$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json) Hash identifier: ld/j0oEDQNTFMaNjTzgAIF9AFJpv3sBCp2wN1oBDCRc= Subject key identifier: 2C:A4:18:98:A1:7F:12:DB:4D:A7:20:7C:07:83:9F:5D:81:F6:7B:D7 Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft Manifest number: 046C Signing time: Fri 03 May 2024 01:50:44 +0000 Manifest this update: Fri 03 May 2024 01:50:44 +0000 Manifest next update: Fri 10 May 2024 01:50:44 +0000 Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: 4eG4TqIlcSckC48ZcKH4uPjmlSBatJUNN0MCRT/5SF8=) 2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: /7fGHA/VkZzbPKmsJOOx6n47amXspBWemua7509SvjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Validity Not Before: May 3 01:50:44 2024 GMT Not After : May 10 01:50:44 2024 GMT Subject: CN=663442f4-3619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e4:7a:6f:19:d4:6f:ac:d2:6d:22:8d:12:36: 69:c0:13:00:74:dc:bc:8f:e2:72:6b:ab:8e:6e:14: 01:c1:5d:ea:4f:55:d1:a8:ef:c7:d8:d0:08:fa:96: 0f:55:8c:1c:1c:aa:97:5c:5c:35:d9:79:6f:b3:83: 0b:20:b4:70:d9:92:15:bd:8a:0f:00:b3:d4:fa:32: f9:9c:9f:21:a7:45:5d:85:90:14:13:3f:3a:f7:f2: 1f:55:4a:94:12:ee:0b:a8:e2:9b:28:cd:4c:6a:47: ff:5e:39:53:8c:58:4a:38:2d:ec:28:ea:2d:6d:f0: 89:77:95:a8:c5:c2:ed:98:c5:40:66:04:42:22:f3: fc:f4:20:27:12:01:4f:f5:e6:07:fd:b9:a3:1a:c2: 47:da:cc:ff:78:5a:8e:ec:bf:ad:ff:ab:d9:d7:fb: 2f:a7:bf:50:2b:1c:82:45:b0:dd:24:ed:6c:e8:96: 9d:65:6b:52:94:c3:b4:37:a1:08:ec:3f:db:ca:09: c8:ef:ef:0b:d9:44:8c:d0:5e:2e:2f:98:f7:a9:73: f5:28:a7:68:fa:4f:5b:63:6f:ae:c7:7c:74:ab:83: 32:85:f0:63:d7:08:40:f1:90:eb:e6:dc:ae:1f:24: c1:32:c7:d8:a3:84:06:26:8b:18:a8:96:ae:7d:fa: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:18:98:A1:7F:12:DB:4D:A7:20:7C:07:83:9F:5D:81:F6:7B:D7 X509v3 Authority Key Identifier: keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:73:3f:4a:3c:ce:0f:12:3e:6c:b6:2f:ba:d3:6c:27:c6:a5: 98:d8:3b:f3:c8:78:4b:f7:fd:2c:90:d5:e8:f4:51:8b:3c:f2: fe:35:32:4d:2e:64:f5:9c:da:84:15:18:c3:3b:77:e3:de:b1: c4:88:4d:24:c6:43:2a:b3:9f:ae:54:22:21:02:7b:23:78:27: 56:4b:64:d8:5d:ee:50:f3:66:d7:20:cf:13:f4:03:16:68:10: 73:49:96:e3:e1:a1:a9:6a:81:0d:d7:05:67:72:2d:b5:97:4c: a8:e9:cc:ba:86:17:3b:83:69:3b:d0:66:94:a8:11:87:28:c2: 88:4a:90:fa:37:6d:32:1f:01:22:e3:c1:62:86:c9:14:da:2b: 5b:20:ab:da:1e:4b:47:80:4f:35:74:dc:d8:b8:49:49:bc:ff: b3:21:b5:00:e2:72:de:98:af:ae:da:36:c7:35:ed:70:1b:2c: 53:5a:ed:af:fd:5d:53:ce:f4:b1:cb:0b:aa:af:10:69:24:ed: 5f:56:69:ed:3b:47:ff:7a:20:14:8c:41:c6:d4:55:92:4c:ee: 66:32:b0:c1:68:2c:cd:b7:24:72:be:22:19:40:53:df:83:a6: bb:90:1e:99:2d:6d:8b:1d:5b:f8:0f:cd:ed:13:ed:ef:d6:7f: 20:85:1c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFQ0ExMTAvBgNVBAUTKEZCQTBGOEI0QzREMDVBQTk2QUFBRjU3QTM5NDQwMzcx QkM4RDA0MzcwHhcNMjQwNTAzMDE1MDQ0WhcNMjQwNTEwMDE1MDQ0WjAYMRYwFAYD VQQDEw02NjM0NDJmNC0zNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+R6bxnUb6zSbSKNEjZpwBMAdNy8j+Jya6uObhQBwV3qT1XRqO/H2NAI+pYP VYwcHKqXXFw12Xlvs4MLILRw2ZIVvYoPALPU+jL5nJ8hp0VdhZAUEz869/IfVUqU Eu4LqOKbKM1Makf/XjlTjFhKOC3sKOotbfCJd5WoxcLtmMVAZgRCIvP89CAnEgFP 9eYH/bmjGsJH2sz/eFqO7L+t/6vZ1/svp79QKxyCRbDdJO1s6JadZWtSlMO0N6EI 7D/bygnI7+8L2USM0F4uL5j3qXP1KKdo+k9bY2+ux3x0q4MyhfBj1whA8ZDr5tyu HyTBMsfYo4QGJosYqJauffqfIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCykGJih fxLbTacgfAeDn12B9nvXMB8GA1UdIwQYMBaAFPug+LTE0Fqpaqr1ejlEA3G8jQQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUVDQS9FMUVDRTBBMkY5 MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdxbHFxdlY2T1VRRGNieU5C RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02RDR0TVRRV3FscXF2VjZPVVFEY2J5TkJEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUVDQS9FMUVDRTBBMkY5MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdx bHFxdlY2T1VRRGNieU5CRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPcz9KPM4PEj5sti+602wnxqWY2DvzyHhL9/0skNXo9FGLPPL+NTJN LmT1nNqEFRjDO3fj3rHEiE0kxkMqs5+uVCIhAnsjeCdWS2TYXe5Q82bXIM8T9AMW aBBzSZbj4aGpaoEN1wVnci21l0yo6cy6hhc7g2k70GaUqBGHKMKISpD6N20yHwEi 48FihskU2itbIKvaHktHgE81dNzYuElJvP+zIbUA4nLemK+u2jbHNe1wGyxTWu2v /V1TzvSxywuqrxBpJO1fVmntO0f/eiAUjEHG1FWSTO5mMrDBaCzNtyRyviIZQFPf g6a7kB6ZLW2LHVv4D83tE+3v1n8ghRwg -----END CERTIFICATE-----Generated at Fri May 3 03:10:58 2024 by rpki-client on console-ams.rpki-client.org