$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft File: eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json) Hash identifier: 7x/9hfZ5efe9dkGjCUwgrpmSXf0I4HRvnLJeN41g7fs= Subject key identifier: 29:C3:50:90:EB:37:4E:53:46:C2:E4:E5:BE:D2:9C:AF:F1:21:07:72 Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B Certificate issuer: /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft Manifest number: 07 Signing time: Sat 23 Nov 2024 06:09:11 +0000 Manifest this update: Sat 23 Nov 2024 06:09:11 +0000 Manifest next update: Sat 30 Nov 2024 06:09:11 +0000 Files and hashes: 1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: 6rex3T78d0aP8CKHtHTx23MCmGow6GWMxFJ8vlVvfoA=) 2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: Gw+0qN7nHcP5/UJQ2iKvlQ13obyIJUpO0k6xHzRKL2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Validity Not Before: Nov 23 06:09:11 2024 GMT Not After : Nov 30 06:09:11 2024 GMT Subject: CN=67417187-eb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:27:a8:b0:5b:75:b6:0c:0d:ac:d9:1c:87: 01:ea:ad:c3:a1:dd:7f:3e:78:03:55:ad:9e:6e:10: 45:f0:46:6e:17:6b:9b:6a:67:6e:da:04:e7:3e:bf: 5e:50:f9:cc:a8:37:3a:69:6a:c8:a3:89:7c:5d:f1: 45:73:10:85:c6:27:fe:87:0a:57:7a:9f:f8:86:fb: 68:ff:ff:f2:96:0a:26:fb:c3:94:2a:b2:33:c4:71: 3c:06:42:59:55:11:a8:5e:11:f7:66:58:59:0c:30: 87:23:2e:12:bb:5c:03:3d:5b:e5:be:53:97:07:c0: 70:45:57:de:52:44:06:ef:65:7a:59:16:49:4b:14: 19:ea:ef:4e:de:c3:9b:46:fb:0c:24:79:9d:0a:7e: 47:6e:a9:e3:90:26:dc:2f:80:fd:a8:9a:ad:36:11: ff:0e:91:7b:73:98:95:96:42:a8:f9:ab:f7:e2:a5: dc:3c:8f:dd:31:72:84:5a:ba:91:68:e8:37:e0:b0: 73:2b:6b:53:34:3f:ef:57:87:fa:fd:fb:db:98:ab: ea:3c:8d:89:14:0a:1e:77:f3:72:27:53:c3:e8:89: a5:e3:e4:72:35:45:d3:a5:45:0a:10:c0:46:60:67: 2d:f6:9f:fd:12:c6:59:1d:56:a7:35:bb:98:e4:b6: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C3:50:90:EB:37:4E:53:46:C2:E4:E5:BE:D2:9C:AF:F1:21:07:72 X509v3 Authority Key Identifier: keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:68:24:da:76:00:fd:88:f9:0e:91:11:d2:26:7c:fb:71: ac:04:b9:34:8b:63:e3:54:b5:3b:25:37:57:ee:c5:ed:5e:6f: 2b:61:8b:6c:c5:13:74:26:ac:b9:ff:5b:6f:63:97:dd:65:bf: 98:51:d4:ef:33:7b:69:fc:ad:b5:f9:f2:2e:0e:8a:d5:2e:3f: 37:2d:f0:49:10:ac:4b:36:0d:eb:9d:6b:1d:7a:0d:fc:c4:66: ab:07:b0:12:97:7c:6c:79:86:6f:7f:45:97:1f:77:3a:fc:3f: ea:d7:35:4d:2b:1a:91:85:ee:a2:05:3f:27:b6:4c:da:47:9f: bf:ca:e7:07:b2:07:a0:91:16:22:46:6c:f2:ea:61:1f:a7:7a: c4:d9:d6:14:3a:dd:bc:55:c2:5e:c1:b8:9a:80:11:bd:97:71: f2:cd:a8:01:93:74:e7:04:ec:dd:56:49:4b:14:b6:e8:81:8b: 7e:ba:e4:14:91:c1:f3:9e:d0:68:55:36:38:7e:07:53:1e:b2: 91:5b:a5:9f:4d:3a:d8:75:05:57:12:85:1b:06:d0:df:3a:7f: 43:63:8f:20:95:76:c5:d0:dc:00:36:67:17:a5:ee:e5:8f:d5: bf:7a:cb:53:91:a7:58:73:fb:ba:4a:c2:5e:14:2c:1a:ea:46: 8a:ea:5a:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTkyQzExMC8GA1UEBRMoNzkyNjgzODA2QzhCRTNBQzEzNjE0RDM3NUU5MDE5Mjc0 MDk5QkM3QjAeFw0yNDExMjMwNjA5MTFaFw0yNDExMzAwNjA5MTFaMBgxFjAUBgNV BAMTDTY3NDE3MTg3LWViNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF4yeosFt1tgwNrNkchwHqrcOh3X8+eANVrZ5uEEXwRm4Xa5tqZ27aBOc+v15Q +cyoNzppasijiXxd8UVzEIXGJ/6HCld6n/iG+2j///KWCib7w5QqsjPEcTwGQllV EaheEfdmWFkMMIcjLhK7XAM9W+W+U5cHwHBFV95SRAbvZXpZFklLFBnq707ew5tG +wwkeZ0KfkduqeOQJtwvgP2omq02Ef8OkXtzmJWWQqj5q/fipdw8j90xcoRaupFo 6DfgsHMra1M0P+9Xh/r9+9uYq+o8jYkUCh5383InU8PoiaXj5HI1RdOlRQoQwEZg Zy32n/0SxlkdVqc1u5jktpkXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKcNQkOs3 TlNGwuTlvtKcr/EhB3IwHwYDVR0jBBgwFoAUeSaDgGyL46wTYU03XpAZJ0CZvHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBOTJDL0E1MjgxNEQyQTYw RTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3VFlVMDNYcEFaSjBDWnZI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNhRGdHeUw0NndUWVUwM1hwQVpKMENadkhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB OTJDL0E1MjgxNEQyQTYwRTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3 VFlVMDNYcEFaSjBDWnZIcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGKUaCTadgD9iPkOkRHSJnz7cawEuTSLY+NUtTslN1fuxe1ebythi2zF E3QmrLn/W29jl91lv5hR1O8ze2n8rbX58i4OitUuPzct8EkQrEs2Deudax16DfzE ZqsHsBKXfGx5hm9/RZcfdzr8P+rXNU0rGpGF7qIFPye2TNpHn7/K5weyB6CRFiJG bPLqYR+nesTZ1hQ63bxVwl7BuJqAEb2XcfLNqAGTdOcE7N1WSUsUtuiBi3665BSR wfOe0GhVNjh+B1MespFbpZ9NOth1BVcShRsG0N86f0NjjyCVdsXQ3AA2Zxel7uWP 1b96y1ORp1hz+7pKwl4ULBrqRorqWgA= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org