$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: i7vQBPazdAgr0xQLQLIUFSMPKwWoscrJpLtBRNGbe24= Subject key identifier: 53:5A:B0:42:A0:22:AE:22:95:6E:81:32:F1:67:14:A2:BC:2C:01:5A Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0C23 Signing time: Fri 22 Nov 2024 18:16:19 +0000 Manifest this update: Fri 22 Nov 2024 18:16:19 +0000 Manifest next update: Fri 29 Nov 2024 18:16:19 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: B1RPs+CZQLBxh/tJJnqT1Yy3xy6VZmi5htz2Rq2Euo4=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: exEpVAv7OmSBv6nfn1Ng6Vrt5eD/dXr6N+PdK8CnaV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: Nov 22 18:16:19 2024 GMT Not After : Nov 29 18:16:19 2024 GMT Subject: CN=6740ca73-71e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:df:dc:dd:e7:f1:25:71:b7:55:0a:0a:5a:56: d8:6d:ec:8a:46:86:3f:4e:65:b7:2e:d9:ad:0d:c0: d4:c6:0a:67:f8:3f:37:35:79:68:34:a3:75:da:03: e6:73:b6:ca:7e:a1:99:d0:ca:1d:41:62:dd:47:65: e1:b2:3d:fc:dc:41:aa:8c:b6:02:e0:17:01:01:96: 70:21:55:10:54:89:65:f8:ed:fd:f2:bc:cf:c4:9e: fc:b8:33:d7:4f:57:fa:42:8f:53:e6:3c:33:5b:3b: fa:fc:49:1a:90:8f:0f:17:fb:69:5b:ad:7c:b8:a6: 6f:2c:be:c3:79:37:a3:c0:f4:00:2d:b6:85:6f:63: f4:5a:2d:b6:06:a0:aa:f4:5e:c7:68:21:d8:a4:0e: 37:6d:d3:99:c5:ab:d2:8c:4e:14:be:42:d0:86:c6: 1f:cb:34:72:03:34:56:07:e5:fb:af:91:08:87:c4: 27:df:93:36:d5:33:41:3f:8c:c8:4c:d4:fd:96:bc: a3:ca:b7:1d:dd:6d:9f:d3:38:1f:cb:24:eb:df:af: 8c:0a:27:d4:97:73:a7:99:8f:fb:3d:83:5d:d8:70: 32:03:26:8a:52:14:c5:2d:95:23:f4:98:ff:03:ab: af:77:16:7b:88:09:0e:56:df:23:45:7a:fd:90:be: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:B0:42:A0:22:AE:22:95:6E:81:32:F1:67:14:A2:BC:2C:01:5A X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:6a:a8:28:89:0b:66:cb:6a:b6:26:4e:fd:a2:89:1f:2c:70: c4:33:31:ed:15:3c:ec:c2:30:f8:c0:32:1c:41:c0:eb:52:75: 01:c2:43:00:a2:e1:b0:ab:58:e0:bb:a7:81:57:89:af:1d:5c: 1d:68:27:f3:1a:3c:80:dc:7f:cd:79:79:5d:c7:a1:45:aa:18: 1f:20:f1:4e:18:cb:a1:53:65:bb:79:94:b9:37:67:07:84:fd: e3:1c:2e:1f:99:a8:4a:36:55:5b:b8:8a:7c:52:e4:45:76:d2: 49:8f:8e:93:c2:f5:2e:23:f1:22:2f:71:f2:39:8a:4f:46:db: 0d:5d:a8:eb:b2:39:6d:70:08:ea:05:36:16:f0:76:f1:ae:4c: 50:ff:b0:fc:c0:cc:13:2f:22:ca:70:d1:d2:77:93:50:ee:99: 0a:e1:bf:6d:cf:3d:55:3a:5e:25:d1:66:ff:d9:5f:d4:ca:a0: bf:f7:f2:da:c1:8e:d0:af:0a:e5:77:9e:c7:68:48:61:59:04: 72:e5:56:90:71:67:b3:2f:cd:cf:c7:c4:c6:82:16:51:06:e3: 1c:6f:ec:b2:04:01:c3:e4:92:56:5d:de:87:29:3f:22:54:3e: 51:da:7d:56:33:b7:a1:90:68:39:2c:21:48:3b:54:e7:5c:77: 4f:6a:6d:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjQxMTIyMTgxNjE5WhcNMjQxMTI5MTgxNjE5WjAYMRYwFAYD VQQDEw02NzQwY2E3My03MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8N/c3efxJXG3VQoKWlbYbeyKRoY/TmW3LtmtDcDUxgpn+D83NXloNKN12gPm c7bKfqGZ0ModQWLdR2Xhsj383EGqjLYC4BcBAZZwIVUQVIll+O398rzPxJ78uDPX T1f6Qo9T5jwzWzv6/EkakI8PF/tpW618uKZvLL7DeTejwPQALbaFb2P0Wi22BqCq 9F7HaCHYpA43bdOZxavSjE4UvkLQhsYfyzRyAzRWB+X7r5EIh8Qn35M21TNBP4zI TNT9lryjyrcd3W2f0zgfyyTr36+MCifUl3OnmY/7PYNd2HAyAyaKUhTFLZUj9Jj/ A6uvdxZ7iAkOVt8jRXr9kL6qMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNasEKg Iq4ilW6BMvFnFKK8LAFaMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWaqgoiQtmy2q2Jk79ookfLHDEMzHtFTzswjD4wDIcQcDrUnUBwkMA ouGwq1jgu6eBV4mvHVwdaCfzGjyA3H/NeXldx6FFqhgfIPFOGMuhU2W7eZS5N2cH hP3jHC4fmahKNlVbuIp8UuRFdtJJj46TwvUuI/EiL3HyOYpPRtsNXajrsjltcAjq BTYW8HbxrkxQ/7D8wMwTLyLKcNHSd5NQ7pkK4b9tzz1VOl4l0Wb/2V/UyqC/9/La wY7Qrwrld57HaEhhWQRy5VaQcWezL83Px8TGghZRBuMcb+yyBAHD5JJWXd6HKT8i VD5R2n1WM7ehkGg5LCFIO1TnXHdPam0a -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org