$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft File: 6eDCCGLs2ANoFFu3z2LO3YARYzo.mft (raw, json) Hash identifier: pC2Maxnp9OVQmWR1AwHPQp/bUsH1DHjD+szSo1ikg6c= Subject key identifier: C3:89:10:86:6F:B1:40:40:DE:F2:0F:6A:22:0C:77:29:8C:59:E3:B1 Authority key identifier: E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A Certificate issuer: /CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft Manifest number: 0885 Signing time: Fri 22 Nov 2024 20:19:41 +0000 Manifest this update: Fri 22 Nov 2024 20:19:40 +0000 Manifest next update: Fri 29 Nov 2024 20:19:40 +0000 Files and hashes: 1: 6eDCCGLs2ANoFFu3z2LO3YARYzo.crl (hash: 2m5xMbmfxzDk+Jeadp60P+3dRJ9KcrWDpvk5RwPdPiw=) 2: 99CE159C912C11EFA67EA629C4F9AE02.roa (hash: gJLl+1c1RcLYU13mnh7JLSZgqCVFkTQ5noIMe140YxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Validity Not Before: Nov 22 20:19:40 2024 GMT Not After : Nov 29 20:19:40 2024 GMT Subject: CN=6740e75d-c1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:75:12:71:35:4a:ca:76:71:1c:b9:4b:c6: ff:c6:6b:16:fc:05:de:87:2e:db:7d:7a:28:01:f7: f1:e7:20:99:f0:e3:79:b0:68:21:c9:cd:da:26:86: af:95:2c:0a:de:f9:fb:fe:94:0e:8f:2f:4d:f6:62: 36:3a:a7:06:0f:bc:b0:46:41:5f:23:5f:22:b5:7b: 8f:5e:57:5e:d4:a7:14:4d:20:a0:e6:e9:b1:79:f9: fe:86:cf:ae:09:f5:0f:d7:1f:b3:f8:29:65:1c:ab: 61:2d:9a:61:9b:18:54:97:16:a1:ab:fe:fb:54:80: 6f:61:54:67:b0:3b:c4:ad:2a:fa:6e:36:b2:dd:77: 77:32:f0:cb:99:be:61:e6:4d:b1:09:c6:1a:61:c3: ff:9c:ad:9a:f4:3f:02:e2:25:20:f1:fd:4a:00:56: 00:fd:c9:f5:ba:35:75:94:23:d8:74:7b:49:82:71: bb:03:32:4f:70:cc:55:4c:57:50:8b:6c:a8:52:e5: 71:af:e3:f7:3e:6a:5a:6f:ee:1e:a9:27:52:9c:28: 87:05:95:91:22:14:14:38:12:77:1f:ad:89:e3:6b: d4:c3:59:51:0d:14:78:4f:b1:28:95:0c:bd:7d:41: 86:a6:64:74:1b:2e:ed:dd:65:1e:4d:76:71:07:50: af:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:89:10:86:6F:B1:40:40:DE:F2:0F:6A:22:0C:77:29:8C:59:E3:B1 X509v3 Authority Key Identifier: keyid:E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:d8:69:48:9f:8c:ed:9e:2d:f8:2f:ee:f8:a1:9c:5a:4a:19: 0f:29:20:ce:68:2b:90:bf:9e:a6:5f:ba:30:f7:2c:7c:59:a5: df:5d:f3:99:58:fe:d2:73:19:c5:08:00:60:4c:2a:5d:4a:a6: c7:ae:b3:95:82:17:9d:1f:d4:51:9f:eb:bc:1c:72:6e:3d:79: 18:f2:1a:6b:f5:01:aa:61:d2:7a:d5:81:a4:93:1e:62:c5:1b: 82:6b:99:db:02:d2:a2:3d:22:7a:7b:bf:24:af:d3:01:fc:d9: 87:0a:5c:f0:e9:1b:05:98:88:13:d8:ba:da:ad:3e:a7:c7:d0: 2a:40:0e:b6:df:0c:39:bd:cf:68:cc:2b:07:7d:15:60:39:be: 36:84:0a:f3:aa:56:9e:bb:27:65:7c:08:40:75:b1:c3:ba:33: 8d:09:03:89:87:47:e3:7d:91:f4:ef:e9:9a:38:0a:30:f0:2a: 30:b2:c0:93:17:9c:52:24:ed:58:16:22:f1:02:57:9e:08:88: 63:d6:ab:4a:13:d3:c8:b2:eb:f8:3e:b1:4a:60:4f:2b:17:bb: 06:8f:8c:a1:f8:16:51:b3:d3:05:e9:9f:d3:64:55:a2:5e:ef: b0:69:c4:ab:e0:a8:04:2f:e0:2f:36:78:04:2b:8f:da:12:65: 9a:ea:db:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMUMxMTAvBgNVBAUTKEU5RTBDMjA4NjJFQ0Q4MDM2ODE0NUJCN0NGNjJDRURE ODAxMTYzM0EwHhcNMjQxMTIyMjAxOTQwWhcNMjQxMTI5MjAxOTQwWjAYMRYwFAYD VQQDEw02NzQwZTc1ZC1jMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuux1EnE1Ssp2cRy5S8b/xmsW/AXehy7bfXooAffx5yCZ8ON5sGghyc3aJoav lSwK3vn7/pQOjy9N9mI2OqcGD7ywRkFfI18itXuPXlde1KcUTSCg5umxefn+hs+u CfUP1x+z+CllHKthLZphmxhUlxahq/77VIBvYVRnsDvErSr6bjay3Xd3MvDLmb5h 5k2xCcYaYcP/nK2a9D8C4iUg8f1KAFYA/cn1ujV1lCPYdHtJgnG7AzJPcMxVTFdQ i2yoUuVxr+P3Pmpab+4eqSdSnCiHBZWRIhQUOBJ3H62J42vUw1lRDRR4T7EolQy9 fUGGpmR0Gy7t3WUeTXZxB1CvwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOJEIZv sUBA3vIPaiIMdymMWeOxMB8GA1UdIwQYMBaAFOngwghi7NgDaBRbt89izt2AEWM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MxQy9EOTMyNTJGQ0FC RjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJBTm9GRnUzejJMTzNZQVJZ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZlRENDR0xzMkFOb0ZGdTN6MkxPM1lBUll6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MxQy9EOTMyNTJGQ0FCRjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJB Tm9GRnUzejJMTzNZQVJZem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF2GlIn4ztni34L+74oZxaShkPKSDOaCuQv56mX7ow9yx8WaXfXfOZ WP7ScxnFCABgTCpdSqbHrrOVghedH9RRn+u8HHJuPXkY8hpr9QGqYdJ61YGkkx5i xRuCa5nbAtKiPSJ6e78kr9MB/NmHClzw6RsFmIgT2LrarT6nx9AqQA623ww5vc9o zCsHfRVgOb42hArzqlaeuydlfAhAdbHDujONCQOJh0fjfZH07+maOAow8CowssCT F5xSJO1YFiLxAleeCIhj1qtKE9PIsuv4PrFKYE8rF7sGj4yh+BZRs9MF6Z/TZFWi Xu+wacSr4KgEL+AvNngEK4/aEmWa6tvH -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org