$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft File: 6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json) Hash identifier: t/q8ViMdwYEHLupq4nPpZoG2GxTE+IQVP0+b2fwAwU0= Subject key identifier: 11:E3:7C:28:16:04:EA:EA:3E:5D:F8:D3:CD:A9:74:AD:FE:DE:A9:A3 Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft Manifest number: 07A5 Signing time: Wed 20 Nov 2024 20:46:47 +0000 Manifest this update: Wed 20 Nov 2024 20:46:46 +0000 Manifest next update: Wed 27 Nov 2024 20:46:46 +0000 Files and hashes: 1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: tjhw3px5KNy9S2Ev02wD++5NnXslMZ3RRHJIReYqSHU=) 2: 82001182986511EFBFE02134C4F9AE02.roa (hash: zFMhUdKAsUErPaBJNxHFhs6kNz0L2uuSFEiFAntBllQ=) 3: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (hash: LWV1KeEebkqoxDRj/MN5Z6I+5780TArhWaO+yA4BHQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Validity Not Before: Nov 20 20:46:46 2024 GMT Not After : Nov 27 20:46:46 2024 GMT Subject: CN=673e4ab7-35c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:e6:95:79:84:d4:af:67:7a:09:5e:60:db: ac:9e:ab:0e:dc:73:32:54:c2:9d:2d:5e:d2:86:3c: 75:32:1e:b7:f7:4a:51:6e:a4:36:b1:8d:8f:20:f9: d9:bd:4e:73:be:44:d8:41:42:b7:fb:ac:c7:80:29: 8e:47:87:9d:c8:36:a9:0f:73:e2:a2:68:6b:c5:c8: 2f:e2:08:7a:f2:3a:c6:a5:f0:d2:f4:5f:a7:96:79: 9b:42:ad:57:d5:82:40:c2:bd:c1:d5:c7:77:fd:11: 39:1c:71:a7:0b:c5:f4:96:b6:0b:cb:5c:45:7b:b5: ec:b2:8e:bd:24:ab:41:da:ff:17:23:fb:ec:59:49: 98:d9:b1:5c:47:ac:3b:bb:d9:1b:82:91:2e:14:b5: 67:1d:61:fb:fe:a9:c8:e1:c1:e3:d0:1e:96:00:8d: db:50:a0:78:78:17:f1:23:44:7c:d8:4d:7f:32:a4: 65:23:41:10:85:7a:88:91:09:74:1f:78:13:70:a2: 90:71:e0:1f:52:8d:08:6a:32:b7:33:24:7e:25:27: af:e9:94:b2:8c:fb:4a:83:f3:2d:81:f8:e2:cc:f8: 3a:cb:01:0e:71:10:9a:41:82:a0:20:1e:c8:fa:33: ba:5d:e8:60:16:0c:46:a9:cf:17:ef:06:8b:e9:4a: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E3:7C:28:16:04:EA:EA:3E:5D:F8:D3:CD:A9:74:AD:FE:DE:A9:A3 X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8c:ed:e2:9c:b5:fd:36:d3:4c:24:46:9e:0a:9e:50:bc:d4: 8a:71:1f:e5:27:34:22:b5:96:60:f6:b7:23:f6:e1:6d:d1:c4: 5c:ac:7f:89:a6:43:e2:d0:55:1d:a3:7e:5a:8b:07:c2:b7:86: 62:63:fd:f6:fd:6f:4b:18:7b:86:a6:04:4a:cc:0e:ff:89:fd: ba:6b:6f:b4:c3:bb:17:b2:8d:5d:6a:a9:6c:22:0f:6f:7b:3e: 01:32:5f:b9:cd:59:93:a6:0f:01:b0:a6:21:5c:ae:9c:0d:96: 5a:67:46:a8:9d:ce:7f:f5:52:af:1e:c6:c2:8c:a2:67:3a:4d: 03:b7:c3:ad:70:ae:04:2b:62:7c:bd:96:12:a4:01:e0:e7:9d: f5:b0:17:60:c3:15:8c:57:ec:26:ba:40:cd:53:b8:26:fc:de: 0e:7f:20:49:77:2b:9f:94:c8:e7:4a:2c:a2:70:fa:ab:cc:d7: 35:46:9b:8f:a7:70:21:7a:30:01:12:47:eb:c0:30:1a:a6:e3: 66:21:14:c4:a1:89:a9:0d:3b:ab:5d:da:65:9b:02:31:59:cd: 1c:ce:41:64:16:ce:24:28:0c:0f:ff:72:25:c7:e2:45:70:c6: 5e:7a:45:8f:a6:9b:0e:c5:24:d3:d6:69:31:ca:3c:a4:8e:c6: df:dd:75:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjQxMTIwMjA0NjQ2WhcNMjQxMTI3MjA0NjQ2WjAYMRYwFAYD VQQDEw02NzNlNGFiNy0zNWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmXmlXmE1K9negleYNusnqsO3HMyVMKdLV7Shjx1Mh6390pRbqQ2sY2PIPnZ vU5zvkTYQUK3+6zHgCmOR4edyDapD3Piomhrxcgv4gh68jrGpfDS9F+nlnmbQq1X 1YJAwr3B1cd3/RE5HHGnC8X0lrYLy1xFe7Xsso69JKtB2v8XI/vsWUmY2bFcR6w7 u9kbgpEuFLVnHWH7/qnI4cHj0B6WAI3bUKB4eBfxI0R82E1/MqRlI0EQhXqIkQl0 H3gTcKKQceAfUo0IajK3MyR+JSev6ZSyjPtKg/MtgfjizPg6ywEOcRCaQYKgIB7I +jO6XehgFgxGqc8X7waL6Urq1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHjfCgW BOrqPl34082pdK3+3qmjMB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkVGOC83N0Y5OEMzOEREOEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5J WFZ0aHBscGg3czExcVlHME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAjO3inLX9NtNMJEaeCp5QvNSKcR/lJzQitZZg9rcj9uFt0cRcrH+J pkPi0FUdo35aiwfCt4ZiY/32/W9LGHuGpgRKzA7/if26a2+0w7sXso1daqlsIg9v ez4BMl+5zVmTpg8BsKYhXK6cDZZaZ0aonc5/9VKvHsbCjKJnOk0Dt8OtcK4EK2J8 vZYSpAHg5531sBdgwxWMV+wmukDNU7gm/N4OfyBJdyuflMjnSiyicPqrzNc1RpuP p3AhejABEkfrwDAapuNmIRTEoYmpDTurXdplmwIxWc0czkFkFs4kKAwP/3Ilx+JF cMZeekWPppsOxSTT1mkxyjykjsbf3XUl -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:43 2024 by rpki-client on console-ams.rpki-client.org