$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: zm+yU1tGz6R0Yjuujl1D9CSOvjw83RrOKIk7SZw7RHQ= Subject key identifier: 49:CA:A4:E8:1B:99:60:D3:7F:98:58:13:55:51:4B:A0:6D:D9:84:C4 Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0AF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0AF1 Signing time: Fri 22 Nov 2024 19:05:05 +0000 Manifest this update: Fri 22 Nov 2024 19:05:04 +0000 Manifest next update: Fri 29 Nov 2024 19:05:04 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: httMcu5v7257XyzPuyLApxOBI1jfNO+NnUOjF/U7Dxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2805 (0xaf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Nov 22 19:05:04 2024 GMT Not After : Nov 29 19:05:04 2024 GMT Subject: CN=6740d5e0-77ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:52:dc:65:34:e6:3b:8f:b8:0f:cc:9d:76: 66:04:84:11:12:81:cb:13:54:1a:5f:b6:ce:3e:5d: 2b:67:21:3c:90:09:5b:b8:48:b4:e3:e4:86:17:cb: 15:28:9e:a1:dd:9d:39:e2:40:b1:73:5e:ca:ba:af: 70:02:7b:4d:a8:c7:ff:29:c6:60:e3:95:2e:81:c9: b7:f2:d9:ea:1f:30:9f:44:19:ba:c4:2d:27:fd:98: af:ac:49:bf:7a:27:4e:75:5c:b3:f1:f0:92:b4:68: 16:16:12:3d:2c:92:22:05:7e:5d:0c:49:84:97:9e: 26:d2:64:03:b9:00:0a:39:4d:ea:5d:ce:b7:3f:f2: 77:2b:32:bb:8c:4d:ba:8d:00:61:cc:b2:00:8c:3b: f5:83:a6:db:bb:49:9c:5d:88:23:0f:42:1f:4b:9a: 2b:eb:0e:28:87:10:86:95:ae:f0:a8:1c:b3:db:39: e8:4a:c1:44:12:45:f1:59:59:78:61:de:ed:74:ff: 38:59:f0:87:5a:cb:90:40:b3:4e:f7:59:95:f5:22: 20:8b:1a:d0:d2:a5:dd:f8:65:e4:7a:89:07:da:65: 30:60:1e:14:8d:fb:ee:d2:69:24:fc:2a:a3:93:92: e4:32:e3:4b:17:08:74:db:d7:eb:0b:33:04:e2:c7: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:A4:E8:1B:99:60:D3:7F:98:58:13:55:51:4B:A0:6D:D9:84:C4 X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:97:4c:9d:e3:25:d9:30:ab:51:9a:66:a8:03:d7:54:d1:28: 9b:b2:2c:6c:e0:59:46:0c:06:90:77:59:0e:d6:8f:3d:14:92: d2:f6:92:7b:16:11:c9:00:ba:40:2e:3b:89:58:b2:a6:72:db: dc:03:c5:7a:ae:d5:ab:94:49:ff:0a:75:e7:3a:d8:b7:c3:29: b0:0e:ea:7a:2a:69:2f:2d:be:69:9a:7c:77:a5:c8:32:4c:34: 5f:8a:42:fb:23:b5:ad:d7:b2:fd:6f:8f:11:40:0a:30:5d:c6: 44:88:37:55:b8:d6:06:c8:a2:ef:bf:86:7e:d3:ad:75:54:96: d7:bf:21:05:9a:42:76:e7:d2:b3:41:fc:90:01:4a:7e:0b:e7: 19:f3:77:6f:39:73:95:0c:36:d1:38:05:6b:23:f0:04:9a:84: 95:e4:7a:7e:88:dc:bc:9f:da:d8:80:12:57:12:70:cf:73:d0: ec:0a:24:30:59:41:21:63:7f:0c:67:b2:02:b4:c4:cc:20:fc: 7d:ec:7f:a6:b7:32:b6:a6:7d:19:59:fd:ef:cd:1e:ab:f7:1a: 94:7a:c9:9f:6d:42:bf:2f:51:1c:ca:4b:0e:43:fa:f2:8b:c0: a5:21:13:c0:8f:53:cf:9c:2e:69:cb:15:80:c1:fd:da:81:74: 3d:57:e7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjQxMTIyMTkwNTA0WhcNMjQxMTI5MTkwNTA0WjAYMRYwFAYD VQQDEw02NzQwZDVlMC03N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtShS3GU05juPuA/MnXZmBIQREoHLE1QaX7bOPl0rZyE8kAlbuEi04+SGF8sV KJ6h3Z054kCxc17Kuq9wAntNqMf/KcZg45Uugcm38tnqHzCfRBm6xC0n/ZivrEm/ eidOdVyz8fCStGgWFhI9LJIiBX5dDEmEl54m0mQDuQAKOU3qXc63P/J3KzK7jE26 jQBhzLIAjDv1g6bbu0mcXYgjD0IfS5or6w4ohxCGla7wqByz2znoSsFEEkXxWVl4 Yd7tdP84WfCHWsuQQLNO91mV9SIgixrQ0qXd+GXkeokH2mUwYB4Ujfvu0mkk/Cqj k5LkMuNLFwh029frCzME4seRmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnKpOgb mWDTf5hYE1VRS6Bt2YTEMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgl0yd4yXZMKtRmmaoA9dU0Sibsixs4FlGDAaQd1kO1o89FJLS9pJ7 FhHJALpALjuJWLKmctvcA8V6rtWrlEn/CnXnOti3wymwDup6KmkvLb5pmnx3pcgy TDRfikL7I7Wt17L9b48RQAowXcZEiDdVuNYGyKLvv4Z+0611VJbXvyEFmkJ259Kz QfyQAUp+C+cZ83dvOXOVDDbROAVrI/AEmoSV5Hp+iNy8n9rYgBJXEnDPc9DsCiQw WUEhY38MZ7ICtMTMIPx97H+mtzK2pn0ZWf3vzR6r9xqUesmfbUK/L1EcyksOQ/ry i8ClIRPAj1PPnC5pyxWAwf3agXQ9V+eu -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:29 2024 by rpki-client on console-ams.rpki-client.org