$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: /So9KtqNt3mO1hJLou+6XOG7g+BhGUhlD1M2ooJQXQ0= Subject key identifier: D5:28:42:07:8C:05:5B:15:4B:6E:7F:06:93:CB:F5:30:B0:A8:72:34 Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: 27 Signing time: Sun 15 Sep 2024 10:12:34 +0000 Manifest this update: Sun 15 Sep 2024 10:12:33 +0000 Manifest next update: Sun 22 Sep 2024 10:12:33 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: ReQnD92j/NZ/4xlBsG89MvETzf+zkP/XqxrBJohPALY=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: vongUTG4LdHp9PYMxoycbPSRCZzG1LrGyifLsnKYY/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Validity Not Before: Sep 15 10:12:33 2024 GMT Not After : Sep 22 10:12:33 2024 GMT Subject: CN=66e6b311-9b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:4b:c2:63:bc:b2:fc:8f:82:88:70:18:a9: ec:71:06:65:b3:3c:2c:8d:3b:f1:67:30:19:ad:0c: 14:b2:54:f9:c5:ad:95:31:18:0b:61:f0:77:6c:bc: 19:24:eb:1e:c0:b3:7a:af:c5:b6:65:f9:33:85:15: 6b:7d:78:f9:c3:d8:6f:19:8e:9d:61:63:59:62:20: 7a:5b:ed:9f:d9:60:bc:d8:e2:1b:3a:46:fb:4b:49: 09:f4:7f:af:31:1b:28:41:71:7a:80:d4:ca:94:36: fe:8c:70:5d:84:d3:e7:60:a8:5f:09:68:5b:c5:c3: 81:68:10:1e:8c:a0:18:8f:f8:50:a4:20:4a:45:15: 38:a6:aa:dc:bf:6f:cf:3e:a9:18:6e:f8:c1:69:9e: 71:f9:a8:32:02:26:2f:0a:35:52:95:c6:30:b7:e9: 15:87:ac:62:29:ae:4d:b6:1f:06:6d:4b:ce:f2:47: 4b:d5:4a:67:ab:0e:25:3d:6e:07:06:08:c1:99:e3: 13:fc:ee:9c:cd:60:a2:a1:45:5c:bd:70:9b:e8:8f: 13:4e:1a:82:6b:2c:de:6d:5f:34:ca:4e:5e:1e:ee: 8f:17:80:0b:ec:e2:ca:f5:35:ef:50:8e:c3:1b:1c: c0:07:b3:71:65:c6:51:63:ce:57:be:23:ff:f1:e0: 18:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:28:42:07:8C:05:5B:15:4B:6E:7F:06:93:CB:F5:30:B0:A8:72:34 X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:7e:0b:5e:54:8c:9c:80:81:bc:64:a3:d2:31:f0:1c:f3:04: c0:9a:e3:bc:c3:4a:48:bf:5f:d9:4b:6f:20:ef:5b:0e:02:64: ac:d1:34:c1:bd:8b:14:d0:71:05:c1:42:7e:14:90:13:76:c8: c1:f1:f9:c6:96:1e:a8:7f:d5:f0:cd:49:00:14:fe:91:6e:2b: 89:0d:30:9f:b4:98:fd:06:79:aa:fa:9f:c2:34:1d:d1:54:3d: 89:57:0b:67:49:9a:56:f5:f5:43:86:98:42:c1:eb:0d:29:a1: 4c:19:53:da:e5:e6:fb:00:8e:93:31:1d:b9:37:85:a1:c2:b6: d9:03:5a:ea:fb:da:39:87:57:4d:a5:db:7b:06:f5:87:8d:f0: c4:90:1d:63:3c:67:3a:5f:c8:59:88:33:fb:7b:a3:3d:02:4a: b8:1c:23:ac:22:a4:d4:e7:f8:80:26:63:7e:53:c4:15:b6:07: 79:64:26:47:a9:d0:05:bd:16:71:a6:a8:a6:c7:12:f6:13:48: 2c:b4:0e:3e:85:f3:49:50:fb:7e:29:65:84:83:90:e5:e5:37: 3b:48:11:46:7d:6e:76:b7:95:cc:dd:43:4d:b0:eb:01:7e:53: 94:2a:76:b2:44:b1:1d:0d:46:1c:57:c6:ba:75:03:03:85:1c: 25:23:aa:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkZENjExMC8GA1UEBRMoRTg2ODIxRTlGMjNENDJGMzYyRTQyQUUyQUZCNUJEOThF MEIxMTE5MzAeFw0yNDA5MTUxMDEyMzNaFw0yNDA5MjIxMDEyMzNaMBgxFjAUBgNV BAMTDTY2ZTZiMzExLTliOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKBkvCY7yy/I+CiHAYqexxBmWzPCyNO/FnMBmtDBSyVPnFrZUxGAth8HdsvBkk 6x7As3qvxbZl+TOFFWt9ePnD2G8Zjp1hY1liIHpb7Z/ZYLzY4hs6RvtLSQn0f68x GyhBcXqA1MqUNv6McF2E0+dgqF8JaFvFw4FoEB6MoBiP+FCkIEpFFTimqty/b88+ qRhu+MFpnnH5qDICJi8KNVKVxjC36RWHrGIprk22HwZtS87yR0vVSmerDiU9bgcG CMGZ4xP87pzNYKKhRVy9cJvojxNOGoJrLN5tXzTKTl4e7o8XgAvs4sr1Ne9QjsMb HMAHs3FlxlFjzle+I//x4BgrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1ShCB4wF WxVLbn8Gk8v1MLCocjQwHwYDVR0jBBgwFoAU6Ggh6fI9QvNi5Crir7W9mOCxEZMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2RkQ2LzY4REE0QjZBMzhG NjExRUZCMTMxODQyM0M0RjlBRTAyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVa TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkdnaDZmSTlRdk5pNUNyaXI3VzltT0N4RVpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 RkQ2LzY4REE0QjZBMzhGNjExRUZCMTMxODQyM0M0RjlBRTAyLzZHZ2g2Zkk5UXZO aTVDcmlyN1c5bU9DeEVaTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL1+C15UjJyAgbxko9Ix8BzzBMCa47zDSki/X9lLbyDvWw4CZKzRNMG9 ixTQcQXBQn4UkBN2yMHx+caWHqh/1fDNSQAU/pFuK4kNMJ+0mP0Gear6n8I0HdFU PYlXC2dJmlb19UOGmELB6w0poUwZU9rl5vsAjpMxHbk3haHCttkDWur72jmHV02l 23sG9YeN8MSQHWM8ZzpfyFmIM/t7oz0CSrgcI6wipNTn+IAmY35TxBW2B3lkJkep 0AW9FnGmqKbHEvYTSCy0Dj6F80lQ+34pZYSDkOXlNztIEUZ9bna3lczdQ02w6wF+ U5QqdrJEsR0NRhxXxrp1AwOFHCUjqgY= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:36 2024 by rpki-client on console-ams.rpki-client.org