$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft File: tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json) Hash identifier: dUNkLUHv5N0xmH4tbnxFagq/S9xF5tnlIBghxUZF2ZU= Subject key identifier: 7C:94:1F:91:FE:2A:BA:13:7E:D8:48:0B:01:91:C7:2D:D1:62:78:86 Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft Manifest number: 062D Signing time: Fri 22 Nov 2024 22:05:15 +0000 Manifest this update: Fri 22 Nov 2024 22:05:14 +0000 Manifest next update: Fri 29 Nov 2024 22:05:14 +0000 Files and hashes: 1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: SvT45baPB5s+sPoDTqq8eLlgRwgL8bSF2sa4/6S8l4E=) 2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: 0pxED4xhSPfZB05cJwSfNUguCEn2SGjVg+yeizS1Veg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Validity Not Before: Nov 22 22:05:14 2024 GMT Not After : Nov 29 22:05:14 2024 GMT Subject: CN=6741001a-7688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:9b:49:77:06:81:89:8a:73:fd:11:bd:46: 6b:c4:0c:a5:52:9f:82:ae:68:30:87:76:e3:e5:f2: eb:2f:2d:9e:c0:95:8e:48:a4:1b:02:22:b6:ee:98: 52:d6:6e:3a:b9:89:28:2a:09:32:0a:50:ca:c9:ad: aa:98:e6:63:db:39:9e:de:ca:98:46:d5:13:da:2f: fa:97:d0:58:c4:7b:ca:e5:c4:2f:83:50:44:aa:1d: ef:cd:a0:7f:43:fa:c5:bf:cc:75:25:cb:50:15:75: 2e:cb:bf:06:81:44:20:d6:11:56:2f:7a:e1:78:4d: ab:32:f9:31:c3:1a:e8:98:04:0c:19:b9:8d:8c:41: e1:66:1f:d8:e9:b7:87:72:84:ec:4a:ad:e2:05:5a: 92:fb:4b:14:d6:58:03:1a:04:de:6b:7c:c8:c6:d2: f5:ed:27:9b:7d:10:26:6d:7f:3e:0e:55:2f:b8:9f: 0d:e6:c9:c3:5a:11:f0:0f:fe:24:23:ff:ef:ef:37: 29:7d:6a:f7:12:00:3b:56:81:52:07:fb:0a:1c:b3: 9d:64:b2:59:f2:69:55:ae:64:08:ba:a8:81:a6:d0: 85:11:9f:4d:89:81:6f:ef:7e:ef:ac:db:de:2c:31: ec:8f:8d:8e:72:fb:96:81:a8:ee:45:87:73:a7:14: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:94:1F:91:FE:2A:BA:13:7E:D8:48:0B:01:91:C7:2D:D1:62:78:86 X509v3 Authority Key Identifier: keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:74:36:02:1e:d6:bb:2b:1f:c9:1c:e2:e0:3b:20:99:ba:bf: 31:f6:53:bd:fd:aa:02:16:c9:bb:76:e7:91:cc:e4:ef:2d:d9: 5c:41:ce:b3:bf:d5:30:ae:70:81:46:44:64:13:32:32:43:d6: 35:30:1d:e7:46:16:62:38:72:cf:f0:5f:66:f8:ac:60:8c:8f: 2f:ef:b7:f2:d5:1b:6e:6f:3a:00:84:c9:95:df:8b:c3:30:47: 4d:74:ed:bd:0c:2f:be:7c:c3:31:e9:7a:b1:c4:f3:0b:70:f4: f1:ab:19:60:69:38:ca:4e:a2:08:2f:f9:ac:14:e0:bb:dd:61: d0:f7:e0:ac:e6:4b:93:be:cb:77:25:11:5b:fa:9d:cd:73:66: 37:b0:52:ee:19:d3:2e:1a:c5:51:44:4e:ad:c3:ce:d3:47:36: 34:d2:da:fa:a7:25:d0:80:af:f2:d9:17:1d:f7:b1:43:4c:6b: 0f:c8:ef:48:b2:7c:b4:96:35:a7:80:09:22:85:9d:07:8c:cb: e7:09:b1:11:0c:e2:85:c6:38:e8:49:a8:16:ea:cf:36:77:0c: bc:50:67:07:cc:17:fd:0d:b8:c2:1b:7f:ce:c8:a3:a7:90:9e: 84:20:be:84:e7:2d:4c:4a:34:fb:74:cf:bd:f1:86:f2:c2:36: 3c:62:c4:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNUIxMTAvBgNVBAUTKEI0REZERTEwMjQ4QzkwQzU1ODRCMDE2RUE2RTZCNDlF NzgxRUQ4MjAwHhcNMjQxMTIyMjIwNTE0WhcNMjQxMTI5MjIwNTE0WjAYMRYwFAYD VQQDEw02NzQxMDAxYS03Njg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOibSXcGgYmKc/0RvUZrxAylUp+Crmgwh3bj5fLrLy2ewJWOSKQbAiK27phS 1m46uYkoKgkyClDKya2qmOZj2zme3sqYRtUT2i/6l9BYxHvK5cQvg1BEqh3vzaB/ Q/rFv8x1JctQFXUuy78GgUQg1hFWL3rheE2rMvkxwxromAQMGbmNjEHhZh/Y6beH coTsSq3iBVqS+0sU1lgDGgTea3zIxtL17SebfRAmbX8+DlUvuJ8N5snDWhHwD/4k I//v7zcpfWr3EgA7VoFSB/sKHLOdZLJZ8mlVrmQIuqiBptCFEZ9NiYFv737vrNve LDHsj42OcvuWgajuRYdzpxRPIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyUH5H+ KroTfthICwGRxy3RYniGMB8GA1UdIwQYMBaAFLTf3hAkjJDFWEsBbqbmtJ54Htgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE1Qi8xMUU5NkIzNDcw MTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtNVllTd0Z1cHVhMG5uZ2Uy Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROX2VFQ1NNa01WWVN3RnVwdWEwbm5nZTJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE1Qi8xMUU5NkIzNDcwMTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtN VllTd0Z1cHVhMG5uZ2UyQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3dDYCHta7Kx/JHOLgOyCZur8x9lO9/aoCFsm7dueRzOTvLdlcQc6z v9UwrnCBRkRkEzIyQ9Y1MB3nRhZiOHLP8F9m+KxgjI8v77fy1RtubzoAhMmV34vD MEdNdO29DC++fMMx6XqxxPMLcPTxqxlgaTjKTqIIL/msFOC73WHQ9+Cs5kuTvst3 JRFb+p3Nc2Y3sFLuGdMuGsVRRE6tw87TRzY00tr6pyXQgK/y2Rcd97FDTGsPyO9I sny0ljWngAkihZ0HjMvnCbERDOKFxjjoSagW6s82dwy8UGcHzBf9DbjCG3/OyKOn kJ6EIL6E5y1MSjT7dM+98YbywjY8YsSE -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org