$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: FG1LugpY5nJMGNEMV3SjKRNUXRfSN9RKJ4jxN+iNNeQ= Subject key identifier: 32:4C:08:5F:2C:D8:6B:C0:E5:B7:59:32:DF:A1:E7:C7:85:98:CE:AD Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: 1D Signing time: Sat 23 Nov 2024 05:49:47 +0000 Manifest this update: Sat 23 Nov 2024 05:49:46 +0000 Manifest next update: Sat 30 Nov 2024 05:49:46 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: +kRvVQTHlfmNGdzkbmdcofVNfI7zDtJP5M4RHxJOKb0=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Nov 23 05:49:46 2024 GMT Not After : Nov 30 05:49:46 2024 GMT Subject: CN=67416cfa-2c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:ef:19:2b:fc:35:30:cc:5f:be:94:bb:fc: 54:6b:36:1f:bf:e4:81:c4:49:d7:1d:85:da:5c:28: 46:11:71:d8:b4:fc:21:53:8f:eb:79:22:5c:f2:06: 11:a1:c0:be:35:fa:03:ae:da:92:23:b2:2c:c2:6c: 24:1b:a3:f1:0d:2c:6f:f1:24:58:7d:de:07:14:1a: 28:58:47:37:62:7c:3e:14:17:9b:cf:21:2f:48:14: c5:d7:3a:8c:c9:90:02:8e:7b:8f:85:1d:f8:0c:bb: 3b:f0:b7:15:ee:c8:ed:f0:78:2f:15:46:5a:6d:c4: 2e:3a:09:92:3a:be:05:f7:45:67:41:0d:b4:a6:72: 85:14:5e:94:09:0a:30:48:b9:04:e8:24:56:a5:ec: 27:bb:fb:3d:5c:5a:db:c1:0e:ca:64:83:46:b7:7a: 6e:80:f9:dc:52:b8:9e:8a:5d:7e:5c:6b:d5:5d:a8: cb:99:81:2e:90:24:61:35:6f:95:26:a0:49:a7:1b: cf:69:47:ee:0f:87:4a:62:99:f3:c4:5b:d4:04:63: 2b:e8:af:7d:e0:8f:75:42:73:04:bf:b1:98:8b:49: 06:51:3d:dc:44:1e:76:cf:18:78:f8:c3:56:57:17: df:55:8b:e4:5d:27:c3:96:ff:cf:95:df:77:0d:14: 71:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4C:08:5F:2C:D8:6B:C0:E5:B7:59:32:DF:A1:E7:C7:85:98:CE:AD X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:76:76:fa:16:f5:f7:43:f2:d6:b4:a6:3d:ea:89:1b:d3:35: b5:b5:55:9e:db:0d:74:d5:18:46:c5:75:b0:24:58:c3:a0:4b: fd:af:d1:96:ac:52:45:d3:63:3d:1f:fc:f7:5b:c0:45:68:9e: 74:6c:97:2d:9e:c3:db:c0:6c:aa:19:a7:00:cb:f0:2c:8c:44: 62:35:2f:23:cc:84:ad:3a:9c:2f:7d:3e:c1:2e:cb:c5:06:17: f3:85:14:0f:3e:a5:0b:d2:b9:86:ea:6f:00:f9:6d:f4:53:b0: 75:92:a7:04:e9:61:d0:52:5d:47:80:ef:d4:43:d4:24:cf:cd: 05:58:84:54:49:b6:2a:1f:1e:de:b1:08:2c:43:59:2e:ed:87: 5b:ec:36:23:80:fb:fc:4e:bf:b8:6d:0f:75:8f:6e:a0:e1:18: f2:6d:ad:9f:34:1c:a0:3f:fc:bd:13:7a:42:e3:72:a3:39:fe: ca:59:f4:13:10:36:f0:35:a8:7e:d6:8d:e2:d2:aa:aa:0e:d1: c8:d3:70:e3:28:a8:fa:94:e3:b7:7a:98:42:01:01:5a:56:f7: 46:fe:08:c8:de:4e:4d:b7:50:46:55:34:1c:2f:ea:14:df:c3: 17:41:e0:5b:a8:5e:08:79:d0:a0:cd:f5:5a:b0:90:05:d9:7d: bf:2a:e7:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRThENkQ0MjEyODJCOTAxOTAwMDA5Nzc2MUEyNTYzMjIz Q0E3ODE1RTAeFw0yNDExMjMwNTQ5NDZaFw0yNDExMzAwNTQ5NDZaMBgxFjAUBgNV BAMTDTY3NDE2Y2ZhLTJjMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC13u8ZK/w1MMxfvpS7/FRrNh+/5IHESdcdhdpcKEYRcdi0/CFTj+t5IlzyBhGh wL41+gOu2pIjsizCbCQbo/ENLG/xJFh93gcUGihYRzdifD4UF5vPIS9IFMXXOozJ kAKOe4+FHfgMuzvwtxXuyO3weC8VRlptxC46CZI6vgX3RWdBDbSmcoUUXpQJCjBI uQToJFal7Ce7+z1cWtvBDspkg0a3em6A+dxSuJ6KXX5ca9VdqMuZgS6QJGE1b5Um oEmnG89pR+4Ph0pimfPEW9QEYyvor33gj3VCcwS/sZiLSQZRPdxEHnbPGHj4w1ZX F99Vi+RdJ8OW/8+V33cNFHG9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMkwIXyzY a8Dlt1ky36Hnx4WYzq0wHwYDVR0jBBgwFoAU6NbUISgrkBkAAJd2GiVjIjyngV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzBGQTg1Rjg4ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk5iVUlTZ3JrQmtBQUpkMkdpVmpJanluZ1Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzBGQTg1Rjg4ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0Jr QUFKZDJHaVZqSWp5bmdWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHp2dvoW9fdD8ta0pj3qiRvTNbW1VZ7bDXTVGEbFdbAkWMOgS/2v0Zas UkXTYz0f/PdbwEVonnRsly2ew9vAbKoZpwDL8CyMRGI1LyPMhK06nC99PsEuy8UG F/OFFA8+pQvSuYbqbwD5bfRTsHWSpwTpYdBSXUeA79RD1CTPzQVYhFRJtiofHt6x CCxDWS7th1vsNiOA+/xOv7htD3WPbqDhGPJtrZ80HKA//L0TekLjcqM5/spZ9BMQ NvA1qH7WjeLSqqoO0cjTcOMoqPqU47d6mEIBAVpW90b+CMjeTk23UEZVNBwv6hTf wxdB4FuoXgh50KDN9VqwkAXZfb8q57o= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:06 2024 by rpki-client on console-ams.rpki-client.org