$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: XbbVJUo9XzMkfSspOKBh2rd6gSJ7v4vctQF9Ou1BRZQ= Subject key identifier: 25:D9:F6:51:FC:E5:43:DE:F9:B8:AF:1E:A6:7D:14:33:70:80:70:90 Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 07CC Signing time: Fri 22 Nov 2024 20:42:51 +0000 Manifest this update: Fri 22 Nov 2024 20:42:51 +0000 Manifest next update: Fri 29 Nov 2024 20:42:51 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: zeHIC1XIGVJu5xQpHPkpAkEW81AB94zO/PlaVLwzsdA=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: yWbFOWnQZIbWuGJvtHpTMaWCZFK5VHcHceysjqEH3mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Nov 22 20:42:51 2024 GMT Not After : Nov 29 20:42:51 2024 GMT Subject: CN=6740eccb-48e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:02:fe:4b:c8:9f:01:8c:73:f9:da:0d:5d:a4: 40:6f:a5:04:62:29:54:17:92:09:b7:f4:4b:e1:be: 99:d6:c9:72:68:00:b7:dc:9a:41:f4:ea:53:22:51: 06:84:8c:22:13:79:25:91:11:89:ee:f7:55:a7:62: c9:be:fc:1c:66:5e:ae:fa:39:cf:bf:00:6b:28:e6: 19:92:fa:97:d8:e0:ae:a0:00:57:9c:c2:3f:92:a7: 5a:99:06:db:99:fa:84:b9:14:63:16:fc:35:e2:58: ca:93:13:86:0d:ca:30:44:0a:69:1a:9a:7b:3e:56: e9:06:a1:ce:ae:a1:85:c3:5f:71:92:17:71:e2:92: 19:8f:25:28:72:57:b7:d3:8b:e2:cc:c1:bb:57:bb: 4e:bf:3b:f1:2d:58:12:53:d5:1c:e3:27:d4:97:bb: 28:4e:ad:51:4b:83:04:bf:6c:c4:dc:15:fd:1f:5d: b8:24:55:ec:cb:23:6c:78:3d:08:5a:c0:48:bc:97: 69:81:57:2b:75:a7:fc:04:79:8b:87:c6:d3:3c:3a: 65:da:2a:4b:77:e5:6d:d8:a2:5c:6a:29:b8:27:27: 1e:b0:c5:fd:cd:c2:ba:16:af:5f:36:fe:65:81:78: a1:2c:b5:9a:14:d3:1e:77:6f:c6:b3:d9:a3:27:35: d0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D9:F6:51:FC:E5:43:DE:F9:B8:AF:1E:A6:7D:14:33:70:80:70:90 X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c1:69:75:c1:4f:1c:7b:92:cb:0b:0e:43:0f:37:45:f5:80: 41:e2:da:78:19:48:f8:82:a7:44:07:92:a6:a2:e0:23:32:c0: 57:ea:26:41:ee:ae:4a:e2:a4:22:46:03:e5:ec:66:e8:86:5f: ff:42:f0:a4:cb:ee:c0:f2:69:90:c7:d2:e7:82:18:fd:8b:85: d6:ed:29:21:80:06:bf:48:25:7f:7b:34:ee:61:3a:97:5a:a7: fa:1b:7a:a5:4a:54:23:b5:99:ff:94:63:c8:9f:47:97:32:fc: e0:47:3b:82:a9:03:8f:52:25:78:db:8c:bf:3a:51:60:1f:56: e9:ec:2e:3e:55:8d:1b:70:21:ba:39:cb:b1:5c:37:36:4b:d4: 1b:ef:9c:a5:7e:8c:1e:31:f4:ab:0a:52:f7:0b:41:8e:bd:ab: 79:c6:36:d8:6c:f6:0d:00:39:79:34:86:ff:9a:76:10:c3:78: 54:26:fb:3b:11:d0:12:49:9f:1f:8b:bb:fa:d8:19:7d:10:0a: 63:bd:be:70:45:73:26:14:18:31:d0:32:76:cb:fb:43:b2:56: 88:7b:d0:97:b9:4e:38:18:66:55:f1:0b:8e:19:76:ec:0b:3d: 51:7e:9d:fb:3a:5e:5a:05:76:9c:d2:78:98:86:bb:f8:d1:37: 4d:bf:b8:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjQxMTIyMjA0MjUxWhcNMjQxMTI5MjA0MjUxWjAYMRYwFAYD VQQDEw02NzQwZWNjYi00OGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8wL+S8ifAYxz+doNXaRAb6UEYilUF5IJt/RL4b6Z1slyaAC33JpB9OpTIlEG hIwiE3klkRGJ7vdVp2LJvvwcZl6u+jnPvwBrKOYZkvqX2OCuoABXnMI/kqdamQbb mfqEuRRjFvw14ljKkxOGDcowRAppGpp7PlbpBqHOrqGFw19xkhdx4pIZjyUocle3 04vizMG7V7tOvzvxLVgSU9Uc4yfUl7soTq1RS4MEv2zE3BX9H124JFXsyyNseD0I WsBIvJdpgVcrdaf8BHmLh8bTPDpl2ipLd+Vt2KJcaim4JycesMX9zcK6Fq9fNv5l gXihLLWaFNMed2/Gs9mjJzXQYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXZ9lH8 5UPe+bivHqZ9FDNwgHCQMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGwWl1wU8ce5LLCw5DDzdF9YBB4tp4GUj4gqdEB5KmouAjMsBX6iZB 7q5K4qQiRgPl7Gbohl//QvCky+7A8mmQx9Lnghj9i4XW7SkhgAa/SCV/ezTuYTqX Wqf6G3qlSlQjtZn/lGPIn0eXMvzgRzuCqQOPUiV424y/OlFgH1bp7C4+VY0bcCG6 OcuxXDc2S9Qb75ylfoweMfSrClL3C0GOvat5xjbYbPYNADl5NIb/mnYQw3hUJvs7 EdASSZ8fi7v62Bl9EApjvb5wRXMmFBgx0DJ2y/tDslaIe9CXuU44GGZV8QuOGXbs Cz1Rfp37Ol5aBXac0niYhrv40TdNv7hi -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org