$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft File: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft (raw, json) Hash identifier: iDYNB3RcgMlewv7mYZkX5VeYK+xASkEzeFZKQXd2V9s= Subject key identifier: 53:AF:86:4B:AA:E1:21:45:90:6A:DD:B7:BE:6C:A7:ED:81:89:D0:81 Authority key identifier: EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7 Certificate issuer: /CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft Manifest number: 3422 Signing time: Fri 22 Nov 2024 15:16:05 +0000 Manifest this update: Fri 22 Nov 2024 15:16:05 +0000 Manifest next update: Fri 29 Nov 2024 15:16:05 +0000 Files and hashes: 1: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl (hash: UACBkWupFImd5Z7cdCfK2kiFJS2U5mogHneq/Aqh6xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7 Validity Not Before: Nov 22 15:16:05 2024 GMT Not After : Nov 29 15:16:05 2024 GMT Subject: CN=6740a035-b2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:b5:e5:2d:12:f6:f7:24:41:a0:d4:2f:a4: 86:36:63:fa:2c:65:94:8d:7b:d5:3c:81:15:ac:86: 8a:5f:41:e8:de:1c:76:b5:b5:4d:c6:66:fa:aa:c6: f0:47:6b:ae:02:ba:8e:b2:ca:9b:9f:de:28:fa:ca: 33:cb:a0:34:64:a0:1d:36:c5:5b:00:12:3a:48:8a: 0a:1b:73:00:57:31:b1:cf:39:34:f3:16:49:a5:e7: 3d:0a:f5:21:d3:b5:4c:7f:e9:ed:7f:b9:d6:b9:73: b5:a0:93:e2:54:6f:18:e7:6d:84:ee:ca:63:05:64: ad:3b:f8:c3:8b:2b:e4:4a:0b:0a:c2:e2:f6:f0:19: b0:ae:04:54:69:67:93:04:42:5f:f6:3e:ba:32:1b: 3e:6d:e1:a7:d7:d2:d4:c5:8d:8d:fe:02:09:6c:34: 72:c6:a3:11:45:95:48:de:f1:4f:da:8e:64:b2:96: 4e:49:7b:76:03:e6:b0:bb:f5:35:8d:66:f6:cb:33: 03:d4:5f:14:27:05:e5:08:94:ef:cf:32:c5:b9:04: 90:2d:f1:61:f9:89:2f:b6:03:06:8e:ef:7c:e4:85: 1a:52:3e:43:24:7d:d4:36:32:b2:cb:98:93:d9:97: 1f:63:d9:f5:ed:3e:6e:6d:6a:bc:cd:46:74:20:af: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AF:86:4B:AA:E1:21:45:90:6A:DD:B7:BE:6C:A7:ED:81:89:D0:81 X509v3 Authority Key Identifier: keyid:EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a2:94:75:87:52:f7:72:3f:c0:86:d6:1f:1e:29:b4:e4:81: 9d:ab:e7:0e:bb:5a:8d:16:f8:06:10:46:9b:f0:26:7e:92:9f: de:6e:a0:60:f9:52:aa:5c:13:3d:99:49:ac:9a:bf:d7:9c:c9: 7b:a4:35:94:c1:11:56:90:3c:bd:ba:33:61:62:09:2b:39:72: c1:b7:e5:b3:87:ba:d4:f4:08:b4:81:9e:9c:ff:dd:3a:b4:48: 6a:fc:2e:c6:e7:ac:57:42:b5:4f:1f:da:08:45:21:99:e8:ad: b5:e8:92:61:a6:24:f0:88:b1:5e:d1:74:06:5b:1a:1f:7f:99: f9:8b:3c:e2:d7:f8:04:db:3a:4b:cc:c2:9e:f6:6f:3a:72:b0: 51:ec:78:3e:be:25:29:28:c7:95:92:bd:0b:90:08:b4:1d:40: 23:50:a5:7f:9e:71:ab:1a:0e:c3:4b:5b:80:f0:50:5b:4b:80: 10:d8:ce:a3:42:46:65:db:06:8e:76:fa:86:e4:f1:7f:c5:09: e7:c9:f5:73:d0:38:37:b2:1d:14:7c:86:be:b9:17:36:71:3c: 53:d9:ce:3b:8d:e7:3e:c4:24:9a:fe:6a:2a:a5:db:9f:3e:17: 2f:57:8e:8f:9d:59:07:56:50:17:8f:9f:1f:84:a1:88:31:de: 56:c8:f7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE3OTAxMTAvBgNVBAUTKEVBMTMxNjI1NzNGNDYwODdCOTBCQjc1Rjc0ODI1QjMx MjhDQTE3QTcwHhcNMjQxMTIyMTUxNjA1WhcNMjQxMTI5MTUxNjA1WjAYMRYwFAYD VQQDEw02NzQwYTAzNS1iMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhm15S0S9vckQaDUL6SGNmP6LGWUjXvVPIEVrIaKX0Ho3hx2tbVNxmb6qsbw R2uuArqOssqbn94o+sozy6A0ZKAdNsVbABI6SIoKG3MAVzGxzzk08xZJpec9CvUh 07VMf+ntf7nWuXO1oJPiVG8Y522E7spjBWStO/jDiyvkSgsKwuL28BmwrgRUaWeT BEJf9j66Mhs+beGn19LUxY2N/gIJbDRyxqMRRZVI3vFP2o5kspZOSXt2A+awu/U1 jWb2yzMD1F8UJwXlCJTvzzLFuQSQLfFh+YkvtgMGju985IUaUj5DJH3UNjKyy5iT 2ZcfY9n17T5ubWq8zUZ0IK8cqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOvhkuq 4SFFkGrdt75sp+2BidCBMB8GA1UdIwQYMBaAFOoTFiVz9GCHuQu3X3SCWzEoyhen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTc5MC8xMjlCM0Q1QzFE QTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJZTVDN2RmZElKYk1TaktG NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZoTVdKWFAwWUllNUM3ZGZkSUpiTVNqS0Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTc5MC8xMjlCM0Q1QzFEQTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJ ZTVDN2RmZElKYk1TaktGNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuopR1h1L3cj/AhtYfHim05IGdq+cOu1qNFvgGEEab8CZ+kp/ebqBg +VKqXBM9mUmsmr/XnMl7pDWUwRFWkDy9ujNhYgkrOXLBt+Wzh7rU9Ai0gZ6c/906 tEhq/C7G56xXQrVPH9oIRSGZ6K216JJhpiTwiLFe0XQGWxoff5n5izzi1/gE2zpL zMKe9m86crBR7Hg+viUpKMeVkr0LkAi0HUAjUKV/nnGrGg7DS1uA8FBbS4AQ2M6j QkZl2waOdvqG5PF/xQnnyfVz0Dg3sh0UfIa+uRc2cTxT2c47jec+xCSa/moqpduf PhcvV46PnVkHVlAXj58fhKGIMd5WyPcP -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org