$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: 0+KY18G8nomWlT+ERSSM8d7kr1Z50armffNo1ytj3Zk= Subject key identifier: 25:84:B3:B9:98:DE:45:4F:9B:31:3A:CF:3A:19:E7:5B:E8:FF:B7:CE Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0A07 Signing time: Fri 22 Nov 2024 19:37:22 +0000 Manifest this update: Fri 22 Nov 2024 19:37:21 +0000 Manifest next update: Fri 29 Nov 2024 19:37:21 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: ie1NrLFP3zkODpYlEqz60POqJp2N85rl1EQ8NvcC2IA=) 2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: RwhPKu38cAI3cC67SmnQfEARBZKEXwPVUQYTDgsHZos=) 3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: W7paYsvVojxFFb75gMOnX6f6hb2aZgcIMEhFjPe0SMY=) 4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: a54YtZf0SKcJMYb0lHnOkRGEn/bgtmXT4M8oGd8B0DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Nov 22 19:37:21 2024 GMT Not After : Nov 29 19:37:21 2024 GMT Subject: CN=6740dd72-64e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:1f:11:bf:f0:24:a2:e0:49:8a:2a:43:c0: 6d:19:91:37:f9:c9:84:66:f8:8b:93:ad:ec:9b:0b: d2:54:16:ce:ff:79:30:10:84:73:56:db:2a:51:6f: d4:68:bb:32:96:ed:24:be:7c:e5:fe:08:df:3c:04: 81:2d:2c:88:84:ce:77:18:e1:38:57:d2:83:ad:bb: 97:6f:9f:13:8f:b9:9e:6c:e9:3b:ad:f8:4a:71:90: 96:11:17:cd:8f:62:a8:f1:aa:ed:a8:a6:5f:f2:b1: bb:94:a9:72:b1:c7:f7:e2:cb:52:a9:e9:04:e7:32: 74:99:5b:3b:63:37:57:65:07:e5:4b:d4:03:76:38: 2a:df:ae:97:7b:44:62:9e:89:dd:fa:1b:60:96:ee: cb:77:f5:eb:b2:49:c3:ae:ac:02:b9:2d:df:c9:43: ec:59:fd:62:7f:ca:ba:9f:32:f6:60:70:1d:b0:9f: b6:0c:53:c6:31:08:00:b9:63:b4:ab:17:03:0f:be: b3:37:aa:19:2b:63:e9:8c:b2:cd:78:6e:b9:8c:14: 0f:ac:6b:da:68:09:46:d8:c7:7a:b7:d9:83:80:52: 8e:f8:d6:d1:87:22:d2:fd:80:bc:3e:f8:5e:4b:6a: e9:d7:dc:90:64:c6:c5:0a:87:e2:ad:eb:9f:c6:08: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:84:B3:B9:98:DE:45:4F:9B:31:3A:CF:3A:19:E7:5B:E8:FF:B7:CE X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:07:9d:8d:a5:bc:8d:8b:b1:a1:6d:bd:cb:9e:d9:53:e5:1f: 93:29:d3:15:21:40:08:87:2f:ee:97:cd:89:fd:e2:d9:d5:b3: 1f:2d:5f:03:c7:75:01:1f:9b:93:b3:49:79:b6:4d:91:36:6e: 80:35:0b:22:8a:8a:e2:b0:b2:04:4c:dd:ba:40:92:fb:10:bf: 25:6c:a0:6e:33:14:b6:73:f0:01:fe:04:44:c4:e0:2c:af:2e: 60:99:5d:34:66:1c:6b:f3:25:20:ea:4c:ae:54:55:a4:03:3a: 27:ac:74:d8:39:3d:52:3a:4a:f8:87:8a:c2:a6:ad:bd:0d:4c: 52:45:ea:33:aa:d0:2f:42:c2:ea:58:ff:ae:5f:cd:f0:d8:5d: 39:f0:98:60:a8:69:7d:37:b5:39:60:f2:34:7e:c1:47:bc:38: 46:f1:7a:23:7b:6e:81:77:34:69:ee:1c:4b:8f:4b:68:6f:42: 18:51:89:f5:90:cb:ce:63:a5:ea:f1:73:ca:73:eb:2f:a7:3d: 4d:40:d8:03:df:25:8d:9a:a6:b1:e6:b4:0b:27:7e:ff:80:a2: 42:f8:20:10:72:59:ab:f7:e4:11:6c:bd:2e:06:74:cc:48:81: 13:34:8b:da:76:bc:09:34:3e:07:89:42:3b:41:d6:bf:00:d1: 14:59:18:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjQxMTIyMTkzNzIxWhcNMjQxMTI5MTkzNzIxWjAYMRYwFAYD VQQDEw02NzQwZGQ3Mi02NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP0fEb/wJKLgSYoqQ8BtGZE3+cmEZviLk63smwvSVBbO/3kwEIRzVtsqUW/U aLsylu0kvnzl/gjfPASBLSyIhM53GOE4V9KDrbuXb58Tj7mebOk7rfhKcZCWERfN j2Ko8artqKZf8rG7lKlyscf34stSqekE5zJ0mVs7YzdXZQflS9QDdjgq366Xe0Ri nond+htglu7Ld/XrsknDrqwCuS3fyUPsWf1if8q6nzL2YHAdsJ+2DFPGMQgAuWO0 qxcDD76zN6oZK2PpjLLNeG65jBQPrGvaaAlG2Md6t9mDgFKO+NbRhyLS/YC8Pvhe S2rp19yQZMbFCofireufxgiemwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWEs7mY 3kVPmzE6zzoZ51vo/7fOMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQB52NpbyNi7Ghbb3LntlT5R+TKdMVIUAIhy/ul82J/eLZ1bMfLV8D x3UBH5uTs0l5tk2RNm6ANQsiiorisLIETN26QJL7EL8lbKBuMxS2c/AB/gRExOAs ry5gmV00Zhxr8yUg6kyuVFWkAzonrHTYOT1SOkr4h4rCpq29DUxSReozqtAvQsLq WP+uX83w2F058JhgqGl9N7U5YPI0fsFHvDhG8Xoje26BdzRp7hxLj0tob0IYUYn1 kMvOY6Xq8XPKc+svpz1NQNgD3yWNmqax5rQLJ37/gKJC+CAQclmr9+QRbL0uBnTM SIETNIvadrwJND4HiUI7Qda/ANEUWRhj -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:31 2024 by rpki-client on console-ams.rpki-client.org