$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: ioRV6q9Y8HzoRw9YzY9tjn7wnRW4tR/7L88kocX6oPE= Subject key identifier: E8:35:80:82:69:1E:30:C2:99:EA:97:AE:86:D0:8E:95:89:6E:64:10 Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 0219 Signing time: Thu 21 Nov 2024 01:30:19 +0000 Manifest this update: Thu 21 Nov 2024 01:30:18 +0000 Manifest next update: Thu 28 Nov 2024 01:30:18 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: YDOWfrdaS40Y2zlLHyComnyx5nV1VqXUrGG0hr46TM4=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: s5zo6Oy3LdXJqnKHo8639OODD+UWopqrRn4IJ2Zq31w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: Nov 21 01:30:18 2024 GMT Not After : Nov 28 01:30:18 2024 GMT Subject: CN=673e8d2a-d2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7c:4e:0c:c6:e6:6e:6e:13:e7:21:da:e9:51: eb:2c:97:4d:e6:61:47:c3:a5:1d:26:d8:28:63:e0: 2a:6f:6f:a0:52:90:af:15:8f:67:f0:9b:f5:d4:39: 0b:23:3c:5a:8b:1b:26:51:db:15:7b:5a:35:38:44: 66:c6:fa:55:4d:c1:d4:e3:d3:51:b9:cc:11:ba:93: 4a:f4:4a:a0:cc:46:8e:42:da:03:fb:68:32:02:3a: 8b:73:b6:3c:64:7c:29:a6:e2:7a:68:e0:65:23:eb: 9b:c8:62:88:36:0a:f0:92:2c:26:e6:1a:ba:92:76: 73:06:30:fa:c1:c7:6e:eb:c0:f7:77:2e:d7:83:0a: 77:57:eb:3d:d8:9f:6e:0a:54:3f:d1:5a:1e:d9:cb: f4:48:5b:77:6b:44:b3:d5:3f:fd:5e:a7:77:f1:e2: e9:e6:86:68:2a:3e:56:6b:e8:3d:81:7d:09:c4:cb: 54:3d:b4:07:4d:e7:61:85:76:d5:bc:32:64:df:bb: 26:0a:fa:2f:73:a4:59:46:0e:48:7d:4e:74:de:92: 6c:79:d3:24:3b:4b:6c:34:e1:57:0c:a4:e8:18:b4: 3d:fe:a1:7d:9b:9d:42:06:18:53:b2:53:c1:09:79: db:1a:eb:8d:23:8d:c2:bb:32:83:4f:b7:71:3b:be: e3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:35:80:82:69:1E:30:C2:99:EA:97:AE:86:D0:8E:95:89:6E:64:10 X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:21:c3:aa:ee:b5:87:6b:38:e4:3e:ab:a5:17:bf:ee:d1:f4: 11:25:68:1a:53:bd:27:fa:af:72:cc:2a:fe:00:70:7f:92:27: 73:5c:cf:04:13:2e:12:63:1d:f3:f2:aa:6b:26:64:6b:38:66: 27:70:e6:fd:dd:d1:66:68:1f:7a:4c:ca:f7:0b:ad:19:d9:88: 73:b5:12:81:c0:5d:4f:31:b9:0d:a3:a4:f4:48:61:8f:c1:74: 4b:75:d3:56:fb:e1:23:59:26:bc:69:eb:c9:8e:13:f4:96:00: c6:64:d1:9d:2a:26:a9:46:25:fa:d6:73:87:c5:67:d8:9e:d5: b1:cc:a1:55:39:b7:8f:71:f4:66:d9:7f:33:3f:36:d7:32:29: e9:b0:65:49:07:51:46:ac:14:99:4a:24:b3:3f:3a:58:a2:ef: 62:0e:a8:0a:40:7e:28:e9:5d:f6:ef:96:db:51:44:a1:55:20: d5:6d:48:28:6a:0a:66:4f:6f:ac:c4:78:74:84:89:83:46:b8: 98:27:03:5d:6c:93:45:03:23:1f:65:ee:78:90:bf:d1:40:04: d5:60:da:3b:21:cd:e3:69:d7:58:42:95:b7:7a:c1:8b:29:0f: df:b4:63:3e:bb:38:d6:58:39:3f:57:68:4e:87:3c:db:fa:0a: ef:8c:b4:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjQxMTIxMDEzMDE4WhcNMjQxMTI4MDEzMDE4WjAYMRYwFAYD VQQDEw02NzNlOGQyYS1kMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HxODMbmbm4T5yHa6VHrLJdN5mFHw6UdJtgoY+Aqb2+gUpCvFY9n8Jv11DkL IzxaixsmUdsVe1o1OERmxvpVTcHU49NRucwRupNK9EqgzEaOQtoD+2gyAjqLc7Y8 ZHwppuJ6aOBlI+ubyGKINgrwkiwm5hq6knZzBjD6wcdu68D3dy7Xgwp3V+s92J9u ClQ/0Voe2cv0SFt3a0Sz1T/9Xqd38eLp5oZoKj5Wa+g9gX0JxMtUPbQHTedhhXbV vDJk37smCvovc6RZRg5IfU503pJsedMkO0tsNOFXDKToGLQ9/qF9m51CBhhTslPB CXnbGuuNI43CuzKDT7dxO77jhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg1gIJp HjDCmeqXrobQjpWJbmQQMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiIcOq7rWHazjkPqulF7/u0fQRJWgaU70n+q9yzCr+AHB/kidzXM8E Ey4SYx3z8qprJmRrOGYncOb93dFmaB96TMr3C60Z2YhztRKBwF1PMbkNo6T0SGGP wXRLddNW++EjWSa8aevJjhP0lgDGZNGdKiapRiX61nOHxWfYntWxzKFVObePcfRm 2X8zPzbXMinpsGVJB1FGrBSZSiSzPzpYou9iDqgKQH4o6V3275bbUUShVSDVbUgo agpmT2+sxHh0hImDRriYJwNdbJNFAyMfZe54kL/RQATVYNo7Ic3jaddYQpW3esGL KQ/ftGM+uzjWWDk/V2hOhzzb+grvjLRi -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:31 2024 by rpki-client on console-ams.rpki-client.org