$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft File: 7Wa7QNEhumPFhZepP-d5xx0zF7s.mft (raw, json) Hash identifier: NDC6fNTnrPKGjgz2J5Jo+Eoe3vMZgT7kuG/AjNmh/yE= Subject key identifier: 4B:6D:06:F1:7F:05:A0:83:A1:5C:8D:B7:DA:5A:9E:02:F5:B4:77:53 Authority key identifier: ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB Certificate issuer: /CN=A916D8BE/serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB Certificate serial: 17D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft Manifest number: 17CB Signing time: Fri 22 Nov 2024 16:32:59 +0000 Manifest this update: Fri 22 Nov 2024 16:32:59 +0000 Manifest next update: Fri 29 Nov 2024 16:32:59 +0000 Files and hashes: 1: 7Wa7QNEhumPFhZepP-d5xx0zF7s.crl (hash: YrphZqsHjL3tRqcbJyfYyvGtd0/4TToIrsnAxgvM64s=) 2: E0CEA472AF1911E7B848027EC4F9AE02.roa (hash: TssE0PJiXYYcEB2YrA++xagVqViSeFBsHV31+MUgEYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6099 (0x17d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8BE/serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB Validity Not Before: Nov 22 16:32:59 2024 GMT Not After : Nov 29 16:32:59 2024 GMT Subject: CN=6740b23b-9768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:6d:ac:aa:30:a4:55:9d:41:eb:bb:2f:21: ca:88:5b:09:a4:96:da:95:4d:0b:9a:14:26:9a:66: b0:b9:3e:10:1e:d0:d4:9b:f0:dc:74:b9:87:72:6d: 0a:c2:26:e3:c9:8f:e6:b0:c6:7a:aa:9c:ee:72:87: aa:5a:b5:69:20:58:92:6a:7f:80:da:de:22:a5:99: ce:85:8c:ae:4c:9d:d2:ac:0b:4a:1a:65:50:c8:72: 66:33:13:e8:8c:71:8d:01:df:68:fe:1e:64:14:9f: 8d:0d:a3:55:a2:d0:0b:63:91:68:f3:01:2d:cc:c1: e0:3a:63:be:fc:43:0c:10:fe:18:33:02:d8:93:e8: f5:e0:e4:9b:de:7c:b9:82:d3:0b:13:8f:5a:d1:23: 0e:de:e4:7a:ab:ec:14:63:25:5f:7c:77:c0:fa:19: 55:9a:66:56:60:e9:b3:64:c2:97:2a:8d:22:62:1e: 8a:c0:f6:cb:b8:f3:8e:d3:b6:9e:19:6c:3c:6c:b8: 75:5e:98:da:14:2c:7e:33:79:8c:cc:ac:71:ca:4e: 64:55:8f:4f:2c:6d:28:03:34:60:20:86:90:1b:91: ee:10:99:99:74:7c:51:41:d4:b6:b6:4b:f2:af:45: 69:b9:2c:ea:19:5a:1a:57:7e:81:9e:69:42:83:21: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6D:06:F1:7F:05:A0:83:A1:5C:8D:B7:DA:5A:9E:02:F5:B4:77:53 X509v3 Authority Key Identifier: keyid:ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:de:1b:4f:60:91:2e:59:a6:a3:c6:ef:63:a2:fb:93:f7:8d: 25:73:26:c0:f0:f9:35:5e:3e:e4:c6:e9:bd:17:15:28:5c:f0: 7e:75:ee:b6:f4:f8:3a:31:0e:f5:41:21:30:b6:0a:6b:95:35: d4:41:83:b0:9f:a0:c2:c8:e5:0b:03:8a:87:ef:af:a0:a7:13: ee:ad:46:1e:62:02:0e:ac:62:86:3e:b9:83:fb:6a:16:51:99: 1d:cb:40:5c:9c:0c:40:b6:a5:d7:a9:d0:82:e8:e6:7c:ea:ed: 80:17:e9:da:e9:2f:7f:48:3e:b4:fe:19:d0:b8:00:a5:43:6b: e9:fc:b2:26:ee:f5:8d:45:11:1f:71:c7:88:9f:6b:ab:ce:c4: ff:19:fd:25:c6:df:d1:e7:3c:8f:0f:42:d2:48:0e:24:9a:19: 7d:3b:19:fb:66:47:d6:dc:a8:df:8c:e3:9e:1b:62:bf:1e:84: de:69:41:94:0e:ce:4b:76:df:b7:8c:dc:ad:cf:34:97:c2:e5: 95:90:5c:f8:28:a6:a0:8d:79:f3:2b:12:46:67:63:9b:61:2b: 42:86:31:2e:8a:cb:4c:a9:21:df:ea:c6:e2:6c:cf:eb:fc:4c: 0a:17:31:f5:84:a3:bd:86:90:cd:6d:3c:f2:78:87:8a:ec:6d: 59:7e:24:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4QkUxMTAvBgNVBAUTKEVENjZCQjQwRDEyMUJBNjNDNTg1OTdBOTNGRTc3OUM3 MUQzMzE3QkIwHhcNMjQxMTIyMTYzMjU5WhcNMjQxMTI5MTYzMjU5WjAYMRYwFAYD VQQDEw02NzQwYjIzYi05NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uFtrKowpFWdQeu7LyHKiFsJpJbalU0LmhQmmmawuT4QHtDUm/DcdLmHcm0K wibjyY/msMZ6qpzucoeqWrVpIFiSan+A2t4ipZnOhYyuTJ3SrAtKGmVQyHJmMxPo jHGNAd9o/h5kFJ+NDaNVotALY5Fo8wEtzMHgOmO+/EMMEP4YMwLYk+j14OSb3ny5 gtMLE49a0SMO3uR6q+wUYyVffHfA+hlVmmZWYOmzZMKXKo0iYh6KwPbLuPOO07ae GWw8bLh1XpjaFCx+M3mMzKxxyk5kVY9PLG0oAzRgIIaQG5HuEJmZdHxRQdS2tkvy r0VpuSzqGVoaV36BnmlCgyEy1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEttBvF/ BaCDoVyNt9pangL1tHdTMB8GA1UdIwQYMBaAFO1mu0DRIbpjxYWXqT/neccdMxe7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhCRS83RDA1MjIwOEFE QUQxMUU3OTg0MkZFMTNDNEY5QUUwMi83V2E3UU5FaHVtUEZoWmVwUC1kNXh4MHpG N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdXYTdRTkVodW1QRmhaZXBQLWQ1eHgwekY3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhCRS83RDA1MjIwOEFEQUQxMUU3OTg0MkZFMTNDNEY5QUUwMi83V2E3UU5FaHVt UEZoWmVwUC1kNXh4MHpGN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB03htPYJEuWaajxu9jovuT940lcybA8Pk1Xj7kxum9FxUoXPB+de62 9Pg6MQ71QSEwtgprlTXUQYOwn6DCyOULA4qH76+gpxPurUYeYgIOrGKGPrmD+2oW UZkdy0BcnAxAtqXXqdCC6OZ86u2AF+na6S9/SD60/hnQuAClQ2vp/LIm7vWNRREf cceIn2urzsT/Gf0lxt/R5zyPD0LSSA4kmhl9Oxn7ZkfW3KjfjOOeG2K/HoTeaUGU Ds5Ldt+3jNytzzSXwuWVkFz4KKagjXnzKxJGZ2ObYStChjEuistMqSHf6sbibM/r /EwKFzH1hKO9hpDNbTzyeIeK7G1ZfiR2 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org