$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: rMyWAyMEyuoMHvnyBtqk7RyRVEN+LkTgyUABASR0VcM= Subject key identifier: 78:EC:73:1D:35:DB:18:4A:3B:20:9B:0B:FF:11:AA:7B:70:4A:EF:8A Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 201D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 1FFA Signing time: Fri 22 Nov 2024 15:59:51 +0000 Manifest this update: Fri 22 Nov 2024 15:59:51 +0000 Manifest next update: Fri 29 Nov 2024 15:59:51 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: h/i5NRmd4sZs6Okji9MZSqyUAWKluBTMzcN4Ra1lhdM=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: cB5K4RAWWm6jyN967X4ARrcjpdGZ4aQCuC+1ziDpDCo=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 9bK3vePkX1h8tNppvkA1+AI2c+bNKaWwr/2Co9UEt9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8221 (0x201d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Nov 22 15:59:51 2024 GMT Not After : Nov 29 15:59:51 2024 GMT Subject: CN=6740aa77-f44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:4f:45:9b:0e:25:39:98:44:ef:d2:af:28: b6:41:09:47:d0:32:10:22:48:32:d8:09:7c:af:e0: 3f:29:c2:90:c2:f7:98:f8:4b:af:de:5c:71:c6:48: 39:61:28:73:fe:3b:79:f1:26:48:c1:f6:f6:a6:5e: 9a:a3:d4:e2:52:07:cf:6d:b5:08:f3:15:0a:e7:3e: 96:79:b1:65:c5:bc:84:2c:e9:2c:b5:00:f1:76:14: 93:03:d5:50:ae:ae:0c:bc:0e:8e:e7:ef:27:12:b1: fd:50:98:28:bc:95:40:62:40:38:95:4b:3d:66:ba: 6a:be:6f:a6:9e:f7:4b:38:2b:84:68:4b:bf:4e:60: df:c2:e4:08:87:98:7d:5d:e8:fb:0a:19:d4:f8:85: 4b:47:23:7b:5d:f0:f4:51:65:fe:e0:ec:eb:c5:e3: e0:6f:4f:6f:a6:53:d6:18:4b:6c:19:2f:d7:dd:22: 4a:75:91:25:7c:74:73:8c:03:73:5c:c7:d4:eb:55: ff:60:48:bf:fc:0e:3c:3d:4b:39:bb:6b:66:4f:48: e0:dc:a0:4b:87:9a:7a:b8:b8:49:74:18:24:71:53: 91:2f:e0:e0:3b:23:3b:8e:ff:0b:ce:04:e1:d1:34: 91:b2:8f:88:4d:43:58:06:1b:47:d7:2f:69:2d:9d: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EC:73:1D:35:DB:18:4A:3B:20:9B:0B:FF:11:AA:7B:70:4A:EF:8A X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:18:f6:04:0d:13:89:f7:f0:70:ec:5a:dc:1d:22:66:ef:36: 33:b4:2f:5f:94:09:b2:db:c1:ad:7f:9f:ea:79:14:3f:55:cc: 11:fc:93:93:9d:99:05:a8:a5:f4:06:72:5a:d1:dc:ab:0b:2c: 6e:86:f8:cf:fd:2e:36:a4:11:49:37:82:9d:09:0a:4a:f3:77: 9c:f4:8b:09:a0:32:0e:de:37:c7:21:0e:eb:c6:46:c4:43:c5: 10:d2:89:08:4a:d1:ea:95:08:85:78:21:ba:69:9a:b7:66:dd: 18:95:b7:e9:b4:38:25:cf:e9:6f:9a:0e:c1:b7:cd:a5:1b:e4: a9:2b:fe:f3:ed:a3:38:0c:ab:16:8f:a8:82:f3:dc:10:18:35: 34:8b:d8:e9:3a:1f:10:7c:3f:2f:cf:2c:60:d1:6b:26:35:f4: 02:0c:38:bd:de:c2:b9:94:ca:dc:35:c2:80:9b:af:ba:a0:7d: 2c:a9:30:6d:6e:38:a8:93:ab:2d:91:d7:0e:47:92:c6:93:1e: 77:cf:bc:ad:35:fe:31:a6:72:ea:5d:cd:cc:f7:3b:9e:3c:f4: 89:e4:f1:a3:2d:b1:0d:7d:64:54:fa:ab:4b:96:ea:8b:0a:28: 68:5b:f4:d4:cc:25:af:b5:9d:a7:ff:6c:78:f9:13:94:ff:d2: 8f:48:98:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjQxMTIyMTU1OTUxWhcNMjQxMTI5MTU1OTUxWjAYMRYwFAYD VQQDEw02NzQwYWE3Ny1mNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2I9PRZsOJTmYRO/Sryi2QQlH0DIQIkgy2Al8r+A/KcKQwveY+Euv3lxxxkg5 YShz/jt58SZIwfb2pl6ao9TiUgfPbbUI8xUK5z6WebFlxbyELOkstQDxdhSTA9VQ rq4MvA6O5+8nErH9UJgovJVAYkA4lUs9Zrpqvm+mnvdLOCuEaEu/TmDfwuQIh5h9 Xej7ChnU+IVLRyN7XfD0UWX+4OzrxePgb09vplPWGEtsGS/X3SJKdZElfHRzjANz XMfU61X/YEi//A48PUs5u2tmT0jg3KBLh5p6uLhJdBgkcVORL+DgOyM7jv8LzgTh 0TSRso+ITUNYBhtH1y9pLZ1HyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjscx01 2xhKOyCbC/8RqntwSu+KMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPGPYEDROJ9/Bw7FrcHSJm7zYztC9flAmy28Gtf5/qeRQ/VcwR/JOT nZkFqKX0BnJa0dyrCyxuhvjP/S42pBFJN4KdCQpK83ec9IsJoDIO3jfHIQ7rxkbE Q8UQ0okIStHqlQiFeCG6aZq3Zt0YlbfptDglz+lvmg7Bt82lG+SpK/7z7aM4DKsW j6iC89wQGDU0i9jpOh8QfD8vzyxg0WsmNfQCDDi93sK5lMrcNcKAm6+6oH0sqTBt bjiok6stkdcOR5LGkx53z7ytNf4xpnLqXc3M9zuePPSJ5PGjLbENfWRU+qtLluqL CihoW/TUzCWvtZ2n/2x4+ROU/9KPSJjl -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:23 2024 by rpki-client on console-fra.rpki-client.org