$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: 05dzlVXvKrRicSMG9ylli58LgExMijixVqEvsSltKnE= Subject key identifier: D7:4A:5D:68:45:A3:C2:1A:E8:2B:3F:87:EF:F7:4E:44:E8:B4:0D:D6 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 017E Signing time: Thu 21 Nov 2024 02:13:47 +0000 Manifest this update: Thu 21 Nov 2024 02:13:46 +0000 Manifest next update: Thu 28 Nov 2024 02:13:46 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: NjWq9h+N+pvGjhJpqO8T60QM0U4UXv9r6CkBwNNawhw=) 2: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: ywhvDJvQxyWr5M5HeSY6XX6kpPDyeGDW1U6yRs4SzyA=) 3: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: bgF9MEhNt9OhTuD+qzVTZBt1Y1hR4lpAcvN75ie3PMk=) 4: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: HEP7ygO7vwbJNA6a1Yh81guofjc2KZAgniicQPiMuwk=) 5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 4nca+zjw/oceArKoao4vA7g0YEPiT0qMny/vAkel68o=) 6: 319543069BBF11EDBFB6EE5DC4F9AE02.roa (hash: vZLrRb8D5tduBuTVKoErlXudBIz+MpXOKS0TeU5hY9o=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: ua1AQMU7bCCk0fcUdLe1mRz8NyiPnpe550PawenVzJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Nov 21 02:13:46 2024 GMT Not After : Nov 28 02:13:46 2024 GMT Subject: CN=673e975b-dee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:b4:3e:ca:ac:96:a5:50:69:e5:e7:1b:be: 28:dc:3a:0f:5a:41:b5:d6:59:95:86:b1:fd:d4:f2: 46:a6:6c:d3:6c:d7:4d:76:29:d4:ca:fe:30:df:1e: 51:4f:ac:e0:aa:4e:60:3a:29:18:ce:e8:fe:09:94: 8a:7e:75:23:e3:ea:c7:c4:5b:73:da:4a:9b:ce:18: ec:51:eb:e6:76:91:e5:67:e6:29:f9:be:27:a5:7c: bf:1e:66:c3:70:7f:04:1b:f9:ad:35:30:05:38:30: 7f:78:f9:d8:10:77:8c:b7:3d:59:97:f3:ce:c3:c4: ac:3e:9b:cb:f2:6e:32:3e:f8:b2:48:e1:8f:dc:16: 35:64:5d:bc:13:03:5a:29:ce:be:8f:a3:65:8d:36: 04:e7:46:19:6d:53:58:87:49:57:e4:1a:0b:04:d6: 53:a8:a1:70:23:db:0b:4f:d2:65:e6:80:b8:d8:de: 74:23:6d:72:ce:97:fc:be:f7:ef:a5:85:61:0e:c1: af:f6:a3:d5:48:4e:64:5d:38:37:1d:1e:b3:aa:22: 64:15:73:82:49:57:24:3b:85:06:3a:c2:bc:1b:8e: ee:95:4a:3b:7e:73:11:04:b6:f1:40:0e:66:d6:69: a0:1c:ec:00:a1:9a:14:97:64:a5:52:79:4e:e8:f1: 1c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4A:5D:68:45:A3:C2:1A:E8:2B:3F:87:EF:F7:4E:44:E8:B4:0D:D6 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:18:9a:f1:c2:e0:2d:5e:2d:7a:ad:30:c3:03:06:ad:92:6f: 80:8b:ad:63:db:e0:4d:13:15:fd:91:67:63:b4:13:ff:f1:fe: 4b:16:7a:a4:92:02:57:71:20:43:d8:fd:88:34:72:b7:b5:2e: 37:f5:71:a0:e5:c5:5c:6a:c6:6c:5b:8a:fa:78:e5:8b:ea:db: 8e:81:30:af:ba:3f:a8:30:2a:1f:75:d5:0f:46:e0:ba:67:74: 10:8f:7e:0d:eb:66:8c:71:2d:af:a1:20:be:2e:06:65:ce:27: f1:7c:29:84:9f:4d:51:b5:77:78:2c:e2:08:dd:19:d5:81:92: 4d:49:3b:c6:c4:a2:2d:28:8e:83:67:b4:16:78:f0:2f:b8:53: 74:41:c9:fd:e4:54:e8:76:cc:78:07:e9:81:a2:66:81:92:50: 0c:f3:0d:ef:c9:2b:b5:b1:37:e6:82:39:9f:c3:fc:49:98:f8: 14:be:8f:0e:f4:83:7b:e5:82:69:38:14:fd:15:5c:37:7d:6f: 36:25:59:11:50:7b:db:3a:ee:92:0b:4b:91:0a:7d:f6:1d:e0: 80:eb:c8:cd:59:9a:8a:46:25:e7:78:0c:36:bc:b2:bc:e1:28: 6a:ec:bc:c1:0c:00:80:c0:51:e1:bf:9c:19:c6:39:a3:7b:71: ed:e7:d1:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjQxMTIxMDIxMzQ2WhcNMjQxMTI4MDIxMzQ2WjAYMRYwFAYD VQQDEw02NzNlOTc1Yi1kZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmC0PsqslqVQaeXnG74o3DoPWkG11lmVhrH91PJGpmzTbNdNdinUyv4w3x5R T6zgqk5gOikYzuj+CZSKfnUj4+rHxFtz2kqbzhjsUevmdpHlZ+Yp+b4npXy/HmbD cH8EG/mtNTAFODB/ePnYEHeMtz1Zl/POw8SsPpvL8m4yPviySOGP3BY1ZF28EwNa Kc6+j6NljTYE50YZbVNYh0lX5BoLBNZTqKFwI9sLT9Jl5oC42N50I21yzpf8vvfv pYVhDsGv9qPVSE5kXTg3HR6zqiJkFXOCSVckO4UGOsK8G47ulUo7fnMRBLbxQA5m 1mmgHOwAoZoUl2SlUnlO6PEcfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdKXWhF o8Ia6Cs/h+/3TkTotA3WMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLGJrxwuAtXi16rTDDAwatkm+Ai61j2+BNExX9kWdjtBP/8f5LFnqk kgJXcSBD2P2INHK3tS439XGg5cVcasZsW4r6eOWL6tuOgTCvuj+oMCofddUPRuC6 Z3QQj34N62aMcS2voSC+LgZlzifxfCmEn01RtXd4LOII3RnVgZJNSTvGxKItKI6D Z7QWePAvuFN0Qcn95FTodsx4B+mBomaBklAM8w3vySu1sTfmgjmfw/xJmPgUvo8O 9IN75YJpOBT9FVw3fW82JVkRUHvbOu6SC0uRCn32HeCA68jNWZqKRiXneAw2vLK8 4Shq7LzBDACAwFHhv5wZxjmje3Ht59EQ -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:31 2024 by rpki-client on console-ams.rpki-client.org