$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: pjqRGbmhGmqa31yahUiPFEFw/lNVW94GMc2bl2JD0rQ= Subject key identifier: 15:DE:FC:41:D3:5D:BD:CC:A6:D3:A9:78:D6:7B:3D:57:56:A0:A6:4C Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 10D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 10CA Signing time: Fri 22 Nov 2024 17:19:01 +0000 Manifest this update: Fri 22 Nov 2024 17:19:00 +0000 Manifest next update: Fri 29 Nov 2024 17:19:00 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: q2E4uU+IKFuM9LpAciVF3mjZKsOx+9ZP/lkph6R8+SQ=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4311 (0x10d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Nov 22 17:19:00 2024 GMT Not After : Nov 29 17:19:00 2024 GMT Subject: CN=6740bd05-4f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:e6:cf:49:e7:d4:7a:bd:97:33:9e:0c:a9: 54:20:95:4f:d9:e5:5d:52:b1:11:65:0e:34:db:aa: 37:b5:10:b8:ec:8a:e8:74:db:28:8f:58:d6:8c:ff: 57:79:d3:85:1d:e6:fd:b3:56:29:06:72:b5:d7:96: 47:7a:72:8a:59:d5:35:a9:6e:2c:ec:4e:e4:a8:c4: 4d:5e:37:ee:36:27:c2:02:6c:3d:e3:c0:99:c3:e1: 90:ee:b4:c0:b6:1d:d5:db:4e:ab:98:6e:c4:0b:b5: 08:53:bb:97:56:51:c1:f1:df:68:50:4e:66:d1:87: b9:69:9d:b4:bb:42:3d:c6:2b:c4:9b:b3:e0:08:0e: 0d:15:9b:b0:bc:6f:cf:12:72:d6:41:c8:a6:93:62: 8a:fc:a9:76:55:79:8d:c0:4a:70:96:eb:ae:af:3c: 74:f6:f7:3b:d9:4e:d2:95:a0:46:0b:5a:88:3a:e6: 76:31:8d:8e:eb:35:c9:08:8c:10:e4:4d:f2:d5:55: 0a:5a:4b:7c:8c:bb:60:81:3f:b9:b7:a2:87:6b:5c: 75:d9:74:1a:2b:1f:21:24:7f:3c:29:92:3a:82:f5: 37:b0:c5:fc:97:85:9e:78:9f:dd:67:cf:48:99:df: 01:39:d5:5a:ef:81:69:0e:a9:de:7a:26:e4:c4:54: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:FC:41:D3:5D:BD:CC:A6:D3:A9:78:D6:7B:3D:57:56:A0:A6:4C X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:5c:ea:5c:80:47:6a:6f:aa:bf:4d:74:23:d8:44:13:7b:22: c0:60:dc:38:3d:ca:53:b0:4d:aa:8a:81:0f:20:d9:56:43:32: be:09:84:3e:a8:d1:49:e9:07:4c:7a:85:e0:9b:21:5a:c5:ac: 31:06:0e:26:59:24:31:23:fb:4d:d0:5a:a8:d9:60:79:8d:72: e0:b5:94:59:8c:b6:67:af:1d:7c:a6:ec:0e:a0:37:35:b1:35: cd:f3:51:95:1a:b5:31:3d:68:76:85:82:f1:f9:69:6f:00:a7: 62:1a:ef:89:cd:32:9d:e0:da:20:36:da:df:2f:4d:76:7d:50: 17:03:ae:52:f0:9e:84:64:d2:9e:b3:0f:88:e6:aa:2f:a1:a7: d0:da:36:a3:a6:72:1f:1b:5d:c3:2b:6a:06:00:bd:5d:6c:07: 60:1d:31:3e:dd:1d:80:a8:49:c3:ec:97:e0:57:60:e1:01:cb: 10:63:1c:4d:eb:27:99:d7:a0:04:67:39:c0:c1:d3:dd:90:73: 6e:9f:56:df:ed:71:a5:15:c1:f8:ca:fa:52:fc:98:06:89:e6: 66:3b:d3:84:c5:c2:60:2f:89:48:e1:ab:86:82:03:d1:b6:f0: ae:ca:16:99:e0:20:1d:d7:9d:e1:f4:58:be:1d:b7:35:c4:1f: 8a:c4:99:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjQxMTIyMTcxOTAwWhcNMjQxMTI5MTcxOTAwWjAYMRYwFAYD VQQDEw02NzQwYmQwNS00ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtDmz0nn1Hq9lzOeDKlUIJVP2eVdUrERZQ4026o3tRC47IrodNsoj1jWjP9X edOFHeb9s1YpBnK115ZHenKKWdU1qW4s7E7kqMRNXjfuNifCAmw948CZw+GQ7rTA th3V206rmG7EC7UIU7uXVlHB8d9oUE5m0Ye5aZ20u0I9xivEm7PgCA4NFZuwvG/P EnLWQcimk2KK/Kl2VXmNwEpwluuurzx09vc72U7SlaBGC1qIOuZ2MY2O6zXJCIwQ 5E3y1VUKWkt8jLtggT+5t6KHa1x12XQaKx8hJH88KZI6gvU3sMX8l4WeeJ/dZ89I md8BOdVa74FpDqneeibkxFQKYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXe/EHT Xb3MptOpeNZ7PVdWoKZMMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDXOpcgEdqb6q/TXQj2EQTeyLAYNw4PcpTsE2qioEPINlWQzK+CYQ+ qNFJ6QdMeoXgmyFaxawxBg4mWSQxI/tN0Fqo2WB5jXLgtZRZjLZnrx18puwOoDc1 sTXN81GVGrUxPWh2hYLx+WlvAKdiGu+JzTKd4NogNtrfL012fVAXA65S8J6EZNKe sw+I5qovoafQ2jajpnIfG13DK2oGAL1dbAdgHTE+3R2AqEnD7JfgV2DhAcsQYxxN 6yeZ16AEZznAwdPdkHNun1bf7XGlFcH4yvpS/JgGieZmO9OExcJgL4lI4auGggPR tvCuyhaZ4CAd153h9Fi+Hbc1xB+KxJlp -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org