$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft File: C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json) Hash identifier: 1yPos3NM58W5DUB5YEirHkGdH+8OSPxfh6SU9fFWuic= Subject key identifier: 2B:D0:F8:24:00:20:EB:04:BE:2B:FE:44:46:35:A7:ED:38:47:1C:C2 Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft Manifest number: 0316 Signing time: Sat 23 Nov 2024 00:47:07 +0000 Manifest this update: Sat 23 Nov 2024 00:47:07 +0000 Manifest next update: Sat 30 Nov 2024 00:47:07 +0000 Files and hashes: 1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: S0p1qYmZK692pqar0QC8aLXD7G80No0TFuEqcU74f2M=) 2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: hWYcvgNAxFLEume17xXizrQqPznRp3ibGNo1iO8eWOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Validity Not Before: Nov 23 00:47:07 2024 GMT Not After : Nov 30 00:47:07 2024 GMT Subject: CN=6741260b-e7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:4d:cc:87:b8:84:df:45:bc:d3:78:56:da: 0a:ed:d6:b5:ed:9b:a7:ce:ab:42:ba:e4:25:e8:5b: 99:3a:7f:90:07:e6:14:5a:67:bc:09:a7:2b:4f:1c: 34:06:b1:70:7a:44:e1:73:1c:db:eb:89:38:c7:f1: 7a:a0:2d:92:86:aa:21:94:f4:9b:f9:b2:bb:b6:c0: 7f:d2:6d:2d:89:f2:9c:b4:59:10:07:87:c1:bf:33: a1:21:60:80:f3:20:20:cd:cc:fe:b3:eb:af:1f:d7: 50:a0:d2:4b:8d:25:81:13:7c:38:5d:f0:d0:76:a8: 2a:3e:01:d2:99:91:d6:ad:3f:0b:39:0f:4c:ca:23: a5:74:d1:8f:94:37:a5:33:01:91:fe:0d:32:a8:03: f4:1f:49:40:6e:8b:a3:d1:ed:d7:4a:17:94:f1:2b: 0d:a8:73:51:13:13:b2:dd:bb:66:3b:dd:f5:67:77: cd:bc:61:6a:c5:e1:59:d1:c7:33:e7:62:97:e6:7f: c2:63:7e:2c:d5:ef:61:0a:4c:2d:fa:90:50:4e:84: c6:a5:c4:70:fe:ae:a0:31:22:a6:65:4c:70:bb:6a: 36:ad:ea:02:e0:94:6c:b2:8c:fc:b7:79:f1:92:7a: 5d:a5:39:5b:81:d4:d8:a7:2a:fb:af:12:1b:1a:ff: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D0:F8:24:00:20:EB:04:BE:2B:FE:44:46:35:A7:ED:38:47:1C:C2 X509v3 Authority Key Identifier: keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e0:c9:ef:24:1f:78:de:9b:e7:c7:7d:39:fe:1f:5c:b7:8e: 6f:ea:6a:ba:ce:25:30:ad:e0:b3:f8:0f:28:1c:69:89:6e:07: 1c:d7:35:3f:91:ef:eb:da:12:fc:36:21:ab:de:1b:dd:d0:c5: 1e:d1:09:dd:ba:1c:eb:e0:db:30:0d:37:ea:29:16:8a:d8:af: ee:27:5a:db:3d:8e:8f:9b:4f:4e:a2:25:af:bb:d9:5b:f0:64: 19:6d:2d:34:59:1a:bd:02:b3:bb:84:8b:ec:30:6a:6b:7b:f3: 64:2e:ba:64:61:7f:df:2b:fb:f1:82:25:fd:f5:2d:e3:9c:56: 41:fd:33:47:27:63:61:91:20:55:23:e3:c5:05:a5:0a:15:ec: 46:fa:9b:a5:56:69:80:4f:8b:57:2a:e0:a2:4c:5c:78:a5:cd: 6c:64:f1:dd:68:7c:78:26:88:b3:b6:30:08:98:fe:56:66:40: bb:cf:cd:76:c3:e9:63:42:20:31:8d:73:0f:e1:37:18:4e:f3: c6:ba:de:76:e0:12:ba:55:0d:35:e9:24:0b:91:20:65:87:d8: e6:ec:90:f5:14:9a:5e:00:f9:2f:6c:ef:a2:0b:62:22:3d:e6: a8:b9:15:16:1c:0e:5f:1d:87:92:51:ae:6d:c8:b7:45:f9:fa: df:2a:0d:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKDBCQUM0Mjk4NkU5QUJEQjdDRUUyQ0RGQjJBOUZFOEQ2 RDAyQUFCNUMwHhcNMjQxMTIzMDA0NzA3WhcNMjQxMTMwMDA0NzA3WjAYMRYwFAYD VQQDEw02NzQxMjYwYi1lN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAob1NzIe4hN9FvNN4VtoK7da17ZunzqtCuuQl6FuZOn+QB+YUWme8CacrTxw0 BrFwekThcxzb64k4x/F6oC2ShqohlPSb+bK7tsB/0m0tifKctFkQB4fBvzOhIWCA 8yAgzcz+s+uvH9dQoNJLjSWBE3w4XfDQdqgqPgHSmZHWrT8LOQ9MyiOldNGPlDel MwGR/g0yqAP0H0lAbouj0e3XSheU8SsNqHNRExOy3btmO931Z3fNvGFqxeFZ0ccz 52KX5n/CY34s1e9hCkwt+pBQToTGpcRw/q6gMSKmZUxwu2o2reoC4JRssoz8t3nx knpdpTlbgdTYpyr7rxIbGv+23wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvQ+CQA IOsEviv+REY1p+04RxzCMB8GA1UdIwQYMBaAFAusQphumr23zuLN+yqf6NbQKqtc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xRUEzNDNFMkFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZiZk80czM3S3BfbzF0QXFx MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2eENtRzZhdmJmTzRzMzdLcF9vMXRBcXExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVDQy8xRUEzNDNFMkFGRTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZi Zk80czM3S3BfbzF0QXFxMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL4MnvJB943pvnx305/h9ct45v6mq6ziUwreCz+A8oHGmJbgcc1zU/ ke/r2hL8NiGr3hvd0MUe0Qnduhzr4NswDTfqKRaK2K/uJ1rbPY6Pm09OoiWvu9lb 8GQZbS00WRq9ArO7hIvsMGpre/NkLrpkYX/fK/vxgiX99S3jnFZB/TNHJ2NhkSBV I+PFBaUKFexG+pulVmmAT4tXKuCiTFx4pc1sZPHdaHx4JoiztjAImP5WZkC7z812 w+ljQiAxjXMP4TcYTvPGut524BK6VQ016SQLkSBlh9jm7JD1FJpeAPkvbO+iC2Ii PeaouRUWHA5fHYeSUa5tyLdF+frfKg1g -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org