$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json) Hash identifier: q8kwyJGhqVL/ocAv3m/X8LPrQFyLhwMrvDLm2mtSp3Y= Subject key identifier: 2B:89:AF:29:E4:5C:4F:B1:AB:6A:D3:11:33:D8:F7:64:A1:FD:5F:FC Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft Manifest number: 084D Signing time: Thu 02 May 2024 21:48:46 +0000 Manifest this update: Thu 02 May 2024 21:48:45 +0000 Manifest next update: Thu 09 May 2024 21:48:45 +0000 Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: XabfQ9siBb7e4N7dRiRCKHh8aFGbHAMiifaf9kkwnro=) 2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: A09DUVwYkWjHYaG8K/Fs4waJczx1Va6QnO4lBZ4e0CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Validity Not Before: May 2 21:48:45 2024 GMT Not After : May 9 21:48:45 2024 GMT Subject: CN=66340a3e-46d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:07:69:a2:35:e2:13:34:4e:29:3b:23:f3: b2:1a:cb:d9:04:3d:74:6b:42:89:19:d7:dd:e7:3b: 22:ec:b6:6d:6a:b4:43:ce:45:f1:82:8b:3d:0e:a1: c8:fe:f6:68:6b:7e:f8:e5:9e:15:71:e0:ea:bc:59: a9:80:c6:94:3a:85:75:ad:86:f7:ed:28:c5:67:43: ad:2d:9e:13:7d:41:54:b4:e9:2b:ae:36:cd:e2:fc: 6b:a3:be:dc:28:3e:e0:d5:07:77:c1:da:27:90:42: 44:19:3f:71:a7:f1:7e:b7:e8:be:ac:f5:5a:98:5a: 23:7a:54:52:6f:0d:ca:c6:8b:09:e3:66:78:8b:9f: 7f:de:05:36:c3:bf:3a:5b:ba:1b:23:cf:75:e4:5a: 7b:2f:5c:fe:f8:ef:e0:50:cb:4b:63:75:62:68:61: 2e:a2:fd:3c:0f:bf:3b:fa:df:0d:24:ce:50:81:09: 08:e7:ce:2e:45:84:9c:87:99:cb:c1:ae:a9:85:dd: df:d4:5b:fd:e6:86:34:70:41:7b:b4:59:b7:c9:fb: a7:47:86:b9:28:c9:e7:a6:0c:71:bc:ad:03:aa:2c: 2f:e1:cf:6f:09:32:b9:5c:02:b4:e2:d5:cd:c0:81: b9:4a:86:ff:43:aa:68:9c:a5:da:b6:e2:57:34:dd: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:89:AF:29:E4:5C:4F:B1:AB:6A:D3:11:33:D8:F7:64:A1:FD:5F:FC X509v3 Authority Key Identifier: keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:12:e1:5b:cf:97:cd:35:a5:b9:79:08:cd:8b:37:b0:66:f8: c4:ea:f4:a9:e7:67:c6:19:12:ce:e0:d3:df:93:b9:f5:27:7d: f9:be:33:4e:f9:75:8e:1e:33:ce:90:d1:1a:4c:f3:c3:28:76: 26:41:92:a4:71:09:15:0d:c9:9b:ec:99:b0:74:b3:a1:ae:5a: 19:6b:6a:6b:a5:6e:96:18:22:72:15:5a:bb:10:28:47:5b:e3: 16:61:94:b6:28:7b:37:ff:83:d0:ff:8c:98:fd:ec:02:02:5d: a9:48:bb:ef:e7:06:59:27:e8:1f:bd:b8:c6:d5:8a:96:4d:26: 0b:46:8c:66:a0:a3:ab:be:6b:d3:5f:ef:d5:14:c5:72:19:40: 3c:2c:f8:c6:c5:25:01:ff:3f:f1:b1:00:07:75:8d:cd:13:17: fe:96:42:a9:d4:c5:2f:15:e0:87:e3:c8:90:50:d6:05:3a:8d: 91:d5:b7:41:09:ff:68:10:55:74:66:91:11:51:cb:fb:bd:8a: 62:81:41:15:df:6d:af:dc:b4:30:76:02:db:be:4a:a4:26:84: fc:61:bb:7e:21:6c:d4:ee:36:ed:fd:d2:cb:f5:f7:de:9a:31: f7:61:d5:9d:b3:52:c5:ff:54:9e:2a:94:2c:76:64:d1:d7:bf: 07:1b:70:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx ODY1QTAwREQwHhcNMjQwNTAyMjE0ODQ1WhcNMjQwNTA5MjE0ODQ1WjAYMRYwFAYD VQQDEw02NjM0MGEzZS00NmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvycHaaI14hM0Tik7I/OyGsvZBD10a0KJGdfd5zsi7LZtarRDzkXxgos9DqHI /vZoa3745Z4VceDqvFmpgMaUOoV1rYb37SjFZ0OtLZ4TfUFUtOkrrjbN4vxro77c KD7g1Qd3wdonkEJEGT9xp/F+t+i+rPVamFojelRSbw3KxosJ42Z4i59/3gU2w786 W7obI8915Fp7L1z++O/gUMtLY3ViaGEuov08D787+t8NJM5QgQkI584uRYSch5nL wa6phd3f1Fv95oY0cEF7tFm3yfunR4a5KMnnpgxxvK0Dqiwv4c9vCTK5XAK04tXN wIG5Sob/Q6ponKXatuJXNN161QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuJrynk XE+xq2rTETPY92Sh/V/8MB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ UmdobUQ1b2dUbEVZWmFBTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcEuFbz5fNNaW5eQjNizewZvjE6vSp52fGGRLO4NPfk7n1J335vjNO +XWOHjPOkNEaTPPDKHYmQZKkcQkVDcmb7JmwdLOhrloZa2prpW6WGCJyFVq7EChH W+MWYZS2KHs3/4PQ/4yY/ewCAl2pSLvv5wZZJ+gfvbjG1YqWTSYLRoxmoKOrvmvT X+/VFMVyGUA8LPjGxSUB/z/xsQAHdY3NExf+lkKp1MUvFeCH48iQUNYFOo2R1bdB Cf9oEFV0ZpERUcv7vYpigUEV322v3LQwdgLbvkqkJoT8Ybt+IWzU7jbt/dLL9ffe mjH3YdWds1LF/1SeKpQsdmTR178HG3Ct -----END CERTIFICATE-----Generated at Thu May 2 22:28:59 2024 by rpki-client on console-ams.rpki-client.org