$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: 6kud7IoghrTMZmtVfUdUndSTc8ybTQyAmBve3PQOSxk= Subject key identifier: 88:93:E5:3E:66:3B:DE:BE:D3:F4:0D:F4:C6:11:E4:52:56:BC:EC:20 Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: 18 Signing time: Wed 23 Oct 2024 06:37:54 +0000 Manifest this update: Wed 23 Oct 2024 06:37:54 +0000 Manifest next update: Wed 30 Oct 2024 06:37:54 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: M42DVRC/3pT+An8vqYZuPS/oRvrjyPiGw7m+RlXtQZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Validity Not Before: Oct 23 06:37:54 2024 GMT Not After : Oct 30 06:37:54 2024 GMT Subject: CN=671899c2-7d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:eb:8d:75:1d:b8:8b:0e:cf:8c:77:45:5b:0a: 35:e3:7b:b9:92:b9:de:e2:6a:0e:8d:18:28:7a:7a: 44:40:89:a2:ad:81:59:aa:d6:b0:ad:d5:84:3f:4f: 65:f7:21:24:cc:22:1f:68:4e:d6:79:77:41:d8:7d: 32:92:59:20:89:58:cd:b4:80:91:99:84:ba:47:96: 40:5f:17:21:30:a9:b9:0f:9a:fd:6b:81:4c:74:a8: 9d:d2:62:48:0f:b9:3d:44:e5:85:d1:6c:fa:c6:5a: ee:4a:3b:2e:d5:7d:24:14:3f:ac:89:f4:51:20:1d: c0:df:1c:80:6c:8a:6b:42:74:44:56:c6:39:d3:72: 3a:5f:70:b7:b3:cc:5c:69:6f:e5:c3:4c:eb:b6:e0: eb:47:7a:25:39:11:c7:7f:32:aa:34:c4:5a:3b:09: c9:5e:19:f5:ed:e7:b4:95:3d:f8:56:f9:87:de:1a: 9e:31:1c:c5:14:46:36:97:1b:0d:bf:9e:49:67:5f: 6c:3d:fa:1c:8d:94:58:d5:b2:84:27:06:76:a6:94: 35:81:82:7c:a0:90:d7:81:0d:02:ba:e4:83:a0:c6: ab:c2:00:29:38:19:25:58:98:b4:64:5c:8f:99:cd: 54:13:63:8e:fa:ed:18:f2:c5:a6:12:1a:51:f4:0e: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:93:E5:3E:66:3B:DE:BE:D3:F4:0D:F4:C6:11:E4:52:56:BC:EC:20 X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8f:6e:37:20:2d:da:2e:94:db:77:7c:be:57:d2:c6:a7:1a: 4b:08:45:4c:3f:07:b0:10:c5:3c:6d:51:03:38:fa:0f:00:0b: db:6e:91:be:9c:ff:ab:98:a5:17:fa:e1:7e:0e:af:f5:c7:67: 4c:e8:f5:1a:8a:23:13:0b:65:58:83:b5:4c:95:9b:bf:61:43: c8:09:14:46:6e:c2:c1:d0:52:f9:59:7c:88:af:e4:d4:9d:dc: 82:ab:e6:22:e9:10:3f:11:9c:75:e0:c1:3f:70:78:c9:8b:57: 67:7e:6a:de:44:63:91:a9:13:7d:0e:29:19:aa:e4:d2:4e:79: 4c:45:c8:17:9a:eb:e5:4b:2e:f4:3a:71:07:58:29:5e:96:8d: f1:62:d2:24:30:25:fd:fe:a8:a7:fa:20:91:e1:29:64:af:5e: 41:2f:6b:fe:e4:fd:b3:67:e6:9b:c7:31:cd:42:c3:b5:45:93: de:a3:31:63:c6:52:22:81:ee:57:52:bb:d6:28:8c:8f:55:41: 6d:da:15:37:3c:38:23:05:c3:6e:8b:fc:c1:7a:76:02:51:4f: d1:6a:40:9b:2a:9e:1c:a8:25:38:08:49:15:e5:ae:92:f9:26: 1a:86:10:07:a1:df:e3:cc:a9:ca:69:89:64:32:14:0d:b6:b3: 71:14:dd:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjUwNjExMC8GA1UEBRMoRkJFMUJBNUM1RTRDNDU3NEU4RTk1MTIyNTg2NzU2MDlE RjQxNkJCNzAeFw0yNDEwMjMwNjM3NTRaFw0yNDEwMzAwNjM3NTRaMBgxFjAUBgNV BAMTDTY3MTg5OWMyLTdkMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDq6411HbiLDs+Md0VbCjXje7mSud7iag6NGCh6ekRAiaKtgVmq1rCt1YQ/T2X3 ISTMIh9oTtZ5d0HYfTKSWSCJWM20gJGZhLpHlkBfFyEwqbkPmv1rgUx0qJ3SYkgP uT1E5YXRbPrGWu5KOy7VfSQUP6yJ9FEgHcDfHIBsimtCdERWxjnTcjpfcLezzFxp b+XDTOu24OtHeiU5Ecd/Mqo0xFo7CcleGfXt57SVPfhW+YfeGp4xHMUURjaXGw2/ nklnX2w9+hyNlFjVsoQnBnamlDWBgnygkNeBDQK65IOgxqvCACk4GSVYmLRkXI+Z zVQTY4767RjyxaYSGlH0DhozAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiJPlPmY7 3r7T9A30xhHkUla87CAwHwYDVR0jBBgwFoAU++G6XF5MRXTo6VEiWGdWCd9Ba7cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNTA2L0E1RTRDNDVFNkVE RTExRUZBQUMyQ0I1REM0RjlBRTAyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLS1HNlhGNU1SWFRvNlZFaVdHZFdDZDlCYTdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy NTA2L0E1RTRDNDVFNkVERTExRUZBQUMyQ0I1REM0RjlBRTAyLy0tRzZYRjVNUlhU bzZWRWlXR2RXQ2Q5QmE3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSPbjcgLdoulNt3fL5X0sanGksIRUw/B7AQxTxtUQM4+g8AC9tukb6c /6uYpRf64X4Or/XHZ0zo9RqKIxMLZViDtUyVm79hQ8gJFEZuwsHQUvlZfIiv5NSd 3IKr5iLpED8RnHXgwT9weMmLV2d+at5EY5GpE30OKRmq5NJOeUxFyBea6+VLLvQ6 cQdYKV6WjfFi0iQwJf3+qKf6IJHhKWSvXkEva/7k/bNn5pvHMc1Cw7VFk96jMWPG UiKB7ldSu9YojI9VQW3aFTc8OCMFw26L/MF6dgJRT9FqQJsqnhyoJTgISRXlrpL5 JhqGEAeh3+PMqcppiWQyFA22s3EU3aE= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org