$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft File: 6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft (raw, json) Hash identifier: +P64Ffv+EQ/P+6/gt8di/hH7/crzGrrEAJUXzrb/jNE= Subject key identifier: 0E:FC:1A:58:E3:DE:C3:F0:1F:DC:70:72:DF:9B:30:38:88:07:2D:58 Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84 Certificate issuer: /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984 Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft Manifest number: 06B4 Signing time: Wed 24 Apr 2024 23:09:24 +0000 Manifest this update: Wed 24 Apr 2024 23:09:24 +0000 Manifest next update: Wed 01 May 2024 23:09:24 +0000 Files and hashes: 1: 6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl (hash: cwk1ANcxDlqHr03wYOOlC6EL7TRszCWT/5aGUi1qJpY=) 2: EF980EA6140D11EBB0DCE540C4F9AE02.roa (hash: AHw9Xu7UY4TkEstVhgVO2U9IwBiX2fROVGixOVgfly4=) 3: EEED9F34140D11EBB0DCE540C4F9AE02.roa (hash: 3YLqDnqZ1B+/t0nbEMetPkPAZ6ztIITA1pbSZZ0qnNw=) 4: 9B0DA87CEB8A11EC86295E7BC4F9AE02.roa (hash: U9A27sTiILooczu4FPKq/inu4TUTixKO6quuZG1wufc=) 5: D467E7363D9211EDBF4D9F7DC4F9AE02.roa (hash: Q1A//xJAenDCX+OfnpV5599B7Fna6P7+W/m6bu+16I0=) 6: E5373ACAE8B111EC89E9AC5DC4F9AE02.roa (hash: o4dgArVBoZXr5dfHe6PiOHgDW4zohpDDBvVcCegfRCE=) 7: 873A15DA140C11EB9204AC24C4F9AE02.roa (hash: +wqMrLovTJbkiku8bnxz8Y3AxhoJQCec+53n8PscEvI=) 8: EE3A46BE140D11EBB0DCE540C4F9AE02.roa (hash: iRQ5/MH0qA6L3u9yvw7czyqKYPYaftxjqgXCwZsC5Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984 Validity Not Before: Apr 24 23:09:24 2024 GMT Not After : May 1 23:09:24 2024 GMT Subject: CN=66299124-f8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:0f:8b:4c:47:65:cb:34:db:e9:53:96:a0: e9:87:e3:21:5e:fe:1d:8d:79:26:a1:d7:ef:15:b7: 78:8d:9c:34:69:73:7e:b0:6e:cc:d0:43:cd:35:12: bd:f5:28:6f:4a:6f:b1:d0:13:8d:ad:e5:a7:76:f8: ff:91:fa:73:f9:d1:5e:b8:c2:db:3e:4a:bc:c8:3b: 57:b0:c9:f3:23:1d:4b:3a:28:27:e1:a9:dd:6a:c0: 6e:7b:ff:bc:08:85:67:80:82:4b:40:28:e9:f0:14: 94:20:e9:2f:ac:ab:a5:c1:d5:55:20:ce:a6:19:72: 2a:fc:f7:7d:11:e1:09:55:ed:0c:ad:06:db:e4:09: 23:c3:2f:af:2b:ff:7a:53:1a:a6:70:71:82:65:f8: 98:eb:90:89:30:38:5a:d0:0c:91:2c:ba:75:6d:af: de:7c:34:18:5e:f8:c6:64:45:3b:11:9e:39:85:01: 16:d6:65:53:31:80:92:ee:76:4f:15:eb:dc:2c:04: 52:35:df:9a:14:fe:7b:e3:57:7a:26:c3:8a:45:fe: 39:c4:2f:df:1a:d4:c3:6f:70:3d:13:30:ab:a3:cc: b4:71:86:65:1c:59:93:99:a2:56:22:88:48:0b:30: 58:34:db:23:1a:d3:3c:ec:70:26:e6:3c:9e:f1:ca: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FC:1A:58:E3:DE:C3:F0:1F:DC:70:72:DF:9B:30:38:88:07:2D:58 X509v3 Authority Key Identifier: keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:24:3c:6d:86:c2:51:82:34:69:40:dd:3b:14:c6:af:f1:07: f2:d5:12:4c:cf:dc:76:c7:38:78:1d:85:16:14:3b:15:10:ff: 92:33:ce:e5:4d:fc:c5:10:88:67:60:c3:6a:8d:95:ca:47:21: e6:06:8f:99:f4:cf:53:30:a7:4c:24:4d:c5:70:10:98:44:6c: a1:fa:ea:91:90:ea:39:25:49:b9:1b:0d:8d:7c:0a:29:b6:7e: 14:f8:1c:91:ec:26:99:55:64:f2:76:6c:67:78:1c:3f:ad:91: a1:41:b1:5d:a4:39:df:ab:78:d5:6c:62:c8:b6:d5:46:8c:27: c6:d3:d5:b6:87:d8:ae:b7:1c:69:01:a1:67:7a:55:cb:c1:fd: c8:02:76:1d:71:fa:71:e4:a6:ea:49:6c:66:58:4a:36:c3:04: 57:86:0c:e2:c9:34:ae:42:4d:bd:d3:10:64:25:3a:90:58:ac: af:63:f0:a0:44:2d:d4:07:20:98:69:f4:92:38:ed:f6:60:1c: 36:9f:a6:e0:c9:ae:f8:19:fa:2b:5b:9d:12:c7:54:07:d7:d2: e8:13:50:5b:a7:9f:9f:4f:18:dc:5d:e1:5f:db:a0:75:cc:cc: 9d:cf:dc:f7:51:93:d4:fc:8e:6d:94:85:4d:5f:7c:60:6a:68: e5:17:3f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRGQjcxMTAvBgNVBAUTKEVBNTFDRTIwQTU5RTQyQjhDNzFEMjZBQTZCODg2Njkw Q0QxNTI5ODQwHhcNMjQwNDI0MjMwOTI0WhcNMjQwNTAxMjMwOTI0WjAYMRYwFAYD VQQDEw02NjI5OTEyNC1mOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKYPi0xHZcs02+lTlqDph+MhXv4djXkmodfvFbd4jZw0aXN+sG7M0EPNNRK9 9ShvSm+x0BONreWndvj/kfpz+dFeuMLbPkq8yDtXsMnzIx1LOign4andasBue/+8 CIVngIJLQCjp8BSUIOkvrKulwdVVIM6mGXIq/Pd9EeEJVe0MrQbb5Akjwy+vK/96 UxqmcHGCZfiY65CJMDha0AyRLLp1ba/efDQYXvjGZEU7EZ45hQEW1mVTMYCS7nZP FevcLARSNd+aFP5741d6JsOKRf45xC/fGtTDb3A9EzCro8y0cYZlHFmTmaJWIohI CzBYNNsjGtM87HAm5jye8coXeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA78Gljj 3sPwH9xwct+bMDiIBy1YMB8GA1UdIwQYMBaAFOpRziClnkK4xx0mqmuIZpDNFSmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREZCNy9BNTFFQzU4NDE0 MEExMUVCOTYzNkZGMjJDNEY5QUUwMi82bEhPSUtXZVFyakhIU2FxYTRobWtNMFZL WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZsSE9JS1dlUXJqSEhTYXFhNGhta00wVktZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REZCNy9BNTFFQzU4NDE0MEExMUVCOTYzNkZGMjJDNEY5QUUwMi82bEhPSUtXZVFy akhIU2FxYTRobWtNMFZLWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANJDxthsJRgjRpQN07FMav8Qfy1RJMz9x2xzh4HYUWFDsVEP+SM87l TfzFEIhnYMNqjZXKRyHmBo+Z9M9TMKdMJE3FcBCYRGyh+uqRkOo5JUm5Gw2NfAop tn4U+ByR7CaZVWTydmxneBw/rZGhQbFdpDnfq3jVbGLIttVGjCfG09W2h9iutxxp AaFnelXLwf3IAnYdcfpx5KbqSWxmWEo2wwRXhgziyTSuQk290xBkJTqQWKyvY/Cg RC3UByCYafSSOO32YBw2n6bgya74GforW50Sx1QH19LoE1Bbp5+fTxjcXeFf26B1 zMydz9z3UZPU/I5tlIVNX3xgamjlFz98 -----END CERTIFICATE-----Generated at Thu Apr 25 00:31:23 2024 by rpki-client on console-fra.rpki-client.org