$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: 6X2qRpTEUALcqamFX/7lH7k4JBlCKjre8DFNJhjeJmI= Subject key identifier: 88:EA:3C:A3:F8:3D:EF:E9:87:8D:1D:CC:5D:B9:02:9B:B0:F0:B6:40 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0A53 Signing time: Wed 20 Nov 2024 19:31:57 +0000 Manifest this update: Wed 20 Nov 2024 19:31:56 +0000 Manifest next update: Wed 27 Nov 2024 19:31:56 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: f/AKHJYFYdS80QcMNwwQimE6tarhrkEb8mLEprzPBkU=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=) 4: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=) 5: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=) 6: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=) 7: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=) 8: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: gjOpVTIrCg/GRDI2g0j816CEONXvKaN06KAW+xe46vM=) 9: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Nov 20 19:31:56 2024 GMT Not After : Nov 27 19:31:56 2024 GMT Subject: CN=673e392d-0307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:dc:f2:84:af:1f:57:3e:01:59:cc:f4:45: 9d:bd:ca:bc:a7:e9:ea:d7:ba:10:e9:47:ef:1b:21: 49:73:81:3f:1d:12:1d:a4:27:c1:b7:05:6e:59:40: 36:b6:2c:a7:c2:52:2b:35:0f:33:10:92:f5:76:68: 6e:21:ab:28:3a:ef:cc:83:dc:2e:b2:86:65:db:63: db:42:fa:3e:af:25:75:51:79:e3:b3:f6:fc:40:16: 72:26:1b:8e:fa:3f:84:44:99:4f:44:ae:f8:96:ea: d9:4a:01:f7:63:01:b1:7a:89:bc:4a:fb:71:dc:d9: 83:88:86:09:79:13:f6:96:b4:52:66:84:b3:18:5d: e3:07:57:4b:15:22:5e:35:6d:1a:ae:3b:90:10:e5: 75:2c:72:8d:f9:75:d6:35:46:f1:4e:48:c1:0c:8d: de:b7:d7:3d:ba:f4:7a:66:dd:0a:11:03:d2:e3:61: 6a:3f:bd:af:d6:5a:44:b0:e8:cb:c5:57:d9:db:df: f7:16:a2:0e:20:4d:a2:07:2b:fb:f0:21:60:dc:fe: d1:71:6e:37:30:73:9e:b9:d8:be:69:33:f9:0f:48: 56:48:c1:d5:77:05:a6:44:2a:a4:02:c7:21:a1:8b: b1:a2:cd:6f:ed:c7:07:39:11:dd:78:1d:e8:62:b9: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EA:3C:A3:F8:3D:EF:E9:87:8D:1D:CC:5D:B9:02:9B:B0:F0:B6:40 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e3:e3:9a:e6:20:6d:61:cb:66:ad:62:9c:f6:2f:06:36:87: 61:d3:f0:c8:9e:c2:bf:27:8a:b0:e2:1c:ce:95:9b:a1:6e:a2: 0c:57:5b:48:5f:a3:79:f5:06:58:e1:a6:ca:ce:70:77:d9:bf: a7:03:d9:17:92:14:df:63:bb:f9:b5:12:b4:d2:13:b9:3f:95: 05:fe:aa:f9:f2:3a:d5:a6:8a:41:90:b0:56:09:f1:c7:41:18: 86:fa:5a:1f:71:90:02:8a:1b:31:f3:df:a0:e9:cb:61:d1:d6: 07:9e:f8:c0:79:68:99:d5:36:5c:92:12:b8:64:4b:e4:ce:80: 11:c1:d2:ae:a0:16:25:0a:85:69:13:44:2d:58:5a:02:ef:a6: 50:55:f1:6b:13:49:ec:f2:0f:42:c7:48:f0:4d:0a:07:7d:2b: d8:94:28:74:89:89:ee:14:be:fe:7f:bb:6d:63:7b:eb:e4:25: a6:7d:a5:40:13:10:f3:d9:c4:2d:dc:00:99:a1:fa:97:ba:0f: b1:8b:4c:dd:b2:78:68:3e:76:55:4d:1a:1f:78:ad:e9:e2:ac: cf:b0:d2:86:62:57:8f:1c:ec:c7:9e:54:c2:73:45:fe:a5:c4: 70:9f:8c:1a:ac:b5:43:08:df:1d:c8:38:7b:c2:1b:29:f6:47: 08:1d:ee:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjQxMTIwMTkzMTU2WhcNMjQxMTI3MTkzMTU2WjAYMRYwFAYD VQQDEw02NzNlMzkyZC0wMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvP/c8oSvH1c+AVnM9EWdvcq8p+nq17oQ6UfvGyFJc4E/HRIdpCfBtwVuWUA2 tiynwlIrNQ8zEJL1dmhuIasoOu/Mg9wusoZl22PbQvo+ryV1UXnjs/b8QBZyJhuO +j+ERJlPRK74lurZSgH3YwGxeom8Svtx3NmDiIYJeRP2lrRSZoSzGF3jB1dLFSJe NW0arjuQEOV1LHKN+XXWNUbxTkjBDI3et9c9uvR6Zt0KEQPS42FqP72v1lpEsOjL xVfZ29/3FqIOIE2iByv78CFg3P7RcW43MHOeudi+aTP5D0hWSMHVdwWmRCqkAsch oYuxos1v7ccHORHdeB3oYrm4CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjqPKP4 Pe/ph40dzF25Apuw8LZAMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ4+Oa5iBtYctmrWKc9i8GNodh0/DInsK/J4qw4hzOlZuhbqIMV1tI X6N59QZY4abKznB32b+nA9kXkhTfY7v5tRK00hO5P5UF/qr58jrVpopBkLBWCfHH QRiG+lofcZACihsx89+g6cth0dYHnvjAeWiZ1TZckhK4ZEvkzoARwdKuoBYlCoVp E0QtWFoC76ZQVfFrE0ns8g9Cx0jwTQoHfSvYlCh0iYnuFL7+f7ttY3vr5CWmfaVA ExDz2cQt3ACZofqXug+xi0zdsnhoPnZVTRofeK3p4qzPsNKGYlePHOzHnlTCc0X+ pcRwn4warLVDCN8dyDh7whsp9kcIHe6b -----END CERTIFICATE-----Generated at Wed Nov 20 21:35:04 2024 by rpki-client on console-ams.rpki-client.org