$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: DA9GzUW3d5W11ckI+B6Pb+JtlySqb2XZpwEUqP3WEVQ= Subject key identifier: 3B:18:D7:C1:94:0B:E2:68:DA:CD:11:96:15:1C:74:35:33:B2:FD:86 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0BB9 Signing time: Fri 22 Nov 2024 18:41:50 +0000 Manifest this update: Fri 22 Nov 2024 18:41:50 +0000 Manifest next update: Fri 29 Nov 2024 18:41:50 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: Qkj5tW5fobLZtrx6Ve/6k0P4LjVpHv5CC46kdnDulbo=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: 6dFzl9s/I6pGlRFXJwxSFot9IFsaE8UBtVgNTAm3m5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Nov 22 18:41:50 2024 GMT Not After : Nov 29 18:41:50 2024 GMT Subject: CN=6740d06e-6024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:a0:53:0b:9a:88:9a:84:59:22:bb:23:50: bb:e5:fc:8c:85:fc:26:fe:48:ff:dd:62:5f:53:63: 19:62:f8:c8:60:8b:90:16:ed:93:f6:76:ec:8f:16: 41:d4:8f:c5:7a:13:62:c3:a9:c5:9c:0f:3a:cd:7d: 9c:df:dd:fb:5a:4b:cf:51:21:3b:09:c9:0f:f6:60: ef:74:c0:d0:d7:0e:84:04:94:dc:b0:b3:78:cc:92: 1f:ac:5f:43:e1:33:51:06:c6:89:cf:af:35:f8:9c: bf:d8:14:69:ca:39:bc:24:c3:84:d7:cb:70:b4:21: 85:0c:f3:5c:bc:30:31:cf:ad:76:ad:82:52:e7:25: c6:90:05:b8:24:ef:81:41:60:34:d6:bc:b4:93:74: eb:94:ef:12:f1:a7:77:3f:79:cb:e3:27:f9:63:b5: a9:9b:9a:b5:bb:b1:b4:1f:c6:81:3d:f4:5c:4b:b7: a6:69:64:eb:a8:d0:67:3c:66:db:73:ff:4c:cd:d4: 6c:ea:e4:dc:d5:70:16:68:d9:c3:ca:80:08:92:b3: 63:d4:60:77:0c:1d:17:2b:7b:a5:f4:6a:bf:50:1d: 04:a6:a7:da:bb:98:b1:04:3c:c5:93:7f:37:70:8d: f0:4a:cf:5e:2b:04:7f:93:bb:51:c9:7b:e6:1c:5e: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:18:D7:C1:94:0B:E2:68:DA:CD:11:96:15:1C:74:35:33:B2:FD:86 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:25:dc:25:71:61:11:53:06:58:a0:2e:7f:51:c8:aa:2b:7b: 8c:76:c8:48:38:fd:4a:eb:a3:67:74:f5:b4:3e:39:14:16:90: 67:54:a3:9f:69:6e:c2:0f:ed:f2:5b:69:68:58:08:e4:25:f8: 1f:84:a2:2b:03:b7:d5:1b:59:80:b9:cb:a6:dc:f5:25:ee:33: 01:5e:8c:ab:93:84:62:b8:08:59:0c:d1:05:fb:a9:df:67:4c: 3c:a8:3e:c1:6a:52:b1:61:ba:30:2f:4c:0b:33:7c:03:2e:ce: 54:75:c0:c6:66:3f:d5:27:75:b1:65:b5:c5:67:37:43:ab:32: ff:f8:88:cb:21:68:b0:e8:43:72:a2:4e:c9:25:d0:6a:8d:1a: ca:04:02:83:6a:d4:7d:cd:ac:44:25:97:02:a4:2b:3f:01:57: 61:34:41:8a:f1:08:27:e2:e8:bc:f0:f0:15:d8:d2:37:bd:71: 29:70:88:84:e6:81:bf:19:40:45:bd:63:75:f0:81:48:52:9d: 35:b1:72:8c:77:51:13:dc:07:65:5e:b2:07:a5:ca:94:8d:ee: 4c:06:2d:5c:97:5c:34:f4:5b:ee:73:40:79:ab:23:e6:8f:61: 8d:bf:59:64:5c:41:61:f2:bc:89:a2:4b:50:a1:4b:11:7f:a4: 02:95:e2:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjQxMTIyMTg0MTUwWhcNMjQxMTI5MTg0MTUwWjAYMRYwFAYD VQQDEw02NzQwZDA2ZS02MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uugUwuaiJqEWSK7I1C75fyMhfwm/kj/3WJfU2MZYvjIYIuQFu2T9nbsjxZB 1I/FehNiw6nFnA86zX2c3937WkvPUSE7CckP9mDvdMDQ1w6EBJTcsLN4zJIfrF9D 4TNRBsaJz681+Jy/2BRpyjm8JMOE18twtCGFDPNcvDAxz612rYJS5yXGkAW4JO+B QWA01ry0k3TrlO8S8ad3P3nL4yf5Y7Wpm5q1u7G0H8aBPfRcS7emaWTrqNBnPGbb c/9MzdRs6uTc1XAWaNnDyoAIkrNj1GB3DB0XK3ul9Gq/UB0Epqfau5ixBDzFk383 cI3wSs9eKwR/k7tRyXvmHF5RGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsY18GU C+Jo2s0RlhUcdDUzsv2GMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJJdwlcWERUwZYoC5/UciqK3uMdshIOP1K66NndPW0PjkUFpBnVKOf aW7CD+3yW2loWAjkJfgfhKIrA7fVG1mAucum3PUl7jMBXoyrk4RiuAhZDNEF+6nf Z0w8qD7BalKxYbowL0wLM3wDLs5UdcDGZj/VJ3WxZbXFZzdDqzL/+IjLIWiw6ENy ok7JJdBqjRrKBAKDatR9zaxEJZcCpCs/AVdhNEGK8Qgn4ui88PAV2NI3vXEpcIiE 5oG/GUBFvWN18IFIUp01sXKMd1ET3AdlXrIHpcqUje5MBi1cl1w09Fvuc0B5qyPm j2GNv1lkXEFh8ryJoktQoUsRf6QCleLu -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org