$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft File: 6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json) Hash identifier: GaK7doYK2NvMZPO4COZkiMQihDozhymfm+ThQwd/w2w= Subject key identifier: 58:A3:FC:9E:11:61:8A:FC:23:B9:48:0D:6B:BC:5B:48:8F:2E:96:9A Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft Manifest number: BE Signing time: Sat 23 Nov 2024 04:02:37 +0000 Manifest this update: Sat 23 Nov 2024 04:02:37 +0000 Manifest next update: Sat 30 Nov 2024 04:02:37 +0000 Files and hashes: 1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: KmJXVzAGxAZMqE+jUP+GpTQMwO1N8GG0tMN2twgvqi8=) 2: 5F57D01A5EA511EFB0E1B468C4F9AE02.roa (hash: dNtSLmbPQl6n7qJUeH+z2I4vNRh8gF+hIvNTsqOdqPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Validity Not Before: Nov 23 04:02:37 2024 GMT Not After : Nov 30 04:02:37 2024 GMT Subject: CN=674153dd-2efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:b3:69:9f:1e:60:f4:b1:cf:5c:cc:7a:3e: 21:35:c2:9d:a5:67:50:fd:df:65:3b:e4:e5:63:ad: 28:86:23:7a:f0:fd:3d:c4:56:60:fb:1f:5e:ce:49: a0:aa:dd:04:ad:c0:69:1a:26:89:40:c3:d1:b5:93: cf:d8:d8:d5:45:10:ca:ef:06:05:9c:5c:0d:9d:12: 29:44:52:a1:98:27:a0:72:1d:01:88:a2:47:b7:c6: fb:ed:08:3a:f8:b3:6d:7b:49:70:cc:47:3a:d7:d2: 42:11:68:b1:a9:55:e8:a0:d8:9f:15:ef:de:34:44: 52:af:e4:07:45:b0:d4:30:a4:75:4a:ea:a2:05:fe: 40:82:8e:ba:71:86:44:2f:d8:7d:1a:3b:e3:bd:14: 2b:49:bd:3e:ff:63:07:9a:d6:d0:17:f0:00:bd:08: 4a:d4:78:e8:cf:8c:2b:a9:3a:f6:f1:52:a2:4c:2a: 8d:2b:c5:c9:02:5f:95:00:d9:13:a8:12:7d:7d:44: c3:01:9c:62:a4:79:28:17:65:60:6b:62:6d:76:e9: e0:54:51:6c:57:aa:c0:c2:c2:bd:20:02:28:35:c4: 24:e3:5d:01:1b:44:1c:48:b2:a3:0a:72:55:d2:ec: 7a:ce:bd:b4:3f:c6:65:85:94:06:79:15:36:48:2f: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:FC:9E:11:61:8A:FC:23:B9:48:0D:6B:BC:5B:48:8F:2E:96:9A X509v3 Authority Key Identifier: keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8c:7b:83:50:54:8e:a8:86:21:4a:01:d1:63:9f:26:19:95: 24:0d:32:38:3b:04:df:4a:8b:d9:c7:c4:ce:f1:e9:2b:91:8c: c0:f9:a3:b8:5d:a1:91:72:1f:bb:bb:37:f0:59:fc:a4:29:ad: 5c:c6:67:90:64:e6:15:a7:b8:7a:92:2c:af:28:67:24:e1:06: 66:88:c5:23:cb:d4:6a:74:d0:15:69:85:e7:47:fe:a2:5e:a4: b4:0d:48:b3:68:94:16:4e:87:f5:3b:57:32:8f:c4:00:ca:32: ee:60:8a:cc:cf:67:5b:93:c2:06:45:08:4a:4d:70:a6:b7:e0: c6:ec:7a:65:dc:1e:30:dc:19:5f:ed:5b:85:f3:98:03:ee:f8: b5:c5:e6:83:f7:2c:03:63:69:c4:2c:e1:95:ea:57:51:14:94: 7e:89:44:6b:de:00:4c:b3:3f:09:c3:17:a5:b7:d7:67:5a:3b: fb:de:03:a9:cf:bb:6d:82:2d:4c:1d:ba:a8:ac:4a:3b:1a:bb: bd:88:8e:2d:8f:4d:3c:17:6f:8a:3b:a6:4b:1a:60:3c:7b:9e: 82:1d:cc:a9:f0:d4:71:32:30:a8:12:ae:3b:a0:51:a5:24:b6: c7:14:9f:73:d6:aa:f4:ad:ce:37:5a:d1:4b:00:79:d4:95:f3: 12:0d:55:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwREUxMTAvBgNVBAUTKEVBRTJCQ0U4MzVFNDJCMTE1RjE4QjNGRTBFOEYyN0Y4 NEE0NzQ5OTYwHhcNMjQxMTIzMDQwMjM3WhcNMjQxMTMwMDQwMjM3WjAYMRYwFAYD VQQDEw02NzQxNTNkZC0yZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGWzaZ8eYPSxz1zMej4hNcKdpWdQ/d9lO+TlY60ohiN68P09xFZg+x9ezkmg qt0ErcBpGiaJQMPRtZPP2NjVRRDK7wYFnFwNnRIpRFKhmCegch0BiKJHt8b77Qg6 +LNte0lwzEc619JCEWixqVXooNifFe/eNERSr+QHRbDUMKR1SuqiBf5Ago66cYZE L9h9GjvjvRQrSb0+/2MHmtbQF/AAvQhK1Hjoz4wrqTr28VKiTCqNK8XJAl+VANkT qBJ9fUTDAZxipHkoF2Vga2JtdungVFFsV6rAwsK9IAIoNcQk410BG0QcSLKjCnJV 0ux6zr20P8ZlhZQGeRU2SC/TOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFij/J4R YYr8I7lIDWu8W0iPLpaaMB8GA1UdIwQYMBaAFOrivOg15CsRXxiz/g6PJ/hKR0mW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzBERS9FNDc0NDNENjhG RUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRYa0t4RmZHTFAtRG84bi1FcEhT WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ1Szg2RFhrS3hGZkdMUC1EbzhuLUVwSFNaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzBERS9FNDc0NDNENjhGRUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRYa0t4 RmZHTFAtRG84bi1FcEhTWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxjHuDUFSOqIYhSgHRY58mGZUkDTI4OwTfSovZx8TO8ekrkYzA+aO4 XaGRch+7uzfwWfykKa1cxmeQZOYVp7h6kiyvKGck4QZmiMUjy9RqdNAVaYXnR/6i XqS0DUizaJQWTof1O1cyj8QAyjLuYIrMz2dbk8IGRQhKTXCmt+DG7Hpl3B4w3Blf 7VuF85gD7vi1xeaD9ywDY2nELOGV6ldRFJR+iURr3gBMsz8Jwxelt9dnWjv73gOp z7ttgi1MHbqorEo7Gru9iI4tj008F2+KO6ZLGmA8e56CHcyp8NRxMjCoEq47oFGl JLbHFJ9z1qr0rc43WtFLAHnUlfMSDVX7 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org