$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json) Hash identifier: xQ1xRO6XwZsTt4yRssnR3WSrECzFrK+wsvsZDAYuLRc= Subject key identifier: 5C:07:8C:27:00:3D:96:9C:6B:FB:6D:C4:74:3A:F3:AD:37:DF:56:17 Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft Manifest number: 06 Signing time: Wed 23 Oct 2024 06:51:16 +0000 Manifest this update: Wed 23 Oct 2024 06:51:14 +0000 Manifest next update: Wed 30 Oct 2024 06:51:14 +0000 Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: yhBFiM0cI7JDUdgmLD5xG8XF3dBSC+rxCE+k0cX818w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Validity Not Before: Oct 23 06:51:14 2024 GMT Not After : Oct 30 06:51:14 2024 GMT Subject: CN=67189ce3-aee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:5f:0d:9a:c6:d6:9d:10:03:02:9d:d0:07: 4a:45:36:2b:25:d5:27:e0:15:07:19:47:a1:40:dc: 1d:84:5c:94:61:04:e5:bb:bd:b1:3a:15:fa:96:27: cc:45:ee:9c:f8:e4:73:07:5e:ff:05:4d:da:11:29: e3:e7:ef:8c:fc:00:d7:b1:a3:c7:56:74:18:7d:53: ca:bd:99:3d:94:89:fd:56:cf:07:d4:85:29:2a:5b: fc:96:16:27:21:a5:07:6d:3f:80:4b:09:9f:64:24: 2c:32:c1:29:ca:b3:1f:6c:87:a0:f1:94:ce:b4:dc: d6:e6:7b:ad:30:cc:cd:94:42:91:1b:2a:df:d0:07: 39:bf:6c:4c:a8:9f:05:1f:5a:1a:50:ae:d2:d9:87: 0d:86:07:4b:81:9b:41:f7:b9:0b:c2:20:d0:d0:2a: 48:62:e3:26:f9:a3:d1:d6:c3:a1:fd:38:ca:1c:60: 3d:eb:9b:cf:d0:38:de:9c:86:73:05:f0:9e:a2:a7: 6a:7e:cf:36:5b:ea:0a:48:2e:51:9f:69:20:4d:f1: cd:0f:bd:d9:13:a9:b4:92:27:de:e6:93:85:cd:bd: 05:b1:bb:71:ef:62:33:a1:db:84:3d:3b:b1:3f:3f: 97:f5:dd:28:59:1d:2b:35:fb:ed:2b:f7:34:f7:15: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:07:8C:27:00:3D:96:9C:6B:FB:6D:C4:74:3A:F3:AD:37:DF:56:17 X509v3 Authority Key Identifier: keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c3:e2:c5:d0:c6:6c:93:66:44:c8:d9:ea:bc:5f:a2:8c:77: c2:f3:f7:ce:1f:b4:f0:e4:7c:9f:24:35:10:18:49:dd:60:13: c3:12:b1:d5:30:49:fd:5f:76:84:f3:0c:56:03:e0:36:d5:e0: fe:52:06:d6:bc:ae:89:cd:73:8b:12:f4:db:e9:a2:97:15:24: ea:4e:cb:62:75:75:e5:a0:6e:00:9e:d3:2a:6b:8b:c4:0c:95: ca:54:a6:0a:97:a5:77:b2:bc:50:47:a4:a6:f7:e4:d6:ec:84: 4f:3e:4d:5e:d6:7d:a5:ad:9f:69:cc:79:33:8a:d4:59:b8:0d: d5:0a:43:8c:7f:b1:43:d9:92:7b:b0:82:c3:6a:12:a6:0d:e6: 1d:66:97:92:2d:43:56:9e:5d:08:09:a8:5d:cf:08:19:5e:34: e8:e0:ae:cf:75:05:34:0b:4e:7d:cd:1b:98:3b:4d:80:6e:0a: ad:5a:76:85:8d:16:b7:ce:99:6f:8b:94:96:f0:4f:ee:48:86: e5:ae:e6:2f:62:1a:8d:bd:9e:8b:35:21:00:78:84:e8:93:28: fd:9c:e2:22:a7:69:4d:da:71:74:8e:44:e7:3e:e7:00:63:70: 0b:18:2a:70:c4:2b:89:bd:64:87:1a:20:72:69:84:84:50:a3: 55:82:f7:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjdDNTExMC8GA1UEBRMoQTM5ODcxNDYyNkY4N0FDRUJFNUY2RkQwMUU1MDcwMTkx NUFBN0QxNTAeFw0yNDEwMjMwNjUxMTRaFw0yNDEwMzAwNjUxMTRaMBgxFjAUBgNV BAMTDTY3MTg5Y2UzLWFlZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7+l8NmsbWnRADAp3QB0pFNisl1SfgFQcZR6FA3B2EXJRhBOW7vbE6FfqWJ8xF 7pz45HMHXv8FTdoRKePn74z8ANexo8dWdBh9U8q9mT2Uif1WzwfUhSkqW/yWFich pQdtP4BLCZ9kJCwywSnKsx9sh6DxlM603Nbme60wzM2UQpEbKt/QBzm/bEyonwUf WhpQrtLZhw2GB0uBm0H3uQvCINDQKkhi4yb5o9HWw6H9OMocYD3rm8/QON6chnMF 8J6ip2p+zzZb6gpILlGfaSBN8c0PvdkTqbSSJ97mk4XNvQWxu3HvYjOh24Q9O7E/ P5f13ShZHSs1++0r9zT3Ff4RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXAeMJwA9 lpxr+23EdDrzrTffVhcwHwYDVR0jBBgwFoAUo5hxRib4es6+X2/QHlBwGRWqfRUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyN0M1L0Q5QUFCODJDOEFE OTExRUY5ODFDODI4M0M0RjlBRTAyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZS VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzVoeFJpYjRlczYtWDJfUUhsQndHUldxZlJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy N0M1L0Q5QUFCODJDOEFEOTExRUY5ODFDODI4M0M0RjlBRTAyL281aHhSaWI0ZXM2 LVgyX1FIbEJ3R1JXcWZSVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIXD4sXQxmyTZkTI2eq8X6KMd8Lz984ftPDkfJ8kNRAYSd1gE8MSsdUw Sf1fdoTzDFYD4DbV4P5SBta8ronNc4sS9NvpopcVJOpOy2J1deWgbgCe0ypri8QM lcpUpgqXpXeyvFBHpKb35NbshE8+TV7WfaWtn2nMeTOK1Fm4DdUKQ4x/sUPZknuw gsNqEqYN5h1ml5ItQ1aeXQgJqF3PCBleNOjgrs91BTQLTn3NG5g7TYBuCq1adoWN FrfOmW+LlJbwT+5IhuWu5i9iGo29nos1IQB4hOiTKP2c4iKnaU3acXSOROc+5wBj cAsYKnDEK4m9ZIcaIHJphIRQo1WC994= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org