$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: 8fcFeVGaAtzcVHMo2VDCDqOjvn++WMz3mTTTAKrI1Ek= Subject key identifier: 9C:70:6A:4F:2C:18:15:76:99:00:3B:2B:46:C4:D6:B9:FA:41:EA:F8 Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: 5C Signing time: Thu 21 Nov 2024 05:09:21 +0000 Manifest this update: Thu 21 Nov 2024 05:09:20 +0000 Manifest next update: Thu 28 Nov 2024 05:09:20 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: GK51uLK2/fyvmk9BR7BH/2Ri8ZHyhFt0NNhtEvK2SjE=) 2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: jbkM/r/watiK5IRPpyDh7RHx4Sadi2EA9iYD/7NrFLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Nov 21 05:09:20 2024 GMT Not After : Nov 28 05:09:20 2024 GMT Subject: CN=673ec080-e9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:10:fd:13:9e:41:07:a1:6d:fa:16:45:5e: a3:b0:16:af:c4:c7:a2:51:f2:d6:7a:a8:e7:7a:ef: 0d:3e:95:5d:fa:ae:53:4c:9c:f3:d0:07:83:b9:77: 99:65:32:e9:43:8b:0d:20:b2:5b:2f:e4:4c:7a:a1: 1a:63:99:f4:8d:89:35:8c:cd:33:78:25:6e:b2:10: f9:c8:6e:a1:be:8b:bc:a8:3e:c0:3a:f2:d2:eb:f5: 70:cd:24:8a:7a:0f:aa:8f:18:d8:67:62:e9:86:cf: 97:23:d3:c2:e6:f7:b4:05:e6:de:8e:bb:dd:f7:f0: 81:85:28:5b:15:44:79:b9:a0:a5:d2:5a:0d:c5:f6: ef:fe:af:34:5b:c5:df:cd:37:82:93:8c:5e:6b:75: f0:ee:82:46:39:6e:ba:95:4c:e6:5e:6b:b5:ec:88: e2:dc:ad:bd:a1:d7:32:d6:08:46:a7:26:0e:44:4a: 43:6d:4c:42:10:db:d6:35:54:61:98:1e:ce:20:46: d6:ab:35:9e:92:43:76:c0:42:e4:a1:e5:7f:db:cb: 2c:f4:1c:a5:de:56:23:95:2c:bc:1a:e1:ba:0b:b3: 7c:c0:f1:61:01:a9:b5:5c:ad:dd:5d:05:cf:8e:ed: 31:89:c8:56:de:88:25:a6:de:7b:a6:b7:cb:7c:c4: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:70:6A:4F:2C:18:15:76:99:00:3B:2B:46:C4:D6:B9:FA:41:EA:F8 X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:24:bc:8f:ab:0c:a1:14:3d:71:b2:47:ca:b0:ce:f8:9c:ec: 5a:63:c9:19:d4:71:08:e9:fd:41:26:4a:13:24:ae:49:81:b0: 81:79:42:08:40:86:9a:5b:75:78:16:19:ae:89:d8:36:f2:8e: f5:b4:b7:49:94:32:09:91:7e:ef:42:ff:c0:4b:d4:5a:63:b2: 24:f9:3b:b5:aa:13:28:cb:03:28:eb:9f:ad:0c:97:2d:f4:36: 1f:09:67:96:5b:2a:70:03:92:ed:6e:32:6e:e6:8e:27:82:14: 2a:8d:aa:93:70:cc:f5:2d:a8:38:cb:60:b9:42:94:16:cf:97: 7a:5d:98:51:58:bf:54:52:7b:d2:ff:91:41:83:d8:93:f7:43: eb:57:74:c7:8f:46:ba:cd:87:1c:c3:10:ba:e0:96:fb:be:41: 4d:6b:fb:dc:26:f8:ad:a4:da:bf:ac:a5:39:68:19:df:be:91: 32:e6:9e:a1:e4:c2:5f:82:be:11:9b:16:33:43:11:eb:80:10: 80:a3:18:e6:b8:e7:81:83:17:41:e9:ef:27:1d:f2:16:c6:19: f7:dd:74:5d:23:21:99:17:36:f2:32:48:d2:0f:08:cd:93:24: b6:1e:1f:d6:fc:3d:c7:b3:2b:35:e0:c5:a8:28:36:41:2c:8b: 09:f9:22:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzVCRDExMC8GA1UEBRMoRTk3N0E5MjI2MjIwRThDNzhBMUQxQjNCRTA0RDYwQ0RD QzhBMjE4ODAeFw0yNDExMjEwNTA5MjBaFw0yNDExMjgwNTA5MjBaMBgxFjAUBgNV BAMTDTY3M2VjMDgwLWU5ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEtRD9E55BB6Ft+hZFXqOwFq/Ex6JR8tZ6qOd67w0+lV36rlNMnPPQB4O5d5ll MulDiw0gslsv5Ex6oRpjmfSNiTWMzTN4JW6yEPnIbqG+i7yoPsA68tLr9XDNJIp6 D6qPGNhnYumGz5cj08Lm97QF5t6Ou9338IGFKFsVRHm5oKXSWg3F9u/+rzRbxd/N N4KTjF5rdfDugkY5brqVTOZea7XsiOLcrb2h1zLWCEanJg5ESkNtTEIQ29Y1VGGY Hs4gRtarNZ6SQ3bAQuSh5X/byyz0HKXeViOVLLwa4boLs3zA8WEBqbVcrd1dBc+O 7TGJyFbeiCWm3numt8t8xCuzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnHBqTywY FXaZADsrRsTWufpB6vgwHwYDVR0jBBgwFoAU6XepImIg6MeKHRs74E1gzcyKIYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNUJELzc2QzJDNzJFMUNF QjExRUY4NURGRDc3NkM0RjlBRTAyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNlhlcEltSWc2TWVLSFJzNzRFMWd6Y3lLSVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD NUJELzc2QzJDNzJFMUNFQjExRUY4NURGRDc3NkM0RjlBRTAyLzZYZXBJbUlnNk1l S0hSczc0RTFnemN5S0lZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHkkvI+rDKEUPXGyR8qwzvic7FpjyRnUcQjp/UEmShMkrkmBsIF5QghA hppbdXgWGa6J2DbyjvW0t0mUMgmRfu9C/8BL1FpjsiT5O7WqEyjLAyjrn60Mly30 Nh8JZ5ZbKnADku1uMm7mjieCFCqNqpNwzPUtqDjLYLlClBbPl3pdmFFYv1RSe9L/ kUGD2JP3Q+tXdMePRrrNhxzDELrglvu+QU1r+9wm+K2k2r+spTloGd++kTLmnqHk wl+CvhGbFjNDEeuAEICjGOa454GDF0Hp7ycd8hbGGffddF0jIZkXNvIySNIPCM2T JLYeH9b8PcezKzXgxagoNkEsiwn5Ioo= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:53 2024 by rpki-client on console-fra.rpki-client.org