$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: /3wTgQOdU6gLLTqAoVAowGhbyYc7vpdW13JEdV0hdMk= Subject key identifier: 61:FC:5B:95:DD:3A:45:1B:24:C3:10:63:72:43:85:D5:2D:09:EF:C9 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 07EE Signing time: Wed 20 Nov 2024 20:49:57 +0000 Manifest this update: Wed 20 Nov 2024 20:49:57 +0000 Manifest next update: Wed 27 Nov 2024 20:49:57 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: 3k3iIVyPOGBJ6+LG1ZwrOOsmNU4A3resfxDi0ykjg8g=) 2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: ek3DgpwlstOVnuguW/pHkiP1RxK/zlxH+dHxarNuX94=) 3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: gNhMiv6IOJKkeLTLwPi9wU4oN+h+wv5IF758wi0C6FI=) 4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: /8xSOlLPXmPawwC5JqVN/51Xoq+s+zm8+cCCkXo4uBE=) 5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: J1xLa8yTtXAlg7OlLT4nxVjtOt9A7iYZpXvZJDERl8o=) 6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: USwhKOtUAYw8MFn1BXt5pSc1VM2o2X7NQRCh9KM+x7o=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: 5HlGKag658JvYwBq45MtXDAz/r3WmbZjF3WX8Bnxu6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Nov 20 20:49:57 2024 GMT Not After : Nov 27 20:49:57 2024 GMT Subject: CN=673e4b75-9f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:04:76:6f:8d:a6:d5:bf:f8:f4:a6:82:3e:11: aa:d0:94:09:0b:fc:80:53:b7:b0:1d:54:9c:a6:4e: a9:f3:d3:25:93:0e:27:26:5d:68:ca:dd:99:36:8d: f5:5b:3c:4b:aa:3b:d9:e7:5b:2f:71:c8:83:a4:fb: 38:45:99:f2:a3:3d:08:be:3f:e7:00:a6:a9:8a:05: 74:3f:a0:39:cf:08:29:48:89:e5:b1:3a:f7:48:89: 5b:01:07:e2:9f:3c:9b:4b:69:60:76:78:57:9f:bb: 9f:49:97:62:a4:dd:b0:47:34:26:f2:33:d0:f4:a9: 3e:18:0b:e6:00:c3:3a:ab:fc:d9:70:ac:1a:be:52: b5:a6:86:9c:95:47:44:e2:0d:11:0b:8c:64:94:da: ef:c2:27:4c:1e:e5:43:1e:cb:06:54:7d:76:55:95: 71:f6:46:a3:66:ed:6d:b8:56:55:74:f6:ef:de:f8: 7f:d2:e4:77:9a:db:80:c0:10:eb:2b:2a:37:68:da: 4a:17:01:96:02:28:6e:50:17:36:10:e3:92:13:1e: 0c:53:66:f6:9a:76:4e:81:1d:ee:49:4d:18:ec:3f: 8f:8d:73:f6:8c:f1:66:ee:0b:bc:48:4d:a4:ef:11: 09:af:1e:91:76:8b:21:5f:47:70:8d:6a:31:d8:32: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FC:5B:95:DD:3A:45:1B:24:C3:10:63:72:43:85:D5:2D:09:EF:C9 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:bc:20:03:f3:68:d9:c6:59:12:75:c8:47:d9:f3:52:f2:2b: 1f:0e:bc:c6:d6:36:3d:ba:83:81:02:b4:00:f5:75:06:0c:a3: aa:3c:18:d4:9a:67:a8:19:89:6f:b5:4f:ad:86:39:1b:6d:e8: 4c:bf:16:a0:a1:73:f2:cd:83:99:ea:cf:60:b3:f7:5b:d7:cb: e8:d2:44:9e:b3:63:e1:ba:6f:fb:bd:97:f2:80:83:8f:cf:4b: e0:30:17:03:81:a6:e1:2e:c5:60:75:fa:25:4e:70:7f:13:2c: 63:b7:50:fc:0a:4c:1b:d8:3d:81:08:38:5e:b3:c4:46:f3:35: e4:51:f3:c4:51:ed:46:39:8a:d4:1f:47:1e:76:dd:68:1d:e4: 9c:87:93:f7:58:b7:9f:3e:42:60:3d:a1:20:e8:04:5f:1e:67: 5a:cb:23:fa:db:f7:12:59:86:34:86:90:2b:e3:1e:f5:c5:2b: d6:40:01:02:17:4a:7c:88:ce:49:2f:96:78:36:97:90:a0:21: 16:cc:20:09:f9:74:27:9d:00:bf:e3:f1:35:e0:c9:97:3a:ac: 4d:78:7f:b2:bd:3e:03:9d:f0:28:8f:4a:bb:81:30:72:25:c2: 7d:1c:9f:05:80:ee:9f:fc:c2:6e:b6:98:84:f3:2a:2e:a2:d5: b4:57:44:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjQxMTIwMjA0OTU3WhcNMjQxMTI3MjA0OTU3WjAYMRYwFAYD VQQDEw02NzNlNGI3NS05ZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7gR2b42m1b/49KaCPhGq0JQJC/yAU7ewHVScpk6p89Mlkw4nJl1oyt2ZNo31 WzxLqjvZ51svcciDpPs4RZnyoz0Ivj/nAKapigV0P6A5zwgpSInlsTr3SIlbAQfi nzybS2lgdnhXn7ufSZdipN2wRzQm8jPQ9Kk+GAvmAMM6q/zZcKwavlK1poaclUdE 4g0RC4xklNrvwidMHuVDHssGVH12VZVx9kajZu1tuFZVdPbv3vh/0uR3mtuAwBDr Kyo3aNpKFwGWAihuUBc2EOOSEx4MU2b2mnZOgR3uSU0Y7D+PjXP2jPFm7gu8SE2k 7xEJrx6RdoshX0dwjWox2DKpoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGH8W5Xd OkUbJMMQY3JDhdUtCe/JMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHvCAD82jZxlkSdchH2fNS8isfDrzG1jY9uoOBArQA9XUGDKOqPBjU mmeoGYlvtU+thjkbbehMvxagoXPyzYOZ6s9gs/db18vo0kSes2Phum/7vZfygIOP z0vgMBcDgabhLsVgdfolTnB/Eyxjt1D8Ckwb2D2BCDhes8RG8zXkUfPEUe1GOYrU H0cedt1oHeSch5P3WLefPkJgPaEg6ARfHmdayyP62/cSWYY0hpAr4x71xSvWQAEC F0p8iM5JL5Z4NpeQoCEWzCAJ+XQnnQC/4/E14MmXOqxNeH+yvT4DnfAoj0q7gTBy JcJ9HJ8FgO6f/MJutpiE8youotW0V0QR -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:01 2024 by rpki-client on console-ams.rpki-client.org