$ rpki-client -vvf rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft File: 6HvQXvddUFllr1CWfUKLtf_-HME.mft (raw, json) Hash identifier: mA+wdoNaruJdJvVbblmkI6THCmih0SCWpeShCUMMrmE= Subject key identifier: 51:07:05:52:C4:6A:BD:EE:D8:87:14:29:18:16:C1:FE:FE:02:2B:2C Authority key identifier: E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1 Certificate issuer: /CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1 Certificate serial: 091E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft Manifest number: 0918 Signing time: Fri 22 Nov 2024 20:06:16 +0000 Manifest this update: Fri 22 Nov 2024 20:06:15 +0000 Manifest next update: Fri 29 Nov 2024 20:06:15 +0000 Files and hashes: 1: 6HvQXvddUFllr1CWfUKLtf_-HME.crl (hash: xsBP3wOZAvCYezY6nGHn5D6II6yg9nXScpSEhO0DObI=) 2: 03643212905F11EA94823C28C4F9AE02.roa (hash: 32+oXxBFhxUG2PWTRaAsdjIfsPq4UsynI3l5ImWQiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1 Validity Not Before: Nov 22 20:06:15 2024 GMT Not After : Nov 29 20:06:15 2024 GMT Subject: CN=6740e438-2e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:ec:f1:bb:85:5d:19:4d:da:52:4e:9b:9c: 68:ef:ce:74:8f:e6:95:07:cc:c6:8d:49:94:f7:08: b1:80:51:44:a7:d9:2c:9f:ec:32:ed:c3:82:83:95: 07:38:72:d5:82:9a:bd:b3:b5:c9:82:14:61:8f:fb: ea:32:86:4f:86:d6:cb:db:8e:6a:97:47:d4:ba:71: 9a:c7:3a:68:1f:a9:d2:3b:15:b5:33:ae:a3:aa:bd: 4b:20:af:16:e3:dd:7d:39:fc:4c:5d:3a:e3:86:09: 7c:d6:01:83:1a:66:60:5e:74:eb:e7:91:96:be:9f: 91:08:d7:05:9d:73:f2:a0:5b:82:e0:83:06:c6:37: 10:3b:8b:25:08:2e:6f:15:74:3c:44:6e:31:2a:b8: 7b:43:b1:fb:ad:f3:7d:b6:5a:e9:40:38:14:a6:61: 5d:4a:63:36:40:ca:cb:d7:dc:0f:90:1c:f3:c4:b5: 5e:b0:be:a8:f3:35:49:7f:71:d6:08:30:31:8f:e3: 6a:74:85:12:b8:99:78:0d:30:7f:26:f3:d1:dc:0b: 1e:61:9c:06:88:69:ea:3f:f7:4e:10:32:61:c2:8d: fe:26:cb:cb:45:7e:45:1c:dc:4e:c8:e8:6e:f9:ba: 54:44:9d:b0:12:5a:98:4e:b8:a5:a8:2b:e8:0f:7b: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:07:05:52:C4:6A:BD:EE:D8:87:14:29:18:16:C1:FE:FE:02:2B:2C X509v3 Authority Key Identifier: keyid:E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3d:38:43:25:cb:1f:9d:dd:76:80:26:c0:1b:28:51:cf:96: b7:62:ea:f7:a9:15:12:7a:08:df:08:cc:6c:a2:61:00:85:b1: a1:c5:3b:7c:2c:07:a2:79:0a:eb:77:92:5d:2d:62:14:d4:96: 3d:42:4d:43:3f:9f:85:55:66:d4:be:50:ee:4c:82:dd:ee:96: 40:81:a3:fa:6e:55:1b:45:64:13:34:bf:42:a3:8d:80:f5:cf: ca:70:7a:cd:09:d6:52:c5:e4:3a:13:0a:88:83:84:5c:11:eb: 15:e3:13:61:ca:c0:06:da:52:d6:30:6d:9d:66:92:5b:0c:44: 7e:da:87:3a:af:b7:5c:98:0b:4a:8d:5a:1b:95:29:59:dd:f2: d4:99:5e:08:b6:08:fc:64:13:e4:dd:68:4e:36:e8:39:dd:43: 2f:f1:0b:f7:6a:30:41:96:28:c5:19:8b:6c:79:a6:92:fc:94: a2:42:37:75:e8:4c:32:c5:37:6e:0b:cb:92:6d:60:8e:07:7f: b1:fe:c2:82:bf:bf:3e:f2:86:53:2d:91:71:fe:f0:1d:3e:26: 4f:06:3a:60:4e:80:6d:6a:29:58:2a:09:09:89:b9:63:44:bd: e3:83:ec:57:ee:9f:3a:92:85:d0:e8:ab:99:b0:3a:37:9e:1e: 79:f8:f9:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjcxMTAvBgNVBAUTKEU4N0JEMDVFRjc1RDUwNTk2NUFGNTA5NjdENDI4QkI1 RkZGRTFDQzEwHhcNMjQxMTIyMjAwNjE1WhcNMjQxMTI5MjAwNjE1WjAYMRYwFAYD VQQDEw02NzQwZTQzOC0yZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquPs8buFXRlN2lJOm5xo7850j+aVB8zGjUmU9wixgFFEp9ksn+wy7cOCg5UH OHLVgpq9s7XJghRhj/vqMoZPhtbL245ql0fUunGaxzpoH6nSOxW1M66jqr1LIK8W 4919OfxMXTrjhgl81gGDGmZgXnTr55GWvp+RCNcFnXPyoFuC4IMGxjcQO4slCC5v FXQ8RG4xKrh7Q7H7rfN9tlrpQDgUpmFdSmM2QMrL19wPkBzzxLVesL6o8zVJf3HW CDAxj+NqdIUSuJl4DTB/JvPR3AseYZwGiGnqP/dOEDJhwo3+JsvLRX5FHNxOyOhu +bpURJ2wElqYTrilqCvoD3sWzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEHBVLE ar3u2IcUKRgWwf7+AissMB8GA1UdIwQYMBaAFOh70F73XVBZZa9Qln1Ci7X//hzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyNy82REQyQzAzNDkw NUQxMUVBQTdCRjc3MjVDNEY5QUUwMi82SHZRWHZkZFVGbGxyMUNXZlVLTHRmXy1I TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIdlFYdmRkVUZsbHIxQ1dmVUtMdGZfLUhNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyNy82REQyQzAzNDkwNUQxMUVBQTdCRjc3MjVDNEY5QUUwMi82SHZRWHZkZFVG bGxyMUNXZlVLTHRmXy1ITUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKPThDJcsfnd12gCbAGyhRz5a3Yur3qRUSegjfCMxsomEAhbGhxTt8 LAeieQrrd5JdLWIU1JY9Qk1DP5+FVWbUvlDuTILd7pZAgaP6blUbRWQTNL9Co42A 9c/KcHrNCdZSxeQ6EwqIg4RcEesV4xNhysAG2lLWMG2dZpJbDER+2oc6r7dcmAtK jVoblSlZ3fLUmV4Itgj8ZBPk3WhONug53UMv8Qv3ajBBlijFGYtseaaS/JSiQjd1 6EwyxTduC8uSbWCOB3+x/sKCv78+8oZTLZFx/vAdPiZPBjpgToBtailYKgkJiblj RL3jg+xX7p86koXQ6KuZsDo3nh55+Pkh -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org