$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft File: 5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json) Hash identifier: 8Z6m6ucALX2vWVDCQP/aArK8oDu3F0g3e92RKBQB7XM= Subject key identifier: 86:37:37:B6:D8:BD:51:22:3B:A4:D0:D0:D0:4E:99:CE:43:B7:E6:FC Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 Certificate issuer: /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft Manifest number: 7D Signing time: Sat 23 Nov 2024 04:42:32 +0000 Manifest this update: Sat 23 Nov 2024 04:42:31 +0000 Manifest next update: Sat 30 Nov 2024 04:42:31 +0000 Files and hashes: 1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: vP44IIhkUUzhJ5UCQXZxuXW+BrP1qAZM9pGlWZsctNk=) 2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: xeBdZEDygAkJP3gWk8DQnl/NecYbqaLYzhSDka+Be5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Validity Not Before: Nov 23 04:42:31 2024 GMT Not After : Nov 30 04:42:31 2024 GMT Subject: CN=67415d38-6051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:70:97:52:b7:e4:f1:22:26:b7:5c:bd:e6:03: de:41:49:3e:44:de:f6:88:eb:d9:67:dd:79:99:26: 09:9f:72:3e:47:3a:3f:6a:cb:4b:30:85:c7:b1:f9: a1:71:6f:24:2e:bb:a1:f0:7a:b1:09:6b:2e:81:5c: d8:eb:f1:05:95:82:0a:b9:a2:4e:9a:99:ee:5e:80: 7b:56:20:38:4a:cc:0f:02:2b:12:66:86:99:ac:ec: 70:64:e8:f0:a6:4d:07:fc:8a:24:22:91:3e:95:d8: a3:de:61:51:32:1f:1c:53:a6:d2:c8:44:57:b2:b1: 9b:d9:b0:e0:91:2a:2c:97:94:95:c1:08:10:18:0e: f2:7f:25:3e:ad:15:d4:39:d3:83:98:49:5b:3b:3e: 89:30:f8:a0:b5:90:ff:54:a5:50:07:fa:12:3e:b9: f3:38:d2:9f:39:0c:d4:1f:4a:f9:90:16:bc:92:78: 66:46:7e:a4:2e:b9:f1:33:6f:c4:0a:79:ef:c8:6d: ee:b0:aa:b5:d2:5f:fb:91:30:bc:61:8f:40:ab:87: 11:9a:0f:a1:56:2d:1d:f9:55:dc:1b:4d:d4:ba:b5: a7:15:72:a9:63:e6:4d:d7:45:2b:e2:d8:4d:73:e1: 4f:07:f4:12:68:ea:3e:ca:a8:d0:d1:1a:19:b0:7b: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:37:37:B6:D8:BD:51:22:3B:A4:D0:D0:D0:4E:99:CE:43:B7:E6:FC X509v3 Authority Key Identifier: keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f3:46:92:00:ee:6d:e0:ac:6f:91:dc:ad:40:1c:95:5c:4a:1b: 8c:cd:26:8e:99:73:a7:9b:3c:e1:2b:d7:fd:08:c9:42:53:11: db:65:5d:86:fc:ab:8e:22:40:ad:5c:29:c1:24:21:d7:c4:92: de:85:7f:fc:e9:8e:8f:8f:62:2a:a3:45:85:0c:1a:bb:e4:1d: c5:97:01:af:10:e4:d4:e8:5a:ff:31:be:e2:17:72:e6:34:85: 39:39:be:43:1e:4b:5f:c4:b5:02:db:f2:da:b4:94:40:bf:30: 1d:d6:1a:52:6b:2e:e4:ba:b7:68:c4:b9:00:b8:31:cb:b4:d3: 2e:5a:04:4b:30:b9:b0:4b:b1:82:c1:34:15:91:d9:24:89:88: fb:01:22:2b:21:4e:82:16:66:d7:b2:13:1a:e3:c0:06:fc:98: d4:b6:f5:96:56:6d:32:e2:2f:41:a9:ec:0f:ea:79:b0:16:c7: 11:1d:e1:b1:06:3b:a3:b6:4f:aa:87:6c:87:06:87:f8:1f:71: 48:3f:83:01:cd:00:51:d2:99:6a:60:e4:2f:d3:b1:bb:34:ca: 17:87:e8:a7:e7:20:45:d1:37:93:d7:ea:4c:20:3d:6d:37:84: 74:31:17:cb:fe:19:0d:7d:29:b0:34:57:dd:94:5b:06:2d:a5: 46:7a:3f:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjVDNzExMC8GA1UEBRMoRTQxRUQ3NTYwNzRCMzdBRERDNzk0Rjk0MEJEMUY1M0Uz RjY3NkI5MzAeFw0yNDExMjMwNDQyMzFaFw0yNDExMzAwNDQyMzFaMBgxFjAUBgNV BAMTDTY3NDE1ZDM4LTYwNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDccJdSt+TxIia3XL3mA95BST5E3vaI69ln3XmZJgmfcj5HOj9qy0swhcex+aFx byQuu6HwerEJay6BXNjr8QWVggq5ok6ame5egHtWIDhKzA8CKxJmhpms7HBk6PCm TQf8iiQikT6V2KPeYVEyHxxTptLIRFeysZvZsOCRKiyXlJXBCBAYDvJ/JT6tFdQ5 04OYSVs7Pokw+KC1kP9UpVAH+hI+ufM40p85DNQfSvmQFrySeGZGfqQuufEzb8QK ee/Ibe6wqrXSX/uRMLxhj0CrhxGaD6FWLR35VdwbTdS6tacVcqlj5k3XRSvi2E1z 4U8H9BJo6j7KqNDRGhmwe3IJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhjc3tti9 USI7pNDQ0E6ZzkO35vwwHwYDVR0jBBgwFoAU5B7XVgdLN63ceU+UC9H1Pj9na5Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNUM3LzY3RDI0Mzk2RTgw OTExRUVCRTQ4OTU2M0M0RjlBRTAyLzVCN1hWZ2RMTjYzY2VVLVVDOUgxUGo5bmE1 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUI3WFZnZExONjNjZVUtVUM5SDFQajluYTVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NUM3LzY3RDI0Mzk2RTgwOTExRUVCRTQ4OTU2M0M0RjlBRTAyLzVCN1hWZ2RMTjYz Y2VVLVVDOUgxUGo5bmE1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAPNGkgDubeCsb5HcrUAclVxKG4zNJo6Zc6ebPOEr1/0IyUJTEdtlXYb8 q44iQK1cKcEkIdfEkt6Ff/zpjo+PYiqjRYUMGrvkHcWXAa8Q5NToWv8xvuIXcuY0 hTk5vkMeS1/EtQLb8tq0lEC/MB3WGlJrLuS6t2jEuQC4Mcu00y5aBEswubBLsYLB NBWR2SSJiPsBIishToIWZteyExrjwAb8mNS29ZZWbTLiL0Gp7A/qebAWxxEd4bEG O6O2T6qHbIcGh/gfcUg/gwHNAFHSmWpg5C/Tsbs0yheH6KfnIEXRN5PX6kwgPW03 hHQxF8v+GQ19KbA0V92UWwYtpUZ6P6s= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org