$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft File: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json) Hash identifier: NxVFyVGwT063HggHAF7YoJ/f4h+r4mNM+KDsLqKTL48= Subject key identifier: 7E:97:05:9A:BB:41:26:1A:C3:B9:52:25:5B:CD:46:72:43:71:B3:EB Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 Certificate issuer: /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft Manifest number: 0184 Signing time: Sat 23 Nov 2024 01:58:38 +0000 Manifest this update: Sat 23 Nov 2024 01:58:38 +0000 Manifest next update: Sat 30 Nov 2024 01:58:38 +0000 Files and hashes: 1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: peIQ1NYMNv7SPpVMq9uKwrN1j6qpKRbj4bAJsV5+QWc=) 2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: L6lJLX0FjwInwpLbI5Yc8Hu+Qbrh2Ou9yZKgLUdQEws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Validity Not Before: Nov 23 01:58:38 2024 GMT Not After : Nov 30 01:58:38 2024 GMT Subject: CN=674136ce-20ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:38:3f:50:d9:35:5e:8e:f7:5e:5c:d1:e9: 10:7e:7a:60:41:a5:25:d9:ed:6f:e8:d2:2c:eb:2f: 91:43:7b:ab:10:5f:b1:7e:cd:ba:b8:3d:7c:08:bd: 38:16:51:d3:c7:df:74:0d:69:be:75:40:db:c9:17: 90:28:23:84:ac:60:94:48:4a:c1:f9:08:0c:b5:a7: 5d:ab:86:cf:0a:fe:fd:43:9d:fc:87:d7:82:46:b4: 5a:e8:32:52:ae:0e:be:55:f3:7a:6b:26:07:12:63: b8:fc:60:2e:4a:db:f9:16:61:08:0a:fe:53:6e:16: 20:b8:c4:5e:3b:ff:ff:8b:87:2d:af:ba:8b:17:88: ff:af:ce:10:e2:11:58:79:fe:94:36:91:e7:1f:53: 41:08:5d:b9:41:21:e4:35:23:36:72:d6:6c:56:3c: 09:07:94:5b:80:84:63:6d:16:46:e3:07:54:92:91: 86:2b:a6:c7:7e:49:0d:c7:ea:d1:5c:33:3b:e4:31: 89:72:7a:1e:a2:eb:e5:5a:27:67:92:e8:67:19:f5: ad:f5:fa:e6:29:04:bd:6a:8a:47:ca:9b:84:2a:0c: 1f:19:9d:5c:5c:36:c2:b1:f5:a0:05:82:e0:6b:a5: f0:60:dd:5f:b4:25:79:53:c6:36:0a:1a:e4:24:de: 75:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:97:05:9A:BB:41:26:1A:C3:B9:52:25:5B:CD:46:72:43:71:B3:EB X509v3 Authority Key Identifier: keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e8:4f:07:ca:45:3f:89:39:d9:cd:65:a9:10:60:f8:87:6b: a3:99:4d:65:ca:a3:08:0c:ee:ca:61:41:4b:ea:f7:d0:93:d1: cb:7c:e2:14:f9:7f:bf:cb:ec:3c:b3:b2:24:da:e7:75:f7:63: eb:e7:d7:80:3d:3d:1d:c3:cf:cf:07:8f:51:90:f8:28:18:14: 85:99:fc:15:be:9b:89:8b:13:52:67:bb:4c:1b:a5:a2:22:4e: 39:48:a9:9a:d7:73:d8:ce:ab:39:fa:ad:bf:b7:a9:aa:a7:c9: f7:5c:42:48:ea:d8:58:5e:ab:82:87:2a:84:95:b4:c7:39:5c: fc:00:cf:7c:aa:fe:9c:17:16:e2:91:0c:f5:36:fa:bd:e6:5d: 6d:e1:65:f2:7c:fb:8c:51:61:75:de:50:36:36:fe:0d:db:99: 04:50:55:02:86:7a:f8:87:74:cb:e0:e0:b6:3b:92:59:79:63: d1:80:c5:b4:ff:42:9a:39:02:ce:84:27:af:b8:bf:75:34:0b: 3a:5c:b4:44:21:95:b9:2a:d3:31:29:81:3e:37:d0:34:2d:a9: 3b:80:13:5e:8b:e5:7e:f2:e1:aa:59:60:bc:f3:08:81:19:f8: 36:51:9e:52:7a:07:5e:4d:d2:01:81:70:9e:17:69:e4:80:9e: e0:f1:41:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdGQjExMTAvBgNVBAUTKEU4Q0NEQ0JGQkQyOEQ3MTE5MEU4OTM3RjNEQUE1OTU4 RkQ0ODE1NDEwHhcNMjQxMTIzMDE1ODM4WhcNMjQxMTMwMDE1ODM4WjAYMRYwFAYD VQQDEw02NzQxMzZjZS0yMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrY4P1DZNV6O915c0ekQfnpgQaUl2e1v6NIs6y+RQ3urEF+xfs26uD18CL04 FlHTx990DWm+dUDbyReQKCOErGCUSErB+QgMtaddq4bPCv79Q538h9eCRrRa6DJS rg6+VfN6ayYHEmO4/GAuStv5FmEICv5TbhYguMReO///i4ctr7qLF4j/r84Q4hFY ef6UNpHnH1NBCF25QSHkNSM2ctZsVjwJB5RbgIRjbRZG4wdUkpGGK6bHfkkNx+rR XDM75DGJcnoeouvlWidnkuhnGfWt9frmKQS9aopHypuEKgwfGZ1cXDbCsfWgBYLg a6XwYN1ftCV5U8Y2ChrkJN51wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6XBZq7 QSYaw7lSJVvNRnJDcbPrMB8GA1UdIwQYMBaAFOjM3L+9KNcRkOiTfz2qWVj9SBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZCMS9BQUQ2OTA0MDU0 MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4R1E2Sk5fUGFwWldQMUlG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNemN2NzBvMXhHUTZKTl9QYXBaV1AxSUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0ZCMS9BQUQ2OTA0MDU0MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4 R1E2Sk5fUGFwWldQMUlGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA96E8HykU/iTnZzWWpEGD4h2ujmU1lyqMIDO7KYUFL6vfQk9HLfOIU +X+/y+w8s7Ik2ud192Pr59eAPT0dw8/PB49RkPgoGBSFmfwVvpuJixNSZ7tMG6Wi Ik45SKma13PYzqs5+q2/t6mqp8n3XEJI6thYXquChyqElbTHOVz8AM98qv6cFxbi kQz1Nvq95l1t4WXyfPuMUWF13lA2Nv4N25kEUFUChnr4h3TL4OC2O5JZeWPRgMW0 /0KaOQLOhCevuL91NAs6XLREIZW5KtMxKYE+N9A0Lak7gBNei+V+8uGqWWC88wiB Gfg2UZ5SegdeTdIBgXCeF2nkgJ7g8UGV -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org