$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: vnAQi2N2k9linM1aI+tCAuOoWYkNnLRjjTUP4ahgBGA= Subject key identifier: D5:9F:78:F7:C9:63:7B:E3:DF:96:31:76:0D:BA:B6:6A:11:6E:88:F6 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0D9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0D96 Signing time: Fri 22 Nov 2024 17:53:07 +0000 Manifest this update: Fri 22 Nov 2024 17:53:07 +0000 Manifest next update: Fri 29 Nov 2024 17:53:07 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: txjtsu6sZOxf5Y7fisMZpPojGkyU6VWmtx3AzHWF454=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: T9i0DKwHASY+s6SnXICLRaNhTKqbk+FbtGkLEMvl4c4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3486 (0xd9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Nov 22 17:53:07 2024 GMT Not After : Nov 29 17:53:07 2024 GMT Subject: CN=6740c503-d252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:d3:ab:26:d5:6a:f5:b6:5f:b3:c3:c3:68: f3:93:34:ed:35:ca:ce:e4:68:af:0d:9b:76:e8:5c: b0:f4:20:64:6b:ba:aa:09:f9:bc:6e:8f:0a:47:64: ae:0c:22:12:c3:ab:11:74:2f:2f:4b:af:75:da:7a: cb:b1:05:c0:9d:40:21:bd:ee:32:38:03:a3:17:43: 26:4f:b9:16:7c:de:d0:ed:c2:28:1c:71:e4:24:be: 84:50:29:2e:d1:ee:c6:ee:63:e6:00:8b:11:4c:e8: 45:6b:19:44:6c:b4:ee:68:06:c5:40:2a:18:2a:50: cf:a2:5c:da:22:14:6e:0b:fb:06:f5:6d:f3:95:12: 61:33:c6:f6:c9:7a:0e:d8:db:cf:ee:fe:19:3b:9f: 7e:07:e3:1e:77:af:ec:3e:e4:fd:09:dc:93:02:77: 0e:2f:15:9f:17:4f:9d:b2:cb:6e:04:73:c4:eb:0a: 12:9d:4d:61:57:39:b5:fa:7d:fe:04:eb:81:8b:c2: c0:d3:c0:16:5f:fc:1d:62:0c:0e:73:a2:a4:62:ea: 19:30:b1:59:8c:7a:bc:a0:fa:6c:45:4f:0b:c6:f0: c8:c9:d6:97:72:54:6e:21:e0:7a:73:f6:8a:b2:90: f4:ed:6d:21:b1:50:05:96:4f:93:f2:1d:5c:4a:1a: 88:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9F:78:F7:C9:63:7B:E3:DF:96:31:76:0D:BA:B6:6A:11:6E:88:F6 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:48:3a:2d:14:c1:7e:69:65:75:4f:fc:3e:a4:20:59:5f:c9: 93:5b:de:5a:6a:01:18:e0:02:c7:1a:74:1e:ef:92:2b:06:44: 7b:3d:3f:f5:a7:32:b7:49:26:3c:0c:92:59:22:36:8e:43:a9: fd:82:e3:36:98:31:49:f4:02:8e:07:46:41:e7:f8:e6:f2:d4: 96:49:4b:66:88:81:8c:55:c1:f1:07:ba:23:2d:da:6e:a9:18: 68:83:cc:73:9f:cc:9f:71:c5:ac:e6:61:67:be:34:0f:43:b9: a7:82:7c:dc:80:2b:70:d8:58:01:6a:c1:d4:18:55:d2:66:78: c5:db:55:39:93:0d:68:41:a8:f0:b9:ff:1c:89:e6:18:4c:7b: 0e:0b:12:0e:d7:f5:68:98:42:77:82:47:69:36:fc:8d:24:4c: 51:9c:88:1f:8d:b6:4f:2d:49:a3:c9:81:0a:2b:21:f3:e6:f8: be:a7:a7:2f:65:be:3b:c3:b8:29:c3:07:d3:05:d9:91:c0:1a: 5a:01:10:a4:84:dc:06:a8:33:60:8d:d8:39:d7:c0:82:f5:f6: 3d:77:c4:35:96:5d:29:17:a0:43:91:9f:d5:73:da:4d:5c:1e: 59:25:9c:46:eb:c4:fa:8d:0a:ae:7c:04:87:05:a3:51:2c:28: d3:82:ba:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjQxMTIyMTc1MzA3WhcNMjQxMTI5MTc1MzA3WjAYMRYwFAYD VQQDEw02NzQwYzUwMy1kMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGPTqybVavW2X7PDw2jzkzTtNcrO5GivDZt26Fyw9CBka7qqCfm8bo8KR2Su DCISw6sRdC8vS6912nrLsQXAnUAhve4yOAOjF0MmT7kWfN7Q7cIoHHHkJL6EUCku 0e7G7mPmAIsRTOhFaxlEbLTuaAbFQCoYKlDPolzaIhRuC/sG9W3zlRJhM8b2yXoO 2NvP7v4ZO59+B+Med6/sPuT9CdyTAncOLxWfF0+dsstuBHPE6woSnU1hVzm1+n3+ BOuBi8LA08AWX/wdYgwOc6KkYuoZMLFZjHq8oPpsRU8LxvDIydaXclRuIeB6c/aK spD07W0hsVAFlk+T8h1cShqIRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWfePfJ Y3vj35Yxdg26tmoRboj2MB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmSDotFMF+aWV1T/w+pCBZX8mTW95aagEY4ALHGnQe75IrBkR7PT/1 pzK3SSY8DJJZIjaOQ6n9guM2mDFJ9AKOB0ZB5/jm8tSWSUtmiIGMVcHxB7ojLdpu qRhog8xzn8yfccWs5mFnvjQPQ7mngnzcgCtw2FgBasHUGFXSZnjF21U5kw1oQajw uf8cieYYTHsOCxIO1/VomEJ3gkdpNvyNJExRnIgfjbZPLUmjyYEKKyHz5vi+p6cv Zb47w7gpwwfTBdmRwBpaARCkhNwGqDNgjdg518CC9fY9d8Q1ll0pF6BDkZ/Vc9pN XB5ZJZxG68T6jQqufASHBaNRLCjTgrp4 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org