$ rpki-client -vvf rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft File: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft (raw, json) Hash identifier: Qy+gwYak2IxVj87OFfHtE12R8Zn6Hl+Eq121MQJjEWY= Subject key identifier: 79:61:31:2F:89:E3:47:A6:C1:EF:0E:57:9D:52:3D:3A:16:4E:E4:F0 Authority key identifier: 9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF Certificate issuer: /CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF Certificate serial: 0DB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft Manifest number: 0DAA Signing time: Fri 22 Nov 2024 17:51:07 +0000 Manifest this update: Fri 22 Nov 2024 17:51:06 +0000 Manifest next update: Fri 29 Nov 2024 17:51:06 +0000 Files and hashes: 1: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl (hash: HbJq4okTY4923TQqQc1M32J6giDw+oymLs4eu+Ssna0=) 2: 80C4CAC6AE5311E983E98A4FC4F9AE02.roa (hash: FnZHey3rMS8XYtVSXTghg880bf4pMQDXQUruX/gl9Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3513 (0xdb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF Validity Not Before: Nov 22 17:51:06 2024 GMT Not After : Nov 29 17:51:06 2024 GMT Subject: CN=6740c48b-361d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:b7:95:12:6d:11:88:c0:69:50:5b:29:81: ee:28:7b:0a:54:23:0b:e9:c1:34:11:0e:d8:a0:0e: c9:f1:e4:6f:0a:1d:b0:7e:6c:4c:bc:3b:df:f5:25: 0a:69:43:c3:32:50:91:49:26:9e:8b:20:b2:3d:8b: 70:1c:18:53:09:a1:3a:fd:c4:53:19:dd:94:29:4e: 7c:37:58:6c:84:0b:f4:bc:38:6c:69:0a:d7:3e:f5: 77:a9:9c:bd:09:47:45:e9:9f:69:4b:f0:60:6d:8b: 75:14:03:47:c4:21:6e:ce:51:c6:bc:6d:96:79:09: ca:00:71:74:76:21:07:cb:1a:15:75:5b:64:d2:f0: 8a:23:6a:26:bb:c0:b8:2f:06:1a:a3:f5:2c:59:1b: c2:54:a3:08:80:03:f5:33:35:5f:61:09:ec:08:b3: eb:67:9d:28:56:65:97:2b:dd:8f:ca:3b:12:19:cd: 9a:fb:9b:32:11:ff:0e:a4:08:c6:da:cd:e7:9b:55: b5:9d:e5:7e:a8:11:e7:d1:5b:44:f1:34:02:2d:6c: 8f:71:5c:02:7b:88:20:78:4b:a5:38:73:45:3e:07: be:8e:5d:3d:fc:b7:08:4c:b3:57:d2:63:0a:71:32: 65:0e:a1:5e:e1:48:14:ff:91:4f:e8:2a:9d:b1:dc: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:61:31:2F:89:E3:47:A6:C1:EF:0E:57:9D:52:3D:3A:16:4E:E4:F0 X509v3 Authority Key Identifier: keyid:9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c4:aa:40:e7:e5:b8:cd:29:3e:e9:79:70:20:00:87:fb:40: ea:49:47:d4:ad:ec:e7:0f:72:cc:40:b0:51:43:a5:ef:31:94: 9f:d9:df:e1:8b:82:77:65:ff:20:0b:87:cf:d3:16:2f:d6:82: 3b:25:32:10:8e:09:8f:68:c1:82:03:8e:cf:ba:d2:6f:e6:9c: 8e:6b:e8:b4:dc:05:58:38:45:5c:9a:c4:26:3a:f7:14:f2:54: c9:4e:68:d3:a6:e7:e4:23:82:60:92:07:c3:c5:b6:8a:43:53: a7:e7:92:95:c5:a6:ed:d1:4b:18:85:b1:23:4e:00:f1:1d:d8: 5d:91:46:a7:2c:a8:e4:7a:d7:65:c3:6c:f0:4d:cf:3a:16:cb: f3:f2:f7:42:ee:2b:8e:45:5e:c4:dc:71:e6:04:ba:0a:44:40: 3b:8f:f6:df:cc:78:80:38:b5:c7:3b:1b:90:72:3c:68:b0:05: ab:92:96:a9:24:f1:40:7c:10:f3:d6:9d:03:01:c3:fa:97:0d: a6:62:24:50:4b:59:a7:a7:44:a5:0d:71:05:95:8c:3d:34:dd: cb:f7:2a:d3:bd:6f:7b:69:88:44:50:e5:6a:ce:cb:ac:cd:13: 4c:43:99:cc:a9:ca:24:a6:db:e3:8d:d2:ad:08:d5:1b:7a:9b: 86:e7:02:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4NTQxMTAvBgNVBAUTKDlCQTM5NTFDQ0I1RDgzQTlGM0RDNEE3NUJFQTAxRkY1 QUZENzFGRkYwHhcNMjQxMTIyMTc1MTA2WhcNMjQxMTI5MTc1MTA2WjAYMRYwFAYD VQQDEw02NzQwYzQ4Yi0zNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfO3lRJtEYjAaVBbKYHuKHsKVCML6cE0EQ7YoA7J8eRvCh2wfmxMvDvf9SUK aUPDMlCRSSaeiyCyPYtwHBhTCaE6/cRTGd2UKU58N1hshAv0vDhsaQrXPvV3qZy9 CUdF6Z9pS/BgbYt1FANHxCFuzlHGvG2WeQnKAHF0diEHyxoVdVtk0vCKI2omu8C4 LwYao/UsWRvCVKMIgAP1MzVfYQnsCLPrZ50oVmWXK92PyjsSGc2a+5syEf8OpAjG 2s3nm1W1neV+qBHn0VtE8TQCLWyPcVwCe4ggeEulOHNFPge+jl09/LcITLNX0mMK cTJlDqFe4UgU/5FP6CqdsdyDOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlhMS+J 40emwe8OV51SPToWTuTwMB8GA1UdIwQYMBaAFJujlRzLXYOp89xKdb6gH/Wv1x// MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTg1NC8zNjM4MEZBQUFD QzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2bnozRXAxdnFBZjlhX1hI XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL202T1ZITXRkZzZuejNFcDF2cUFmOWFfWEhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTg1NC8zNjM4MEZBQUFDQzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2 bnozRXAxdnFBZjlhX1hIXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaxKpA5+W4zSk+6XlwIACH+0DqSUfUreznD3LMQLBRQ6XvMZSf2d/h i4J3Zf8gC4fP0xYv1oI7JTIQjgmPaMGCA47PutJv5pyOa+i03AVYOEVcmsQmOvcU 8lTJTmjTpufkI4JgkgfDxbaKQ1On55KVxabt0UsYhbEjTgDxHdhdkUanLKjketdl w2zwTc86Fsvz8vdC7iuORV7E3HHmBLoKREA7j/bfzHiAOLXHOxuQcjxosAWrkpap JPFAfBDz1p0DAcP6lw2mYiRQS1mnp0SlDXEFlYw9NN3L9yrTvW97aYhEUOVqzsus zRNMQ5nMqcokptvjjdKtCNUbepuG5wIQ -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org