$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json) Hash identifier: cxu+9JTcMawTt8DjtthH5tlpSwl1AsKnVe7kyFqaeBY= Subject key identifier: 3E:5B:03:DD:95:73:98:4F:E5:6E:CD:8C:8D:C5:66:4E:D1:61:ED:22 Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Certificate serial: 06CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft Manifest number: 06C5 Signing time: Fri 22 Nov 2024 21:42:04 +0000 Manifest this update: Fri 22 Nov 2024 21:42:04 +0000 Manifest next update: Fri 29 Nov 2024 21:42:04 +0000 Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: 5mkGsIiB467hzcV1h/q9f9lRAdGm+AWEiDyfzBrweA8=) 2: F8EF6A9EA78411EF81835E6CC4F9AE02.roa (hash: F8rgIiTO9eYcpD47qPXfozDeTFN5h4F8OJb4My+Y4gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Validity Not Before: Nov 22 21:42:04 2024 GMT Not After : Nov 29 21:42:04 2024 GMT Subject: CN=6740faac-d1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:3e:7f:0b:4a:e1:31:1e:5b:37:24:9d:29: 8f:ff:26:51:73:67:73:b4:3e:29:da:7f:a4:b8:8b: 0d:ce:3f:87:8d:5f:4a:03:36:14:31:a4:f6:9a:08: 7a:c9:b7:d3:87:b7:ec:28:3a:87:89:1d:80:b6:26: f3:6e:99:b6:c1:00:ae:68:c3:3d:b0:a5:c3:01:a3: e6:bc:80:34:15:50:58:ee:7f:bc:cc:5c:ac:ee:dd: df:b8:69:cd:58:24:b7:90:6a:05:85:b1:a4:a1:a8: 18:a3:c6:bd:27:14:5b:09:dd:00:dd:f4:9c:5c:26: e8:5d:2e:60:f8:7b:19:9b:c0:c1:9c:f0:d3:70:4f: 09:7c:74:c1:e7:33:f6:ce:ca:5c:25:48:7f:2c:84: cb:8f:c4:60:3d:8a:e5:d5:fa:63:48:28:c9:ab:cc: d5:78:a9:ce:22:6c:60:0d:56:6a:66:b6:be:ee:13: 9d:80:b1:95:ee:cf:61:cc:95:66:c1:52:47:c8:0b: db:d5:5f:6c:44:84:ab:05:b3:49:fa:bb:fe:23:6f: 39:1a:ea:78:f3:77:b5:7e:8c:6f:f0:c8:de:2c:c1: b4:96:f1:e3:5d:7b:bd:b5:be:e1:f5:b5:c2:4a:ac: c8:97:29:46:1e:70:b5:90:c7:06:ad:2f:ca:61:49: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5B:03:DD:95:73:98:4F:E5:6E:CD:8C:8D:C5:66:4E:D1:61:ED:22 X509v3 Authority Key Identifier: keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:57:f8:58:07:f1:2b:fb:1a:c4:2b:71:9f:43:d6:5a:df:98: 4e:e9:f0:cd:9b:5e:75:87:48:37:4c:07:6d:7e:ee:3a:61:92: fb:98:f8:4c:6c:b3:c2:74:02:97:93:52:52:30:60:34:ff:59: 8c:a7:39:73:d2:c4:cd:47:64:f7:2a:07:79:5b:2a:d4:80:f2: b0:c3:d6:98:82:26:d8:3b:a8:83:08:bd:fb:f6:6e:40:90:d4: 6e:81:58:98:d3:dd:4d:dc:2b:6e:39:f9:46:1b:d1:ea:60:0c: 41:db:55:95:e8:ab:73:38:8f:47:7d:a2:8d:cf:b5:f3:d2:5f: 42:36:17:03:73:3f:79:8d:95:6d:95:ed:23:b3:b9:72:21:0d: 36:d8:99:01:65:c4:14:e5:53:ec:6d:08:ba:ca:10:8c:48:ad: 3a:36:82:39:b4:04:b0:92:25:10:e5:71:5a:b0:a8:58:7f:a1: b2:69:56:1a:26:5d:1c:74:ed:10:e1:da:e6:b6:b4:35:b8:de: ca:bc:59:a4:85:cb:1f:1b:96:66:7a:44:89:da:4e:4e:71:56: ad:2d:61:8e:76:b4:88:e9:8c:aa:5c:d3:22:e2:c0:0a:9b:f9: 3f:68:11:55:1c:ce:03:a9:29:9e:b6:74:cc:df:39:6f:63:c7: 8d:4f:89:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjkxMTAvBgNVBAUTKEM3OTExMkM3QzVBQzM2NTgzMjIxRDFGOTQ2NzUxOTZD MjEzNkVBQkUwHhcNMjQxMTIyMjE0MjA0WhcNMjQxMTI5MjE0MjA0WjAYMRYwFAYD VQQDEw02NzQwZmFhYy1kMWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Yw+fwtK4TEeWzcknSmP/yZRc2dztD4p2n+kuIsNzj+HjV9KAzYUMaT2mgh6 ybfTh7fsKDqHiR2Atibzbpm2wQCuaMM9sKXDAaPmvIA0FVBY7n+8zFys7t3fuGnN WCS3kGoFhbGkoagYo8a9JxRbCd0A3fScXCboXS5g+HsZm8DBnPDTcE8JfHTB5zP2 zspcJUh/LITLj8RgPYrl1fpjSCjJq8zVeKnOImxgDVZqZra+7hOdgLGV7s9hzJVm wVJHyAvb1V9sRISrBbNJ+rv+I285Gup483e1foxv8MjeLMG0lvHjXXu9tb7h9bXC SqzIlylGHnC1kMcGrS/KYUls/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5bA92V c5hP5W7NjI3FZk7RYe0iMB8GA1UdIwQYMBaAFMeREsfFrDZYMiHR+UZ1GWwhNuq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCOS82QkRFQUE3RTM5 MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05sZ3lJZEg1Um5VWmJDRTI2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1RVN4OFdzTmxneUlkSDVSblVaYkNFMjZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCOS82QkRFQUE3RTM5MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05s Z3lJZEg1Um5VWmJDRTI2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGV/hYB/Er+xrEK3GfQ9Za35hO6fDNm151h0g3TAdtfu46YZL7mPhM bLPCdAKXk1JSMGA0/1mMpzlz0sTNR2T3Kgd5WyrUgPKww9aYgibYO6iDCL379m5A kNRugViY091N3CtuOflGG9HqYAxB21WV6KtzOI9HfaKNz7Xz0l9CNhcDcz95jZVt le0js7lyIQ022JkBZcQU5VPsbQi6yhCMSK06NoI5tASwkiUQ5XFasKhYf6GyaVYa Jl0cdO0Q4drmtrQ1uN7KvFmkhcsfG5ZmekSJ2k5OcVatLWGOdrSI6YyqXNMi4sAK m/k/aBFVHM4DqSmetnTM3zlvY8eNT4ms -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org