$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: mEFZbZkbYdoKNR1ZisaDBdR08hoceviejwJR8imtVDc= Subject key identifier: 4E:01:E9:38:13:A7:02:DB:04:EC:54:F0:B9:17:BE:4E:6E:DD:04:86 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 20C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 20C7 Signing time: Fri 22 Nov 2024 15:56:22 +0000 Manifest this update: Fri 22 Nov 2024 15:56:22 +0000 Manifest next update: Fri 29 Nov 2024 15:56:22 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: vVFSvOdZq2e+eSn9EzCTbM8jnA4MtK7Olx1ClMCuTLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8391 (0x20c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Nov 22 15:56:22 2024 GMT Not After : Nov 29 15:56:22 2024 GMT Subject: CN=6740a9a6-b333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a7:a7:75:9d:33:8b:b7:8e:4c:87:c3:23:1b: a8:14:13:5b:67:34:fd:00:fd:bb:59:5a:4b:f2:90: ed:50:7c:45:97:6f:8a:e6:24:c4:12:c7:63:64:e2: d5:44:39:34:84:6e:ca:c0:37:64:6c:f2:49:91:79: ef:5b:1f:b4:b0:3b:c6:f4:d5:62:c8:5c:7f:48:3d: ce:63:fd:24:de:21:69:41:42:c4:db:52:54:1e:54: ad:de:90:e3:b4:f3:ae:30:07:fb:15:4e:8c:48:0e: a1:8c:29:e6:b4:f6:4c:ad:da:93:f9:9a:91:bc:70: 55:9a:65:da:3b:ac:8b:32:d0:32:a3:6a:eb:4b:c1: df:2e:15:f6:6c:95:24:e9:5d:c4:26:6a:af:58:93: d4:cb:95:d9:0b:f5:ae:9a:be:c1:58:38:16:f6:6a: d7:c3:18:8f:3b:a4:f0:87:27:98:e2:c5:e1:de:05: f3:f5:93:94:2b:da:90:49:23:6e:c8:3e:d0:9c:07: 4a:c5:f6:6a:60:fe:9d:12:12:74:4b:58:d5:b6:26: dc:af:a0:07:5f:3e:39:7e:0b:6d:b7:fe:68:ad:55: be:42:2b:49:3d:70:19:cf:cd:71:0c:39:95:1b:67: 16:f4:d3:cc:3d:e4:2d:28:88:e5:5e:d4:c5:66:c4: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:01:E9:38:13:A7:02:DB:04:EC:54:F0:B9:17:BE:4E:6E:DD:04:86 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a9:95:35:88:93:9a:1c:80:e7:31:0c:f2:e8:48:ed:19:12: ef:75:b5:20:61:3c:8e:f5:a6:de:67:0a:82:fd:d7:61:91:d8: 8a:f2:db:58:ea:3a:d2:61:92:99:7c:a0:20:17:f0:44:c2:a9: fa:c9:a8:25:96:85:9d:e7:fb:4e:0d:11:3b:e2:46:c6:ab:36: f3:5b:bc:84:52:c8:9c:64:68:c8:1c:b4:eb:9b:55:fa:e9:04: 13:c4:c5:92:fa:2b:07:b3:bd:c9:54:32:33:37:69:ca:f4:26: 0e:04:31:e7:f7:9e:d7:fe:1f:35:35:06:86:7d:61:f5:88:a8: f2:b6:8d:b7:9e:29:28:31:6d:88:7f:98:fe:4a:ef:1b:c9:be: c8:23:66:c2:e7:1d:b6:45:43:b1:67:7b:d3:3f:ab:88:7d:cc: b8:2b:ae:e3:bb:13:4f:fb:c1:4b:8f:70:a8:92:75:f1:9b:2d: d5:43:b6:13:ff:3f:cc:2a:91:13:33:37:4c:7a:63:bd:cf:41: 27:62:56:fd:7f:24:6f:3b:8b:8e:02:f8:82:76:3b:03:eb:cd: 4f:07:fa:41:0b:94:70:23:13:76:19:8f:7b:97:b6:f3:71:a5: 75:5c:4b:ef:ab:bf:30:54:a9:e6:ed:b2:a0:7e:62:34:94:e0: 77:c3:20:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjQxMTIyMTU1NjIyWhcNMjQxMTI5MTU1NjIyWjAYMRYwFAYD VQQDEw02NzQwYTlhNi1iMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9aendZ0zi7eOTIfDIxuoFBNbZzT9AP27WVpL8pDtUHxFl2+K5iTEEsdjZOLV RDk0hG7KwDdkbPJJkXnvWx+0sDvG9NViyFx/SD3OY/0k3iFpQULE21JUHlSt3pDj tPOuMAf7FU6MSA6hjCnmtPZMrdqT+ZqRvHBVmmXaO6yLMtAyo2rrS8HfLhX2bJUk 6V3EJmqvWJPUy5XZC/Wumr7BWDgW9mrXwxiPO6TwhyeY4sXh3gXz9ZOUK9qQSSNu yD7QnAdKxfZqYP6dEhJ0S1jVtibcr6AHXz45fgttt/5orVW+QitJPXAZz81xDDmV G2cW9NPMPeQtKIjlXtTFZsTzkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4B6TgT pwLbBOxU8LkXvk5u3QSGMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4qZU1iJOaHIDnMQzy6EjtGRLvdbUgYTyO9abeZwqC/ddhkdiK8ttY 6jrSYZKZfKAgF/BEwqn6yaglloWd5/tODRE74kbGqzbzW7yEUsicZGjIHLTrm1X6 6QQTxMWS+isHs73JVDIzN2nK9CYOBDHn957X/h81NQaGfWH1iKjyto23nikoMW2I f5j+Su8byb7II2bC5x22RUOxZ3vTP6uIfcy4K67juxNP+8FLj3CoknXxmy3VQ7YT /z/MKpETMzdMemO9z0EnYlb9fyRvO4uOAviCdjsD681PB/pBC5RwIxN2GY97l7bz caV1XEvvq78wVKnm7bKgfmI0lOB3wyA8 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org