$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: 7nNS3HluOFcFZODYL7ddInzqhzJhBFRXsz735W5FEXM= Subject key identifier: C2:F0:F6:44:13:39:D4:64:6D:2D:D9:2C:4A:B8:F7:EE:C5:6E:1C:58 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 0A Signing time: Wed 23 Oct 2024 06:48:08 +0000 Manifest this update: Wed 23 Oct 2024 06:48:07 +0000 Manifest next update: Wed 30 Oct 2024 06:48:07 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: ZWfKhdggAkO3FDiTOKvbi5K9RCb6QUXB/HJwRUNpD70=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Oct 23 06:48:07 2024 GMT Not After : Oct 30 06:48:07 2024 GMT Subject: CN=67189c27-8258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:6f:1a:b6:4a:8e:f1:e3:9b:41:f6:26:2a: 79:92:42:64:78:7d:6e:ff:45:a2:e2:97:76:49:d8: f7:b1:d5:97:d2:13:1d:6e:a9:06:7e:f2:9d:0e:66: e5:c9:7d:c5:e7:40:e1:c6:72:f5:37:cb:c8:81:b6: e8:59:93:80:43:2d:e9:13:a7:c3:78:8f:f7:0e:3d: 83:45:4b:86:c9:18:01:86:98:9f:d4:21:bf:46:39: 0e:da:ac:16:3d:93:cf:ce:05:81:d3:13:ab:59:08: fa:4a:45:69:83:91:3c:23:99:64:4d:2d:0c:a3:14: 0e:07:4c:c2:f9:5f:3c:77:a0:bf:48:34:71:53:0a: ad:71:3f:b0:d8:71:f4:94:4d:fc:63:fd:30:30:62: 3d:fb:46:64:12:74:2b:13:5d:78:ea:f6:c2:06:70: cb:d8:78:47:3d:d7:78:dd:a1:c1:ce:8b:59:5d:95: 70:29:d0:d5:c9:e5:f8:0f:30:39:4a:de:00:98:47: 4d:13:0a:8c:4f:7e:c5:cf:7d:28:5b:10:35:f5:01: 42:2c:d4:71:08:5f:dc:52:3b:50:da:24:a6:04:93: 0f:4f:e2:5b:19:98:d4:f5:70:55:c1:a5:3f:ad:3a: 35:53:88:10:23:b3:4a:08:98:b1:8f:71:f9:a8:7c: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F0:F6:44:13:39:D4:64:6D:2D:D9:2C:4A:B8:F7:EE:C5:6E:1C:58 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ad:29:d1:a5:2e:fc:98:79:1c:c4:8f:ae:9c:dd:12:ed:c9: 57:ac:6a:7b:af:6b:fa:c8:f1:d7:84:27:99:8a:29:2c:b4:bb: ba:57:c3:39:bd:47:3f:78:a8:11:9d:f8:83:ce:d5:26:5f:f6: 3e:a3:0f:bb:6d:24:51:eb:7a:46:db:e6:fb:41:8c:4f:c5:a1: 86:ec:c8:ce:14:ce:b1:bc:1a:3b:f5:60:12:d2:d6:5a:c1:d2: 55:5f:3c:ce:f4:a5:12:3a:78:f6:3a:09:8f:31:78:08:ab:e2: 60:cf:26:de:31:b2:a5:e7:ff:d2:25:6d:3f:9d:fb:38:3f:35: 36:51:20:81:b6:f8:ca:b6:c8:7e:d2:28:b1:8f:ea:e1:71:07: a9:b9:64:5f:e8:7e:14:0b:54:13:de:7b:9f:b8:83:89:b1:9a: e2:78:9c:5b:c6:24:87:d1:2c:79:0e:9f:9e:e4:3f:dd:a9:e9: d6:ea:90:98:96:5a:af:5b:3b:9b:ac:29:5d:00:35:f0:0b:34: 85:c9:f7:0d:91:2a:e3:24:f4:f6:4f:b0:94:0f:a9:8e:00:4e: 4c:6f:57:f3:bc:7f:f9:65:b8:33:06:da:cd:28:db:33:b3:32: 57:b0:7b:0d:59:cb:34:31:45:9e:04:66:1b:3c:0d:4d:53:07: 6a:80:92:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjhBRDExMC8GA1UEBRMoRTlGMkNFNDgzRjFCMDZEMjlENUVBMkFCRTM3NUJEMUQy MkE5RTFDNDAeFw0yNDEwMjMwNjQ4MDdaFw0yNDEwMzAwNjQ4MDdaMBgxFjAUBgNV BAMTDTY3MTg5YzI3LTgyNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClm28atkqO8eObQfYmKnmSQmR4fW7/RaLil3ZJ2Pex1ZfSEx1uqQZ+8p0OZuXJ fcXnQOHGcvU3y8iBtuhZk4BDLekTp8N4j/cOPYNFS4bJGAGGmJ/UIb9GOQ7arBY9 k8/OBYHTE6tZCPpKRWmDkTwjmWRNLQyjFA4HTML5Xzx3oL9INHFTCq1xP7DYcfSU Tfxj/TAwYj37RmQSdCsTXXjq9sIGcMvYeEc913jdocHOi1ldlXAp0NXJ5fgPMDlK 3gCYR00TCoxPfsXPfShbEDX1AUIs1HEIX9xSO1DaJKYEkw9P4lsZmNT1cFXBpT+t OjVTiBAjs0oImLGPcfmofHoHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwvD2RBM5 1GRtLdksSrj37sVuHFgwHwYDVR0jBBgwFoAU6fLOSD8bBtKdXqKr43W9HSKp4cQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2OEFELzQ5REVFRTY0ODVF MDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNmZMT1NEOGJCdEtkWHFLcjQzVzlIU0twNGNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 OEFELzQ5REVFRTY0ODVFMDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhiQnRL ZFhxS3I0M1c5SFNLcDRjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2tKdGlLvyYeRzEj66c3RLtyVesanuva/rI8deEJ5mKKSy0u7pXwzm9 Rz94qBGd+IPO1SZf9j6jD7ttJFHrekbb5vtBjE/FoYbsyM4UzrG8Gjv1YBLS1lrB 0lVfPM70pRI6ePY6CY8xeAir4mDPJt4xsqXn/9IlbT+d+zg/NTZRIIG2+Mq2yH7S KLGP6uFxB6m5ZF/ofhQLVBPee5+4g4mxmuJ4nFvGJIfRLHkOn57kP92p6dbqkJiW Wq9bO5usKV0ANfALNIXJ9w2RKuMk9PZPsJQPqY4ATkxvV/O8f/lluDMG2s0o2zOz Mlewew1ZyzQxRZ4EZhs8DU1TB2qAkkg= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org