$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: fTGAbkm+FYrf9b4mjubOw6MQSsxOXiqgp4DsdAaPoPw= Subject key identifier: FC:89:0D:DF:8B:60:87:26:57:D6:B9:60:79:28:31:66:49:B7:96:51 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0DA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0D9A Signing time: Fri 22 Nov 2024 17:53:14 +0000 Manifest this update: Fri 22 Nov 2024 17:53:14 +0000 Manifest next update: Fri 29 Nov 2024 17:53:14 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: z3Os/IRCZCYd+OXAez1E33VfcJYT98s6FCOdma6+RbA=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: qC1ZUsPrNWwJdA7aBQJNijhI12p3O3e9WwlBeIt463M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3490 (0xda2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: Nov 22 17:53:14 2024 GMT Not After : Nov 29 17:53:14 2024 GMT Subject: CN=6740c50a-d17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:fa:82:7c:bd:e1:40:3b:72:85:91:92:33: 06:80:8f:5e:71:83:e2:47:69:54:86:e5:c3:01:d9: 1a:e4:79:64:66:4b:d2:04:6a:f4:47:48:53:04:3f: d2:d5:1c:fb:92:d4:63:75:3d:5c:80:80:5e:ac:bf: 3a:4a:63:b6:c3:02:47:50:ef:c1:80:01:3e:f8:d0: f4:66:61:bd:fd:a2:0f:d1:c7:cd:37:d2:0e:6d:5e: 64:06:37:0a:de:13:23:eb:7f:3f:e2:58:61:d3:92: 9e:6f:d1:d1:11:7c:b7:5a:27:54:c3:bf:4e:c7:f0: dc:61:1e:c0:ca:64:19:4f:f7:eb:f9:96:ca:ef:c5: 1d:35:5c:11:66:a1:9d:39:ed:e2:53:d8:6e:4b:5c: 84:39:5c:a3:8c:0f:f3:ee:04:82:4e:85:3f:43:4e: f0:7c:9d:42:17:3b:ae:f2:14:86:e6:9f:ce:05:80: a3:6e:05:55:77:55:29:85:f7:82:4d:5a:f2:d8:10: fe:ac:0c:0e:8c:9c:2f:a8:2a:b4:a4:83:fb:c4:22: 03:49:f2:22:f7:0b:cf:0b:83:c5:61:48:49:1f:68: 99:79:55:8c:fd:82:9f:f0:0a:bd:d9:87:a5:90:a4: 22:58:62:09:ac:c0:b1:8b:03:c3:40:27:46:30:79: 2a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:89:0D:DF:8B:60:87:26:57:D6:B9:60:79:28:31:66:49:B7:96:51 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d8:c2:0f:1d:da:9f:e1:b1:60:40:13:b2:f1:63:48:14:40: ae:ad:10:9e:9d:b5:75:d6:e9:d6:cd:55:30:24:9d:ec:29:7c: c9:fe:4d:56:ba:3d:a4:7a:b7:d6:fc:d0:7c:1a:d2:a7:b6:81: 30:67:21:18:00:69:14:70:c7:37:32:d6:65:d0:62:77:e5:dc: d0:c8:d8:c0:09:6c:cf:0a:c5:fc:89:64:a8:65:54:87:85:0d: 2b:d2:06:84:9b:91:ee:ec:a6:9e:86:59:cc:6f:99:62:67:1e: cb:31:15:f5:9f:88:36:47:7b:ff:51:3f:5b:ba:a3:80:47:ff: 44:aa:03:ff:07:b7:2b:05:4f:f4:be:8e:30:88:47:c3:1b:a6: 3b:f7:d9:87:38:c1:15:02:e5:64:fb:8f:de:d1:c5:6c:18:aa: 28:4a:dd:08:41:62:a0:23:e9:35:a8:c8:bb:77:77:81:68:a9: 24:eb:91:58:67:3d:14:b2:95:d9:6c:94:a5:9d:c5:cc:de:9e: 20:f4:b8:b6:5d:6b:4d:35:10:c8:f9:d4:07:41:37:0d:b0:b5: 0c:f6:10:78:ec:9b:6d:99:2f:ab:58:a4:1c:e7:2e:03:16:03: 36:7f:68:e4:61:e8:56:9f:26:e7:d1:d1:7b:67:1a:54:67:c0: 22:7f:52:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjQxMTIyMTc1MzE0WhcNMjQxMTI5MTc1MzE0WjAYMRYwFAYD VQQDEw02NzQwYzUwYS1kMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zj6gny94UA7coWRkjMGgI9ecYPiR2lUhuXDAdka5HlkZkvSBGr0R0hTBD/S 1Rz7ktRjdT1cgIBerL86SmO2wwJHUO/BgAE++ND0ZmG9/aIP0cfNN9IObV5kBjcK 3hMj638/4lhh05Keb9HREXy3WidUw79Ox/DcYR7AymQZT/fr+ZbK78UdNVwRZqGd Oe3iU9huS1yEOVyjjA/z7gSCToU/Q07wfJ1CFzuu8hSG5p/OBYCjbgVVd1UphfeC TVry2BD+rAwOjJwvqCq0pIP7xCIDSfIi9wvPC4PFYUhJH2iZeVWM/YKf8Aq92Yel kKQiWGIJrMCxiwPDQCdGMHkqPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyJDd+L YIcmV9a5YHkoMWZJt5ZRMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB2MIPHdqf4bFgQBOy8WNIFECurRCenbV11unWzVUwJJ3sKXzJ/k1W uj2kerfW/NB8GtKntoEwZyEYAGkUcMc3MtZl0GJ35dzQyNjACWzPCsX8iWSoZVSH hQ0r0gaEm5Hu7KaehlnMb5liZx7LMRX1n4g2R3v/UT9buqOAR/9EqgP/B7crBU/0 vo4wiEfDG6Y799mHOMEVAuVk+4/e0cVsGKooSt0IQWKgI+k1qMi7d3eBaKkk65FY Zz0UspXZbJSlncXM3p4g9Li2XWtNNRDI+dQHQTcNsLUM9hB47JttmS+rWKQc5y4D FgM2f2jkYehWnybn0dF7ZxpUZ8Aif1JK -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org