$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json) Hash identifier: rcd7bE0jLhHX1DmrIxYRaZWKITM+WnLCkJ/QrqNk6AA= Subject key identifier: 49:DF:C4:8E:F5:96:C8:83:71:D2:F2:C2:75:2B:0B:D9:CC:F8:DA:1D Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Certificate serial: 0CE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft Manifest number: 0CDA Signing time: Fri 22 Nov 2024 18:02:22 +0000 Manifest this update: Fri 22 Nov 2024 18:02:21 +0000 Manifest next update: Fri 29 Nov 2024 18:02:21 +0000 Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: e/aYzPIA6W8eE5R5gIDOn9/TtMcsEo3gyGueRBQekkA=) 2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: mbBxOC4AR4Py/kqSr6p/HUSw4E4voxLVh0FwxIMWx+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Validity Not Before: Nov 22 18:02:21 2024 GMT Not After : Nov 29 18:02:21 2024 GMT Subject: CN=6740c72e-9bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:68:8e:65:d3:da:14:e1:06:f2:78:b0:d4:3f: 72:74:3a:5f:16:76:13:82:71:ea:d4:b3:d0:53:52: ea:8a:95:f5:42:b3:79:63:72:af:c8:2d:d6:dd:67: c2:a8:16:50:1a:54:65:16:9a:b9:06:d2:e7:87:02: 72:5a:1f:ee:a3:16:c5:77:78:ce:84:96:ee:74:24: d8:8a:7b:89:10:3f:f1:d0:4b:3b:d4:2a:4d:1f:c6: 01:9c:96:a4:f9:dd:23:39:36:d4:fd:4b:eb:41:3d: 06:7a:a1:0f:92:4e:6b:45:4e:f6:43:cf:cd:10:b3: 34:cc:9d:6d:70:cd:14:9e:21:12:d0:71:7f:f3:2c: 97:89:82:3f:74:b6:f9:76:c8:11:60:fc:bc:fd:a7: 5f:df:1f:a6:dd:f8:de:a2:59:fe:80:a3:e8:3e:ac: 2a:7b:5d:aa:bf:ee:1d:e8:39:8c:f5:80:90:dc:bc: e6:c5:86:44:9b:c2:5f:f7:18:6c:01:b4:c4:60:ae: 8e:ed:08:26:4a:9a:20:2b:64:57:9a:5c:19:09:40: ef:10:05:47:91:b9:c3:a1:1f:80:a1:6c:dc:12:19: 65:24:1c:27:e4:d5:c5:32:e0:c8:57:bf:a7:c8:a2: 52:c4:8a:ae:f8:36:22:75:06:88:9f:ba:bd:13:fe: c0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DF:C4:8E:F5:96:C8:83:71:D2:F2:C2:75:2B:0B:D9:CC:F8:DA:1D X509v3 Authority Key Identifier: keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d5:97:14:9c:10:d4:d0:5e:8e:1b:11:de:68:07:f2:d2:8b: 2b:4b:60:c3:8a:08:d5:66:a5:06:db:90:66:23:ec:af:02:45: ca:a6:e1:b7:2d:a2:43:a7:99:f5:f1:c7:44:02:44:4b:9d:95: d3:b5:c6:78:43:f8:f0:c7:63:ea:e7:de:30:b5:0f:79:6c:a3: 01:72:c2:aa:88:33:09:81:61:ac:71:6d:6e:3b:7e:b7:b6:ba: 5f:2c:97:a4:3d:02:f0:82:d9:ff:29:66:74:58:0c:0c:98:b6: 5b:0c:7e:cf:c5:3c:57:b1:1c:8f:3b:e5:8c:8c:28:7e:b8:60: a2:92:66:11:f4:3c:8a:c5:31:e0:0a:0a:40:0a:b5:95:de:e3: cb:2b:30:9e:04:62:1c:dd:03:45:0b:89:0c:4e:9a:9e:5a:e4: 7c:91:bd:0b:61:8d:2d:e8:9c:66:70:da:d2:2e:e7:98:a2:63: 92:6f:24:c2:cb:b2:ff:c0:cf:df:94:f3:7a:33:c4:bb:21:14: 5d:20:53:b5:29:d6:1c:24:db:03:85:0f:5b:79:15:55:4f:10: 2d:63:83:35:6a:ba:9c:8e:f9:7e:e7:49:6a:88:53:d4:5f:82: 62:75:a9:51:16:26:7d:d1:93:37:15:08:e6:23:7e:98:fc:7a: f8:c2:4c:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB RTVBMjhGNjAwHhcNMjQxMTIyMTgwMjIxWhcNMjQxMTI5MTgwMjIxWjAYMRYwFAYD VQQDEw02NzQwYzcyZS05YmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82iOZdPaFOEG8niw1D9ydDpfFnYTgnHq1LPQU1LqipX1QrN5Y3KvyC3W3WfC qBZQGlRlFpq5BtLnhwJyWh/uoxbFd3jOhJbudCTYinuJED/x0Es71CpNH8YBnJak +d0jOTbU/UvrQT0GeqEPkk5rRU72Q8/NELM0zJ1tcM0UniES0HF/8yyXiYI/dLb5 dsgRYPy8/adf3x+m3fjeoln+gKPoPqwqe12qv+4d6DmM9YCQ3LzmxYZEm8Jf9xhs AbTEYK6O7QgmSpogK2RXmlwZCUDvEAVHkbnDoR+AoWzcEhllJBwn5NXFMuDIV7+n yKJSxIqu+DYidQaIn7q9E/7AgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnfxI71 lsiDcdLywnUrC9nM+NodMB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1 MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf1ZcUnBDU0F6OGxHeaAfy0osrS2DDigjVZqUG25BmI+yvAkXKpuG3 LaJDp5n18cdEAkRLnZXTtcZ4Q/jwx2Pq594wtQ95bKMBcsKqiDMJgWGscW1uO363 trpfLJekPQLwgtn/KWZ0WAwMmLZbDH7PxTxXsRyPO+WMjCh+uGCikmYR9DyKxTHg CgpACrWV3uPLKzCeBGIc3QNFC4kMTpqeWuR8kb0LYY0t6JxmcNrSLueYomOSbyTC y7L/wM/flPN6M8S7IRRdIFO1KdYcJNsDhQ9beRVVTxAtY4M1arqcjvl+50lqiFPU X4JidalRFiZ90ZM3FQjmI36Y/Hr4wkzw -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org