$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json) Hash identifier: M+D2pjcFkqdwC29PNjloyvCbEXDLoiFQDYPskLXgsD0= Subject key identifier: BC:8B:23:EB:67:22:95:B7:BF:01:B2:0D:D6:79:59:97:55:71:F1:E5 Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft Manifest number: 08B4 Signing time: Fri 22 Nov 2024 20:14:13 +0000 Manifest this update: Fri 22 Nov 2024 20:14:12 +0000 Manifest next update: Fri 29 Nov 2024 20:14:12 +0000 Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: XKblmYHBtabfP5cFQo/2bXSLgJlOVAswoAIf7qcy42Q=) 2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: A09DUVwYkWjHYaG8K/Fs4waJczx1Va6QnO4lBZ4e0CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Validity Not Before: Nov 22 20:14:12 2024 GMT Not After : Nov 29 20:14:12 2024 GMT Subject: CN=6740e614-8a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:b7:6a:8d:b1:31:b9:a1:3f:75:9d:fc:fa: 95:bd:55:d1:78:98:dd:56:cf:bb:72:83:72:3e:b6: 9c:63:88:8a:6b:f6:0a:b6:60:b8:72:25:7f:33:81: 03:cb:6c:59:3f:ef:08:e4:1a:58:c0:49:03:8a:84: 14:0a:4e:4c:b2:f1:f5:74:3c:8a:f2:db:3c:de:67: 21:71:5d:84:e7:28:8a:c5:09:92:8a:76:c2:22:46: 7c:9e:64:5e:33:e8:0c:23:b7:dd:bc:88:0f:3b:c7: 39:0e:a9:bc:6a:ce:74:37:a1:e4:f0:8e:6f:ae:59: 29:99:44:b1:53:6a:55:24:6b:5a:69:35:63:90:43: ac:eb:e9:ef:c7:aa:3a:82:59:cf:26:ca:f9:dc:7d: 5b:9f:af:8d:b6:9d:6a:25:d8:6a:e0:d5:a6:28:81: ec:15:17:1e:9c:2a:98:16:5c:ac:f3:0d:0f:43:4d: ba:3d:2b:27:c8:4a:33:64:e6:ab:d6:da:b1:93:e3: 0b:56:93:cf:09:d5:c1:51:e6:4d:d8:83:5d:35:59: 54:9e:83:0f:be:6c:78:59:cf:c8:42:f5:e2:39:6b: c9:e7:58:c2:b0:9d:80:5b:ba:aa:2b:d6:ab:7c:ec: 25:0f:a1:8e:ac:4f:95:77:e1:8c:ca:cf:c9:ad:b8: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8B:23:EB:67:22:95:B7:BF:01:B2:0D:D6:79:59:97:55:71:F1:E5 X509v3 Authority Key Identifier: keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b7:42:39:f8:b2:cf:f4:19:05:75:d2:52:29:a0:9e:88:f5: 82:03:ed:f0:bc:3a:ae:84:7c:d6:3d:cb:44:17:34:41:25:ef: 62:7b:40:ed:86:76:03:82:e8:ac:93:b3:64:0e:74:e2:b3:27: c0:17:3c:b5:91:02:dc:b3:d2:08:aa:9a:57:7d:74:72:93:da: 9d:1b:3b:50:0a:85:49:45:62:82:ab:bb:95:f4:99:9b:05:84: 36:4b:a3:28:01:67:ed:49:99:61:03:64:1a:85:e4:14:a2:f9: 99:8b:28:52:00:11:61:44:90:5a:60:c0:60:60:92:89:ec:2b: 98:49:34:72:b4:ee:c0:6d:d5:35:74:c6:62:48:0d:ac:f7:1e: ff:c4:5f:d6:94:ff:f8:66:2c:f8:dd:d7:53:d6:b7:31:62:89: 3a:4c:3a:e1:98:a4:a7:9b:f8:1f:67:84:43:8c:d1:8b:20:81: 3c:14:db:1e:88:bd:0c:d6:02:f9:41:c7:b9:a4:c8:25:f4:05: e6:0c:60:d3:0e:cd:3a:74:8a:ac:0d:79:76:7d:62:43:56:77: c4:86:14:95:46:5a:f2:c9:93:a6:30:d4:1c:d3:20:c5:13:9c: a3:1c:e7:c0:e7:e8:fd:93:1c:45:8a:5b:0b:70:25:1b:9b:9f: a2:19:bf:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx ODY1QTAwREQwHhcNMjQxMTIyMjAxNDEyWhcNMjQxMTI5MjAxNDEyWjAYMRYwFAYD VQQDEw02NzQwZTYxNC04YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCq3ao2xMbmhP3Wd/PqVvVXReJjdVs+7coNyPracY4iKa/YKtmC4ciV/M4ED y2xZP+8I5BpYwEkDioQUCk5MsvH1dDyK8ts83mchcV2E5yiKxQmSinbCIkZ8nmRe M+gMI7fdvIgPO8c5Dqm8as50N6Hk8I5vrlkpmUSxU2pVJGtaaTVjkEOs6+nvx6o6 glnPJsr53H1bn6+Ntp1qJdhq4NWmKIHsFRcenCqYFlys8w0PQ026PSsnyEozZOar 1tqxk+MLVpPPCdXBUeZN2INdNVlUnoMPvmx4Wc/IQvXiOWvJ51jCsJ2AW7qqK9ar fOwlD6GOrE+Vd+GMys/Jrbi8oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyLI+tn IpW3vwGyDdZ5WZdVcfHlMB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ UmdobUQ1b2dUbEVZWmFBTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHt0I5+LLP9BkFddJSKaCeiPWCA+3wvDquhHzWPctEFzRBJe9ie0Dt hnYDguisk7NkDnTisyfAFzy1kQLcs9IIqppXfXRyk9qdGztQCoVJRWKCq7uV9Jmb BYQ2S6MoAWftSZlhA2QaheQUovmZiyhSABFhRJBaYMBgYJKJ7CuYSTRytO7AbdU1 dMZiSA2s9x7/xF/WlP/4Ziz43ddT1rcxYok6TDrhmKSnm/gfZ4RDjNGLIIE8FNse iL0M1gL5Qce5pMgl9AXmDGDTDs06dIqsDXl2fWJDVnfEhhSVRlryyZOmMNQc0yDF E5yjHOfA5+j9kxxFilsLcCUbm5+iGb90 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org