$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft File: 6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft (raw, json) Hash identifier: c5lq3Ub7lf70CxuurlxeT7WXBcG0suKnEEckbx89X/8= Subject key identifier: 02:D0:B8:8E:CA:B4:00:EA:CF:A1:35:47:E8:96:B5:14:36:A0:F9:56 Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84 Certificate issuer: /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984 Certificate serial: 0752 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft Manifest number: 0729 Signing time: Fri 22 Nov 2024 21:20:56 +0000 Manifest this update: Fri 22 Nov 2024 21:20:56 +0000 Manifest next update: Fri 29 Nov 2024 21:20:56 +0000 Files and hashes: 1: 6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl (hash: D9kh60vcKuHRJOPvKl9aCK02jcdlSNlWwmD3FD7XnRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1874 (0x752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984 Validity Not Before: Nov 22 21:20:56 2024 GMT Not After : Nov 29 21:20:56 2024 GMT Subject: CN=6740f5b8-2006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:a2:c8:ea:dd:6a:bf:81:ea:f6:28:e3:77: ea:a5:32:67:3c:aa:4c:45:02:b0:6b:44:03:e0:11: a0:e7:0f:4a:cb:08:94:35:04:e5:83:90:16:3e:54: b8:26:59:dd:67:57:33:5c:bb:99:4e:64:ce:b1:8c: bf:35:e0:7c:e4:7a:06:8a:95:37:20:99:fd:79:2c: e4:16:34:3e:41:47:b5:f0:35:c0:89:12:4d:f1:b6: ff:3a:f7:20:b4:0c:31:78:a9:29:83:de:cb:0b:d7: e7:c2:e1:ac:4c:c8:05:86:ed:81:68:83:d4:c4:18: 92:97:64:1d:31:03:7d:ce:84:85:ec:fc:e6:fc:2a: 19:e7:95:dd:8b:5d:a9:1a:f4:e9:e3:11:b9:32:a7: 95:99:28:29:e2:04:41:33:04:ab:9e:69:4b:ca:0e: 97:01:47:74:3d:e5:bd:d8:b4:71:40:6f:e9:67:c5: eb:f9:04:39:c0:60:71:f5:29:38:e1:c2:d3:0d:95: 11:4d:1a:56:5c:24:92:67:44:b1:a9:b4:5f:95:f1: 77:ee:00:b7:0a:03:0c:b6:27:fe:2a:a3:3d:11:7f: 46:64:4b:4b:02:ee:5f:35:9e:9a:da:f4:61:39:7f: 11:28:f7:36:e2:8b:66:76:bb:a5:9c:12:dc:06:c2: 50:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:B8:8E:CA:B4:00:EA:CF:A1:35:47:E8:96:B5:14:36:A0:F9:56 X509v3 Authority Key Identifier: keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8d:88:d0:fc:8b:86:4e:b4:54:7d:a4:91:ec:87:9a:72:de: 2a:e0:3c:d1:a3:5e:0e:fc:08:de:5c:28:bd:92:a2:69:f3:23: 2c:90:fe:a6:d8:ac:d8:1e:7e:65:f4:6c:69:63:7d:f4:06:b7: b0:e2:fc:60:55:c5:7d:22:16:ee:a7:db:6c:1f:75:53:fe:a8: 62:b8:9a:d9:c0:a0:62:59:39:6a:c5:94:77:41:5c:1f:dc:3b: b0:11:59:1f:76:98:17:c4:de:3e:b2:3b:40:76:51:1a:96:59: 18:67:41:8a:a0:ff:93:71:8c:eb:6f:38:7e:f9:a5:5a:7d:4d: d6:87:51:e9:20:9c:ea:a7:31:bd:e5:36:d2:a1:50:56:4a:d1: 53:a5:0b:79:46:3c:fe:14:6a:bc:f8:7f:be:53:3c:41:b8:cc: 3b:65:53:58:b0:0a:e6:c8:72:a1:e6:4d:a8:d0:af:d1:12:9d: e0:d2:99:d4:e9:fb:d1:ce:dc:07:b1:f0:37:fc:ba:9a:0c:b0: 9f:ef:ab:96:54:02:77:69:17:d0:40:2a:cc:ec:ea:ab:2e:8f: b1:54:f9:f4:33:5c:83:f5:ed:a8:97:b2:dc:71:d5:89:d4:d4: 89:1d:62:4d:64:cf:3e:91:03:68:58:9b:ca:d5:3a:0a:fe:e2: f3:33:00:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRGQjcxMTAvBgNVBAUTKEVBNTFDRTIwQTU5RTQyQjhDNzFEMjZBQTZCODg2Njkw Q0QxNTI5ODQwHhcNMjQxMTIyMjEyMDU2WhcNMjQxMTI5MjEyMDU2WjAYMRYwFAYD VQQDEw02NzQwZjViOC0yMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdqiyOrdar+B6vYo43fqpTJnPKpMRQKwa0QD4BGg5w9KywiUNQTlg5AWPlS4 JlndZ1czXLuZTmTOsYy/NeB85HoGipU3IJn9eSzkFjQ+QUe18DXAiRJN8bb/Ovcg tAwxeKkpg97LC9fnwuGsTMgFhu2BaIPUxBiSl2QdMQN9zoSF7Pzm/CoZ55Xdi12p GvTp4xG5MqeVmSgp4gRBMwSrnmlLyg6XAUd0PeW92LRxQG/pZ8Xr+QQ5wGBx9Sk4 4cLTDZURTRpWXCSSZ0SxqbRflfF37gC3CgMMtif+KqM9EX9GZEtLAu5fNZ6a2vRh OX8RKPc24otmdrulnBLcBsJQBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALQuI7K tADqz6E1R+iWtRQ2oPlWMB8GA1UdIwQYMBaAFOpRziClnkK4xx0mqmuIZpDNFSmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREZCNy9BNTFFQzU4NDE0 MEExMUVCOTYzNkZGMjJDNEY5QUUwMi82bEhPSUtXZVFyakhIU2FxYTRobWtNMFZL WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZsSE9JS1dlUXJqSEhTYXFhNGhta00wVktZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REZCNy9BNTFFQzU4NDE0MEExMUVCOTYzNkZGMjJDNEY5QUUwMi82bEhPSUtXZVFy akhIU2FxYTRobWtNMFZLWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVjYjQ/IuGTrRUfaSR7Ieact4q4DzRo14O/AjeXCi9kqJp8yMskP6m 2KzYHn5l9GxpY330Brew4vxgVcV9Ihbup9tsH3VT/qhiuJrZwKBiWTlqxZR3QVwf 3DuwEVkfdpgXxN4+sjtAdlEallkYZ0GKoP+TcYzrbzh++aVafU3Wh1HpIJzqpzG9 5TbSoVBWStFTpQt5Rjz+FGq8+H++UzxBuMw7ZVNYsArmyHKh5k2o0K/REp3g0pnU 6fvRztwHsfA3/LqaDLCf76uWVAJ3aRfQQCrM7OqrLo+xVPn0M1yD9e2ol7LccdWJ 1NSJHWJNZM8+kQNoWJvK1ToK/uLzMwDK -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:15 2024 by rpki-client on console-fra.rpki-client.org