$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: irD5ruH2Drlf54FzhPN/iM69K9YHtNgeo/pRF1674gM= Subject key identifier: 5D:65:7A:80:DE:0F:03:47:4E:B5:58:76:8E:8F:6C:F6:90:8D:0F:ED Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0C9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0C92 Signing time: Wed 20 Nov 2024 18:04:05 +0000 Manifest this update: Wed 20 Nov 2024 18:04:04 +0000 Manifest next update: Wed 27 Nov 2024 18:04:04 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: r2PDi5/BNhjo88eSTTluSR2Dzbeh6ukOPNcDoUrLzbo=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: Gk9fLK1w1PhazvKtIKN9AYlf9o1o2jXmZMjpuJtNJp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Nov 20 18:04:04 2024 GMT Not After : Nov 27 18:04:04 2024 GMT Subject: CN=673e2495-7bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:1c:ba:38:f1:13:65:f3:58:6c:60:71:8a: 98:05:ef:1a:48:f2:d8:a3:e0:c5:cb:33:fc:3c:65: d8:7c:16:99:ea:22:65:1d:3e:ed:67:79:09:bf:b7: 12:85:c4:19:60:b9:b4:46:29:af:34:60:dc:d3:c8: 0a:0a:da:09:13:f8:f1:96:36:85:82:f5:52:f6:01: a3:43:4d:c8:d3:2d:2b:1e:71:ba:4d:4c:a5:a7:af: 23:df:e2:b1:88:59:ef:e4:40:f3:d3:6b:76:26:9c: 0a:11:fa:20:62:88:bc:d2:e5:67:cd:ec:40:8f:1e: 12:bd:86:3e:ec:7b:a9:16:d4:86:ca:37:b0:73:e7: 0a:ac:93:f6:7f:94:0c:ce:8d:70:49:ee:0a:2d:90: af:71:c5:30:9c:3e:e2:4a:e1:9e:4d:6c:3a:c7:eb: 04:7f:e2:ab:99:3b:a3:b3:e6:71:b8:c0:7c:a0:b1: f4:41:0c:f7:2c:10:73:06:92:09:61:4a:97:47:76: 7c:03:30:1b:9b:1d:d5:6d:1d:90:35:b9:2b:42:38: c6:4b:6f:23:9b:61:3a:83:fb:f8:b1:e9:00:1a:38: 0f:f0:2e:36:9e:10:63:b4:82:5d:7e:06:1f:89:19: 62:d2:02:8a:08:99:94:d5:c0:3f:c4:71:56:67:f0: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:7A:80:DE:0F:03:47:4E:B5:58:76:8E:8F:6C:F6:90:8D:0F:ED X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:27:d3:50:31:04:b9:c4:9b:6f:0e:e8:eb:10:59:07:79:3d: 2b:26:47:5a:a9:53:37:92:28:65:1e:bb:7a:ec:f8:f0:1e:cd: 07:1b:c1:7a:6a:b0:42:14:b7:3e:db:91:9a:8b:26:fe:73:cf: 90:de:04:06:97:bb:2d:6e:2b:6e:86:a7:f3:62:43:de:d3:de: f2:91:63:86:61:5e:8b:40:a5:8f:89:8f:6e:fc:15:b4:20:61: 52:69:0d:8e:b1:0a:3c:ac:68:18:47:0c:4f:e5:70:0f:a0:43: e2:b7:53:1e:57:dd:68:7f:ed:95:74:91:38:ad:13:62:c0:4e: 41:f9:97:07:fd:ee:99:16:ee:96:9b:90:48:e6:42:6a:b7:dc: 11:da:a1:7d:ad:12:40:e9:93:bb:41:6c:ff:7a:c9:79:fd:35: 84:db:11:a3:23:ab:09:3d:a5:13:74:5a:3a:12:31:a1:d0:ff: f1:5a:c1:8b:87:cb:f3:89:ca:7c:7e:aa:05:6d:af:cd:90:7a: f6:ff:17:b9:71:28:e9:8c:c5:5d:2b:cc:89:3d:ce:b0:70:67: 95:3e:9b:41:a5:af:44:51:5b:a7:df:ae:8c:b2:ab:55:75:dd: bb:c0:6b:66:a1:c0:65:68:64:a8:cf:ee:89:18:f8:b7:cb:cf: bb:22:6b:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjQxMTIwMTgwNDA0WhcNMjQxMTI3MTgwNDA0WjAYMRYwFAYD VQQDEw02NzNlMjQ5NS03YmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaMcujjxE2XzWGxgcYqYBe8aSPLYo+DFyzP8PGXYfBaZ6iJlHT7tZ3kJv7cS hcQZYLm0RimvNGDc08gKCtoJE/jxljaFgvVS9gGjQ03I0y0rHnG6TUylp68j3+Kx iFnv5EDz02t2JpwKEfogYoi80uVnzexAjx4SvYY+7HupFtSGyjewc+cKrJP2f5QM zo1wSe4KLZCvccUwnD7iSuGeTWw6x+sEf+KrmTujs+ZxuMB8oLH0QQz3LBBzBpIJ YUqXR3Z8AzAbmx3VbR2QNbkrQjjGS28jm2E6g/v4sekAGjgP8C42nhBjtIJdfgYf iRli0gKKCJmU1cA/xHFWZ/DJqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1leoDe DwNHTrVYdo6PbPaQjQ/tMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtJ9NQMQS5xJtvDujrEFkHeT0rJkdaqVM3kihlHrt67PjwHs0HG8F6 arBCFLc+25Gaiyb+c8+Q3gQGl7stbituhqfzYkPe097ykWOGYV6LQKWPiY9u/BW0 IGFSaQ2OsQo8rGgYRwxP5XAPoEPit1MeV91of+2VdJE4rRNiwE5B+ZcH/e6ZFu6W m5BI5kJqt9wR2qF9rRJA6ZO7QWz/esl5/TWE2xGjI6sJPaUTdFo6EjGh0P/xWsGL h8vzicp8fqoFba/NkHr2/xe5cSjpjMVdK8yJPc6wcGeVPptBpa9EUVun366MsqtV dd27wGtmocBlaGSoz+6JGPi3y8+7ImtR -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:24 2024 by rpki-client on console-fra.rpki-client.org