$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json) Hash identifier: StVd4YKUMn+yTuuhvRUJw4yoC2U/Rq5KR9Vm1SLwJvE= Subject key identifier: EC:60:E8:AF:C5:D0:2C:22:36:DB:06:B6:38:BE:BC:64:CE:D8:41:32 Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft Manifest number: A6 Signing time: Sat 23 Nov 2024 04:20:45 +0000 Manifest this update: Sat 23 Nov 2024 04:20:44 +0000 Manifest next update: Sat 30 Nov 2024 04:20:44 +0000 Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: TwHhLhrJYB+aoSz982XNPX6TVB9nxFcG4aQXjgOnrNQ=) 2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=) 3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Validity Not Before: Nov 23 04:20:44 2024 GMT Not After : Nov 30 04:20:44 2024 GMT Subject: CN=6741581c-b846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:a4:40:eb:ff:c3:65:53:f7:ae:1e:62:4a: d0:60:a7:0a:c7:94:19:6d:50:a4:7b:16:af:3e:4e: ed:05:6d:c0:8d:ae:94:34:59:3b:40:ab:3d:0e:5d: 38:55:88:0a:6f:be:b4:8e:fd:16:23:cc:f7:05:a6: e8:ca:81:62:02:25:a3:32:01:bd:64:ff:83:16:85: d2:62:31:28:c1:ee:6b:73:44:ab:9c:dd:af:9d:c4: 8d:a8:6d:ab:eb:8a:2e:c3:ec:3d:32:78:2f:49:a6: 65:41:af:02:d4:74:c5:6e:41:98:42:34:07:82:ff: 79:5b:2e:82:d0:81:e9:7d:04:38:a5:3c:ff:e1:9c: 34:5f:ba:1b:4e:33:8f:71:d8:b8:88:f0:f9:f3:db: 7c:cb:02:1f:3a:da:57:8b:e8:a3:ca:8f:9e:8c:d8: 10:6e:a0:9e:55:ef:6a:90:33:d5:c5:32:07:b7:43: b9:f1:e9:84:42:f2:3f:36:ef:dd:c7:0c:ba:59:28: 29:0a:e6:f5:7c:a5:e6:ff:c1:19:e9:b0:fc:67:fc: d3:5f:c4:97:f0:dd:0f:3f:ce:a0:07:34:6c:db:c3: c4:47:de:c1:0c:f6:7a:da:07:37:48:3f:6a:1f:12: 74:9e:84:47:c3:8c:2b:8f:9c:2f:f9:58:cd:fd:af: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:60:E8:AF:C5:D0:2C:22:36:DB:06:B6:38:BE:BC:64:CE:D8:41:32 X509v3 Authority Key Identifier: keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:08:eb:db:0e:66:e8:b7:18:fa:47:0c:0e:28:3b:da:a0:e8: f6:35:39:63:c0:bd:fc:46:0f:04:be:39:b7:58:4a:2b:6a:60: 3e:da:5d:fa:b2:4d:fa:38:51:26:a9:ba:1e:38:b8:a5:65:c0: b6:3a:68:0d:c6:1e:6b:40:92:e3:2d:c7:9c:ed:d6:26:80:6b: 3f:97:6c:9e:07:85:ae:20:f7:e8:66:2e:a1:d5:22:53:6c:20: ac:e6:ca:e5:ef:2b:8a:d0:6b:47:5f:10:0a:22:3c:e9:bf:2b: 77:10:4e:85:2c:f5:fb:15:f9:b9:d3:ba:f3:6a:fa:57:5e:89: 9e:33:ef:ac:b8:70:b0:b7:7d:2d:87:bc:e7:13:ff:80:47:15: a7:a5:3b:a9:fc:85:2e:5c:33:84:dd:5c:9f:af:36:bf:4a:e7: 5c:a3:fe:da:5b:5d:f2:da:a3:fe:38:b5:38:b5:24:15:55:42: 81:66:6b:37:89:92:a6:4d:f4:2a:f0:0e:32:38:80:ff:f9:04: 0e:e2:4a:d7:18:2a:a0:b5:de:8c:a0:f3:77:b7:bb:da:e3:25: 70:ff:ec:d5:f3:77:2d:f0:24:08:35:b2:76:ee:67:08:37:e1: 04:b8:d1:0b:35:93:a2:e4:59:e1:b7:5a:04:f1:b7:9c:fb:13: 2c:9d:05:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDQjIxMTAvBgNVBAUTKEU4ODg2MUZGNEE0NTM4MDI2N0E4MUI1OEZBOTlFNDg5 QUQwMDFCQkQwHhcNMjQxMTIzMDQyMDQ0WhcNMjQxMTMwMDQyMDQ0WjAYMRYwFAYD VQQDEw02NzQxNTgxYy1iODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAekQOv/w2VT964eYkrQYKcKx5QZbVCkexavPk7tBW3Aja6UNFk7QKs9Dl04 VYgKb760jv0WI8z3BaboyoFiAiWjMgG9ZP+DFoXSYjEowe5rc0SrnN2vncSNqG2r 64ouw+w9MngvSaZlQa8C1HTFbkGYQjQHgv95Wy6C0IHpfQQ4pTz/4Zw0X7obTjOP cdi4iPD589t8ywIfOtpXi+ijyo+ejNgQbqCeVe9qkDPVxTIHt0O58emEQvI/Nu/d xwy6WSgpCub1fKXm/8EZ6bD8Z/zTX8SX8N0PP86gBzRs28PER97BDPZ62gc3SD9q HxJ0noRHw4wrj5wv+VjN/a84LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxg6K/F 0CwiNtsGtji+vGTO2EEyMB8GA1UdIwQYMBaAFOiIYf9KRTgCZ6gbWPqZ5ImtABu9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNCMi85RkU3NjBBNkI4 M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9BSm5xQnRZLXBua2lhMEFH NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNCMi85RkU3NjBBNkI4M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9B Sm5xQnRZLXBua2lhMEFHNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6COvbDmbotxj6RwwOKDvaoOj2NTljwL38Rg8Evjm3WEoramA+2l36 sk36OFEmqboeOLilZcC2OmgNxh5rQJLjLcec7dYmgGs/l2yeB4WuIPfoZi6h1SJT bCCs5srl7yuK0GtHXxAKIjzpvyt3EE6FLPX7Ffm507rzavpXXomeM++suHCwt30t h7znE/+ARxWnpTup/IUuXDOE3Vyfrza/Sudco/7aW13y2qP+OLU4tSQVVUKBZms3 iZKmTfQq8A4yOID/+QQO4krXGCqgtd6MoPN3t7va4yVw/+zV83ct8CQINbJ27mcI N+EEuNELNZOi5Fnht1oE8bec+xMsnQVr -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org