$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: /dvrGelnsdOQddoPrbUHEUK7B+7aVGYLEmIf9NuwlpM= Subject key identifier: 6C:51:61:09:C7:24:60:0F:35:C8:6E:56:3A:52:E5:C2:A7:46:08:0B Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 6C Signing time: Wed 15 May 2024 07:36:25 +0000 Manifest this update: Wed 15 May 2024 07:36:24 +0000 Manifest next update: Wed 22 May 2024 07:36:24 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: 2HNTl+mwJW60Q1E90cfNMcvRcBL6A4j8qzOFR83ZjZQ=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: vgChqGywZiKFJbe8nMHH+eDKGq5txXITkZSr/n1RaEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: May 15 07:36:24 2024 GMT Not After : May 22 07:36:24 2024 GMT Subject: CN=664465f9-7138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:58:83:d1:09:e9:97:4a:10:8b:b6:8f:1a: bd:9a:db:4e:f7:9e:d7:79:9b:ec:26:db:f2:7c:29: c7:66:85:e7:74:f4:11:1f:4f:97:65:d4:c2:31:3f: 63:81:bc:0f:34:ed:cb:cf:e4:a3:64:3b:bf:7c:e8: f8:62:8b:1b:bf:d6:19:65:46:b6:27:ec:70:8d:1c: b6:61:c2:b6:43:68:16:a7:09:cd:d5:67:1e:34:3b: ed:6b:65:81:92:5e:9b:a8:18:99:1e:96:41:b7:49: b0:db:16:f3:10:d0:4a:cd:d4:5f:13:b0:70:25:93: f6:0f:2b:58:22:11:09:92:d5:46:44:97:d0:0a:5e: bd:a3:03:75:fe:1d:f6:cc:10:d1:28:61:3c:4a:86: 15:de:94:0c:8e:80:c1:80:20:4e:04:25:a4:92:72: 2d:8a:c3:ec:ea:7b:54:3b:00:ca:20:12:5a:f9:8a: 41:8f:cf:c5:67:40:5c:e2:a6:74:57:c6:15:a7:47: f7:68:c2:7f:eb:9e:4b:be:a7:ce:c6:d0:17:bd:0e: d8:82:06:53:82:cf:64:ad:08:18:fa:69:ef:12:84: 56:17:37:92:fd:b0:ee:cc:b7:58:f5:85:bc:40:6b: c4:cd:e6:d3:fb:52:c2:98:dd:eb:bb:40:13:7a:ce: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:51:61:09:C7:24:60:0F:35:C8:6E:56:3A:52:E5:C2:A7:46:08:0B X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:56:9f:11:89:83:cd:8f:32:8b:2b:c0:3c:3c:15:45:49:0f: ff:36:cb:aa:cf:ca:2f:4b:e0:fd:7b:2e:77:fc:de:dc:b4:22: 3d:1e:0b:3f:53:3a:de:2b:5d:cc:38:f7:7c:dc:2e:12:58:ec: 57:4d:87:cc:48:0a:9c:a7:d1:7e:6c:7d:ee:82:a9:e4:e2:84: d8:a7:fe:07:1d:3a:d6:a8:4d:a8:e0:d1:e7:48:73:41:d4:f3: ae:f3:98:cb:14:9b:83:35:7d:d9:90:5a:f8:86:44:80:6a:2e: f4:29:e6:89:31:c4:b5:53:a3:e8:54:e8:d2:ff:20:48:48:6e: 9e:60:c7:3e:9b:16:63:51:6d:82:63:8e:8a:93:28:42:8b:6e: 28:ea:49:39:61:15:39:87:0e:cb:64:6a:f7:0f:43:7e:1f:30: 70:c3:c8:95:b1:c6:61:dc:c2:77:3b:f8:12:a3:bf:ac:a4:19: dc:48:ba:a8:36:1b:27:3c:0b:1f:1d:53:b5:64:23:d5:8d:bc: 88:34:b4:70:e2:1e:fc:c6:cc:e2:33:e6:58:be:ef:d0:7f:81: 92:82:5a:ab:c6:8d:31:4a:7c:19:43:b0:21:c6:49:43:74:c4: b7:14:35:19:c2:6c:ba:37:45:41:58:ad:78:3e:55:4d:3d:a9: c4:b8:56:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OEQwNzExMC8GA1UEBRMoNzM4NERDNjY3QjRENDlBNUFDRDUwQTU4QjQ4OTE2QTE1 QUMyNjE2QjAeFw0yNDA1MTUwNzM2MjRaFw0yNDA1MjIwNzM2MjRaMBgxFjAUBgNV BAMTDTY2NDQ2NWY5LTcxMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDERFiD0Qnpl0oQi7aPGr2a2073ntd5m+wm2/J8Kcdmhed09BEfT5dl1MIxP2OB vA807cvP5KNkO7986Phiixu/1hllRrYn7HCNHLZhwrZDaBanCc3VZx40O+1rZYGS XpuoGJkelkG3SbDbFvMQ0ErN1F8TsHAlk/YPK1giEQmS1UZEl9AKXr2jA3X+HfbM ENEoYTxKhhXelAyOgMGAIE4EJaSSci2Kw+zqe1Q7AMogElr5ikGPz8VnQFzipnRX xhWnR/down/rnku+p87G0Be9DtiCBlOCz2StCBj6ae8ShFYXN5L9sO7Mt1j1hbxA a8TN5tP7UsKY3eu7QBN6zvqdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbFFhCcck YA81yG5WOlLlwqdGCAswHwYDVR0jBBgwFoAUc4TcZntNSaWs1QpYtIkWoVrCYWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RDA3LzUwNTU2MEI2NkU3 QjExRUVCN0U5N0Q1RkM0RjlBRTAyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzRUY1pudE5TYVdzMVFwWXRJa1dvVnJDWVdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 RDA3LzUwNTU2MEI2NkU3QjExRUVCN0U5N0Q1RkM0RjlBRTAyL2M0VGNabnROU2FX czFRcFl0SWtXb1ZyQ1lXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADFWnxGJg82PMosrwDw8FUVJD/82y6rPyi9L4P17Lnf83ty0Ij0eCz9T Ot4rXcw493zcLhJY7FdNh8xICpyn0X5sfe6CqeTihNin/gcdOtaoTajg0edIc0HU 867zmMsUm4M1fdmQWviGRIBqLvQp5okxxLVTo+hU6NL/IEhIbp5gxz6bFmNRbYJj joqTKEKLbijqSTlhFTmHDstkavcPQ34fMHDDyJWxxmHcwnc7+BKjv6ykGdxIuqg2 Gyc8Cx8dU7VkI9WNvIg0tHDiHvzGzOIz5li+79B/gZKCWqvGjTFKfBlDsCHGSUN0 xLcUNRnCbLo3RUFYrXg+VU09qcS4Vm8= -----END CERTIFICATE-----Generated at Wed May 15 09:04:46 2024 by rpki-client on console-ams.rpki-client.org