$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft File: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft (raw, json) Hash identifier: 10vet0vX4STladPUuV6ZLs9XOJ8jnoi2IShutd2S0CY= Subject key identifier: 38:F3:F7:2A:11:3C:25:3C:9E:EE:E4:D3:CD:14:28:05:DD:C4:80:6F Authority key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 Certificate issuer: /CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Certificate serial: 3424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft Manifest number: 3424 Signing time: Fri 22 Nov 2024 14:51:16 +0000 Manifest this update: Fri 22 Nov 2024 14:51:15 +0000 Manifest next update: Fri 29 Nov 2024 14:51:15 +0000 Files and hashes: 1: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl (hash: ctG74CMOL5ILH1qRvnLy1+BG5M4olhdfPUmC9P5sLlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13348 (0x3424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Validity Not Before: Nov 22 14:51:15 2024 GMT Not After : Nov 29 14:51:15 2024 GMT Subject: CN=67409a64-5033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:e4:4d:43:7e:a3:76:f6:27:ea:94:09:24: f1:3d:dd:2e:5f:36:b1:b3:db:41:1d:5e:0b:8b:c0: 6e:5c:09:66:ab:f5:c2:7b:6b:0d:63:f2:d3:5b:ff: a5:c6:ca:26:b3:94:fe:4c:ad:40:80:51:dd:9e:8d: 2e:a4:8f:d1:c7:5e:ad:10:c0:d1:a8:a9:07:99:89: 6b:c5:39:ca:c4:f2:15:2f:1a:b8:cf:19:a9:5c:3a: 2b:d1:38:b9:0d:e5:1e:d4:eb:d5:06:19:9a:a7:ea: 88:e6:38:e9:65:92:5e:b5:fb:30:e4:dc:e9:e7:f2: 1b:fe:dc:c4:8b:2c:aa:0e:0b:6a:c7:2e:d4:9f:a4: 4b:83:33:4d:a9:e0:bd:7b:0b:96:21:27:b8:58:f6: 75:7d:51:c4:af:04:af:65:d1:8a:61:46:46:dc:3c: fc:09:71:e9:ba:dc:52:72:a0:7f:93:ae:a3:e1:e5: 03:65:00:ca:82:a5:b7:93:e5:4f:94:8f:37:ae:a2: ca:60:ef:9f:79:a3:ed:cd:45:71:24:fd:95:51:2d: e7:13:28:86:8f:89:c9:d9:69:c6:8e:89:3b:8d:9d: 08:76:a2:61:7a:25:31:98:2f:0d:28:41:8e:93:e5: 19:66:f7:98:d3:5a:a6:5c:a4:db:2f:49:36:9e:bf: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F3:F7:2A:11:3C:25:3C:9E:EE:E4:D3:CD:14:28:05:DD:C4:80:6F X509v3 Authority Key Identifier: keyid:EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:69:ee:10:e4:2b:32:53:49:fa:ff:92:e8:ae:aa:db:b6:49: 96:19:26:d5:d9:42:61:51:b6:b2:e7:b2:d9:9c:f5:4c:4b:a4: 95:08:ef:bd:31:cf:4c:a8:09:ef:30:7c:77:fe:96:9e:7b:17: 5e:9e:c1:e4:a0:1d:c6:bd:12:43:0f:9b:09:e7:b5:9b:1a:8b: eb:2a:c3:fe:6c:77:42:b7:19:8c:38:63:84:bd:05:2e:09:17: a8:ff:66:51:92:23:f9:bf:3b:fb:72:5c:67:b4:fd:78:e0:a9: ac:8a:82:f7:ab:60:0d:51:f1:bc:bb:3c:f7:2f:ab:77:92:5f: 56:e4:62:3e:52:81:c7:5c:f2:69:37:42:b9:e6:30:fb:2b:93: 58:1d:02:25:df:3e:a9:8f:7a:56:d8:9d:34:db:ed:85:6f:c8: aa:4c:48:88:b1:94:c1:b3:84:c2:62:c1:9c:33:fd:6f:2d:26: a6:89:9d:71:86:e7:c9:6c:63:35:a4:91:b2:97:30:b1:97:50: 0b:f8:90:9d:8a:45:f4:ae:8b:c8:4a:7a:42:ce:e7:28:cc:67: 30:9c:98:72:fd:84:ea:84:a0:3e:aa:ac:65:7c:9a:ec:a2:ae: 67:a8:d8:ec:f9:4b:dd:35:50:d6:da:c2:9c:0c:f2:4b:c7:bb: 7c:99:77:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQTIxMTAvBgNVBAUTKEVCMDRBNUVBQUFENTFENUJGMkIzRUQ3RTY3NUZENEQ0 QTZCNjQwNTkwHhcNMjQxMTIyMTQ1MTE1WhcNMjQxMTI5MTQ1MTE1WjAYMRYwFAYD VQQDEw02NzQwOWE2NC01MDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOPkTUN+o3b2J+qUCSTxPd0uXzaxs9tBHV4Li8BuXAlmq/XCe2sNY/LTW/+l xsoms5T+TK1AgFHdno0upI/Rx16tEMDRqKkHmYlrxTnKxPIVLxq4zxmpXDor0Ti5 DeUe1OvVBhmap+qI5jjpZZJetfsw5Nzp5/Ib/tzEiyyqDgtqxy7Un6RLgzNNqeC9 ewuWISe4WPZ1fVHErwSvZdGKYUZG3Dz8CXHputxScqB/k66j4eUDZQDKgqW3k+VP lI83rqLKYO+feaPtzUVxJP2VUS3nEyiGj4nJ2WnGjok7jZ0IdqJheiUxmC8NKEGO k+UZZveY01qmXKTbL0k2nr8pWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjz9yoR PCU8nu7k080UKAXdxIBvMB8GA1UdIwQYMBaAFOsEpeqq1R1b8rPtfmdf1NSmtkBZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZBMi8xMzc2NzgyMDFE OTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhWdnlzLTEtWjFfVTFLYTJR RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3U2w2cXJWSFZ2eXMtMS1aMV9VMUthMlFGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZBMi8xMzc2NzgyMDFEOTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhW dnlzLTEtWjFfVTFLYTJRRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvae4Q5CsyU0n6/5LorqrbtkmWGSbV2UJhUbay57LZnPVMS6SVCO+9 Mc9MqAnvMHx3/paeexdensHkoB3GvRJDD5sJ57WbGovrKsP+bHdCtxmMOGOEvQUu CReo/2ZRkiP5vzv7clxntP144KmsioL3q2ANUfG8uzz3L6t3kl9W5GI+UoHHXPJp N0K55jD7K5NYHQIl3z6pj3pW2J002+2Fb8iqTEiIsZTBs4TCYsGcM/1vLSamiZ1x hufJbGM1pJGylzCxl1AL+JCdikX0rovISnpCzucozGcwnJhy/YTqhKA+qqxlfJrs oq5nqNjs+UvdNVDW2sKcDPJLx7t8mXeA -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:23 2024 by rpki-client on console-ams.rpki-client.org