$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft File: 6D_PTG_I1087arQlYG4rx3RtZkA.mft (raw, json) Hash identifier: qBxDJWd98sA38kni6mbpPtlfEP9pf4VhPQ5tnnxPv8E= Subject key identifier: 25:36:A7:99:B8:B4:A6:A6:57:AF:74:1C:9D:E7:27:E6:FC:2B:04:EF Authority key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 Certificate issuer: /CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft Manifest number: 07B8 Signing time: Tue 30 Apr 2024 22:28:34 +0000 Manifest this update: Tue 30 Apr 2024 22:28:33 +0000 Manifest next update: Tue 07 May 2024 22:28:33 +0000 Files and hashes: 1: 6D_PTG_I1087arQlYG4rx3RtZkA.crl (hash: BBfkf1/HosdrHOKDIpbNIJxSixhRm/KyPEJgv9oEFVY=) 2: 24CDD0F2B1AF11ECA2E52046C4F9AE02.roa (hash: Y9czqVLqtshPBj6u27NkGrZg1OamJkp2XKdlci0X334=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Validity Not Before: Apr 30 22:28:33 2024 GMT Not After : May 7 22:28:33 2024 GMT Subject: CN=66317092-484d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:69:c6:26:19:bf:70:42:0e:22:22:12:15:58: 23:f0:b9:e8:6a:7c:c3:15:af:0d:d3:d6:a9:04:d2: 45:b1:b9:69:bb:d8:3e:0b:64:bb:59:25:b6:66:2b: 22:5a:f5:9e:37:22:aa:e6:02:4f:8a:ec:19:76:1e: c8:1e:85:16:8f:a4:ea:a0:8d:52:57:e8:e2:8e:0e: a8:33:e3:40:20:63:e7:39:ea:29:a3:94:55:a4:a5: f0:c7:43:19:99:8c:1f:c5:ed:cd:fc:7d:fc:e8:af: 9c:19:56:82:91:f3:7e:67:7f:4e:7b:29:38:6b:dc: ed:1d:56:1d:ce:36:b4:a6:35:87:45:ae:2b:d4:47: fc:8a:75:ea:1d:3e:1f:3b:21:6c:18:9e:12:30:c9: 20:bf:22:35:48:6f:8c:a6:56:bd:46:92:a5:cf:5c: 34:17:05:53:75:88:12:89:e3:39:89:30:57:93:9d: ab:4a:b7:1a:90:1f:a3:80:54:2b:a0:f2:24:b6:e3: ef:43:ab:ec:5b:b6:ee:76:c4:af:3a:d5:de:88:14: 65:3a:59:84:7f:a5:bc:a0:c9:f3:4b:f0:07:86:19: 3e:e1:a5:00:f1:99:7a:26:d3:40:de:03:c1:d5:1c: ee:05:79:83:65:c5:22:52:f1:a2:1b:72:67:61:bf: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:36:A7:99:B8:B4:A6:A6:57:AF:74:1C:9D:E7:27:E6:FC:2B:04:EF X509v3 Authority Key Identifier: keyid:E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a6:54:b1:d9:b3:ac:1d:b2:f2:bb:e1:e1:7c:d3:5f:44:f1: 95:0b:ed:f9:9b:6c:e3:b5:12:5e:2b:f1:c5:e4:09:77:0d:d5: ec:e8:ae:8f:df:0a:9b:fc:6d:6c:88:87:20:26:e3:bd:17:56: 23:d0:20:5f:d3:dc:21:58:f3:86:9d:c2:64:4e:01:de:38:ad: d3:f1:b8:0d:f0:31:bf:d3:a0:31:bd:3b:87:ff:79:0f:6c:bd: b0:63:1d:ab:49:d7:e2:8a:81:69:18:bd:e0:5d:85:b3:fb:05: 8b:9a:5c:77:f6:35:75:24:b4:0b:48:25:e9:d3:6a:54:82:b7: d0:ac:04:45:33:3c:9f:3c:c8:0f:a2:9d:17:8f:d3:ca:b6:2b: cb:68:08:09:a6:d6:10:2d:1e:aa:c6:84:9b:11:10:61:91:54: bf:61:93:02:32:b8:33:b4:af:e5:c0:80:c3:89:06:7b:e1:6c: 19:ef:81:f5:c4:81:cb:29:f4:08:75:7f:17:97:51:d9:af:1b: 20:39:f9:e6:fb:dc:37:a9:92:bc:0b:d8:4d:01:53:62:d9:ac: 85:32:02:55:06:72:8f:b7:b7:2a:c8:62:69:89:ba:eb:16:1d: 85:25:15:f3:89:f3:c3:b9:9b:a2:fc:2e:e1:26:35:84:e1:ef: d0:48:7a:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QTUxMTAvBgNVBAUTKEU4M0ZDRjRDNkZDOEQ3NEYzQjZBQjQyNTYwNkUyQkM3 NzQ2RDY2NDAwHhcNMjQwNDMwMjIyODMzWhcNMjQwNTA3MjIyODMzWjAYMRYwFAYD VQQDEw02NjMxNzA5Mi00ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12nGJhm/cEIOIiISFVgj8LnoanzDFa8N09apBNJFsblpu9g+C2S7WSW2Zisi WvWeNyKq5gJPiuwZdh7IHoUWj6TqoI1SV+jijg6oM+NAIGPnOeopo5RVpKXwx0MZ mYwfxe3N/H386K+cGVaCkfN+Z39Oeyk4a9ztHVYdzja0pjWHRa4r1Ef8inXqHT4f OyFsGJ4SMMkgvyI1SG+Mpla9RpKlz1w0FwVTdYgSieM5iTBXk52rSrcakB+jgFQr oPIktuPvQ6vsW7budsSvOtXeiBRlOlmEf6W8oMnzS/AHhhk+4aUA8Zl6JtNA3gPB 1RzuBXmDZcUiUvGiG3JnYb8OEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU2p5m4 tKamV690HJ3nJ+b8KwTvMB8GA1UdIwQYMBaAFOg/z0xvyNdPO2q0JWBuK8d0bWZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBNS8wRTgyQzJFQ0M0 RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEwODdhclFsWUc0cngzUnRa a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEX1BUR19JMTA4N2FyUWxZRzRyeDNSdFprQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBNS8wRTgyQzJFQ0M0RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEw ODdhclFsWUc0cngzUnRaa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCplSx2bOsHbLyu+HhfNNfRPGVC+35m2zjtRJeK/HF5Al3DdXs6K6P 3wqb/G1siIcgJuO9F1Yj0CBf09whWPOGncJkTgHeOK3T8bgN8DG/06AxvTuH/3kP bL2wYx2rSdfiioFpGL3gXYWz+wWLmlx39jV1JLQLSCXp02pUgrfQrARFMzyfPMgP op0Xj9PKtivLaAgJptYQLR6qxoSbERBhkVS/YZMCMrgztK/lwIDDiQZ74WwZ74H1 xIHLKfQIdX8Xl1HZrxsgOfnm+9w3qZK8C9hNAVNi2ayFMgJVBnKPt7cqyGJpibrr Fh2FJRXzifPDuZui/C7hJjWE4e/QSHqn -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:20 2024 by rpki-client on console-fra.rpki-client.org