$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: qBKOJjVthygr/QMklvVSqyZqynWm33OGc9lrtvZbbUE= Subject key identifier: 3E:32:F2:A0:FE:84:0D:9A:BF:43:AA:93:37:69:35:55:56:CA:28:D3 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 19 Signing time: Thu 21 Nov 2024 05:59:40 +0000 Manifest this update: Thu 21 Nov 2024 05:59:40 +0000 Manifest next update: Thu 28 Nov 2024 05:59:40 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: oElwXjmvvW2C68oQAdLSYhSzKDHX7aJskecA2/48EvA=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Nov 21 05:59:40 2024 GMT Not After : Nov 28 05:59:40 2024 GMT Subject: CN=673ecc4c-79f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:95:38:e9:0a:3a:72:55:12:ce:93:c6:b1: fa:96:56:3b:34:10:82:92:f5:30:5e:d5:61:16:24: 32:ca:13:ae:4e:e4:0c:87:51:3b:46:07:45:51:ca: 2d:e6:c4:e6:3c:f9:9d:9a:03:41:d3:8e:97:92:12: 51:82:c9:cc:32:ff:89:ad:9f:60:e4:b0:35:85:6e: f5:49:80:b4:df:39:a3:8f:65:ad:43:fa:c9:44:4b: d9:56:01:48:f8:ff:a8:db:a8:19:b4:21:9b:8b:95: 82:51:1b:5e:c7:6c:ae:08:04:22:be:f8:ba:2d:9d: 62:44:60:ca:0d:b2:9e:fc:1e:37:0d:e0:a6:50:4a: 8d:aa:07:57:49:05:0e:3a:d3:b4:12:75:64:45:fd: ae:43:07:ed:d9:19:85:19:02:ca:49:af:fd:d0:44: c0:7a:c6:f1:ce:64:aa:50:a9:0d:6d:08:81:48:7b: 58:99:9d:ee:59:26:a3:84:ab:dc:98:45:c5:64:dd: e9:4b:88:f0:97:4a:d2:2f:6b:d3:67:7f:1a:a3:0f: c3:96:4d:cd:1b:68:55:f9:7a:f2:5c:ac:12:9e:2e: e9:66:22:27:24:92:e9:4a:6d:81:4b:a7:4b:75:c2: ac:cd:81:17:da:47:a1:57:80:36:fc:3a:58:65:55: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:32:F2:A0:FE:84:0D:9A:BF:43:AA:93:37:69:35:55:56:CA:28:D3 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:22:28:6c:f4:0d:f7:7f:04:75:b8:92:31:05:c9:8c:86:23: 6a:40:ea:77:ee:87:23:9e:25:30:b4:12:50:70:8f:c6:5d:14: 0c:79:a0:c4:b2:69:0e:ad:63:62:93:80:fa:4e:54:70:be:96: c8:db:91:d2:66:d7:7d:a2:ab:e3:1e:6a:2b:d7:1e:86:9f:ff: 8b:f2:85:84:ef:4e:09:0a:4c:83:4d:cc:23:32:e7:83:06:0e: 67:3b:b0:c2:30:2b:49:d6:e0:4b:7a:90:d8:9e:69:9e:17:26: 4b:53:7e:30:f5:d4:67:52:3e:f3:9d:6b:14:28:c6:ee:6a:2b: c5:f6:70:21:7a:e3:48:63:74:32:87:c1:c8:bb:d2:9c:d8:5e: a7:ca:cc:48:76:6c:26:07:6e:b0:40:46:e8:e8:90:bd:d7:86: 87:d6:04:44:a5:fe:2b:e9:24:64:96:22:39:36:f8:1e:3d:d6: 27:51:b7:b4:2e:1f:59:30:8e:07:49:fe:8b:e8:ff:1b:5a:24: 5d:ec:78:72:ec:3a:72:20:6d:d3:e6:21:e6:bc:73:39:25:f7: 05:45:6b:24:89:33:28:01:00:4d:72:33:da:30:81:18:3b:df: 01:45:aa:99:16:df:d2:c5:5a:bb:6a:ff:67:28:db:38:a4:51: f8:fe:a0:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjhBRDExMC8GA1UEBRMoRTlGMkNFNDgzRjFCMDZEMjlENUVBMkFCRTM3NUJEMUQy MkE5RTFDNDAeFw0yNDExMjEwNTU5NDBaFw0yNDExMjgwNTU5NDBaMBgxFjAUBgNV BAMTDTY3M2VjYzRjLTc5ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3E5U46Qo6clUSzpPGsfqWVjs0EIKS9TBe1WEWJDLKE65O5AyHUTtGB0VRyi3m xOY8+Z2aA0HTjpeSElGCycwy/4mtn2DksDWFbvVJgLTfOaOPZa1D+slES9lWAUj4 /6jbqBm0IZuLlYJRG17HbK4IBCK++LotnWJEYMoNsp78HjcN4KZQSo2qB1dJBQ46 07QSdWRF/a5DB+3ZGYUZAspJr/3QRMB6xvHOZKpQqQ1tCIFIe1iZne5ZJqOEq9yY RcVk3elLiPCXStIva9NnfxqjD8OWTc0baFX5evJcrBKeLulmIickkulKbYFLp0t1 wqzNgRfaR6FXgDb8OlhlVbE3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPjLyoP6E DZq/Q6qTN2k1VVbKKNMwHwYDVR0jBBgwFoAU6fLOSD8bBtKdXqKr43W9HSKp4cQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2OEFELzQ5REVFRTY0ODVF MDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNmZMT1NEOGJCdEtkWHFLcjQzVzlIU0twNGNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 OEFELzQ5REVFRTY0ODVFMDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRL ZFhxS3I0M1c5SFNLcDRjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFEiKGz0Dfd/BHW4kjEFyYyGI2pA6nfuhyOeJTC0ElBwj8ZdFAx5oMSy aQ6tY2KTgPpOVHC+lsjbkdJm132iq+MeaivXHoaf/4vyhYTvTgkKTINNzCMy54MG Dmc7sMIwK0nW4Et6kNieaZ4XJktTfjD11GdSPvOdaxQoxu5qK8X2cCF640hjdDKH wci70pzYXqfKzEh2bCYHbrBARujokL3XhofWBESl/ivpJGSWIjk2+B491idRt7Qu H1kwjgdJ/ovo/xtaJF3seHLsOnIgbdPmIea8czkl9wVFaySJMygBAE1yM9owgRg7 3wFFqpkW39LFWrtq/2co2zikUfj+oCk= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:50 2024 by rpki-client on console-fra.rpki-client.org