$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft File: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json) Hash identifier: CG7i5BbImhq5Kq4l41qUl0ghnnfq1J0aNg3BC3N7/jY= Subject key identifier: 22:3F:68:E8:FD:0E:5D:A7:33:C1:84:37:93:0F:F2:B8:7C:78:49:4A Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Certificate serial: 0A77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft Manifest number: 0A70 Signing time: Fri 22 Nov 2024 19:24:09 +0000 Manifest this update: Fri 22 Nov 2024 19:24:08 +0000 Manifest next update: Fri 29 Nov 2024 19:24:08 +0000 Files and hashes: 1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: xakRt0m3E0oYfKXA6AZXzS7/8fcJ0YUUMSeF/bzHm9k=) 2: ECF9537C4FFE11EAA0E4ED42C4F9AE02.roa (hash: qBJ9Hui8D/xfnc4gS3fUXH8yHgH+HKK08Jtmay7yEw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2679 (0xa77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Validity Not Before: Nov 22 19:24:08 2024 GMT Not After : Nov 29 19:24:08 2024 GMT Subject: CN=6740da58-dd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f5:63:33:d6:75:ad:7c:8d:d2:02:76:f7:42: 2f:5a:d7:af:57:92:7b:55:8b:28:67:72:b6:29:f3: 7f:82:4f:27:70:0b:c3:ed:ed:8e:50:b2:11:a0:d1: 98:e9:d4:6b:13:4f:77:e7:e2:04:b1:f5:3e:17:78: 42:65:fa:82:77:af:41:a6:79:87:c3:ee:af:25:e5: b4:38:fa:74:49:70:d7:03:70:57:46:91:fc:cf:25: c9:48:1d:39:39:a0:2d:7d:dc:ee:02:86:01:c1:a1: 07:2c:8a:67:2a:1a:cb:21:3b:f9:6f:2a:39:13:6a: fe:a3:15:82:95:d8:d0:9d:7f:35:96:bd:21:25:0e: b8:73:28:9a:f9:b3:10:2a:66:7c:28:5c:22:07:06: fd:05:fd:94:6f:87:d5:81:3d:0c:88:10:da:c6:f6: 60:7b:42:27:80:74:39:ae:be:d9:82:71:a9:46:4c: 3b:7b:f0:36:f6:4d:db:ca:b6:a4:df:72:9c:05:aa: 8f:a0:05:ab:49:7b:4f:54:71:ef:b2:ee:9f:a6:54: 28:e3:0f:a7:41:ca:6b:00:93:15:69:66:15:87:fe: f1:f5:c2:3f:7e:9b:d8:42:af:d3:11:71:ac:b0:78: 5c:ad:4e:c0:19:56:7d:32:09:92:1e:c5:01:35:02: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3F:68:E8:FD:0E:5D:A7:33:C1:84:37:93:0F:F2:B8:7C:78:49:4A X509v3 Authority Key Identifier: keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ab:c6:ae:88:6b:04:02:fc:99:7e:cc:81:0a:d0:74:48:1c: fb:56:6d:8d:e0:29:49:7f:d2:3d:da:9e:d6:34:22:04:0e:97: 40:ba:38:d3:57:57:c0:6d:0f:ec:c6:97:3a:4a:dc:b0:b4:3a: a3:b0:7c:3f:19:66:c4:c7:93:62:7d:db:ad:5f:8f:2d:bd:c5: 47:42:de:b1:03:29:f3:7c:35:4f:b1:a8:fd:53:c3:6e:e4:c0: 51:7b:60:54:97:5d:1d:46:21:65:7b:92:5f:77:bf:5d:9b:c3: 2f:ef:af:67:7a:7a:3a:74:19:36:30:47:f4:f4:ad:41:f5:5b: e1:ac:7b:3a:5a:7c:1d:16:e7:fd:84:4f:bc:31:df:c8:69:0a: 58:32:ae:3b:6b:32:65:b9:5c:6f:1e:d0:0a:f1:06:48:3d:0b: 17:63:98:a2:61:fd:f3:be:2d:65:ab:06:96:e2:f2:3a:82:a5: 86:e7:95:a2:73:87:ee:42:4f:22:90:70:c0:9a:69:d4:ac:cb: 59:32:dc:f5:ac:d6:59:6c:02:69:e0:1b:7f:1c:2c:e8:a9:b1: c5:e5:da:23:d8:4e:9b:f6:ef:b5:9c:e2:a5:db:cf:9e:3f:ff: 4f:db:54:d0:08:ce:b3:60:32:00:74:b1:f7:62:8a:06:cf:ef: 9e:21:55:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3 NTM0QzQ3MzAwHhcNMjQxMTIyMTkyNDA4WhcNMjQxMTI5MTkyNDA4WjAYMRYwFAYD VQQDEw02NzQwZGE1OC1kZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vVjM9Z1rXyN0gJ290IvWtevV5J7VYsoZ3K2KfN/gk8ncAvD7e2OULIRoNGY 6dRrE0935+IEsfU+F3hCZfqCd69BpnmHw+6vJeW0OPp0SXDXA3BXRpH8zyXJSB05 OaAtfdzuAoYBwaEHLIpnKhrLITv5byo5E2r+oxWCldjQnX81lr0hJQ64cyia+bMQ KmZ8KFwiBwb9Bf2Ub4fVgT0MiBDaxvZge0IngHQ5rr7ZgnGpRkw7e/A29k3byrak 33KcBaqPoAWrSXtPVHHvsu6fplQo4w+nQcprAJMVaWYVh/7x9cI/fpvYQq/TEXGs sHhcrU7AGVZ9MgmSHsUBNQLKOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI/aOj9 Dl2nM8GEN5MP8rh8eElKMB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTFCRS83MDA4NDc3RTRENjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4 TXhubkhJRWRoUVIxTk1SekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoq8auiGsEAvyZfsyBCtB0SBz7Vm2N4ClJf9I92p7WNCIEDpdAujjT V1fAbQ/sxpc6StywtDqjsHw/GWbEx5NifdutX48tvcVHQt6xAynzfDVPsaj9U8Nu 5MBRe2BUl10dRiFle5Jfd79dm8Mv769neno6dBk2MEf09K1B9VvhrHs6WnwdFuf9 hE+8Md/IaQpYMq47azJluVxvHtAK8QZIPQsXY5iiYf3zvi1lqwaW4vI6gqWG55Wi c4fuQk8ikHDAmmnUrMtZMtz1rNZZbAJp4Bt/HCzoqbHF5doj2E6b9u+1nOKl28+e P/9P21TQCM6zYDIAdLH3YooGz++eIVXN -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org