$ rpki-client -vvf rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft File: 6UOWsst_yPtsQcUvVcybKV4ZL9o.mft (raw, json) Hash identifier: KcrRFWc3dlaWV/URN8ajbqvAMj+0gd4Tp+2QSONaQ5g= Subject key identifier: FD:2A:2A:6D:68:14:08:4E:34:9E:2E:6C:29:27:59:8E:60:13:47:9C Authority key identifier: E9:43:96:B2:CB:7F:C8:FB:6C:41:C5:2F:55:CC:9B:29:5E:19:2F:DA Certificate issuer: /CN=A917000C/serialNumber=E94396B2CB7FC8FB6C41C52F55CC9B295E192FDA Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft Manifest number: 0672 Signing time: Fri 22 Nov 2024 21:53:53 +0000 Manifest this update: Fri 22 Nov 2024 21:53:53 +0000 Manifest next update: Fri 29 Nov 2024 21:53:53 +0000 Files and hashes: 1: 6UOWsst_yPtsQcUvVcybKV4ZL9o.crl (hash: ycG4RfjXT5IzF698BkfUBoqNMcnQ5rvEk7mvgv0/SP0=) 2: 37303BC0554111EBAE1AA47BC4F9AE02.roa (hash: Kvg4tPhVoW6NrVk+7NPtj3VAC+IGX1fnXHqvIED30BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.crl rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917000C/serialNumber=E94396B2CB7FC8FB6C41C52F55CC9B295E192FDA Validity Not Before: Nov 22 21:53:53 2024 GMT Not After : Nov 29 21:53:53 2024 GMT Subject: CN=6740fd71-a1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:2c:7e:7c:b8:56:ea:ec:44:35:7e:d9:56: 9f:fe:c3:97:c8:7b:73:4c:65:ae:19:b1:81:15:6f: d7:a7:ab:2a:87:ce:bc:69:7e:7c:21:4c:63:d5:7a: db:7a:16:c5:93:bb:5e:d0:98:5e:eb:3a:d1:da:b6: 84:f2:0f:d0:91:12:dc:73:9f:09:f6:0e:63:78:56: b1:a4:37:24:07:0a:0c:b4:91:88:79:24:61:bc:64: 6a:39:aa:96:b1:54:bd:78:dc:74:03:a4:e6:4b:12: fa:88:f8:c5:7e:16:20:16:cb:4e:48:0c:6c:10:01: e9:3b:8f:ef:88:55:57:e5:3a:92:4b:2b:bb:c8:c7: 85:4a:14:e2:4a:77:88:6a:4f:69:19:9f:86:0f:4b: b7:94:75:07:90:6c:c6:74:61:27:7b:70:9e:a1:c0: 09:cd:9e:6b:35:16:53:6d:12:ba:55:ca:56:70:f1: 78:28:fa:d6:ee:3d:1a:5f:1a:86:ef:6a:f6:71:7a: 23:98:3f:ab:11:63:96:20:12:46:92:c3:ce:f6:6a: f6:10:5f:ab:8f:07:bd:a9:6d:db:d3:48:ac:d4:ba: a8:7f:fa:ea:d0:f5:be:7e:fb:3d:86:68:35:9d:7f: 5d:45:0a:64:e8:16:3a:4c:67:96:55:c8:44:5f:18: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2A:2A:6D:68:14:08:4E:34:9E:2E:6C:29:27:59:8E:60:13:47:9C X509v3 Authority Key Identifier: keyid:E9:43:96:B2:CB:7F:C8:FB:6C:41:C5:2F:55:CC:9B:29:5E:19:2F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4d:b8:ab:3d:b6:af:34:5b:9c:53:a2:d3:68:8b:3d:6c:44: fe:33:f0:b1:f2:5d:c1:01:c1:8d:e1:de:fd:79:b1:77:ba:74: fa:7c:aa:6d:58:29:6b:6e:71:5f:46:d0:c3:b2:dd:7a:06:8b: 37:f4:fc:55:9a:e2:ff:53:c8:b7:80:d0:75:bf:07:31:8c:31: 1e:3c:e2:00:90:f2:37:b2:7a:38:fd:80:e0:4e:31:6a:0e:06: 2d:3c:7b:aa:5e:53:5e:a2:57:53:82:34:ff:5d:ab:ef:d1:d6: 9c:1a:5f:f6:25:c0:14:dc:0b:ee:33:17:7d:a4:2e:af:98:b3: 82:2c:eb:7f:ec:ea:4a:3a:92:c9:bd:20:ea:d6:c5:0d:57:1f: 97:26:b4:40:a8:b0:46:4b:79:64:2a:2e:55:f3:cd:99:47:a9: 8d:9a:06:0b:d8:be:b6:f0:50:59:2f:04:78:78:87:52:02:47: cb:c3:b5:b8:e8:82:94:50:e6:a1:31:1d:4a:1f:55:df:c4:17: 77:1e:b0:56:59:ac:48:0e:4e:c9:bc:6c:81:07:26:77:59:e6: 57:0a:7a:d4:df:81:8a:59:2e:66:f5:14:10:ce:4b:15:8f:6a: ea:57:96:37:01:bc:46:a7:3a:fa:0e:19:ea:16:7c:ac:53:37: 53:b7:b8:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAwMEMxMTAvBgNVBAUTKEU5NDM5NkIyQ0I3RkM4RkI2QzQxQzUyRjU1Q0M5QjI5 NUUxOTJGREEwHhcNMjQxMTIyMjE1MzUzWhcNMjQxMTI5MjE1MzUzWjAYMRYwFAYD VQQDEw02NzQwZmQ3MS1hMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Hwsfny4VursRDV+2Vaf/sOXyHtzTGWuGbGBFW/Xp6sqh868aX58IUxj1Xrb ehbFk7te0Jhe6zrR2raE8g/QkRLcc58J9g5jeFaxpDckBwoMtJGIeSRhvGRqOaqW sVS9eNx0A6TmSxL6iPjFfhYgFstOSAxsEAHpO4/viFVX5TqSSyu7yMeFShTiSneI ak9pGZ+GD0u3lHUHkGzGdGEne3CeocAJzZ5rNRZTbRK6VcpWcPF4KPrW7j0aXxqG 72r2cXojmD+rEWOWIBJGksPO9mr2EF+rjwe9qW3b00is1Lqof/rq0PW+fvs9hmg1 nX9dRQpk6BY6TGeWVchEXxgulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0qKm1o FAhONJ4ubCknWY5gE0ecMB8GA1UdIwQYMBaAFOlDlrLLf8j7bEHFL1XMmyleGS/a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDAwQy9GM0ZBQjY1NjU1 M0YxMUVCQkNDNzFDN0JDNEY5QUUwMi82VU9Xc3N0X3lQdHNRY1V2VmN5YktWNFpM OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZVT1dzc3RfeVB0c1FjVXZWY3liS1Y0Wkw5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDAwQy9GM0ZBQjY1NjU1M0YxMUVCQkNDNzFDN0JDNEY5QUUwMi82VU9Xc3N0X3lQ dHNRY1V2VmN5YktWNFpMOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgTbirPbavNFucU6LTaIs9bET+M/Cx8l3BAcGN4d79ebF3unT6fKpt WClrbnFfRtDDst16Bos39PxVmuL/U8i3gNB1vwcxjDEePOIAkPI3sno4/YDgTjFq DgYtPHuqXlNeoldTgjT/Xavv0dacGl/2JcAU3AvuMxd9pC6vmLOCLOt/7OpKOpLJ vSDq1sUNVx+XJrRAqLBGS3lkKi5V882ZR6mNmgYL2L628FBZLwR4eIdSAkfLw7W4 6IKUUOahMR1KH1XfxBd3HrBWWaxIDk7JvGyBByZ3WeZXCnrU34GKWS5m9RQQzksV j2rqV5Y3AbxGpzr6DhnqFnysUzdTt7gL -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:42 2024 by rpki-client on console-ams.rpki-client.org