$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: xRSdbTQzg9qXmm+Q8Ie7hJeHPcigeXsEfKiyNpFVznQ= Subject key identifier: 05:0E:42:92:27:FC:65:7A:22:67:A1:45:36:52:67:A1:C7:DD:AE:60 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0118 Signing time: Thu 21 Nov 2024 03:02:00 +0000 Manifest this update: Thu 21 Nov 2024 03:01:59 +0000 Manifest next update: Thu 28 Nov 2024 03:01:59 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: g352yCcPDOQaPKe/uewY0mL53QQnwKp4HyrE711A/ek=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: vdvXxO6hOVkfy87PEKE+BccPO1owcMEO3zlcdidAXcY=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XPJpmrYNcSNbm9TnuwsF2hc9Dluf13QgHRh9YOFG7n8=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: JXeJqxRjv6XY1o3PZOsZQUdvlF7VbU2rS+ppRqunUIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Nov 21 03:01:59 2024 GMT Not After : Nov 28 03:01:59 2024 GMT Subject: CN=673ea2a7-3f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:a9:81:f8:42:55:18:a1:ce:0a:32:5f:ac: 01:9f:b4:dd:3b:94:ea:2b:a5:ed:ee:cb:5f:31:e4: fb:32:ab:68:84:5c:28:d1:91:2a:6a:4e:ab:1d:0e: 6c:85:d9:1c:cc:1a:b5:d2:ca:5f:37:c6:40:8e:2f: 00:14:4a:4b:9c:e7:ee:54:2d:ce:b4:07:bc:3e:e9: 69:2e:7b:e2:5d:cf:e5:3d:7a:60:99:15:c9:f5:16: 7c:a0:5d:84:47:36:56:84:14:36:a8:7e:ed:80:a5: e8:97:44:bb:8e:0c:87:0d:52:16:aa:9d:3c:17:e8: 61:b0:c5:cd:dd:4e:ab:98:f8:82:8f:1d:17:7e:f9: 9f:18:a2:85:35:09:03:b5:40:80:08:48:4f:55:70: a8:5b:9f:48:5e:44:8f:ba:b2:6a:f7:0d:81:a3:84: 15:00:4d:cf:ce:59:57:04:a2:3c:ee:41:11:85:84: b3:74:b2:75:3f:e8:fe:43:56:21:7c:48:73:91:b8: 77:ff:7f:e4:ff:a2:9b:f2:2c:ff:89:0a:ec:e5:ad: 6f:d9:e7:9c:b3:f8:05:bc:51:62:41:3e:bc:20:e3: d3:fd:b9:20:36:ab:db:92:92:0f:04:4f:d7:b6:0a: 5d:2c:db:e2:6e:9f:0f:b3:53:f1:f1:68:05:9d:09: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:42:92:27:FC:65:7A:22:67:A1:45:36:52:67:A1:C7:DD:AE:60 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:da:e2:f3:9d:97:18:75:b4:bc:97:4b:1e:01:dc:83:a3:48: af:19:ef:d8:c9:be:76:58:e2:16:67:4c:53:61:c0:c9:d7:ef: cc:0b:8b:74:53:8d:05:ea:c6:b4:f4:13:fe:6f:19:6f:85:d7: fa:05:48:37:62:fe:b5:a7:da:8b:f5:15:f5:cb:bf:4e:76:ca: 21:9c:64:c4:a8:75:1a:88:1e:45:98:d8:5a:cc:44:33:a6:c4: 4c:b0:69:85:70:b4:db:00:35:39:24:ac:0e:2d:79:10:04:5b: d6:ea:ab:60:ed:0a:a2:b9:d4:86:74:f7:d8:cd:58:74:dd:b5: eb:72:54:42:63:ee:f2:e0:cd:04:f4:1c:77:4f:f8:50:2d:08: e2:00:8a:6d:7f:b8:84:95:82:3f:e1:6e:5f:fb:0e:32:85:0e: ab:d9:99:9f:a7:24:52:6c:e9:a5:e8:5b:68:44:c4:25:a2:e4: c0:45:c5:dd:4f:0a:08:f1:7c:57:3d:f5:ec:a6:77:96:b2:50: 07:ce:46:56:61:dd:40:28:62:7f:a6:ba:c7:50:1c:75:0c:46: 11:e8:2c:98:48:48:04:db:13:1d:16:39:69:e9:2c:cf:cb:46: 70:4c:5a:7f:d5:29:7b:c0:a6:13:31:4d:c3:85:f8:90:de:b3: b9:de:6a:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjQxMTIxMDMwMTU5WhcNMjQxMTI4MDMwMTU5WjAYMRYwFAYD VQQDEw02NzNlYTJhNy0zZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmqpgfhCVRihzgoyX6wBn7TdO5TqK6Xt7stfMeT7MqtohFwo0ZEqak6rHQ5s hdkczBq10spfN8ZAji8AFEpLnOfuVC3OtAe8PulpLnviXc/lPXpgmRXJ9RZ8oF2E RzZWhBQ2qH7tgKXol0S7jgyHDVIWqp08F+hhsMXN3U6rmPiCjx0XfvmfGKKFNQkD tUCACEhPVXCoW59IXkSPurJq9w2Bo4QVAE3PzllXBKI87kERhYSzdLJ1P+j+Q1Yh fEhzkbh3/3/k/6Kb8iz/iQrs5a1v2eecs/gFvFFiQT68IOPT/bkgNqvbkpIPBE/X tgpdLNvibp8Ps1Px8WgFnQkCDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUOQpIn /GV6ImehRTZSZ6HH3a5gMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl2uLznZcYdbS8l0seAdyDo0ivGe/Yyb52WOIWZ0xTYcDJ1+/MC4t0 U40F6sa09BP+bxlvhdf6BUg3Yv61p9qL9RX1y79OdsohnGTEqHUaiB5FmNhazEQz psRMsGmFcLTbADU5JKwOLXkQBFvW6qtg7QqiudSGdPfYzVh03bXrclRCY+7y4M0E 9Bx3T/hQLQjiAIptf7iElYI/4W5f+w4yhQ6r2ZmfpyRSbOml6FtoRMQlouTARcXd TwoI8XxXPfXspneWslAHzkZWYd1AKGJ/prrHUBx1DEYR6CyYSEgE2xMdFjlp6SzP y0ZwTFp/1Sl7wKYTMU3DhfiQ3rO53mpQ -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:16 2024 by rpki-client on console-ams.rpki-client.org