$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: pKohRlTxm3e6wAVtu2nbRzpK7B5TOrWy68mYvB0JKrE= Subject key identifier: 08:A5:92:A0:C7:46:AF:A9:48:5E:1B:0C:4F:5A:E8:D2:A6:0A:14:64 Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 0178 Signing time: Thu 21 Nov 2024 02:09:50 +0000 Manifest this update: Thu 21 Nov 2024 02:09:49 +0000 Manifest next update: Thu 28 Nov 2024 02:09:49 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: cBNFgIonLxCKlHQVnkJbvnIraamvzJzcawN80ecT6qM=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: epEQzlTejdqNKSVjeWewYuMv5R1UDEWC39y/ho6SoUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: Nov 21 02:09:49 2024 GMT Not After : Nov 28 02:09:49 2024 GMT Subject: CN=673e966d-7a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:0e:28:bf:f6:a6:09:62:9d:23:7d:93:65: 0f:fe:34:21:52:56:50:2d:f6:23:a6:f8:68:63:a7: c1:44:c8:1a:c3:8e:90:39:4a:d3:8c:7b:b3:58:b0: a8:c8:f2:0a:74:3c:e9:47:ee:3a:6d:2a:8b:69:21: 75:20:29:3e:f7:fb:fd:16:c6:05:c4:f0:a3:f6:2e: 71:5d:5e:c7:18:54:5d:f8:33:15:22:2d:24:04:7c: f7:cb:f2:9c:a6:e2:2d:b4:f3:cb:52:c6:ad:96:ad: bb:3e:30:ee:d1:f6:e8:44:76:d2:f3:e7:aa:6e:33: 8a:82:63:9e:71:5f:e8:12:7e:61:ab:8a:36:95:59: 84:fd:ef:9c:6b:80:87:72:31:6d:61:ed:9c:e4:47: c3:94:37:d1:72:88:dd:43:ad:b4:21:32:79:ca:12: e4:07:6f:52:f7:24:dd:38:de:8e:df:6d:6c:93:7e: fe:22:b0:04:c7:6c:41:9a:f5:d8:96:41:94:97:8f: 60:0b:9d:ee:a9:57:5c:11:e2:12:d7:c5:c7:5d:53: e9:a1:31:66:82:4a:cf:ab:e8:58:23:b9:ae:2e:ec: bd:00:b4:d2:42:32:4f:b0:b2:d1:0e:c6:a7:ac:6b: d6:e0:f8:dc:76:29:c4:91:44:65:a8:3a:34:16:89: c0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A5:92:A0:C7:46:AF:A9:48:5E:1B:0C:4F:5A:E8:D2:A6:0A:14:64 X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3a:ba:3a:57:ae:09:75:92:6b:35:48:4f:f2:86:e9:be:80: 16:48:3b:81:9a:ab:61:8f:c8:df:37:8d:d4:57:34:fe:e0:f0: c7:f2:33:92:66:8d:d2:3f:12:98:da:d6:56:e1:cd:0f:1d:39: 8b:13:2e:5c:5d:59:07:5c:54:20:01:ee:d1:ea:32:b8:ff:49: fc:6b:40:0e:e0:6b:24:38:5d:bf:82:34:83:3b:3d:42:ea:9d: d0:c7:98:72:8e:ca:e1:e3:dd:38:6a:8a:ec:cd:27:c5:7a:55: 7b:fe:21:3b:ed:59:14:2a:11:ed:88:47:92:d4:90:3a:a0:9f: 47:14:fc:21:3c:8c:52:98:39:ee:5a:b7:a1:f4:25:6c:ce:fb: 03:3f:98:cd:e5:0d:1e:ea:fe:b6:ce:a8:8e:3d:a5:a5:e2:a4: 55:a7:39:f5:be:f1:c5:ef:72:8c:12:34:93:8e:4a:df:fd:55: 9a:bb:4a:03:51:28:7c:b2:4b:3f:9e:f8:b5:3e:b8:5e:b2:b9: 68:b4:94:35:bf:57:6e:a3:ce:d5:63:fe:27:18:ff:4e:21:1c: 6b:41:81:d4:8d:e6:37:f4:d1:b2:79:33:62:f7:5d:83:e8:b7: a0:47:4e:86:2e:0a:87:14:fd:6c:6c:b4:f4:fa:e6:b2:29:2a: 72:bc:66:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjQxMTIxMDIwOTQ5WhcNMjQxMTI4MDIwOTQ5WjAYMRYwFAYD VQQDEw02NzNlOTY2ZC03YTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PAOKL/2pglinSN9k2UP/jQhUlZQLfYjpvhoY6fBRMgaw46QOUrTjHuzWLCo yPIKdDzpR+46bSqLaSF1ICk+9/v9FsYFxPCj9i5xXV7HGFRd+DMVIi0kBHz3y/Kc puIttPPLUsatlq27PjDu0fboRHbS8+eqbjOKgmOecV/oEn5hq4o2lVmE/e+ca4CH cjFtYe2c5EfDlDfRcojdQ620ITJ5yhLkB29S9yTdON6O321sk37+IrAEx2xBmvXY lkGUl49gC53uqVdcEeIS18XHXVPpoTFmgkrPq+hYI7muLuy9ALTSQjJPsLLRDsan rGvW4PjcdinEkURlqDo0FonAyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAilkqDH Rq+pSF4bDE9a6NKmChRkMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKOro6V64JdZJrNUhP8obpvoAWSDuBmqthj8jfN43UVzT+4PDH8jOS Zo3SPxKY2tZW4c0PHTmLEy5cXVkHXFQgAe7R6jK4/0n8a0AO4GskOF2/gjSDOz1C 6p3Qx5hyjsrh4904aorszSfFelV7/iE77VkUKhHtiEeS1JA6oJ9HFPwhPIxSmDnu Wreh9CVszvsDP5jN5Q0e6v62zqiOPaWl4qRVpzn1vvHF73KMEjSTjkrf/VWau0oD USh8sks/nvi1PrhesrlotJQ1v1duo87VY/4nGP9OIRxrQYHUjeY39NGyeTNi912D 6LegR06GLgqHFP1sbLT0+uayKSpyvGZm -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:07 2024 by rpki-client on console-fra.rpki-client.org