$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: tnUvQqAx0pY1GA2qheF6kcGH1varnEq1ZPLtc2bMffw= Subject key identifier: 3B:EB:5A:84:85:91:53:A3:CE:AE:06:F8:A1:A7:DF:44:42:8D:C0:7D Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 29CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 29AE Signing time: Fri 22 Nov 2024 15:36:51 +0000 Manifest this update: Fri 22 Nov 2024 15:36:50 +0000 Manifest next update: Fri 29 Nov 2024 15:36:50 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: MKI6e5+JXDMtlA9R+l44xkREOJG1HUdwzyfqCi0JgG0=) 2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: 7QHA7SnGm3Slg6UtKljXqvO3oOcVcBIhggVBhihsz2U=) 3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: NM7FShW06/HQ6VqGb5G2xSzxEZkPVe4ddn8MqSf2TiQ=) 4: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: 7r3+bfJMmECiAzmN3nCQ3UiLeoGkCPSVCRUYmPSHhFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10702 (0x29ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Nov 22 15:36:50 2024 GMT Not After : Nov 29 15:36:50 2024 GMT Subject: CN=6740a513-9d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:b1:2d:fc:3f:7b:fe:af:ec:79:58:d1:b0: 8c:24:44:20:45:d0:0d:59:66:68:cd:f5:b5:9f:58: 19:de:aa:d3:75:0f:37:37:56:c7:da:98:1e:df:f4: ba:cd:24:30:9b:d4:ce:a6:e2:6c:30:c0:0b:53:02: bf:1a:49:4b:7c:5f:39:0d:4f:96:25:51:1a:c3:eb: b1:42:8c:a5:f5:8c:56:6b:cc:00:4b:6d:68:c3:90: 66:09:73:40:ec:87:d3:5c:eb:56:db:ce:8f:8d:75: 73:c3:75:94:8b:1d:16:c5:69:9e:fe:09:d0:28:f3: 56:e3:73:41:cf:67:9f:bc:59:da:85:fa:95:18:d2: 7a:1a:c0:84:b4:f1:e8:99:0e:a9:4c:d6:52:f0:e9: 72:e2:ae:26:1b:57:10:6a:4c:91:31:15:a6:a7:95: c4:86:f2:7b:c0:e8:c5:eb:d0:70:58:10:1c:03:00: d5:6b:11:a5:f1:b9:6a:a8:ca:aa:95:34:a1:65:b4: 54:da:6b:43:40:69:f5:db:7d:14:f0:2f:b7:ae:38: ec:d8:b4:bf:48:f1:84:04:8d:fe:5c:73:09:9e:48: db:2c:95:88:e8:25:8d:c3:2a:a2:88:24:48:86:3b: 67:c1:e2:a1:9c:34:94:07:b2:c0:00:a3:b2:e2:fa: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EB:5A:84:85:91:53:A3:CE:AE:06:F8:A1:A7:DF:44:42:8D:C0:7D X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:68:00:38:32:bb:12:f4:f2:b9:cc:cf:b6:e3:84:cf:b3:bf: 82:88:9f:ab:af:78:55:c0:9c:2b:75:d8:5e:bc:47:83:cc:d0: fe:a8:3f:fe:ac:89:77:70:77:4c:37:d0:53:75:74:ae:13:c6: f4:40:4a:c5:55:23:df:03:67:5c:df:bb:d6:fe:d6:e3:f8:ef: 4d:70:e9:31:7b:75:3b:25:cd:95:0b:b3:88:a9:ef:0c:6c:4a: 8d:88:9d:18:cf:43:a2:50:da:4a:09:7c:7d:9b:ae:e6:0d:27: 14:d3:cc:88:d6:76:96:e3:91:69:d4:44:ee:2c:7d:7b:a7:2e: 0e:4c:71:06:3a:2f:40:dd:5b:05:58:d4:20:12:43:c5:26:d7: fb:80:de:b8:6d:b6:82:37:a0:8d:ce:7d:7d:b9:46:c7:2a:ef: e1:a3:50:90:3a:3b:a6:0d:02:4d:67:2b:1e:ea:97:70:63:58: 32:a9:ca:7f:08:64:f7:4f:27:73:53:b5:55:b6:f8:58:08:c0: d6:45:51:79:ee:4f:20:c7:0e:0e:78:fa:71:51:9e:87:f8:7a: 8b:f0:fd:9a:42:41:67:53:b6:63:72:d6:4b:52:c4:59:2b:91: cb:a5:3c:9a:a5:aa:2d:65:c0:24:8a:eb:ac:c0:4f:0d:1c:0f: 15:81:ac:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjQxMTIyMTUzNjUwWhcNMjQxMTI5MTUzNjUwWjAYMRYwFAYD VQQDEw02NzQwYTUxMy05ZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9KxLfw/e/6v7HlY0bCMJEQgRdANWWZozfW1n1gZ3qrTdQ83N1bH2pge3/S6 zSQwm9TOpuJsMMALUwK/GklLfF85DU+WJVEaw+uxQoyl9YxWa8wAS21ow5BmCXNA 7IfTXOtW286PjXVzw3WUix0WxWme/gnQKPNW43NBz2efvFnahfqVGNJ6GsCEtPHo mQ6pTNZS8Oly4q4mG1cQakyRMRWmp5XEhvJ7wOjF69BwWBAcAwDVaxGl8blqqMqq lTShZbRU2mtDQGn1230U8C+3rjjs2LS/SPGEBI3+XHMJnkjbLJWI6CWNwyqiiCRI hjtnweKhnDSUB7LAAKOy4vpGpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvrWoSF kVOjzq4G+KGn30RCjcB9MB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFaAA4MrsS9PK5zM+244TPs7+CiJ+rr3hVwJwrddhevEeDzND+qD/+ rIl3cHdMN9BTdXSuE8b0QErFVSPfA2dc37vW/tbj+O9NcOkxe3U7Jc2VC7OIqe8M bEqNiJ0Yz0OiUNpKCXx9m67mDScU08yI1naW45Fp1ETuLH17py4OTHEGOi9A3VsF WNQgEkPFJtf7gN64bbaCN6CNzn19uUbHKu/ho1CQOjumDQJNZyse6pdwY1gyqcp/ CGT3TydzU7VVtvhYCMDWRVF57k8gxw4OePpxUZ6H+HqL8P2aQkFnU7ZjctZLUsRZ K5HLpTyapaotZcAkiuuswE8NHA8VgazK -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org