$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: 9SYfIQYOZXnAsaB4iAP48wjjM8cmGBTOgJ3WHMrKMEM= Subject key identifier: 55:7C:21:3C:01:EF:41:A0:D7:B7:8D:B8:77:62:F8:1F:A0:39:89:3A Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 11E6 Signing time: Fri 22 Nov 2024 18:35:49 +0000 Manifest this update: Fri 22 Nov 2024 18:35:49 +0000 Manifest next update: Fri 29 Nov 2024 18:35:49 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: 59ZS/YZzRzHK2O70lqYwCbAZgyqJCWFA9gY+/ncRZo0=) 2: 4CC9C2C67A4011EF8ECE0718C4F9AE02.roa (hash: /r8KvmtJxwcXEht7kIS+bSuNX4wT0OgIXkJCK/QDB60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Nov 22 18:35:49 2024 GMT Not After : Nov 29 18:35:49 2024 GMT Subject: CN=6740cf05-070b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:11:0e:50:07:75:16:c3:91:5a:3a:2a:a1: 08:76:85:ad:f9:53:40:43:08:c1:12:d4:1f:d0:42: 7f:d5:08:9c:83:57:e7:20:d9:6f:d9:ed:c0:cf:b7: bd:1c:21:be:98:e5:59:7b:85:e3:3e:22:9b:22:68: 5c:d9:8d:81:7b:36:8e:9b:bc:1c:d1:24:fa:ac:3c: bf:b7:92:72:64:3c:19:e0:1e:7c:c2:29:6e:e4:ae: 3d:b8:b7:f3:8f:8e:9d:c7:ae:03:67:85:aa:1c:71: 01:84:00:2d:d6:c3:cf:64:f7:90:b4:6d:5b:e5:46: d3:6c:4b:cf:f2:fb:46:f5:36:de:1a:58:c9:a6:93: e8:33:c1:0d:12:d9:51:8f:f7:1e:12:2d:90:f2:00: db:75:1d:57:8a:e0:69:c9:8e:b1:58:b1:cc:18:1f: e0:7f:0d:d4:1f:d9:01:f8:80:c8:9b:25:ab:ce:db: 6f:ae:c0:6b:30:08:bb:90:8f:39:d8:35:50:2b:fd: 36:31:98:92:f6:92:57:6e:92:71:ac:b6:a9:c6:a7: 61:a2:c5:7f:79:34:69:82:ec:ac:cf:bc:9b:d2:07: 14:4d:76:2d:79:81:cd:17:4f:3c:2d:2d:d4:5f:4e: 0a:f1:6f:54:13:fd:08:7d:1d:17:c9:dd:be:dc:01: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:21:3C:01:EF:41:A0:D7:B7:8D:B8:77:62:F8:1F:A0:39:89:3A X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e6:ca:b6:11:15:30:aa:1a:d5:d0:6d:5e:5a:ab:bc:7a:ad: 4d:35:5b:c2:de:52:39:51:84:03:9a:43:7c:31:97:be:15:67: 10:fe:6d:47:2a:e4:c5:60:ff:8b:29:98:8a:8a:fb:de:ba:23: 82:0f:f5:b7:50:fb:3c:b9:66:b9:47:b1:33:76:24:c7:26:41: f2:c5:7e:53:1a:bb:a7:f1:2b:ce:97:4f:45:7c:d8:f7:7e:da: 58:2e:1b:8f:79:c2:6e:09:da:54:5b:be:2c:83:3e:48:2c:aa: 3a:63:c6:51:c5:54:9e:c4:54:0c:2f:c7:57:51:05:61:a5:eb: 52:eb:2e:7b:e7:b2:7e:54:96:b1:28:cb:7f:b0:8f:7e:56:c9: 94:70:86:1c:99:26:d6:3a:96:61:ed:ef:4d:fa:25:ee:d3:aa: 5d:64:36:03:49:23:64:c8:24:9d:21:fe:30:4e:0b:04:2d:d4: 08:39:34:5e:1a:4e:bb:c6:33:55:3a:78:69:63:bf:88:ae:ca: 09:c6:65:22:3f:8f:7a:9e:46:a9:b4:da:c9:1c:4d:28:53:7c: 25:70:4f:1f:6f:d5:94:b9:38:9a:b6:ee:6c:49:72:38:7a:90: 73:bd:f7:64:6b:91:b4:58:f2:2b:58:d0:ff:14:c8:5a:6b:7b: 3f:13:6f:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjQxMTIyMTgzNTQ5WhcNMjQxMTI5MTgzNTQ5WjAYMRYwFAYD VQQDEw02NzQwY2YwNS0wNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1MRDlAHdRbDkVo6KqEIdoWt+VNAQwjBEtQf0EJ/1Qicg1fnINlv2e3Az7e9 HCG+mOVZe4XjPiKbImhc2Y2BezaOm7wc0ST6rDy/t5JyZDwZ4B58wilu5K49uLfz j46dx64DZ4WqHHEBhAAt1sPPZPeQtG1b5UbTbEvP8vtG9TbeGljJppPoM8ENEtlR j/ceEi2Q8gDbdR1XiuBpyY6xWLHMGB/gfw3UH9kB+IDImyWrzttvrsBrMAi7kI85 2DVQK/02MZiS9pJXbpJxrLapxqdhosV/eTRpguysz7yb0gcUTXYteYHNF088LS3U X04K8W9UE/0IfR0Xyd2+3AEenQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFV8ITwB 70Gg17eNuHdi+B+gOYk6MB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC5sq2ERUwqhrV0G1eWqu8eq1NNVvC3lI5UYQDmkN8MZe+FWcQ/m1H KuTFYP+LKZiKivveuiOCD/W3UPs8uWa5R7EzdiTHJkHyxX5TGrun8SvOl09FfNj3 ftpYLhuPecJuCdpUW74sgz5ILKo6Y8ZRxVSexFQML8dXUQVhpetS6y5757J+VJax KMt/sI9+VsmUcIYcmSbWOpZh7e9N+iXu06pdZDYDSSNkyCSdIf4wTgsELdQIOTRe Gk67xjNVOnhpY7+IrsoJxmUiP496nkaptNrJHE0oU3wlcE8fb9WUuTiatu5sSXI4 epBzvfdka5G0WPIrWND/FMhaa3s/E29u -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org