$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: pRHtT5tX1HUhq6NGYaO1BRQdZ0fpP1gQPs5SGkeu/E8= Subject key identifier: E8:AB:75:7E:C6:CB:86:64:C5:89:D1:92:25:F4:89:69:A6:F5:59:47 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 342D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 3429 Signing time: Wed 20 Nov 2024 14:49:50 +0000 Manifest this update: Wed 20 Nov 2024 14:49:49 +0000 Manifest next update: Wed 27 Nov 2024 14:49:49 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: MdBsMe0Bcw/RuNOJSfiHXtGJ95JFkDCMFjI7lS9Va/Y=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13357 (0x342d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Nov 20 14:49:49 2024 GMT Not After : Nov 27 14:49:49 2024 GMT Subject: CN=673df70d-8cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:4c:24:7b:87:ce:85:f0:60:ad:c0:66:ae: 31:3e:66:27:32:d6:94:b0:54:ec:59:82:22:ce:d5: 90:b7:df:48:c2:21:5a:43:f8:23:f9:84:7c:03:0c: 04:b4:0e:70:22:5f:12:c1:ab:c0:3b:3b:15:75:45: b5:f8:44:80:3a:bf:17:bc:6e:0f:fa:42:4c:4a:14: 07:ed:65:6b:92:20:68:1e:8f:2d:8b:6f:25:b6:89: cd:24:79:13:08:af:86:e9:a5:e0:43:be:cd:23:bd: ac:95:d0:ff:81:58:95:72:d4:79:1c:e3:26:51:3a: 14:5c:a9:dd:34:df:88:28:d7:38:c9:61:57:d7:f5: c6:aa:87:d2:ca:fa:29:25:9e:36:a6:1f:d0:bd:91: c7:92:f3:82:73:f5:37:51:e2:5a:3c:4d:32:85:9a: e7:8c:d2:f0:25:0a:56:29:07:42:b5:0e:5d:26:d9: 9d:2f:e6:2a:7e:39:39:aa:e1:66:a2:2a:e2:b5:4e: 32:87:1f:7d:17:c6:20:47:89:85:18:c5:e7:33:8e: 22:15:44:d9:ca:56:9d:e6:4e:09:8c:f7:fa:9a:7f: b8:1d:bb:1b:f4:d9:37:10:0e:99:ae:60:d6:ba:41: 4f:23:0e:fc:24:13:5f:7b:d2:36:21:8d:9b:da:98: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AB:75:7E:C6:CB:86:64:C5:89:D1:92:25:F4:89:69:A6:F5:59:47 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c1:48:e7:06:13:b5:5e:c5:88:42:2e:c4:0a:2a:ea:0e:5f: 00:9c:64:c4:5b:f1:6e:d8:f6:ee:03:5d:3b:a4:11:89:41:f6: 9a:05:0f:32:f4:ce:bc:77:48:b9:4c:d5:4a:d5:f9:5d:c1:1f: 1e:0e:62:92:05:50:ee:10:3a:12:50:09:85:e5:89:26:81:d8: 96:be:eb:70:54:1c:08:b3:b0:ad:e6:49:b8:da:43:2b:c3:a1: f8:b0:1e:e2:0f:74:74:f4:9f:a1:83:1b:62:73:41:59:54:47: 08:66:0b:db:0d:83:8d:10:6b:d7:7f:16:ee:1e:ce:dc:43:49: 6d:f7:11:7a:77:14:4c:42:3d:90:19:60:3c:be:77:ad:43:00: b5:d9:e1:39:f5:5c:77:f2:56:fc:aa:5d:c1:ad:f3:e4:94:0e: b4:a8:bc:8c:9c:dc:4b:30:69:06:84:b8:79:23:21:ad:a7:3f: 24:23:d7:c2:15:9b:86:24:97:c1:81:20:7e:02:fd:ee:ed:9d: a0:6c:e3:6b:cc:0a:9e:c2:9c:de:0e:2d:6f:53:e0:6b:1d:af: 27:c7:59:b0:46:28:72:4a:e1:37:cc:ee:93:12:89:7f:2f:3f: a1:5e:2c:ce:a6:34:ab:dc:2a:c3:94:13:5a:9a:58:36:d4:1e: 9e:76:0e:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjQxMTIwMTQ0OTQ5WhcNMjQxMTI3MTQ0OTQ5WjAYMRYwFAYD VQQDEw02NzNkZjcwZC04Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlhMJHuHzoXwYK3AZq4xPmYnMtaUsFTsWYIiztWQt99IwiFaQ/gj+YR8AwwE tA5wIl8SwavAOzsVdUW1+ESAOr8XvG4P+kJMShQH7WVrkiBoHo8ti28ltonNJHkT CK+G6aXgQ77NI72sldD/gViVctR5HOMmUToUXKndNN+IKNc4yWFX1/XGqofSyvop JZ42ph/QvZHHkvOCc/U3UeJaPE0yhZrnjNLwJQpWKQdCtQ5dJtmdL+Yqfjk5quFm oiritU4yhx99F8YgR4mFGMXnM44iFUTZylad5k4JjPf6mn+4Hbsb9Nk3EA6ZrmDW ukFPIw78JBNfe9I2IY2b2pgyZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOirdX7G y4ZkxYnRkiX0iWmm9VlHMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASwUjnBhO1XsWIQi7ECirqDl8AnGTEW/Fu2PbuA107pBGJQfaaBQ8y 9M68d0i5TNVK1fldwR8eDmKSBVDuEDoSUAmF5YkmgdiWvutwVBwIs7Ct5km42kMr w6H4sB7iD3R09J+hgxtic0FZVEcIZgvbDYONEGvXfxbuHs7cQ0lt9xF6dxRMQj2Q GWA8vnetQwC12eE59Vx38lb8ql3BrfPklA60qLyMnNxLMGkGhLh5IyGtpz8kI9fC FZuGJJfBgSB+Av3u7Z2gbONrzAqewpzeDi1vU+BrHa8nx1mwRihySuE3zO6TEol/ Lz+hXizOpjSr3CrDlBNamlg21B6edg6N -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:29 2024 by rpki-client on console-fra.rpki-client.org