$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: iH4FjCdoCoc3iEwtIKTgKNnkNo4S0mGxHni9GWW9bUQ= Subject key identifier: 62:F4:07:14:84:3C:C2:FB:0E:57:63:B8:E3:C9:87:7D:97:37:5F:E5 Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 0185 Signing time: Sat 23 Nov 2024 02:06:41 +0000 Manifest this update: Sat 23 Nov 2024 02:06:41 +0000 Manifest next update: Sat 30 Nov 2024 02:06:41 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: GFjUqV0z+JN3JFNf5heKJYuD2kCXtjO/U8vM3w/irJM=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: uxp2G2bghn9NecpAe+byqEWG3Y6T1GBL3cmiQ22tnnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Nov 23 02:06:41 2024 GMT Not After : Nov 30 02:06:41 2024 GMT Subject: CN=674138b1-681c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:e2:42:28:d8:c3:0e:83:26:5b:ad:04:7f: aa:1d:d2:9c:97:60:ff:7b:8b:0a:e9:44:77:15:3c: f6:c6:d5:df:80:1d:85:17:a1:44:20:88:a2:e4:bf: cb:ba:e9:3b:11:40:37:73:31:48:0b:ad:90:81:43: 1c:14:c0:57:90:f5:18:be:be:46:5d:e3:85:b2:79: 1a:ff:5d:05:07:37:e1:a7:0e:e8:14:b3:d7:d0:ee: 05:b0:34:15:e6:31:75:c3:21:aa:8d:38:cb:2f:12: 7e:5d:96:28:fa:0f:cb:e1:10:a4:8c:a6:75:e4:9d: 1a:ef:cb:ed:08:e5:c2:20:fe:d8:ce:7c:ad:59:9e: 17:bc:ee:f9:76:8e:b5:c2:4f:ba:b1:00:c7:e2:ec: 79:50:2b:9e:0b:eb:00:da:3b:1a:19:da:b8:20:3a: b7:ca:28:c3:e7:12:1a:29:1c:07:da:71:a8:f6:df: e7:8a:aa:25:49:36:5b:9c:15:12:b8:c2:4a:8c:cd: 65:f4:d9:8a:8f:82:93:2b:3e:97:5d:e7:d3:15:d1: 59:8d:19:38:3d:58:90:62:a7:3d:16:5a:33:17:82: e5:11:fc:4d:49:c9:cf:ee:a9:0e:8b:0a:eb:ab:69: 59:9b:71:b1:37:55:c8:a5:49:a1:7c:25:58:7e:f3: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F4:07:14:84:3C:C2:FB:0E:57:63:B8:E3:C9:87:7D:97:37:5F:E5 X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2c:40:51:22:d0:79:89:67:9b:18:3f:78:ba:6c:ca:7b:29: fd:da:71:06:a8:eb:46:e7:2c:27:0a:29:78:af:85:06:39:81: 41:3b:9c:be:cf:2c:65:eb:b3:7c:f3:99:c1:64:0a:91:66:f7: 27:0e:6b:5a:82:4f:93:47:2a:f5:2d:bd:6f:bd:93:04:90:14: 0d:0a:9a:b8:ab:8f:fc:9a:6d:73:4c:99:3c:b7:d2:6f:c9:f4: 56:1f:63:7c:aa:ce:d3:07:0a:0f:12:a3:13:4b:8c:7c:56:d5: 99:0a:a8:c0:e8:b9:de:ba:21:1e:d8:b0:73:cf:22:e9:50:f0: e1:e0:f1:b9:6e:86:47:05:d8:07:39:15:8f:83:ba:bb:99:7d: 05:c7:37:08:aa:78:ff:4f:c6:8c:aa:e0:9c:82:a4:91:94:01: d8:9a:0f:d1:7d:e5:b3:55:34:fc:71:01:4f:5e:61:14:86:82: 1e:0f:e6:b2:e8:2f:4f:bd:81:2f:fb:46:4a:c7:92:2f:36:7d: ae:9c:d3:d4:0e:9b:8a:fd:63:8b:ca:70:85:e0:30:db:02:42: 11:51:f8:26:3b:70:98:1c:b9:e8:b1:f3:99:a6:53:eb:53:63: fc:09:a3:0f:cd:23:c6:6c:12:ee:a1:c1:b3:5d:b9:0b:2b:45: 86:fc:12:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjQxMTIzMDIwNjQxWhcNMjQxMTMwMDIwNjQxWjAYMRYwFAYD VQQDEw02NzQxMzhiMS02ODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBfiQijYww6DJlutBH+qHdKcl2D/e4sK6UR3FTz2xtXfgB2FF6FEIIii5L/L uuk7EUA3czFIC62QgUMcFMBXkPUYvr5GXeOFsnka/10FBzfhpw7oFLPX0O4FsDQV 5jF1wyGqjTjLLxJ+XZYo+g/L4RCkjKZ15J0a78vtCOXCIP7YznytWZ4XvO75do61 wk+6sQDH4ux5UCueC+sA2jsaGdq4IDq3yijD5xIaKRwH2nGo9t/niqolSTZbnBUS uMJKjM1l9NmKj4KTKz6XXefTFdFZjRk4PViQYqc9FlozF4LlEfxNScnP7qkOiwrr q2lZm3GxN1XIpUmhfCVYfvPSEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGL0BxSE PML7DldjuOPJh32XN1/lMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOLEBRItB5iWebGD94umzKeyn92nEGqOtG5ywnCil4r4UGOYFBO5y+ zyxl67N885nBZAqRZvcnDmtagk+TRyr1Lb1vvZMEkBQNCpq4q4/8mm1zTJk8t9Jv yfRWH2N8qs7TBwoPEqMTS4x8VtWZCqjA6LneuiEe2LBzzyLpUPDh4PG5boZHBdgH ORWPg7q7mX0FxzcIqnj/T8aMquCcgqSRlAHYmg/RfeWzVTT8cQFPXmEUhoIeD+ay 6C9PvYEv+0ZKx5IvNn2unNPUDpuK/WOLynCF4DDbAkIRUfgmO3CYHLnosfOZplPr U2P8CaMPzSPGbBLuocGzXbkLK0WG/BIZ -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:41 2024 by rpki-client on console-ams.rpki-client.org