$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft File: 6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json) Hash identifier: TYFDYBrTI0sbzy8FPef44EtvurCSvU40MmTFn+Vbppo= Subject key identifier: 10:F5:DE:11:B3:EA:77:E8:F3:4E:9A:5B:16:61:60:70:81:2A:BE:41 Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 Certificate issuer: /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Certificate serial: 1AA8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft Manifest number: 1AA8 Signing time: Sun 24 Nov 2024 16:13:43 +0000 Manifest this update: Sun 24 Nov 2024 16:13:42 +0000 Manifest next update: Sun 01 Dec 2024 16:13:42 +0000 Files and hashes: 1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: 7O62mNMOUuLxpB6ERBKI04/nl+fzxTUgA9VUOPkTkcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6824 (0x1aa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Validity Not Before: Nov 24 16:13:42 2024 GMT Not After : Dec 1 16:13:42 2024 GMT Subject: CN=674350b6-2b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:a0:33:a5:8e:db:b5:ce:71:4b:ba:2e:cc: eb:63:1b:ce:bb:d3:4e:75:6e:48:b1:4f:0a:9d:6b: b7:c8:b3:0f:64:eb:3f:b5:08:c8:72:73:b9:9b:56: 80:49:be:02:27:41:bd:9e:02:33:73:00:15:35:ce: b0:14:88:d3:1e:65:27:b2:75:b4:bb:a8:c0:40:6e: fb:2c:0d:58:68:f3:6d:16:7d:98:aa:7e:3f:4b:84: c5:d4:4b:83:42:0b:ca:09:6c:25:52:5c:fc:40:38: 9c:2f:49:54:cc:17:cd:5e:f2:5b:af:dd:90:21:66: d2:45:ea:3a:fd:a0:e9:95:52:21:02:c1:d4:f4:34: a4:99:de:70:9e:fb:18:8d:36:e2:b9:df:ed:d6:f8: ec:fa:70:bd:6d:b9:2b:0c:57:21:42:3b:0f:28:ae: fa:0c:64:e2:93:04:20:72:a3:25:4f:d7:17:4e:af: e4:2f:f1:4c:f1:2b:3b:5c:91:58:43:c4:cc:fb:3c: 62:bf:1d:4a:f9:d5:56:ff:2c:7e:d3:61:72:c3:58: 0d:e7:c7:62:c9:f2:89:be:80:f1:d1:5f:49:35:5c: ae:15:01:2a:bd:d3:ee:e6:b0:dd:73:4d:e7:92:8b: df:44:2f:1b:f5:84:65:fc:29:9e:df:c7:74:30:18: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F5:DE:11:B3:EA:77:E8:F3:4E:9A:5B:16:61:60:70:81:2A:BE:41 X509v3 Authority Key Identifier: keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:eb:ea:b7:1f:24:29:7e:02:49:d0:4e:bf:77:a5:36:b5:9c: cd:6f:56:ca:d5:bd:47:b5:1b:8e:63:cc:0d:67:bd:29:de:db: 09:26:12:f5:e9:12:7b:31:86:6b:4c:1e:68:2a:78:0c:1e:11: 01:13:24:36:09:00:96:5e:9b:b9:8d:db:ed:f3:f9:7d:a7:9c: e5:7f:42:4b:fb:a6:3e:11:66:01:58:7f:0c:3b:ed:e7:e2:d0: f3:f8:3d:29:50:fb:c6:55:9a:f7:33:cf:02:eb:3e:73:74:bc: 97:56:4c:30:31:f3:b8:13:a4:59:3b:e3:6d:9a:be:72:ab:bd: c9:19:24:66:64:4d:8f:32:b8:24:ac:ac:8f:ac:75:92:ab:49: d7:e4:d7:8a:c8:6b:54:f8:72:78:3c:9a:bb:72:27:60:9c:dc: d5:a0:ce:f0:17:32:b6:a8:c4:a4:f8:0b:ef:2c:17:b8:91:30: 99:6b:35:9f:7f:7e:0c:3f:f8:d2:bc:47:40:f5:b4:c3:f8:3f: df:07:b6:e5:dd:be:b8:f5:93:e4:a5:4c:70:a8:5e:8a:32:86: 1f:37:9f:e6:55:3e:1c:fa:3f:82:69:21:cf:54:28:34:36:78: 15:8f:56:5c:c2:db:1e:85:f9:02:77:d8:71:6b:b8:5b:52:9f: 88:e1:46:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEU4MjZEOTQyMEJDRjQ1QTEwODdEMzAxM0JCNEU0QTg0 OTYwRDYxQzcwHhcNMjQxMTI0MTYxMzQyWhcNMjQxMjAxMTYxMzQyWjAYMRYwFAYD VQQDEw02NzQzNTBiNi0yYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhmgM6WO27XOcUu6LszrYxvOu9NOdW5IsU8KnWu3yLMPZOs/tQjIcnO5m1aA Sb4CJ0G9ngIzcwAVNc6wFIjTHmUnsnW0u6jAQG77LA1YaPNtFn2Yqn4/S4TF1EuD QgvKCWwlUlz8QDicL0lUzBfNXvJbr92QIWbSReo6/aDplVIhAsHU9DSkmd5wnvsY jTbiud/t1vjs+nC9bbkrDFchQjsPKK76DGTikwQgcqMlT9cXTq/kL/FM8Ss7XJFY Q8TM+zxivx1K+dVW/yx+02Fyw1gN58diyfKJvoDx0V9JNVyuFQEqvdPu5rDdc03n kovfRC8b9YRl/Cme38d0MBhkjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBD13hGz 6nfo806aWxZhYHCBKr5BMB8GA1UdIwQYMBaAFOgm2UILz0WhCH0wE7tOSoSWDWHH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC83NjRBMDY2MDI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJhRUlmVEFUdTA1S2hKWU5Z Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZDYlpRZ3ZQUmFFSWZUQVR1MDVLaEpZTlljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC83NjRBMDY2MDI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJh RUlmVEFUdTA1S2hKWU5ZY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK6+q3HyQpfgJJ0E6/d6U2tZzNb1bK1b1HtRuOY8wNZ70p3tsJJhL1 6RJ7MYZrTB5oKngMHhEBEyQ2CQCWXpu5jdvt8/l9p5zlf0JL+6Y+EWYBWH8MO+3n 4tDz+D0pUPvGVZr3M88C6z5zdLyXVkwwMfO4E6RZO+Ntmr5yq73JGSRmZE2PMrgk rKyPrHWSq0nX5NeKyGtU+HJ4PJq7cidgnNzVoM7wFzK2qMSk+AvvLBe4kTCZazWf f34MP/jSvEdA9bTD+D/fB7bl3b649ZPkpUxwqF6KMoYfN5/mVT4c+j+CaSHPVCg0 NngVj1ZcwtsehfkCd9hxa7hbUp+I4UaD -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:11 2024 by rpki-client on console-ams.rpki-client.org