$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: shE+1KmpMD1/pBow64wTCBYIxBp9q6TvWR1hZbbwMmE= Subject key identifier: 1E:E3:70:BC:74:B3:CF:6D:8A:39:2B:3C:4C:7E:9A:ED:AE:8D:86:06 Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 11DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 11D8 Signing time: Fri 22 Nov 2024 17:10:21 +0000 Manifest this update: Fri 22 Nov 2024 17:10:20 +0000 Manifest next update: Fri 29 Nov 2024 17:10:20 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: Thu/qS3x3k88l9WrO/7kTV/LWarUekfkCplxCY6N6YQ=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: +szOYx+Q3+AezQ08mU9olGDq3G2uogPJHsHw1wNri78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: Nov 22 17:10:20 2024 GMT Not After : Nov 29 17:10:20 2024 GMT Subject: CN=6740bafc-d90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:45:82:ee:9a:3a:53:63:82:5a:b2:59:c3:d9: cd:9d:e5:66:dd:b8:c6:dc:c9:ba:78:a1:e4:0d:b3: 21:a8:34:5e:e1:6a:c2:38:77:38:1c:d5:bf:78:7f: 81:79:54:e0:b9:96:a6:31:2f:0b:d2:60:f8:cf:d3: 24:e8:57:59:aa:82:6a:36:9a:2a:74:a5:e6:82:99: b3:1d:2c:eb:73:08:92:81:51:7a:37:26:69:4f:3e: 80:ea:eb:6a:dc:1b:c6:65:bd:18:b4:5d:db:65:0d: 64:9f:06:f8:d0:17:90:43:da:d5:61:80:d7:85:14: 49:ec:6c:20:5a:3a:47:0a:8d:e8:a9:59:76:e4:a5: 66:fd:d2:52:83:d5:70:5c:f2:b5:78:0a:38:84:8e: e9:b8:7d:04:62:29:85:c3:06:c1:85:a0:4e:32:79: bf:c4:71:e0:f8:42:97:9e:28:44:e3:ac:13:75:58: 81:a5:9a:36:33:fb:fb:75:93:39:4d:45:66:b6:fc: 98:ca:d6:a3:03:2d:14:1e:f4:29:5a:8f:f3:24:5d: 1f:35:c2:46:9b:2d:76:45:69:b4:fb:70:bf:0a:98: 00:32:d2:2f:40:d6:47:46:19:02:33:18:49:95:d3: 2f:6e:fe:e0:01:d2:58:77:09:88:ee:6f:b7:09:f3: 14:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:70:BC:74:B3:CF:6D:8A:39:2B:3C:4C:7E:9A:ED:AE:8D:86:06 X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e2:6f:5c:10:40:72:68:76:fd:39:ba:40:39:a4:1e:e5:16: eb:8f:f8:7f:f5:a0:69:fa:7b:cb:0e:5f:3b:fc:f6:c5:9c:9e: ea:6b:00:85:95:3d:32:7a:fb:45:72:4b:0b:47:e5:25:eb:28: 06:f5:9d:14:0b:2e:0e:e6:ad:82:c2:19:4a:3d:5f:55:0a:b7: 6c:b0:51:c7:2a:81:2f:37:cd:e8:f6:a8:c1:ac:bd:da:68:8e: 14:b5:32:b2:9f:fe:85:9c:b3:5e:ce:2d:e8:f6:a7:36:c5:cb: e1:4e:a2:9e:a6:0e:b8:ac:2a:33:09:04:9c:f4:09:5e:b5:22: 1d:bf:9a:36:56:1a:9f:58:c4:c8:80:09:da:31:ef:e6:5f:bf: 2f:59:83:db:b7:fd:fe:bb:44:90:79:00:b4:03:84:cd:84:c6: c0:e3:a3:ad:fb:0d:9f:4b:10:c0:c3:55:e0:6d:0b:3a:b9:83: 0b:f9:54:7f:26:9a:10:3a:ff:a6:13:5e:5b:73:f7:f8:34:10: 0f:84:1c:04:56:39:1d:a9:a9:45:93:1f:90:60:91:99:b9:ce: cf:e4:11:d4:e6:4b:41:f4:2c:66:d7:81:c4:60:51:0c:13:da: ce:5f:43:e8:e2:1d:90:82:0c:3d:a9:db:c1:75:a6:19:b3:f5: 89:54:0d:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjQxMTIyMTcxMDIwWhcNMjQxMTI5MTcxMDIwWjAYMRYwFAYD VQQDEw02NzQwYmFmYy1kOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UWC7po6U2OCWrJZw9nNneVm3bjG3Mm6eKHkDbMhqDRe4WrCOHc4HNW/eH+B eVTguZamMS8L0mD4z9Mk6FdZqoJqNpoqdKXmgpmzHSzrcwiSgVF6NyZpTz6A6utq 3BvGZb0YtF3bZQ1knwb40BeQQ9rVYYDXhRRJ7GwgWjpHCo3oqVl25KVm/dJSg9Vw XPK1eAo4hI7puH0EYimFwwbBhaBOMnm/xHHg+EKXnihE46wTdViBpZo2M/v7dZM5 TUVmtvyYytajAy0UHvQpWo/zJF0fNcJGmy12RWm0+3C/CpgAMtIvQNZHRhkCMxhJ ldMvbv7gAdJYdwmI7m+3CfMUAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7jcLx0 s89tijkrPEx+mu2ujYYGMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp4m9cEEByaHb9ObpAOaQe5Rbrj/h/9aBp+nvLDl87/PbFnJ7qawCF lT0yevtFcksLR+Ul6ygG9Z0UCy4O5q2CwhlKPV9VCrdssFHHKoEvN83o9qjBrL3a aI4UtTKyn/6FnLNezi3o9qc2xcvhTqKepg64rCozCQSc9AletSIdv5o2VhqfWMTI gAnaMe/mX78vWYPbt/3+u0SQeQC0A4TNhMbA46Ot+w2fSxDAw1XgbQs6uYML+VR/ JpoQOv+mE15bc/f4NBAPhBwEVjkdqalFkx+QYJGZuc7P5BHU5ktB9Cxm14HEYFEM E9rOX0Po4h2Qggw9qdvBdaYZs/WJVA2B -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org