$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json) Hash identifier: gjYDrpETtE9x5XLDV1ulcY9E3SxnwMjXfVEiqmXxjDg= Subject key identifier: BE:51:06:AE:0A:D6:9D:A6:7F:5A:AE:16:B9:63:2A:FA:DA:A0:F3:B9 Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft Manifest number: 17 Signing time: Mon 25 Nov 2024 05:54:25 +0000 Manifest this update: Mon 25 Nov 2024 05:54:25 +0000 Manifest next update: Mon 02 Dec 2024 05:54:25 +0000 Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: i5+3QVMsPO3IXsldOs63oDy16S0OVE0iI7r+1e4aBeU=) 2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Validity Not Before: Nov 25 05:54:25 2024 GMT Not After : Dec 2 05:54:25 2024 GMT Subject: CN=67441111-bc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:6c:bf:36:fb:2e:e1:21:8a:8f:10:51:f5: 64:27:d2:8c:8e:05:1d:3c:99:d4:cd:76:fb:ea:4e: 0d:0f:82:00:49:04:fe:89:ce:43:a8:29:f8:d7:26: 13:58:96:9e:90:54:b1:0a:43:c6:12:43:5f:bb:a0: ff:09:92:86:e1:e6:ea:c5:a6:cd:fe:1f:af:a0:5e: d6:6a:5b:0b:72:20:54:e3:02:c4:b0:24:cb:63:c5: f5:c1:9a:c9:0c:d8:42:bd:99:f2:2b:7c:21:68:38: 6c:4f:29:7d:64:a3:e7:71:ae:83:88:72:f0:33:e9: 6d:ed:b1:f0:92:3c:27:1f:79:87:0e:d7:11:04:d9: 8c:89:4d:6b:17:1b:bd:59:95:5c:8c:cd:95:27:c7: 04:ee:d3:85:df:eb:f4:50:b4:39:7f:44:d2:84:a1: bc:95:d1:b2:90:47:f8:e4:24:09:6d:e8:29:36:62: 9b:99:aa:32:17:7f:b6:8b:52:46:e9:56:2b:3b:42: 46:43:e9:c9:0c:72:c1:40:e6:11:a4:1b:84:a2:6f: c1:73:0a:2a:7e:f6:7e:ad:be:82:86:dc:fc:77:b3: 1c:30:94:41:0d:af:d2:07:c4:67:2a:b5:66:23:03: bd:d5:dd:a1:e8:5a:86:d9:ae:c5:46:e8:4a:d1:a0: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:51:06:AE:0A:D6:9D:A6:7F:5A:AE:16:B9:63:2A:FA:DA:A0:F3:B9 X509v3 Authority Key Identifier: keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:1a:b4:36:75:f2:b6:33:c2:df:ae:cc:dc:0d:70:42:c4:cd: ed:8d:d3:80:50:2a:a2:c6:1c:07:b0:61:a6:ac:a2:4a:2a:d1: 0f:da:5d:91:b7:9a:cd:40:06:95:30:f1:5e:28:99:e3:a8:b7: 3b:49:ab:fc:df:84:88:df:2e:72:34:90:0d:a4:d2:82:1a:d0: fd:b8:1f:1d:7c:d1:90:30:74:35:88:f4:10:ca:aa:b3:b0:58: ed:b7:44:1d:b5:55:3b:32:3f:79:5c:e4:17:12:dc:34:06:fd: ee:89:3b:de:fb:0c:99:88:7b:53:c2:07:fa:69:57:31:c0:c1: 02:68:df:70:ca:e7:22:25:fd:44:37:c6:bc:ea:43:39:6e:b4: fb:84:79:9e:0e:56:18:d4:46:f1:be:0f:78:25:bb:b0:5e:36: 5e:bf:f3:ca:1a:eb:98:62:fc:53:8a:de:cc:e5:db:d5:33:2d: 50:2e:33:e9:6f:e3:65:3c:24:6c:5c:ee:f8:ea:ba:03:50:53: 85:b9:06:f1:e3:36:ae:2e:ac:20:e5:17:e2:37:ae:8f:7d:a1: 86:67:72:e3:18:53:9f:93:67:ff:a1:72:18:11:cf:94:4c:b8: 77:d7:cf:b8:3c:46:a0:a0:90:01:77:0e:16:89:9f:51:32:4e: f8:94:6c:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzcwOTExMC8GA1UEBRMoRkJBMjZFM0NEN0UwODE5OUIzQTE4RjE2MzY2QTc1N0Yw NENERjA1NDAeFw0yNDExMjUwNTU0MjVaFw0yNDEyMDIwNTU0MjVaMBgxFjAUBgNV BAMTDTY3NDQxMTExLWJjODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEmGy/Nvsu4SGKjxBR9WQn0oyOBR08mdTNdvvqTg0PggBJBP6JzkOoKfjXJhNY lp6QVLEKQ8YSQ1+7oP8Jkobh5urFps3+H6+gXtZqWwtyIFTjAsSwJMtjxfXBmskM 2EK9mfIrfCFoOGxPKX1ko+dxroOIcvAz6W3tsfCSPCcfeYcO1xEE2YyJTWsXG71Z lVyMzZUnxwTu04Xf6/RQtDl/RNKEobyV0bKQR/jkJAlt6Ck2YpuZqjIXf7aLUkbp Vis7QkZD6ckMcsFA5hGkG4Sib8FzCip+9n6tvoKG3Px3sxwwlEENr9IHxGcqtWYj A73V3aHoWobZrsVG6ErRoDAJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvlEGrgrW naZ/Wq4WuWMq+tqg87kwHwYDVR0jBBgwFoAU+6JuPNfggZmzoY8WNmp1fwTN8FQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3NzA5LzgxNjIzQTRBOEJC NjExRUY5OThCQUM3MkM0RjlBRTAyLy02SnVQTmZnZ1ptem9ZOFdObXAxZndUTjhG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTZKdVBOZmdnWm16b1k4V05tcDFmd1ROOEZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 NzA5LzgxNjIzQTRBOEJCNjExRUY5OThCQUM3MkM0RjlBRTAyLy02SnVQTmZnZ1pt em9ZOFdObXAxZndUTjhGUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAatDZ18rYzwt+uzNwNcELEze2N04BQKqLGHAewYaasokoq0Q/aXZG3 ms1ABpUw8V4omeOotztJq/zfhIjfLnI0kA2k0oIa0P24Hx180ZAwdDWI9BDKqrOw WO23RB21VTsyP3lc5BcS3DQG/e6JO977DJmIe1PCB/ppVzHAwQJo33DK5yIl/UQ3 xrzqQzlutPuEeZ4OVhjURvG+D3glu7BeNl6/88oa65hi/FOK3szl29UzLVAuM+lv 42U8JGxc7vjqugNQU4W5BvHjNq4urCDlF+I3ro99oYZncuMYU5+TZ/+hchgRz5RM uHfXz7g8RqCgkAF3DhaJn1EyTviUbDo= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:51 2024 by rpki-client on console-ams.rpki-client.org