$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: AHnbXKG/+d9qc2cHj3pVpl/AnKDnQqUXwScD3xDVlBY= Subject key identifier: 7D:1A:F9:88:A6:16:AB:E9:68:C1:52:77:DA:F4:09:CA:6A:2C:88:45 Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: 014D Signing time: Sat 23 Nov 2024 02:29:20 +0000 Manifest this update: Sat 23 Nov 2024 02:29:20 +0000 Manifest next update: Sat 30 Nov 2024 02:29:19 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: 8/RLinf85lMl/c8uzI2OQeSGGsKZAXab1EC9K65OoJc=) 2: 11F911FAA8D811ED90192E3CC4F9AE02.roa (hash: sH6RSBzgF8O7XXFI0vDSzB0+2iLMaRJT/qc++pD4NXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: Nov 23 02:29:20 2024 GMT Not After : Nov 30 02:29:19 2024 GMT Subject: CN=67413e00-3a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7b:65:30:24:e9:ad:f8:b1:ac:d7:b8:b4:01: 2c:49:b0:0d:51:af:91:de:72:5a:12:50:00:70:1a: 11:16:96:82:c6:b1:cc:4f:cf:ff:64:38:c4:f8:c9: 7e:e8:e7:b2:af:91:8e:9f:73:a3:71:d4:f0:9a:09: 19:9c:b9:24:3e:1d:dd:25:71:de:61:1d:0d:ef:2c: 1d:dd:1b:65:56:97:d4:72:9f:ff:08:ab:22:50:00: f6:4d:7d:64:79:91:ae:14:9c:c4:35:6b:93:b4:d4: bd:39:f2:77:df:54:94:0e:d1:e6:31:5d:0d:2f:3b: 4f:49:58:cc:cc:cd:5c:4b:34:5e:de:df:00:19:f1: 94:7d:f7:d1:c5:1b:42:70:bc:94:81:4c:5e:e3:69: 10:45:40:20:17:cc:37:e2:44:27:40:2d:68:5a:5f: 09:ed:ef:c6:a4:c8:07:4a:b0:f5:04:e7:83:96:6c: a9:21:9f:8b:e5:c3:23:ef:63:f5:11:3f:92:49:e9: 2b:d3:dc:d9:06:45:0f:e2:4c:88:8a:9e:ee:de:ce: 33:1c:13:94:22:86:61:27:78:d2:30:b9:c7:8b:05: d4:bd:d3:b8:50:be:f8:96:33:48:3c:75:1c:d6:32: 40:c8:d2:f9:0b:3b:74:cc:5f:84:e3:a3:74:3a:ec: d3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1A:F9:88:A6:16:AB:E9:68:C1:52:77:DA:F4:09:CA:6A:2C:88:45 X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:60:87:db:6a:68:ae:85:6e:74:5a:96:49:14:8d:91:00:ad: 8b:b3:3e:9f:67:10:a2:d4:3e:ef:8e:93:d8:3c:5e:09:c2:61: f6:a4:0a:4e:c9:d7:c1:f5:28:e5:1c:17:f5:4a:bf:81:ae:00: 25:96:a1:95:e0:75:17:8c:cf:53:63:b4:6e:62:b8:3a:17:a4: b3:80:cb:59:dd:6d:97:2e:79:2e:c0:e2:d2:8b:bb:f9:2c:eb: b1:97:f8:2e:cc:98:6d:ab:7b:2e:8b:29:d2:98:bd:81:84:9c: 47:b7:5e:7d:f6:23:c6:bc:0b:ff:3a:2a:cb:4e:42:6f:6d:8c: 91:db:8e:8d:ef:3a:e0:a3:e7:24:b7:ff:bf:6d:b7:ef:28:81: bc:d3:63:d7:6b:67:9d:5e:c4:e6:8f:fd:37:8a:db:95:94:98: 1c:7f:c9:dd:30:b6:6f:3d:89:4a:6c:c2:af:16:db:c6:2a:1f: 27:96:78:da:e6:53:41:d7:13:f2:44:41:03:d1:c4:34:4d:15: 03:8f:fe:49:17:f4:69:be:94:e3:36:b5:f2:26:46:35:2d:6d: a2:43:a4:49:4b:43:c3:13:e0:80:9e:7b:85:69:4e:91:42:b6: ed:b6:d8:c5:e0:55:60:db:35:5e:9d:26:01:cf:e4:7f:26:58: 26:3a:ba:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjQxMTIzMDIyOTIwWhcNMjQxMTMwMDIyOTE5WjAYMRYwFAYD VQQDEw02NzQxM2UwMC0zYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XtlMCTprfixrNe4tAEsSbANUa+R3nJaElAAcBoRFpaCxrHMT8//ZDjE+Ml+ 6Oeyr5GOn3OjcdTwmgkZnLkkPh3dJXHeYR0N7ywd3RtlVpfUcp//CKsiUAD2TX1k eZGuFJzENWuTtNS9OfJ331SUDtHmMV0NLztPSVjMzM1cSzRe3t8AGfGUfffRxRtC cLyUgUxe42kQRUAgF8w34kQnQC1oWl8J7e/GpMgHSrD1BOeDlmypIZ+L5cMj72P1 ET+SSekr09zZBkUP4kyIip7u3s4zHBOUIoZhJ3jSMLnHiwXUvdO4UL74ljNIPHUc 1jJAyNL5Czt0zF+E46N0OuzTTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0a+Yim FqvpaMFSd9r0CcpqLIhFMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqYIfbamiuhW50WpZJFI2RAK2Lsz6fZxCi1D7vjpPYPF4JwmH2pApO ydfB9SjlHBf1Sr+BrgAllqGV4HUXjM9TY7RuYrg6F6SzgMtZ3W2XLnkuwOLSi7v5 LOuxl/guzJhtq3suiynSmL2BhJxHt1599iPGvAv/OirLTkJvbYyR246N7zrgo+ck t/+/bbfvKIG802PXa2edXsTmj/03ituVlJgcf8ndMLZvPYlKbMKvFtvGKh8nlnja 5lNB1xPyREED0cQ0TRUDj/5JF/RpvpTjNrXyJkY1LW2iQ6RJS0PDE+CAnnuFaU6R QrbtttjF4FVg2zVenSYBz+R/JlgmOrp4 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org