$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft File: C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json) Hash identifier: zxAyiBnMe4PvespX74+Ob0RCStrviBnJNdvQ+SWEJKo= Subject key identifier: 2B:43:6A:D8:C5:61:10:AC:C3:10:59:1A:71:EA:81:9D:50:10:94:87 Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 Certificate issuer: /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft Manifest number: 011F Signing time: Thu 21 Nov 2024 02:58:58 +0000 Manifest this update: Thu 21 Nov 2024 02:58:57 +0000 Manifest next update: Thu 28 Nov 2024 02:58:57 +0000 Files and hashes: 1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: cDDVSHRysvMxqqqzb1GmMpPUWuuYx0uI5lMJ/9F/Kf0=) 2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: Zy+X5I6jjeoXFlK3ZYHu5Y6X4IicrTsR5c6AYriYvCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Validity Not Before: Nov 21 02:58:57 2024 GMT Not After : Nov 28 02:58:57 2024 GMT Subject: CN=673ea1f1-8c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:e3:d8:35:f6:b6:d2:be:a3:14:7b:53:72: e7:0f:6a:9b:49:aa:e1:1b:80:6b:61:db:b8:9d:dd: 5e:47:66:4d:26:0a:45:da:cc:ee:80:48:21:38:93: 7c:67:0f:26:e8:3e:f9:b9:f1:71:fb:f0:bd:8b:12: c7:4a:10:34:2e:8c:18:54:d1:b9:4a:78:0c:41:59: 9b:31:d6:f9:24:b6:05:67:da:dd:95:ff:54:bd:b1: 93:31:7c:ee:19:d2:99:a8:f5:9e:90:a5:8a:b7:ff: 06:1a:c6:c1:66:fd:c3:a4:d4:b3:16:ee:dd:2c:4d: 30:33:90:54:ae:e1:f8:b2:c2:5c:55:3d:8e:b8:d3: 38:fb:e7:15:25:1e:c0:e2:81:b1:c8:ed:fe:7d:66: 53:b4:45:f5:1d:99:65:a3:40:9c:9b:51:a7:c3:88: 34:3c:84:17:96:90:c4:66:a0:f1:4e:10:92:5a:08: 2d:30:35:f8:cc:d1:94:bf:4e:b3:0a:c0:85:98:0d: 42:ef:7f:a7:76:71:ce:16:26:ec:73:a8:96:75:28: 93:2b:e0:a3:c5:3e:5c:ce:27:11:87:9c:c7:c6:f8: 9a:72:d4:8a:5e:2d:53:29:f1:84:82:55:d3:e8:2c: 9a:cb:cf:d2:7e:fa:99:55:91:f1:77:ec:56:5d:29: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:43:6A:D8:C5:61:10:AC:C3:10:59:1A:71:EA:81:9D:50:10:94:87 X509v3 Authority Key Identifier: keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fd:6b:d7:79:b6:3e:bb:32:ba:bb:5e:e1:cb:63:e0:75:24: e0:bb:9f:1a:6e:98:0d:96:bc:12:9b:4e:01:f8:77:b0:e4:e2: 6c:4e:c8:17:ee:61:d7:b6:63:25:31:3f:88:3b:c1:b6:a3:84: 0f:15:31:34:55:a0:70:67:4c:d4:23:69:bb:70:5e:3f:8f:a6: cf:06:c7:33:f8:9d:0c:a2:e8:ea:64:4b:a5:fb:4e:7e:18:04: 99:c8:00:ce:8a:93:06:42:bd:e0:9d:4e:aa:71:b4:78:a2:ae: 3c:e1:1b:0d:59:45:23:2f:40:39:3c:8c:29:b9:dd:95:93:f5: 3b:f7:7e:24:e8:d6:22:0c:cc:31:d3:73:31:a4:7a:f2:55:8e: a3:8f:64:e5:b7:e1:de:4e:93:20:d3:a2:48:c7:33:fc:71:cb: cf:bd:0a:87:da:7f:27:80:30:6c:99:ce:73:bc:26:f1:6b:e3: a8:4c:75:72:87:7e:af:42:b6:de:38:50:0c:9b:0e:91:ad:6d: d5:a7:35:e8:41:71:f6:f4:8f:47:ca:ca:77:12:d8:20:2d:31: d1:2e:54:34:c4:69:18:52:d7:1c:f5:0d:db:a2:c1:c3:dc:54: 5f:00:1e:79:ff:60:6b:0a:e2:7e:54:4c:98:28:4d:6d:f4:a7: 9f:84:5d:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdFNUQxMTAvBgNVBAUTKDBCQTY4MkU4MDM4RDc3MUEzNzA3RUFGQTgyRkREMDRD NDI5QTRGODYwHhcNMjQxMTIxMDI1ODU3WhcNMjQxMTI4MDI1ODU3WjAYMRYwFAYD VQQDEw02NzNlYTFmMS04Yzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQ/j2DX2ttK+oxR7U3LnD2qbSarhG4BrYdu4nd1eR2ZNJgpF2szugEghOJN8 Zw8m6D75ufFx+/C9ixLHShA0LowYVNG5SngMQVmbMdb5JLYFZ9rdlf9UvbGTMXzu GdKZqPWekKWKt/8GGsbBZv3DpNSzFu7dLE0wM5BUruH4ssJcVT2OuNM4++cVJR7A 4oGxyO3+fWZTtEX1HZllo0Ccm1Gnw4g0PIQXlpDEZqDxThCSWggtMDX4zNGUv06z CsCFmA1C73+ndnHOFibsc6iWdSiTK+CjxT5czicRh5zHxviactSKXi1TKfGEglXT 6Cyay8/SfvqZVZHxd+xWXSnmTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtDatjF YRCswxBZGnHqgZ1QEJSHMB8GA1UdIwQYMBaAFAumgugDjXcaNwfq+oL90ExCmk+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0U1RC80MTIyQ0Q5Q0Yw QjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4bzNCLXI2Z3YzUVRFS2FU NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2YUM2QU9OZHhvM0ItcjZndjNRVEVLYVQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0U1RC80MTIyQ0Q5Q0YwQjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4 bzNCLXI2Z3YzUVRFS2FUNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx/WvXebY+uzK6u17hy2PgdSTgu58abpgNlrwSm04B+Hew5OJsTsgX 7mHXtmMlMT+IO8G2o4QPFTE0VaBwZ0zUI2m7cF4/j6bPBscz+J0MoujqZEul+05+ GASZyADOipMGQr3gnU6qcbR4oq484RsNWUUjL0A5PIwpud2Vk/U7934k6NYiDMwx 03MxpHryVY6jj2Tlt+HeTpMg06JIxzP8ccvPvQqH2n8ngDBsmc5zvCbxa+OoTHVy h36vQrbeOFAMmw6RrW3VpzXoQXH29I9Hysp3EtggLTHRLlQ0xGkYUtcc9Q3bosHD 3FRfAB55/2BrCuJ+VEyYKE1t9KefhF34 -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org