$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: 5P0CbuWcvpu9RhZpIX2SO8F5EHCD0PvLHiP/m0qLznM= Subject key identifier: B5:DC:50:99:7A:4C:FB:F3:6A:0A:CA:BD:C9:93:CD:D3:99:F6:F8:36 Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 1542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 153A Signing time: Fri 22 Nov 2024 16:49:46 +0000 Manifest this update: Fri 22 Nov 2024 16:49:46 +0000 Manifest next update: Fri 29 Nov 2024 16:49:46 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: bpPDvdYG3XBIM0szqua++4UrdLarVDrWIITD7M7moJU=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5442 (0x1542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Nov 22 16:49:46 2024 GMT Not After : Nov 29 16:49:46 2024 GMT Subject: CN=6740b62a-e168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:21:4d:46:1b:c2:bf:48:72:ec:4d:a4:58: ff:fb:b0:a9:fd:15:64:d5:ea:f5:80:85:e1:f0:28: 7a:60:56:18:a7:7e:96:ec:27:93:47:f2:b1:7c:64: 27:69:7a:a3:f3:28:4c:58:ef:b3:77:bd:9d:4b:fa: 51:6a:79:9f:34:f6:24:06:37:13:c0:17:cc:05:c5: e5:89:9e:7d:ab:df:1d:af:a6:02:fa:10:19:56:ee: 48:8a:68:82:63:45:69:b8:74:1e:83:91:ae:37:6d: 11:ee:be:90:c8:9b:20:16:1c:39:0b:f6:d9:35:e7: fa:ab:74:70:a5:69:ad:d3:35:2c:8c:3c:8d:64:40: 64:31:8f:42:7b:c9:53:92:35:03:29:78:13:20:48: 22:58:aa:70:40:64:64:12:1c:15:78:65:47:a7:f6: 82:79:95:b5:6f:d2:b3:52:d4:4b:cf:75:12:84:ad: 11:ac:60:c1:58:62:c7:d1:56:9d:27:d5:38:59:2a: ce:bb:0a:2e:54:f4:b4:bf:be:39:1d:f9:da:fa:0d: a1:56:5a:8c:41:c3:e3:ad:71:45:9c:5d:d8:4e:c1: d0:ec:4c:12:29:c5:0c:ef:29:ce:ef:6c:94:16:25: 37:7c:e4:ac:34:f3:b5:18:1e:1b:19:42:8d:f4:6b: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DC:50:99:7A:4C:FB:F3:6A:0A:CA:BD:C9:93:CD:D3:99:F6:F8:36 X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:86:9a:11:75:b3:7a:40:11:27:bb:d4:ad:2a:3a:e2:28:8e: 34:48:8c:2c:88:27:fd:76:8d:45:46:24:77:98:58:ae:13:06: 79:7d:05:37:80:48:32:58:fe:22:38:71:13:6e:2d:cf:09:73: 06:1a:20:0e:f5:66:dd:62:db:d0:13:56:f3:84:71:ef:b9:a3: 7f:74:9a:d5:f2:6d:72:d7:76:f8:99:82:84:f7:80:77:c9:65: 9c:98:ec:88:35:96:60:f3:8e:0d:31:ad:ba:09:9b:e8:0c:3d: 36:4a:b3:c1:40:07:a9:76:d1:7b:95:63:28:2e:34:01:93:4b: 97:1c:dd:e9:2e:00:34:3c:66:ac:3d:65:1d:25:67:31:52:fd: ac:de:92:82:31:54:31:8a:b8:a0:89:a5:4f:bc:fb:dd:1c:6a: e6:0d:47:8b:ba:16:1b:30:19:e7:63:31:f8:d5:d9:e9:70:6e: 2a:20:46:85:ec:fc:2e:92:57:98:85:00:fb:4d:e6:3e:c7:aa: 4f:b5:35:e1:36:76:77:26:04:af:15:f6:dc:0e:13:bb:bc:26: fa:68:dc:d8:1e:76:da:44:14:e9:12:1c:db:1c:2c:2d:9d:b2: c7:20:f6:03:60:0a:cd:ff:af:ac:6a:47:f9:7e:3b:19:5e:d9: d6:fe:0a:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjQxMTIyMTY0OTQ2WhcNMjQxMTI5MTY0OTQ2WjAYMRYwFAYD VQQDEw02NzQwYjYyYS1lMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCAhTUYbwr9IcuxNpFj/+7Cp/RVk1er1gIXh8Ch6YFYYp36W7CeTR/KxfGQn aXqj8yhMWO+zd72dS/pRanmfNPYkBjcTwBfMBcXliZ59q98dr6YC+hAZVu5IimiC Y0VpuHQeg5GuN20R7r6QyJsgFhw5C/bZNef6q3RwpWmt0zUsjDyNZEBkMY9Ce8lT kjUDKXgTIEgiWKpwQGRkEhwVeGVHp/aCeZW1b9KzUtRLz3UShK0RrGDBWGLH0Vad J9U4WSrOuwouVPS0v745Hfna+g2hVlqMQcPjrXFFnF3YTsHQ7EwSKcUM7ynO72yU FiU3fOSsNPO1GB4bGUKN9Gsw9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXcUJl6 TPvzagrKvcmTzdOZ9vg2MB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDhpoRdbN6QBEnu9StKjriKI40SIwsiCf9do1FRiR3mFiuEwZ5fQU3 gEgyWP4iOHETbi3PCXMGGiAO9WbdYtvQE1bzhHHvuaN/dJrV8m1y13b4mYKE94B3 yWWcmOyINZZg844NMa26CZvoDD02SrPBQAepdtF7lWMoLjQBk0uXHN3pLgA0PGas PWUdJWcxUv2s3pKCMVQxirigiaVPvPvdHGrmDUeLuhYbMBnnYzH41dnpcG4qIEaF 7PwukleYhQD7TeY+x6pPtTXhNnZ3JgSvFfbcDhO7vCb6aNzYHnbaRBTpEhzbHCwt nbLHIPYDYArN/6+sakf5fjsZXtnW/gqd -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org