$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json) Hash identifier: xDA5Av0nYNtxoq5mkBpUqhlFTmkUcG+qufIoHSXLoHY= Subject key identifier: 9B:27:14:F0:46:B1:6C:17:CC:C1:CA:AF:01:C7:A0:56:CF:C1:BA:C6 Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft Manifest number: 06 Signing time: Wed 23 Oct 2024 06:51:47 +0000 Manifest this update: Wed 23 Oct 2024 06:51:46 +0000 Manifest next update: Wed 30 Oct 2024 06:51:46 +0000 Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: ib85BT82/gANNsk5IVFK7c/6QNmVxNLOLyelQnsqna0=) 2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Validity Not Before: Oct 23 06:51:46 2024 GMT Not After : Oct 30 06:51:46 2024 GMT Subject: CN=67189d02-ce2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3d:ba:6c:5f:4f:33:be:9d:d1:6a:8e:1a:f5: bf:9e:de:43:7d:58:21:25:af:bf:51:27:7c:68:3f: dc:f6:65:22:7f:17:a9:ce:f9:4b:77:34:a9:ab:1c: 9c:de:87:a0:ae:74:d1:1e:4c:23:e0:33:a3:dc:8d: cd:8e:5d:45:4e:96:5b:3f:35:0f:77:50:19:b1:29: e6:4c:d9:de:8b:9f:a9:f5:fd:22:ce:ec:62:74:c8: 43:f2:af:44:5a:90:ea:83:20:b6:7a:6c:62:c1:11: 93:1b:04:a2:ce:dc:d0:c6:5d:ed:f0:41:c1:aa:78: 1f:16:46:a3:b5:2e:cb:02:99:89:35:f1:a4:31:ad: ff:ec:b2:a5:ea:9c:c8:18:f5:2b:bc:52:7f:3b:da: 8c:6f:40:f5:92:47:b3:05:f5:9f:be:38:80:f1:5a: a5:15:8b:93:a3:95:53:81:4d:8a:99:d1:e4:ad:13: 59:83:19:b5:8a:61:38:e5:52:89:b2:54:b0:85:1e: c0:e7:e0:c2:c1:18:3b:ce:8c:9e:a9:f6:58:d7:67: 4a:e7:bd:f7:62:f5:0d:63:1f:73:41:e6:6c:10:1a: f0:2b:6d:cc:7c:50:73:65:fe:a4:41:b2:f6:f9:9f: 71:e6:de:68:ac:f4:2f:59:6a:52:95:b7:39:63:95: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:27:14:F0:46:B1:6C:17:CC:C1:CA:AF:01:C7:A0:56:CF:C1:BA:C6 X509v3 Authority Key Identifier: keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3d:9c:55:7b:e0:87:ed:29:a9:de:50:f1:73:8a:4f:3f:e3: f9:f1:8d:31:6f:a6:eb:d3:f2:ef:fc:66:ee:a4:c7:80:56:8c: 18:81:d4:32:a9:ce:78:f5:54:66:67:84:2e:29:ca:5c:38:02: 0a:03:61:a0:4c:02:6d:a7:cf:28:67:de:3d:58:d8:cd:fc:a9: c2:7b:72:a1:58:1d:bc:0a:4f:b4:92:bf:53:c0:2b:c7:16:4f: 1b:a6:4f:61:f6:87:12:64:72:6f:66:ab:50:56:1a:e9:bc:86: 5e:46:bb:de:12:80:db:a7:ca:14:4d:eb:49:5b:65:db:0e:f5: ab:f1:92:cf:32:9f:4a:c8:ef:9a:1f:e7:0f:0a:ff:87:08:f8: 6d:57:5e:df:19:85:45:a2:99:02:8c:53:bf:de:37:ae:f2:07: 5f:fa:11:34:e6:9d:30:83:7c:75:3c:68:94:77:63:a5:e3:cd: 88:70:da:68:f3:8f:72:80:96:62:7a:87:01:4e:29:b4:75:9d: aa:a2:0a:b5:37:2d:3e:c1:ff:f3:a4:1a:35:33:1e:8e:fc:49: b1:0c:62:1e:1a:90:ad:e9:3c:67:26:56:15:0d:00:09:70:ac: 8a:5f:04:2b:3e:e8:30:5e:b1:b9:14:5c:73:c9:4d:93:7e:38: 7e:3d:2c:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzcwOTExMC8GA1UEBRMoRkJBMjZFM0NEN0UwODE5OUIzQTE4RjE2MzY2QTc1N0Yw NENERjA1NDAeFw0yNDEwMjMwNjUxNDZaFw0yNDEwMzAwNjUxNDZaMBgxFjAUBgNV BAMTDTY3MTg5ZDAyLWNlMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrPbpsX08zvp3Rao4a9b+e3kN9WCElr79RJ3xoP9z2ZSJ/F6nO+Ut3NKmrHJze h6CudNEeTCPgM6Pcjc2OXUVOlls/NQ93UBmxKeZM2d6Ln6n1/SLO7GJ0yEPyr0Ra kOqDILZ6bGLBEZMbBKLO3NDGXe3wQcGqeB8WRqO1LssCmYk18aQxrf/ssqXqnMgY 9Su8Un872oxvQPWSR7MF9Z++OIDxWqUVi5OjlVOBTYqZ0eStE1mDGbWKYTjlUomy VLCFHsDn4MLBGDvOjJ6p9ljXZ0rnvfdi9Q1jH3NB5mwQGvArbcx8UHNl/qRBsvb5 n3Hm3mis9C9ZalKVtzljlQxbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmycU8Eax bBfMwcqvAcegVs/BusYwHwYDVR0jBBgwFoAU+6JuPNfggZmzoY8WNmp1fwTN8FQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3NzA5LzgxNjIzQTRBOEJC NjExRUY5OThCQUM3MkM0RjlBRTAyLy02SnVQTmZnZ1ptem9ZOFdObXAxZndUTjhG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTZKdVBOZmdnWm16b1k4V05tcDFmd1ROOEZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 NzA5LzgxNjIzQTRBOEJCNjExRUY5OThCQUM3MkM0RjlBRTAyLy02SnVQTmZnZ1pt em9ZOFdObXAxZndUTjhGUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACs9nFV74IftKaneUPFzik8/4/nxjTFvpuvT8u/8Zu6kx4BWjBiB1DKp znj1VGZnhC4pylw4AgoDYaBMAm2nzyhn3j1Y2M38qcJ7cqFYHbwKT7SSv1PAK8cW TxumT2H2hxJkcm9mq1BWGum8hl5Gu94SgNunyhRN60lbZdsO9avxks8yn0rI75of 5w8K/4cI+G1XXt8ZhUWimQKMU7/eN67yB1/6ETTmnTCDfHU8aJR3Y6XjzYhw2mjz j3KAlmJ6hwFOKbR1naqiCrU3LT7B//OkGjUzHo78SbEMYh4akK3pPGcmVhUNAAlw rIpfBCs+6DBesbkUXHPJTZN+OH49LFQ= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org