6lJLX0FjwInwpLbI5Yc8Hu+Qbrh2Ou9yZKgLUdQEws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 05:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Validity Not Before: May 1 05:28:21 2024 GMT Not After : May 8 05:28:21 2024 GMT Subject: CN=6631d2f5-7eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:20:f3:65:1a:5b:ab:88:e9:77:1b:a4:66: f8:cd:d6:6d:09:1d:98:c4:37:e8:6a:ba:40:31:d2: 67:e5:f6:48:82:72:2f:a7:53:5c:cd:9c:e8:9c:ed: a9:91:c5:23:8a:cc:67:9f:3a:9d:74:d9:5a:ee:bf: c3:1b:48:18:fe:87:11:7f:b0:89:eb:17:cf:2e:85: 21:45:0c:10:80:62:25:d6:a6:c6:ac:0a:fa:76:a6: f9:1e:4d:ec:36:4c:05:35:aa:e4:da:b7:da:00:86: e2:5c:02:70:ea:fe:25:65:85:19:a5:27:a0:bc:09: 64:10:2a:dd:5a:d3:a4:b7:3e:36:50:aa:19:a6:b1: d7:b3:df:3c:7b:76:a4:93:d6:b6:f5:3f:3e:0f:e3: 2d:cf:31:3e:8e:11:b4:85:21:60:7e:85:4a:f0:90: f0:08:74:a3:27:a0:93:c9:c7:60:82:58:15:db:64: 49:44:25:39:fe:63:00:08:66:9c:2b:88:0e:75:18: ca:ec:69:73:48:eb:c4:b3:5b:db:d8:5b:d9:19:fb: 45:5a:d7:9f:6e:ea:e5:ea:d5:f1:20:36:25:2e:cc: c2:8e:03:98:81:43:2e:29:a7:6d:70:d7:a2:94:f6: 57:86:ce:e2:99:db:29:e0:3b:e7:9e:fe:40:47:ef: 6f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E8:C3:2B:DD:7A:CD:C9:44:87:5B:50:DA:B1:F4:99:03:47:64:C5 X509v3 Authority Key Identifier: keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:6d:b8:77:15:72:48:61:de:b3:57:5e:d2:40:fb:c0:f2:eb: f1:09:7c:a5:66:08:f7:6d:29:f1:12:c2:9b:41:e8:8d:98:ca: 93:bb:3c:84:35:aa:c4:12:39:ec:40:68:3c:59:35:b9:e9:51: 5c:db:f5:b2:a0:10:fa:68:65:cd:26:e5:5e:af:3f:20:c8:57: 63:75:27:24:b1:b4:2d:6c:15:47:05:0b:92:bd:9b:a7:74:11: e4:86:72:e2:2b:6b:8f:10:f3:9c:4c:f8:4c:47:7b:ea:5c:ea: 24:88:4d:a0:94:cb:67:e2:a3:01:3c:ba:8c:47:89:93:c2:5d: 11:bb:18:ef:f7:72:ef:6b:09:17:11:03:9d:ad:8e:e4:ab:50: 11:48:39:76:40:74:70:52:c4:45:30:40:ce:30:e9:19:3d:f6: 30:b1:19:bd:f9:8f:da:ec:22:fe:4a:e0:43:d0:8b:ba:d2:58: 32:27:6b:0c:ba:c9:7f:40:27:5c:93:90:f7:2e:f3:d7:40:d0: ec:f7:df:cc:75:92:f3:26:82:ce:25:c2:80:39:c2:c5:70:98: e6:b5:d7:a4:27:70:2c:88:65:d7:eb:14:d3:df:c1:b6:35:40: b7:04:02:e3:83:05:b1:52:11:c7:6e:0f:6e:f5:5f:0f:5d:10: 39:a2:c9:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdGQjExMTAvBgNVBAUTKEU4Q0NEQ0JGQkQyOEQ3MTE5MEU4OTM3RjNEQUE1OTU4 RkQ0ODE1NDEwHhcNMjQwNTAxMDUyODIxWhcNMjQwNTA4MDUyODIxWjAYMRYwFAYD VQQDEw02NjMxZDJmNS03ZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yQg82UaW6uI6XcbpGb4zdZtCR2YxDfoarpAMdJn5fZIgnIvp1NczZzonO2p kcUjisxnnzqddNla7r/DG0gY/ocRf7CJ6xfPLoUhRQwQgGIl1qbGrAr6dqb5Hk3s NkwFNark2rfaAIbiXAJw6v4lZYUZpSegvAlkECrdWtOktz42UKoZprHXs988e3ak k9a29T8+D+MtzzE+jhG0hSFgfoVK8JDwCHSjJ6CTycdgglgV22RJRCU5/mMACGac K4gOdRjK7GlzSOvEs1vb2FvZGftFWtefburl6tXxIDYlLszCjgOYgUMuKadtcNei lPZXhs7imdsp4Dvnnv5AR+9veQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbowyvd es3JRIdbUNqx9JkDR2TFMB8GA1UdIwQYMBaAFOjM3L+9KNcRkOiTfz2qWVj9SBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZCMS9BQUQ2OTA0MDU0 MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4R1E2Sk5fUGFwWldQMUlG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNemN2NzBvMXhHUTZKTl9QYXBaV1AxSUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0ZCMS9BQUQ2OTA0MDU0MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4 R1E2Sk5fUGFwWldQMUlGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrbbh3FXJIYd6zV17SQPvA8uvxCXylZgj3bSnxEsKbQeiNmMqTuzyE NarEEjnsQGg8WTW56VFc2/WyoBD6aGXNJuVerz8gyFdjdScksbQtbBVHBQuSvZun dBHkhnLiK2uPEPOcTPhMR3vqXOokiE2glMtn4qMBPLqMR4mTwl0Ruxjv93LvawkX EQOdrY7kq1ARSDl2QHRwUsRFMEDOMOkZPfYwsRm9+Y/a7CL+SuBD0Iu60lgyJ2sM usl/QCdck5D3LvPXQNDs99/MdZLzJoLOJcKAOcLFcJjmtdekJ3AsiGXX6xTT38G2 NUC3BALjgwWxUhHHbg9u9V8PXRA5oskg -----END CERTIFICATE-----Generated at Wed May 1 07:07:07 2024 by rpki-client on console-fra.rpki-client.org