$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: eG+AFPlECBfrKjU/u5IR3moracVJ9jRNrQjy2PBGZI4= Subject key identifier: 8F:D7:CB:EE:BD:E2:E2:8E:BE:3D:2B:AD:07:42:49:0F:2D:FA:46:3E Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 2106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 20FE Signing time: Sun 24 Nov 2024 15:50:39 +0000 Manifest this update: Sun 24 Nov 2024 15:50:38 +0000 Manifest next update: Sun 01 Dec 2024 15:50:38 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: YXMEyTJXOkPdeXXdsvTzED5GXpG4g0TqWQG2q5+Q9rM=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: nL0Z119WnXgRu2rtcMKUBxI4xbIxjYpGKvjnrU4cw64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8454 (0x2106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Nov 24 15:50:38 2024 GMT Not After : Dec 1 15:50:38 2024 GMT Subject: CN=67434b4f-0557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:96:26:b4:7f:49:9c:17:6c:dd:ad:a7:37:35: 62:45:e8:b0:d4:e5:df:4e:39:27:fd:95:a2:e3:83: 4d:46:4c:26:4b:65:f1:74:b0:37:12:3f:cd:ea:10: 57:a7:be:67:04:5a:fe:60:51:67:74:9b:07:88:df: 57:0b:a8:0c:2f:5a:5e:52:d2:c3:0c:8e:67:88:fa: 31:15:e0:89:bf:85:72:05:85:bd:36:13:46:f4:03: 6d:b3:8c:a6:2f:90:f7:8e:dd:32:c2:ec:32:07:61: 4f:02:17:fd:5c:9a:88:41:e9:13:1f:59:70:0b:88: bf:32:cb:f8:f9:1a:18:7e:65:72:19:3a:4a:00:2d: a3:ab:b0:f0:e2:56:6d:d3:35:b3:cc:fc:71:f6:44: c6:eb:a1:8a:25:44:f2:f0:75:35:7b:04:e1:cf:f6: b2:88:17:4c:55:94:a7:88:cc:7d:40:0d:23:2a:1b: 35:a8:5a:64:08:08:13:0f:83:79:78:71:a2:3b:76: 3b:42:0e:d6:96:86:9d:26:07:48:8d:db:da:42:ac: 2a:32:56:bf:e5:3f:e7:6d:2b:bf:06:28:d4:ba:24: d9:53:5d:17:3c:ca:5c:71:85:ea:90:38:59:f0:c4: 17:8f:f4:b0:85:14:14:89:32:df:26:2d:c4:fe:15: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D7:CB:EE:BD:E2:E2:8E:BE:3D:2B:AD:07:42:49:0F:2D:FA:46:3E X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:91:c6:ed:d2:85:89:c7:ef:5a:e4:4a:42:9e:8e:70:42:41: 28:6a:7b:5c:d8:db:2c:d1:6b:f9:31:f1:09:67:26:9d:47:4e: e6:3e:68:c1:11:4c:85:ac:a7:84:ed:4d:16:35:cc:b8:5d:b1: f3:9e:d2:18:b9:61:25:93:8f:b4:a1:4b:c0:39:44:53:2c:43: d2:1f:b4:28:82:49:dc:ed:8f:da:7f:48:9d:c1:76:86:e2:87: a0:e1:d2:dc:fa:0a:40:fe:8b:4e:36:1f:15:5f:53:a2:9f:92: 37:4c:59:29:0c:37:9c:63:4c:9c:e7:73:16:0a:8e:f5:18:7b: d7:20:6a:24:d2:56:c7:d5:32:e6:95:20:f3:12:31:82:ee:18: 01:03:65:3a:bc:58:d1:11:a2:ac:d7:99:4a:4e:cf:12:a9:e9: 6a:4e:7a:2f:12:74:d3:5a:1f:b8:65:9a:01:33:5e:76:14:70: d4:90:9b:b0:52:c2:b6:5d:cd:02:50:03:fe:17:31:10:e4:29: 91:27:53:d9:24:39:b8:e7:42:34:65:70:ea:28:40:49:f6:94: c1:d9:c1:d5:a7:08:6e:01:71:2a:a2:b9:70:d3:5c:06:7a:8d: a1:76:cb:70:ec:d0:21:32:fd:e0:7a:4d:23:5a:ba:f1:84:c9: b9:c9:bc:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjQxMTI0MTU1MDM4WhcNMjQxMjAxMTU1MDM4WjAYMRYwFAYD VQQDEw02NzQzNGI0Zi0wNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65YmtH9JnBds3a2nNzViReiw1OXfTjkn/ZWi44NNRkwmS2XxdLA3Ej/N6hBX p75nBFr+YFFndJsHiN9XC6gML1peUtLDDI5niPoxFeCJv4VyBYW9NhNG9ANts4ym L5D3jt0ywuwyB2FPAhf9XJqIQekTH1lwC4i/Msv4+RoYfmVyGTpKAC2jq7Dw4lZt 0zWzzPxx9kTG66GKJUTy8HU1ewThz/ayiBdMVZSniMx9QA0jKhs1qFpkCAgTD4N5 eHGiO3Y7Qg7WloadJgdIjdvaQqwqMla/5T/nbSu/BijUuiTZU10XPMpccYXqkDhZ 8MQXj/SwhRQUiTLfJi3E/hXfGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/Xy+69 4uKOvj0rrQdCSQ8t+kY+MB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWkcbt0oWJx+9a5EpCno5wQkEoantc2Nss0Wv5MfEJZyadR07mPmjB EUyFrKeE7U0WNcy4XbHzntIYuWElk4+0oUvAOURTLEPSH7Qogknc7Y/af0idwXaG 4oeg4dLc+gpA/otONh8VX1Oin5I3TFkpDDecY0yc53MWCo71GHvXIGok0lbH1TLm lSDzEjGC7hgBA2U6vFjREaKs15lKTs8SqelqTnovEnTTWh+4ZZoBM152FHDUkJuw UsK2Xc0CUAP+FzEQ5CmRJ1PZJDm450I0ZXDqKEBJ9pTB2cHVpwhuAXEqorlw01wG eo2hdstw7NAhMv3gek0jWrrxhMm5ybxW -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:56 2024 by rpki-client on console-fra.rpki-client.org