$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json) Hash identifier: jjvKo0Xfbt2UNwPwj2WxrrESLGe5VBTWbeIQlq0osSE= Subject key identifier: F0:9C:7F:42:96:CB:3A:83:18:7E:A0:E4:72:5C:BF:FA:DB:9A:AA:E0 Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft Manifest number: 37 Signing time: Tue 21 May 2024 08:12:54 +0000 Manifest this update: Tue 21 May 2024 08:12:53 +0000 Manifest next update: Tue 28 May 2024 08:12:53 +0000 Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: TZBrKsPCDKb9GrvAjAgrHblpLDmebBor5A19OEQ9UFE=) 2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: E6pVE8DvjoGcz1F0AEh1i7js+Z0pbdB5Na01TO4wqGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F Validity Not Before: May 21 08:12:53 2024 GMT Not After : May 28 08:12:53 2024 GMT Subject: CN=664c5786-973e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:97:72:09:d2:c9:4e:94:71:bf:e6:1c:e5: 4c:f9:79:75:bd:78:e0:0c:b7:56:d2:53:44:0f:a9: b8:e4:52:c2:00:ab:55:d2:6a:fa:5d:c5:b1:bd:be: 00:56:24:63:3d:49:b6:f2:ab:56:bd:f5:c0:b6:ea: 2f:55:ca:cb:61:47:1e:3b:88:b9:0d:59:85:3a:e9: 47:88:0a:cf:b8:26:10:e6:69:ef:b5:27:d1:14:1b: 38:4b:6a:29:d1:9f:84:81:ea:17:78:28:8a:9d:25: 87:b8:de:50:35:33:c2:64:59:27:37:a9:76:8f:eb: bb:23:33:88:6b:dc:a6:aa:53:02:07:4c:5f:69:c3: 33:43:a1:ef:a8:aa:e5:eb:8e:25:a0:58:1e:dd:60: 26:07:63:cf:48:17:de:44:72:4f:96:99:c3:4c:b1: d3:aa:2f:10:3b:cf:63:dd:c3:21:dc:3c:06:8a:3d: 39:f5:90:ed:dd:6a:7d:35:03:0b:e3:8d:f2:f7:21: 75:62:c3:28:87:26:78:3c:5b:3e:e0:5a:20:68:71: 76:f5:1b:2a:9c:b9:ec:e9:e3:a6:82:30:51:b8:58: 80:37:a6:b4:2f:1d:a0:c0:88:fc:ec:e1:5a:46:af: ad:de:b2:f9:77:60:1b:3b:dc:f0:f8:68:16:66:a6: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9C:7F:42:96:CB:3A:83:18:7E:A0:E4:72:5C:BF:FA:DB:9A:AA:E0 X509v3 Authority Key Identifier: keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:65:8f:71:23:9f:ce:6a:96:7c:e0:0f:18:86:72:c8:29:2d: 4b:7c:0c:83:0a:6e:52:48:30:ae:4a:c9:01:cd:39:48:bf:9b: 4c:ca:fc:28:8c:63:2f:e7:c3:c6:9a:80:e5:14:b2:39:25:f5: 00:ce:db:a4:7d:a9:45:04:01:5a:df:64:c1:2e:54:6a:19:cd: 01:44:d6:70:6d:38:f6:3b:48:27:1a:1a:09:8e:48:dc:e1:60: e5:43:4e:7d:75:07:d6:e7:7c:80:94:6a:5c:e3:5c:6e:1c:db: 47:b2:a2:6d:0b:af:2a:5c:14:1b:fe:2c:86:fc:69:1a:2f:e8: 25:a9:57:e5:93:a6:a9:56:75:48:6e:6e:75:14:b6:88:d8:14: 03:6f:31:f8:05:71:47:6f:6f:0f:6d:84:1e:5e:f0:23:1c:6a: 6d:d0:20:49:6d:45:68:cd:fb:75:d9:ee:fd:c4:83:38:c6:ba: e0:81:61:ed:3e:1b:15:62:7b:38:60:b8:41:89:6a:b2:a1:24: 60:1a:fb:80:8c:f1:d4:1c:99:e7:69:62:4b:dd:30:5e:2f:5d: e6:c8:98:17:f4:c3:4e:1c:24:85:72:eb:2a:5e:b4:ea:10:8e: 5a:90:c1:c6:56:95:da:17:d5:15:f2:6a:1a:34:44:97:39:b3: 33:d5:c7:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NjVDNzExMC8GA1UEBRMoMkJBMUFFOTNCQkY1NkE2RjZDOTY1MDg0RjA0ODgxN0JC N0E5OEYwRjAeFw0yNDA1MjEwODEyNTNaFw0yNDA1MjgwODEyNTNaMBgxFjAUBgNV BAMTDTY2NGM1Nzg2LTk3M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6yZdyCdLJTpRxv+Yc5Uz5eXW9eOAMt1bSU0QPqbjkUsIAq1XSavpdxbG9vgBW JGM9Sbbyq1a99cC26i9VysthRx47iLkNWYU66UeICs+4JhDmae+1J9EUGzhLainR n4SB6hd4KIqdJYe43lA1M8JkWSc3qXaP67sjM4hr3KaqUwIHTF9pwzNDoe+oquXr jiWgWB7dYCYHY89IF95Eck+WmcNMsdOqLxA7z2PdwyHcPAaKPTn1kO3dan01Awvj jfL3IXViwyiHJng8Wz7gWiBocXb1Gyqcuezp46aCMFG4WIA3prQvHaDAiPzs4VpG r63esvl3YBs73PD4aBZmpkA/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8Jx/QpbL OoMYfqDkcly/+tuaquAwHwYDVR0jBBgwFoAUK6Guk7v1am9sllCE8EiBe7epjw8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2NUM3L0UzQkVBNDdBQzNF NDExRUU5NjEzRjU4M0M0RjlBRTAyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSzZHdWs3djFhbTlzbGxDRThFaUJlN2Vwanc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 NUM3L0UzQkVBNDdBQzNFNDExRUU5NjEzRjU4M0M0RjlBRTAyL0s2R3VrN3YxYW05 c2xsQ0U4RWlCZTdlcGp3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHRlj3Ejn85qlnzgDxiGcsgpLUt8DIMKblJIMK5KyQHNOUi/m0zK/CiM Yy/nw8aagOUUsjkl9QDO26R9qUUEAVrfZMEuVGoZzQFE1nBtOPY7SCcaGgmOSNzh YOVDTn11B9bnfICUalzjXG4c20eyom0LrypcFBv+LIb8aRov6CWpV+WTpqlWdUhu bnUUtojYFANvMfgFcUdvbw9thB5e8CMcam3QIEltRWjN+3XZ7v3EgzjGuuCBYe0+ GxViezhguEGJarKhJGAa+4CM8dQcmedpYkvdMF4vXebImBf0w04cJIVy6ypetOoQ jlqQwcZWldoX1RXyaho0RJc5szPVx3c= -----END CERTIFICATE-----Generated at Tue May 21 10:12:58 2024 by rpki-client on console-ams.rpki-client.org