$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft File: 6IdrUasrF3RAzUxM0uTwpZjgOBw.mft (raw, json) Hash identifier: c8FYx5bfuxWvoXprK6Dx4kdWkQXJukSgOJCGQKhdZaE= Subject key identifier: 86:A0:57:46:24:BC:A0:60:AD:9F:F0:76:A3:50:8D:49:8B:C4:5C:FE Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C Certificate issuer: /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft Manifest number: 5A Signing time: Sat 23 Nov 2024 05:09:08 +0000 Manifest this update: Sat 23 Nov 2024 05:09:08 +0000 Manifest next update: Sat 30 Nov 2024 05:09:08 +0000 Files and hashes: 1: 6IdrUasrF3RAzUxM0uTwpZjgOBw.crl (hash: dXHT1V1mk05kTaATsz4GJFBE2yTvRSiqVvJPaemGkNU=) 2: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (hash: 8IsaRO5y457NFc0zmdYXwCocVS+OcjVQCzrJ7+chrZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Validity Not Before: Nov 23 05:09:08 2024 GMT Not After : Nov 30 05:09:08 2024 GMT Subject: CN=67416374-ec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:56:5d:90:9d:80:eb:ba:46:19:4d:79:ae: 01:a4:1d:5c:09:6f:1e:0a:6f:05:cf:85:8a:90:d2: 55:a3:b9:b9:7e:f7:0c:ec:85:4e:be:5e:be:1c:73: 9a:7c:12:95:35:eb:72:09:8f:af:24:94:68:62:f8: 0d:77:95:3c:17:bf:52:d5:18:b0:6f:d8:d2:5d:58: b0:8a:69:da:63:32:01:79:df:84:94:2c:80:e1:28: a7:23:d7:90:c9:75:9b:5b:22:7a:3f:07:4a:f5:b9: c5:4f:4b:29:13:34:e9:3d:11:0c:10:b7:5a:8e:5a: a7:30:b5:d5:50:b1:91:0e:27:0b:d8:ee:3b:04:00: 40:c5:2c:0f:57:3d:e0:ff:3d:fd:55:f3:a7:89:39: ec:58:f1:b9:15:e1:6e:42:04:32:9e:15:dc:f9:ca: 28:de:b9:d1:65:f0:68:fd:2a:4c:60:c5:fe:fb:e8: 6f:44:9f:4d:60:53:14:3d:fc:7e:29:db:83:bc:ac: 9b:33:3f:07:99:71:75:ba:ee:49:8d:22:27:ae:c6: f7:04:f3:cd:a2:c4:83:a0:8f:03:34:c5:e2:85:a0: be:07:da:2b:62:bd:fc:34:ed:e9:09:8e:79:3a:fd: 44:4f:ad:1a:6e:9b:41:e6:a0:bd:60:7c:d8:6a:2d: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A0:57:46:24:BC:A0:60:AD:9F:F0:76:A3:50:8D:49:8B:C4:5C:FE X509v3 Authority Key Identifier: keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:6f:75:33:dd:a1:2b:ce:ba:fe:08:e2:92:41:a9:ea:7d:97: bc:85:60:33:4a:2e:6a:68:d5:e8:5f:84:17:fa:6a:9d:80:dc: 96:aa:fd:e9:d2:eb:6f:b7:b1:69:e6:20:f5:72:60:8e:38:36: cc:09:75:ef:58:c2:5b:22:6d:b2:20:a5:cd:6c:6a:a6:f1:cf: 7e:50:97:73:89:2d:9e:c7:fa:5c:fc:10:7c:ff:45:a8:73:69: 7e:a2:86:ed:0f:69:4e:54:0c:6d:74:8c:1f:0e:e8:ac:bb:49: c2:44:2b:87:f1:40:0f:3a:b6:b3:1d:95:6c:df:21:cf:4e:c8: 02:60:80:0a:36:f9:dc:57:cc:74:e1:99:1f:c8:58:08:63:a9: 8f:d4:07:66:00:ef:27:a7:fe:6c:ef:46:45:e9:54:aa:e1:50: 02:49:07:cb:f6:a8:9a:9c:34:49:83:f0:8b:a5:01:bb:df:6b: 97:f1:1f:76:b5:18:77:73:05:39:72:ac:d2:6e:10:76:ec:7b: 8e:a8:67:1e:28:c9:c3:0f:13:82:82:e4:1a:66:ab:8c:87:71: f2:26:07:f5:58:02:3a:ac:e0:26:ec:85:13:98:95:e4:84:4f: c6:a2:2e:2f:c1:61:50:d4:2e:1d:15:77:90:6b:91:b4:87:2b: 96:95:67:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QUUyMzExMC8GA1UEBRMoRTg4NzZCNTFBQjJCMTc3NDQwQ0Q0QzRDRDJFNEYwQTU5 OEUwMzgxQzAeFw0yNDExMjMwNTA5MDhaFw0yNDExMzAwNTA5MDhaMBgxFjAUBgNV BAMTDTY3NDE2Mzc0LWVjMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEGVZdkJ2A67pGGU15rgGkHVwJbx4KbwXPhYqQ0lWjubl+9wzshU6+Xr4cc5p8 EpU163IJj68klGhi+A13lTwXv1LVGLBv2NJdWLCKadpjMgF534SULIDhKKcj15DJ dZtbIno/B0r1ucVPSykTNOk9EQwQt1qOWqcwtdVQsZEOJwvY7jsEAEDFLA9XPeD/ Pf1V86eJOexY8bkV4W5CBDKeFdz5yijeudFl8Gj9Kkxgxf776G9En01gUxQ9/H4p 24O8rJszPweZcXW67kmNIieuxvcE882ixIOgjwM0xeKFoL4H2itivfw07ekJjnk6 /URPrRpum0HmoL1gfNhqLQqPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhqBXRiS8 oGCtn/B2o1CNSYvEXP4wHwYDVR0jBBgwFoAU6IdrUasrF3RAzUxM0uTwpZjgOBww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBRTIzLzNBNzJBQkZBMkM2 QzExRUZBMzQ2OTQyREM0RjlBRTAyLzZJZHJVYXNyRjNSQXpVeE0wdVR3cFpqZ09C dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklkclVhc3JGM1JBelV4TTB1VHdwWmpnT0J3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB RTIzLzNBNzJBQkZBMkM2QzExRUZBMzQ2OTQyREM0RjlBRTAyLzZJZHJVYXNyRjNS QXpVeE0wdVR3cFpqZ09Cdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAElvdTPdoSvOuv4I4pJBqep9l7yFYDNKLmpo1ehfhBf6ap2A3Jaq/enS 62+3sWnmIPVyYI44NswJde9YwlsibbIgpc1saqbxz35Ql3OJLZ7H+lz8EHz/Rahz aX6ihu0PaU5UDG10jB8O6Ky7ScJEK4fxQA86trMdlWzfIc9OyAJggAo2+dxXzHTh mR/IWAhjqY/UB2YA7yen/mzvRkXpVKrhUAJJB8v2qJqcNEmD8IulAbvfa5fxH3a1 GHdzBTlyrNJuEHbse46oZx4oycMPE4KC5Bpmq4yHcfImB/VYAjqs4CbshROYleSE T8aiLi/BYVDULh0Vd5BrkbSHK5aVZzk= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org