$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json) Hash identifier: G80liyI33bG/P0+jWeC3fzqZqh4FjXW66DkUtgTEBsI= Subject key identifier: 6A:B4:61:F0:B4:02:BA:AD:81:6B:8F:5A:1D:3F:0F:7C:8B:81:72:78 Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft Manifest number: 0607 Signing time: Fri 22 Nov 2024 22:15:12 +0000 Manifest this update: Fri 22 Nov 2024 22:15:11 +0000 Manifest next update: Fri 29 Nov 2024 22:15:11 +0000 Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: GSazhxGDtw1GqIIMmr0Js4uAQ4/QsVfNn7WCRG/Z6/I=) 2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: 9X7s4Zr8J67+2NJv1oqimpUYFSW3VJpeiZEh6uYKUO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Validity Not Before: Nov 22 22:15:11 2024 GMT Not After : Nov 29 22:15:11 2024 GMT Subject: CN=67410270-61ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:9f:b0:af:1e:60:06:d7:ef:c9:05:fb:94: 12:9b:fe:69:b8:8f:b4:06:35:fd:de:4a:68:c9:c4: 12:2d:93:e6:ff:bb:ec:9d:12:ef:48:76:e9:b3:7c: 89:d9:23:7c:14:8b:be:56:f4:53:0c:5d:74:84:a1: 55:7d:c2:74:82:02:2a:2e:c2:02:7c:00:6b:66:e8: 19:e3:22:36:e0:39:f5:f7:52:a4:dd:33:f4:d8:cd: 22:43:8f:99:10:86:13:67:b0:6b:67:10:83:a5:b2: 18:a9:6f:39:77:d1:5e:79:c4:52:88:fa:eb:b1:b2: 3a:8e:2a:da:ec:ae:31:47:a3:27:1f:71:92:dc:6b: b1:e7:41:52:34:40:bd:8b:0b:31:7a:b1:36:ac:d5: d6:7e:12:db:55:0d:3d:40:7a:0b:17:b3:8d:82:3c: be:79:22:c6:6f:36:5e:4f:cc:f4:c7:2a:f2:fe:98: 08:25:c1:dd:14:68:61:7a:b9:10:11:94:db:8f:4c: 85:c5:f5:82:d4:54:45:0c:5d:8a:fa:19:95:2f:51: 0e:40:65:eb:b1:75:a3:1d:d5:49:c3:d4:7d:bf:73: bb:37:ff:b1:72:b7:01:c3:27:a4:f7:cc:29:a1:26: 0b:23:1d:26:ee:85:bb:49:51:a0:22:b0:94:9c:62: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B4:61:F0:B4:02:BA:AD:81:6B:8F:5A:1D:3F:0F:7C:8B:81:72:78 X509v3 Authority Key Identifier: keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:5a:7d:42:5a:f8:f3:e6:04:1b:e7:96:04:95:8e:98:e7:ea: 28:11:7e:ed:54:7e:f6:55:79:91:d1:2c:d7:fb:92:75:49:9b: d6:3e:cb:2c:f5:6a:00:fa:43:11:f0:19:2c:a4:b1:81:3a:58: 85:1f:bb:81:33:79:ec:c4:b9:ca:65:d3:63:a7:56:c3:a7:fe: a0:32:ec:e1:32:53:f1:ea:4a:f9:be:7c:65:cd:e8:24:59:1d: 6f:e2:f8:19:b1:01:d5:04:d7:dc:a3:6c:77:81:2f:85:9c:18: a4:c4:b9:a3:9c:82:86:2d:df:bc:b7:5e:d8:da:d7:3e:2f:48: bf:dc:f7:29:5b:7e:c7:19:8d:c9:50:d4:33:f4:9d:07:c3:ad: f9:05:2b:83:ce:00:24:a2:a7:d3:a3:1f:2a:85:d7:08:33:e3: bd:88:ef:76:ba:6a:6a:0a:db:a5:8f:5f:70:b3:8a:b8:07:58: 8a:77:81:4f:4d:2b:87:87:7a:01:e0:73:dc:a0:5a:9a:38:77: 1a:dd:52:a6:33:e8:38:fa:05:07:1d:b3:a6:30:2d:bb:e7:62: 83:e3:1e:42:c5:46:2b:b2:98:31:df:1d:13:40:90:90:d8:4f: 4b:06:67:67:09:9e:72:e7:0e:d1:9c:d9:28:61:84:9b:90:0e: 0d:24:68:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE NEU0MDA1REQwHhcNMjQxMTIyMjIxNTExWhcNMjQxMTI5MjIxNTExWjAYMRYwFAYD VQQDEw02NzQxMDI3MC02MWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv26fsK8eYAbX78kF+5QSm/5puI+0BjX93kpoycQSLZPm/7vsnRLvSHbps3yJ 2SN8FIu+VvRTDF10hKFVfcJ0ggIqLsICfABrZugZ4yI24Dn191Kk3TP02M0iQ4+Z EIYTZ7BrZxCDpbIYqW85d9FeecRSiPrrsbI6jira7K4xR6MnH3GS3Gux50FSNEC9 iwsxerE2rNXWfhLbVQ09QHoLF7ONgjy+eSLGbzZeT8z0xyry/pgIJcHdFGhherkQ EZTbj0yFxfWC1FRFDF2K+hmVL1EOQGXrsXWjHdVJw9R9v3O7N/+xcrcBwyek98wp oSYLIx0m7oW7SVGgIrCUnGJIDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGq0YfC0 ArqtgWuPWh0/D3yLgXJ4MB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNWn1CWvjz5gQb55YElY6Y5+ooEX7tVH72VXmR0SzX+5J1SZvWPsss 9WoA+kMR8BkspLGBOliFH7uBM3nsxLnKZdNjp1bDp/6gMuzhMlPx6kr5vnxlzegk WR1v4vgZsQHVBNfco2x3gS+FnBikxLmjnIKGLd+8t17Y2tc+L0i/3PcpW37HGY3J UNQz9J0Hw635BSuDzgAkoqfTox8qhdcIM+O9iO92umpqCtulj19ws4q4B1iKd4FP TSuHh3oB4HPcoFqaOHca3VKmM+g4+gUHHbOmMC2752KD4x5CxUYrspgx3x0TQJCQ 2E9LBmdnCZ5y5w7RnNkoYYSbkA4NJGhl -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org