$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: c+Hy5E961qWbls7vsx9nAa4ivZeEq52XF48+Z77vNkY= Subject key identifier: DE:96:24:05:83:5A:5D:F3:7A:AE:08:07:2B:42:31:69:0F:8F:9D:E9 Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 054B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 0543 Signing time: Fri 22 Nov 2024 23:02:14 +0000 Manifest this update: Fri 22 Nov 2024 23:02:14 +0000 Manifest next update: Fri 29 Nov 2024 23:02:14 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: 2HqOjMmAsN+4ue7AqtNSc6R380k4YvRB+nBaji04Xs8=) 2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: bXdx05k7wR9Kl1sY4+4gVobBYaiLUct0N7gXR8t0JQM=) 3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: JPBTJ6fwr8mmKYI0rysv3RFDJmUHvWjg1nwosGPeiPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: Nov 22 23:02:14 2024 GMT Not After : Nov 29 23:02:14 2024 GMT Subject: CN=67410d76-3610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:bc:65:0b:89:d5:8a:02:e4:73:d5:87:ca: 91:a5:c8:03:73:50:e9:f0:33:41:b2:6a:41:14:db: 2c:ac:5e:62:ac:4b:05:e9:70:bb:d3:f6:ec:14:5a: e4:24:98:89:55:4a:97:c5:e1:f8:23:8d:ef:53:2d: 87:2b:25:be:86:e3:90:4a:95:25:44:75:9a:66:9e: 46:ea:b8:f1:4b:58:70:6a:ce:24:a2:6c:12:31:da: e8:1a:41:33:cd:5a:40:5e:ab:c5:a2:eb:07:02:f3: e4:8f:41:d1:41:39:7b:0d:af:a0:a8:ee:c4:04:76: 4a:7a:a5:9a:1e:e8:ce:f5:c6:01:8f:01:69:92:9f: cc:81:1b:ba:65:b8:6b:a7:6a:3a:5d:74:d6:03:27: c5:64:d1:fa:18:ce:f0:55:1e:07:b1:da:90:a2:28: a0:36:66:e4:87:d8:49:06:ec:c1:61:bb:aa:6c:b6: db:70:39:09:78:5f:41:df:13:fb:be:be:18:d2:ac: 77:24:d0:28:45:c1:19:92:7a:01:ae:d0:df:19:c1: 86:80:e0:97:ef:c3:85:ee:fd:30:6b:47:ec:20:b9: c5:52:01:da:df:2f:29:30:c0:ad:85:4c:2c:72:c5: 1f:8a:a5:d3:da:ab:51:5b:4e:f4:02:d3:6e:19:03: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:96:24:05:83:5A:5D:F3:7A:AE:08:07:2B:42:31:69:0F:8F:9D:E9 X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a4:86:1d:20:da:a7:33:c3:e7:ff:46:71:10:2b:62:7c:53: b1:06:df:80:04:0a:56:31:a5:a4:4a:66:04:a3:7c:a6:38:b5: 86:ae:ad:b6:b0:e2:7f:b5:c5:6e:25:ba:fa:a4:cb:a1:9f:91: f3:5a:72:a7:2f:b9:aa:71:e1:a2:09:42:91:9c:db:be:25:35: ab:67:7e:b7:e4:c9:7b:b0:52:8a:90:27:80:d4:8b:de:2d:da: 89:0a:43:34:e8:f3:11:bd:cd:20:4c:9d:2c:fa:d8:db:2f:ed: 57:8a:8c:ab:8a:ae:f7:57:ef:bf:fc:64:24:c2:9a:74:e2:89: 51:08:de:ac:4e:95:4a:78:92:e8:4d:83:91:94:f2:c9:19:26: bb:81:25:70:6d:d8:58:c6:d2:f2:44:4d:82:84:e7:5b:0c:c6: ae:ac:41:d4:fe:76:47:9d:0d:28:62:38:25:13:8f:b4:c4:70: 6f:08:37:d6:0a:51:f6:74:12:d6:e3:70:09:f2:dc:f1:a6:60: f8:06:c4:8a:ef:ae:3e:d9:ef:92:45:93:8c:74:ea:12:11:69: 2f:e4:85:b9:98:6b:d6:b9:80:58:aa:e0:d0:3a:52:1c:f6:7b: b4:0e:ef:02:fc:4b:b6:d2:f3:59:59:64:ad:1a:be:16:f4:ee: a8:38:01:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjQxMTIyMjMwMjE0WhcNMjQxMTI5MjMwMjE0WjAYMRYwFAYD VQQDEw02NzQxMGQ3Ni0zNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteC8ZQuJ1YoC5HPVh8qRpcgDc1Dp8DNBsmpBFNssrF5irEsF6XC70/bsFFrk JJiJVUqXxeH4I43vUy2HKyW+huOQSpUlRHWaZp5G6rjxS1hwas4komwSMdroGkEz zVpAXqvFousHAvPkj0HRQTl7Da+gqO7EBHZKeqWaHujO9cYBjwFpkp/MgRu6Zbhr p2o6XXTWAyfFZNH6GM7wVR4HsdqQoiigNmbkh9hJBuzBYbuqbLbbcDkJeF9B3xP7 vr4Y0qx3JNAoRcEZknoBrtDfGcGGgOCX78OF7v0wa0fsILnFUgHa3y8pMMCthUws csUfiqXT2qtRW070AtNuGQNEMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6WJAWD Wl3zeq4IBytCMWkPj53pMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdpIYdINqnM8Pn/0ZxECtifFOxBt+ABApWMaWkSmYEo3ymOLWGrq22 sOJ/tcVuJbr6pMuhn5HzWnKnL7mqceGiCUKRnNu+JTWrZ3635Ml7sFKKkCeA1Ive LdqJCkM06PMRvc0gTJ0s+tjbL+1Xioyriq73V++//GQkwpp04olRCN6sTpVKeJLo TYORlPLJGSa7gSVwbdhYxtLyRE2ChOdbDMaurEHU/nZHnQ0oYjglE4+0xHBvCDfW ClH2dBLW43AJ8tzxpmD4BsSK764+2e+SRZOMdOoSEWkv5IW5mGvWuYBYquDQOlIc 9nu0Du8C/Eu20vNZWWStGr4W9O6oOAGL -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:54 2024 by rpki-client on console-ams.rpki-client.org