$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: 3BW5LgBJl1sabACKaQTPN1Fcp5jwwqUIvaotgqonG7Y= Subject key identifier: B9:04:74:C6:7C:3A:8A:30:36:19:47:BD:1E:9C:F8:03:39:71:07:D6 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: 0D Signing time: Wed 23 Oct 2024 07:52:53 +0000 Manifest this update: Wed 23 Oct 2024 07:52:53 +0000 Manifest next update: Wed 30 Oct 2024 07:52:53 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: Cxc0aITH4J3MSBFyGu9U+R3hlsBOYJPrQ28hLLnricw=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Oct 23 07:52:53 2024 GMT Not After : Oct 30 07:52:53 2024 GMT Subject: CN=6718ab55-2666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:26:a8:82:7f:ba:cf:4e:21:b8:c1:a5:62: c5:82:34:f6:7d:35:74:38:38:3c:be:02:51:f1:3b: a7:57:26:38:e6:d7:ad:5f:18:d3:ce:c7:f9:b7:5f: 14:6a:c0:36:e6:53:2b:b1:8b:04:63:5b:c4:8f:5f: 54:ad:60:a9:06:0f:f6:54:b9:01:53:a3:cd:79:f9: 9c:ef:59:16:05:ce:04:ee:ad:52:df:39:7e:69:1e: a4:5a:34:3c:1b:dc:14:27:fa:42:1e:bd:62:55:34: 74:ac:2f:fe:e4:67:da:0d:04:59:ee:f3:4a:23:1e: f5:2c:07:95:5c:d4:b2:01:5d:2f:55:b0:f3:2e:03: 9f:2b:c8:55:e0:99:68:71:e9:bb:a9:e7:f1:e9:a1: b1:a6:4f:b3:90:24:89:61:ae:0e:12:a5:b6:03:bb: e7:fe:5e:47:02:d1:70:05:a6:da:4b:2b:79:12:2f: c4:eb:d6:69:a6:86:af:5f:39:5f:63:99:7c:e8:69: 47:f9:e0:09:4a:5a:01:95:48:a9:2a:c8:2f:07:8d: f9:04:02:a4:97:d0:88:cb:9d:48:83:a9:31:52:77: 4a:ef:0e:00:b1:ea:47:fd:94:84:e3:1b:7f:cc:12: f4:ef:d4:2d:4c:0f:0e:09:93:34:89:bc:c9:64:bc: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:74:C6:7C:3A:8A:30:36:19:47:BD:1E:9C:F8:03:39:71:07:D6 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:78:0e:44:7c:b4:cc:49:c6:52:0d:94:bc:d7:8e:b9:d0:62: 47:52:52:c5:ed:40:d5:98:e6:65:94:7a:60:c7:8b:a7:4d:14: 7f:66:44:f8:23:55:af:b9:72:a8:a1:16:89:13:1f:2b:79:09: f5:03:41:95:5e:36:0e:e0:3a:bc:73:14:e8:3b:07:e6:b6:31: d5:87:cb:01:50:3d:27:34:0b:da:47:c5:f6:e0:de:93:71:56: 2c:de:ea:9c:81:0a:0e:05:b9:79:a3:b3:33:0b:d7:af:60:40: 5c:a3:ec:11:71:9d:d5:88:42:5c:7c:b2:1f:83:a2:0a:67:7f: 99:ec:00:82:4a:6c:18:da:87:19:eb:d5:b8:ff:5e:11:75:af: b6:a0:3a:a7:e6:81:9b:4f:ba:d5:ab:38:39:f7:28:91:27:86: 9a:d0:fc:4b:42:6b:9b:3d:e2:30:62:e9:fc:bd:d9:61:fd:5e: 2f:de:27:ef:5e:53:ba:ca:9a:f4:5b:e2:14:0f:3f:47:ac:62: f1:a2:cc:d3:15:6a:13:04:3d:79:9c:d4:67:78:62:6e:74:68: b0:61:d3:cc:25:be:30:04:63:1b:da:54:56:86:39:f6:ee:e4: 33:db:8e:82:ad:13:b6:6f:d2:61:f0:4d:22:81:f8:3e:73:d1: c8:ad:b8:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRThENkQ0MjEyODJCOTAxOTAwMDA5Nzc2MUEyNTYzMjIz Q0E3ODE1RTAeFw0yNDEwMjMwNzUyNTNaFw0yNDEwMzAwNzUyNTNaMBgxFjAUBgNV BAMTDTY3MThhYjU1LTI2NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC79Saogn+6z04huMGlYsWCNPZ9NXQ4ODy+AlHxO6dXJjjm161fGNPOx/m3XxRq wDbmUyuxiwRjW8SPX1StYKkGD/ZUuQFTo815+ZzvWRYFzgTurVLfOX5pHqRaNDwb 3BQn+kIevWJVNHSsL/7kZ9oNBFnu80ojHvUsB5Vc1LIBXS9VsPMuA58ryFXgmWhx 6bup5/HpobGmT7OQJIlhrg4SpbYDu+f+XkcC0XAFptpLK3kSL8Tr1mmmhq9fOV9j mXzoaUf54AlKWgGVSKkqyC8HjfkEAqSX0IjLnUiDqTFSd0rvDgCx6kf9lITjG3/M EvTv1C1MDw4JkzSJvMlkvPGxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuQR0xnw6 ijA2GUe9Hpz4AzlxB9YwHwYDVR0jBBgwFoAU6NbUISgrkBkAAJd2GiVjIjyngV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzBGQTg1Rjg4ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk5iVUlTZ3JrQmtBQUpkMkdpVmpJanluZ1Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzBGQTg1Rjg4ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0Jr QUFKZDJHaVZqSWp5bmdWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD14DkR8tMxJxlINlLzXjrnQYkdSUsXtQNWY5mWUemDHi6dNFH9mRPgj Va+5cqihFokTHyt5CfUDQZVeNg7gOrxzFOg7B+a2MdWHywFQPSc0C9pHxfbg3pNx Vize6pyBCg4FuXmjszML169gQFyj7BFxndWIQlx8sh+Dogpnf5nsAIJKbBjahxnr 1bj/XhF1r7agOqfmgZtPutWrODn3KJEnhprQ/EtCa5s94jBi6fy92WH9Xi/eJ+9e U7rKmvRb4hQPP0esYvGizNMVahMEPXmc1Gd4Ym50aLBh08wlvjAEYxvaVFaGOfbu 5DPbjoKtE7Zv0mHwTSKB+D5z0cituB4= -----END CERTIFICATE-----Generated at Wed Oct 23 09:19:10 2024 by rpki-client on console-fra.rpki-client.org