$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: 6G4K1WKzSRarnbd/ne+qfgw39dPiOkmnEe+u8P9cyeE= Subject key identifier: E9:D2:F2:E7:4C:1F:29:DF:AA:5E:EB:4C:6D:EC:11:5D:43:1C:28:97 Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 038B Signing time: Sat 23 Nov 2024 00:22:08 +0000 Manifest this update: Sat 23 Nov 2024 00:22:07 +0000 Manifest next update: Sat 30 Nov 2024 00:22:07 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: a3dY9JVYL8/QfFr+euJb+LOazX9kL7Z7Jfrrzd77hGU=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: 0enjz6SIbauvQ9h6jwc2NEiXIAcjMM9tvz5AS5aCRh4=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: c2QsjvxJtydLLoad0ereLNJmmVF8IBQhrQgpfGdgdxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Nov 23 00:22:07 2024 GMT Not After : Nov 30 00:22:07 2024 GMT Subject: CN=67412030-2be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:29:46:60:e8:20:1f:a3:50:a3:4f:c4:25: d5:d7:66:5c:96:f8:09:4d:80:e2:5e:11:da:ec:c3: 04:51:9e:3c:ba:ee:34:a1:c4:91:90:63:9f:07:bd: bc:91:12:8f:eb:f1:9b:ce:6d:5f:4e:c8:cb:17:a3: d0:80:a8:63:71:9e:fb:d8:d3:d7:35:a3:ea:36:b0: 03:49:e1:3c:1b:68:c3:57:a2:ca:55:df:76:a3:e5: da:21:c0:3d:9e:19:cb:08:57:a8:8d:44:a8:1c:c0: 72:8e:a5:6e:38:07:a7:ff:fa:f7:15:f5:79:78:f2: 89:ec:81:c9:2f:c7:b9:64:68:28:0c:ed:b3:2b:83: 26:cd:5b:2d:bf:b5:5b:20:18:20:92:89:c0:63:b9: 1d:8e:45:23:70:43:30:b4:a8:b2:74:a4:2f:64:eb: ab:da:80:f4:b7:e4:dd:08:84:3d:81:36:94:ce:a1: 97:12:de:91:20:39:50:af:eb:61:20:26:73:ae:d2: 5e:ba:11:c7:f0:b1:03:3e:6c:c1:d0:a9:8c:d7:58: 7e:f1:13:59:77:c2:fe:dc:d9:28:c3:67:40:e5:60: 72:e6:6e:bc:2d:27:45:c4:6b:c4:45:35:55:e5:4e: eb:77:f9:c2:6f:9f:19:07:2e:bd:d5:c3:8f:8b:33: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:F2:E7:4C:1F:29:DF:AA:5E:EB:4C:6D:EC:11:5D:43:1C:28:97 X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:72:d0:52:e9:34:92:01:41:b9:99:dc:a7:04:7f:d5:f8:95: 55:a2:bb:a1:38:1e:47:00:34:0f:ff:d9:04:95:1f:e4:dd:d8: 90:aa:2a:07:09:35:9e:9f:bc:f5:64:d4:98:68:8d:7c:bb:12: 07:2f:00:6a:07:6e:ff:52:e5:5f:c8:64:ff:a7:82:93:39:02: c7:ff:fc:11:be:a3:a1:80:f0:f3:60:5e:1e:58:ae:48:1d:c9: 40:fa:6e:42:6e:d1:df:b0:58:36:c1:c7:21:f6:c1:94:9f:a7: b1:89:60:9a:ee:7e:a1:a3:ae:bc:53:12:91:68:6c:d4:d9:d0: d2:d0:3a:db:fa:60:7a:7a:ce:10:41:64:fc:eb:96:14:32:57: 47:78:ca:38:12:78:3d:f4:5c:02:4a:39:8f:18:05:43:1c:05: 16:a8:6a:67:51:e2:40:d2:8f:82:c0:78:2a:1e:09:e0:61:1f: 30:74:f2:5a:39:ae:8d:81:98:ea:eb:00:82:ab:09:02:27:bb: 8b:9c:d0:8f:c1:1d:0d:33:5b:01:63:53:ae:cf:2c:1c:11:cd: b2:9f:eb:96:b1:f0:ac:85:74:13:0f:99:6e:c2:22:86:fe:e9: 68:64:32:68:66:19:8c:43:cc:26:ea:6c:b7:dd:f1:52:8d:0f: 5e:17:97:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjQxMTIzMDAyMjA3WhcNMjQxMTMwMDAyMjA3WjAYMRYwFAYD VQQDEw02NzQxMjAzMC0yYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5c4pRmDoIB+jUKNPxCXV12ZclvgJTYDiXhHa7MMEUZ48uu40ocSRkGOfB728 kRKP6/Gbzm1fTsjLF6PQgKhjcZ772NPXNaPqNrADSeE8G2jDV6LKVd92o+XaIcA9 nhnLCFeojUSoHMByjqVuOAen//r3FfV5ePKJ7IHJL8e5ZGgoDO2zK4MmzVstv7Vb IBggkonAY7kdjkUjcEMwtKiydKQvZOur2oD0t+TdCIQ9gTaUzqGXEt6RIDlQr+th ICZzrtJeuhHH8LEDPmzB0KmM11h+8RNZd8L+3Nkow2dA5WBy5m68LSdFxGvERTVV 5U7rd/nCb58ZBy691cOPizMt/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnS8udM Hynfql7rTG3sEV1DHCiXMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/ctBS6TSSAUG5mdynBH/V+JVVoruhOB5HADQP/9kElR/k3diQqioH CTWen7z1ZNSYaI18uxIHLwBqB27/UuVfyGT/p4KTOQLH//wRvqOhgPDzYF4eWK5I HclA+m5CbtHfsFg2wcch9sGUn6exiWCa7n6ho668UxKRaGzU2dDS0Drb+mB6es4Q QWT865YUMldHeMo4Eng99FwCSjmPGAVDHAUWqGpnUeJA0o+CwHgqHgngYR8wdPJa Oa6NgZjq6wCCqwkCJ7uLnNCPwR0NM1sBY1OuzywcEc2yn+uWsfCshXQTD5luwiKG /uloZDJoZhmMQ8wm6my33fFSjQ9eF5eJ -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org