$ rpki-client -vvf rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft File: T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft (raw, json) Hash identifier: aK8vSy8i3pXjUf5vJ1ebMF4y5hikI0AAlvA1OF4Q1do= Subject key identifier: 6F:C0:C5:0E:F0:69:6C:E7:F5:41:F0:E4:0B:00:C2:81:B4:AC:AF:3E Authority key identifier: 4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58 Certificate issuer: /CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft Manifest number: 0154 Signing time: Sat 23 Nov 2024 02:27:55 +0000 Manifest this update: Sat 23 Nov 2024 02:27:54 +0000 Manifest next update: Sat 30 Nov 2024 02:27:54 +0000 Files and hashes: 1: T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl (hash: PLzHxzBcLKHcIyP8HiQTo6eMfGiMU7z/ebAt6YUxbFk=) 2: 579616F29E5811EDA8C7767AC4F9AE02.roa (hash: fhPglPN99BcJ4iiDYWfFN3cB62mj0DrLuUkOyWWzqXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58 Validity Not Before: Nov 23 02:27:54 2024 GMT Not After : Nov 30 02:27:54 2024 GMT Subject: CN=67413daa-4b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:ad:ec:6e:09:c3:64:d7:e5:06:c1:b6:38: a7:54:68:48:53:16:0d:64:2d:98:95:49:39:1d:0d: b5:b5:e3:c5:8e:f0:76:4c:e1:4f:62:15:18:5f:bd: 71:7c:f5:0a:c4:c6:c9:60:94:fc:8d:63:5f:c8:06: 41:59:e7:78:3d:6d:08:e3:f6:53:f7:f3:ef:dc:25: 42:00:58:ac:16:7b:9f:5c:b2:c0:09:75:6c:26:11: a1:25:be:60:df:df:2a:9b:e6:4a:e4:72:c8:cc:cd: 1e:9b:80:18:9b:c7:3a:8b:2e:ff:cf:f1:49:75:3a: 23:0d:db:aa:45:84:28:26:51:14:fa:72:31:6e:e6: 8a:12:47:49:ad:1b:7e:ba:1b:2b:99:1f:b4:d0:87: 2d:c1:ce:0f:5b:40:75:3f:7b:9c:a6:58:53:25:d4: a3:cc:bb:d7:df:2a:09:c9:65:ef:1c:1b:e2:5c:7c: 63:8c:b1:98:43:5b:c6:f8:b6:4e:fe:a4:20:0e:61: 88:b4:f6:42:8c:ce:b9:db:29:68:40:e2:ba:a5:3b: db:7b:57:b3:af:cb:1f:d5:c5:07:13:53:30:99:77: 36:32:31:83:fd:7c:94:cd:bb:a2:7f:27:8c:22:83: 1a:a4:7e:89:11:3c:db:1d:73:25:18:9f:58:c7:c6: 4b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C0:C5:0E:F0:69:6C:E7:F5:41:F0:E4:0B:00:C2:81:B4:AC:AF:3E X509v3 Authority Key Identifier: keyid:4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:27:57:95:a7:b2:e2:00:14:3d:a7:05:ae:b3:eb:7a:3a:3d: 9b:a5:73:64:3f:08:79:a5:85:9d:9e:56:36:af:63:0d:b9:73: f0:f6:a5:45:16:a5:31:9d:0f:ad:ce:1a:ab:7f:d2:83:62:00: ab:04:00:df:d1:f9:c6:1b:e2:2f:05:ab:70:f7:d0:77:33:b1: 27:47:17:a5:c5:e9:bd:ae:9e:a6:94:b7:ec:84:95:2c:d4:68: 2b:d5:ca:73:04:5b:8c:a3:f4:d1:d6:bf:11:de:1c:7b:43:d4: 45:56:ac:52:46:0c:19:ac:c8:9b:cd:29:51:01:b3:68:01:b7: 1e:01:71:ba:c9:7b:73:19:85:72:8e:47:c3:93:01:cb:3b:5f: bc:1f:d8:aa:03:a7:08:57:bd:8f:32:8a:92:a2:18:50:01:e3: 29:eb:db:7c:ef:33:79:da:f7:ac:8e:de:30:fa:61:9a:3d:7d: cd:ac:06:08:4e:3b:cf:14:f2:2e:c0:b7:ab:f4:47:6c:e4:2f: 2e:0f:95:98:eb:54:d2:90:02:f9:ab:41:97:3f:03:12:87:c5: 1a:78:f7:c5:26:3e:93:c9:f3:14:9b:6c:ae:6c:e5:7a:de:10: 26:61:07:bc:b8:26:ed:fb:9a:74:23:08:4e:bd:0b:a6:26:ad: f6:a7:fa:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0OEMxMTAvBgNVBAUTKDRGQTM2OEE2MkVEMjVDNjI3OEUyM0IxQkZGQTI1MUEx NDlBQTJGNTgwHhcNMjQxMTIzMDIyNzU0WhcNMjQxMTMwMDIyNzU0WjAYMRYwFAYD VQQDEw02NzQxM2RhYS00YjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGmt7G4Jw2TX5QbBtjinVGhIUxYNZC2YlUk5HQ21tePFjvB2TOFPYhUYX71x fPUKxMbJYJT8jWNfyAZBWed4PW0I4/ZT9/Pv3CVCAFisFnufXLLACXVsJhGhJb5g 398qm+ZK5HLIzM0em4AYm8c6iy7/z/FJdTojDduqRYQoJlEU+nIxbuaKEkdJrRt+ uhsrmR+00Ictwc4PW0B1P3ucplhTJdSjzLvX3yoJyWXvHBviXHxjjLGYQ1vG+LZO /qQgDmGItPZCjM652yloQOK6pTvbe1ezr8sf1cUHE1MwmXc2MjGD/XyUzbuifyeM IoMapH6JETzbHXMlGJ9Yx8ZL3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/AxQ7w aWzn9UHw5AsAwoG0rK8+MB8GA1UdIwQYMBaAFE+jaKYu0lxieOI7G/+iUaFJqi9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ4Qy9DNzczMUQyNDlF NTUxMUVEOEQ5MkJENzlDNEY5QUUwMi9UNk5vcGk3U1hHSjQ0anNiXzZKUm9VbXFM MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q2Tm9waTdTWEdKNDRqc2JfNkpSb1VtcUwxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ4Qy9DNzczMUQyNDlFNTUxMUVEOEQ5MkJENzlDNEY5QUUwMi9UNk5vcGk3U1hH SjQ0anNiXzZKUm9VbXFMMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzJ1eVp7LiABQ9pwWus+t6Oj2bpXNkPwh5pYWdnlY2r2MNuXPw9qVF FqUxnQ+tzhqrf9KDYgCrBADf0fnGG+IvBatw99B3M7EnRxelxem9rp6mlLfshJUs 1Ggr1cpzBFuMo/TR1r8R3hx7Q9RFVqxSRgwZrMibzSlRAbNoAbceAXG6yXtzGYVy jkfDkwHLO1+8H9iqA6cIV72PMoqSohhQAeMp69t87zN52vesjt4w+mGaPX3NrAYI TjvPFPIuwLer9Eds5C8uD5WY61TSkAL5q0GXPwMSh8UaePfFJj6TyfMUm2yubOV6 3hAmYQe8uCbt+5p0IwhOvQumJq32p/oI -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org