$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json) Hash identifier: OvWwiIF1zUhZbucFZINrKxkv5OXZ1oTLf3zPUWGW234= Subject key identifier: 81:B4:4C:B0:CD:F4:A1:EF:43:F9:AD:65:AD:05:E5:79:D4:27:19:5A Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Certificate serial: 1A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft Manifest number: 1A3C Signing time: Fri 22 Nov 2024 16:21:28 +0000 Manifest this update: Fri 22 Nov 2024 16:21:28 +0000 Manifest next update: Fri 29 Nov 2024 16:21:28 +0000 Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: FzMSqjrEU/tV+/oprP3ZexodR+BALJjDvcH98aL1spM=) 2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: a50jvf311yVZMkPnjaiz9q3CIoz1l3rrtN0kJY6XaHw=) 3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: wicxmyDsQY1EUaRSvIw0q7r/W3oZXB3XiX+qbwHrohc=) 4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: JpM+ZOwLo9Asr0nWPQM+Gm4pd97au8FBgj/Ulqyq59s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6738 (0x1a52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Validity Not Before: Nov 22 16:21:28 2024 GMT Not After : Nov 29 16:21:28 2024 GMT Subject: CN=6740af88-b6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:a4:df:ee:54:df:3c:ed:d9:5c:9a:62:60: 80:8b:ea:c9:5f:d6:62:cc:31:7a:1a:de:ad:20:9e: 84:74:21:1d:74:d3:94:41:11:8e:1c:c0:e0:38:52: 47:bd:99:a1:ea:25:c6:37:1f:7c:be:da:1c:17:10: 8a:36:4b:50:26:e6:d1:c2:4e:8a:81:dc:13:d1:2e: 15:7e:6e:14:5d:18:06:f9:a3:5d:5c:b5:23:ad:fc: a8:ca:7b:38:47:ef:22:d3:52:dc:49:e9:a1:60:3b: 58:1b:b3:30:fc:63:95:f9:dc:b4:5f:5c:63:e0:21: 03:8c:e3:3b:37:0f:aa:8e:db:01:0f:e6:8a:df:34: 17:14:3d:fa:ff:34:f7:ca:7e:71:34:0e:f9:ee:13: fb:5a:e0:7c:e2:f7:67:b9:8b:30:72:fb:c0:d2:a1: 67:cd:a5:c1:c7:e6:45:b5:8c:eb:c2:23:07:e3:f2: 64:9e:73:46:59:44:e0:c8:5a:94:e2:42:69:fd:0a: 6b:94:92:f8:52:ae:7d:4b:43:db:97:32:26:d7:ed: a9:ff:e4:77:a2:8f:24:f2:8d:99:66:19:c5:9c:14: a6:22:2e:83:24:8d:bb:64:20:13:f0:85:92:d6:a1: 8d:bc:4e:a8:9d:fb:b8:e9:c0:94:89:36:57:dc:84: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B4:4C:B0:CD:F4:A1:EF:43:F9:AD:65:AD:05:E5:79:D4:27:19:5A X509v3 Authority Key Identifier: keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:8f:de:f6:29:6c:5a:df:5b:fa:e9:b3:44:f9:e8:ea:c5:c5: 44:c4:6e:47:ed:44:d0:7e:49:b2:68:73:9d:65:25:53:9b:da: 77:89:20:7b:5a:47:71:e3:04:a7:90:d4:99:49:d4:6f:a8:3a: 81:9d:2e:a9:59:ea:10:ef:1f:9b:55:93:5b:60:a8:8a:b8:0c: 79:32:df:84:ee:33:71:7a:60:2a:14:d9:14:b6:ce:2a:63:b2: 52:5c:8e:7e:57:3c:07:f7:0e:f2:8e:1c:3a:62:05:da:1f:de: d4:41:cb:dd:52:d6:fd:e2:d2:ac:b0:49:0f:06:ca:fd:a0:8d: a1:33:49:06:e1:8e:52:b2:e2:68:bf:f3:1b:0d:42:84:6b:40: 9b:5e:c4:93:66:2c:ab:dd:ef:9a:6a:c7:5e:88:c8:e2:0b:1b: ba:2f:7f:74:81:3f:1a:c1:86:1a:a5:9b:9d:6a:d6:d7:f0:d2: 9b:ac:05:fe:ec:ee:15:79:16:1a:0c:a5:2f:01:fd:e4:0f:e3: 7f:ac:48:72:65:fb:9f:7d:f0:ab:47:c6:a5:e2:3e:75:9a:a9: 55:4c:05:e9:03:22:29:50:94:3e:cd:e3:3e:4d:40:15:95:16: 3f:0f:92:09:e4:78:cb:00:69:0f:4f:d3:d7:69:27:bf:9b:5b: 23:86:a2:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3OUMxMTAvBgNVBAUTKDBCQTM0RTY0MzBCMTBFNkE3RjJEMjk5NjQ0MjVEMUY3 MTRBRjg2NUMwHhcNMjQxMTIyMTYyMTI4WhcNMjQxMTI5MTYyMTI4WjAYMRYwFAYD VQQDEw02NzQwYWY4OC1iNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0Sk3+5U3zzt2VyaYmCAi+rJX9ZizDF6Gt6tIJ6EdCEddNOUQRGOHMDgOFJH vZmh6iXGNx98vtocFxCKNktQJubRwk6KgdwT0S4Vfm4UXRgG+aNdXLUjrfyoyns4 R+8i01LcSemhYDtYG7Mw/GOV+dy0X1xj4CEDjOM7Nw+qjtsBD+aK3zQXFD36/zT3 yn5xNA757hP7WuB84vdnuYswcvvA0qFnzaXBx+ZFtYzrwiMH4/JknnNGWUTgyFqU 4kJp/QprlJL4Uq59S0PblzIm1+2p/+R3oo8k8o2ZZhnFnBSmIi6DJI27ZCAT8IWS 1qGNvE6onfu46cCUiTZX3IR5QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG0TLDN 9KHvQ/mtZa0F5XnUJxlaMB8GA1UdIwQYMBaAFAujTmQwsQ5qfy0plkQl0fcUr4Zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjc5Qy8xQ0VCNzcxODMz NTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERtcF9MU21XUkNYUjl4U3Zo bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2Tk9aREN4RG1wX0xTbVdSQ1hSOXhTdmhsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjc5Qy8xQ0VCNzcxODMzNTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERt cF9MU21XUkNYUjl4U3ZobHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHj972KWxa31v66bNE+ejqxcVExG5H7UTQfkmyaHOdZSVTm9p3iSB7 Wkdx4wSnkNSZSdRvqDqBnS6pWeoQ7x+bVZNbYKiKuAx5Mt+E7jNxemAqFNkUts4q Y7JSXI5+VzwH9w7yjhw6YgXaH97UQcvdUtb94tKssEkPBsr9oI2hM0kG4Y5SsuJo v/MbDUKEa0CbXsSTZiyr3e+aasdeiMjiCxu6L390gT8awYYapZudatbX8NKbrAX+ 7O4VeRYaDKUvAf3kD+N/rEhyZfufffCrR8al4j51mqlVTAXpAyIpUJQ+zeM+TUAV lRY/D5IJ5HjLAGkPT9PXaSe/m1sjhqLO -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org