$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: i+6UCpOuvyUbaQfWJh+uTcmD2EGAvPSo57GEj8QBJ5s= Subject key identifier: F8:FC:6C:17:E8:CF:DD:93:78:C2:61:EF:88:DE:71:A3:13:82:B4:D5 Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 060C Signing time: Fri 22 Nov 2024 22:13:42 +0000 Manifest this update: Fri 22 Nov 2024 22:13:41 +0000 Manifest next update: Fri 29 Nov 2024 22:13:41 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: VJwG3+7vkx0r8/AT6fxSx5WOL6UpE7+134q/TDkNHlI=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: mTOOiMtwoSIKIvU9I/HZJyVIkpOV2ubS6z5GxznmdY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Nov 22 22:13:41 2024 GMT Not After : Nov 29 22:13:41 2024 GMT Subject: CN=67410215-94ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:12:cb:75:99:cb:9f:f4:03:27:ba:5a:6b: f8:33:c1:9e:a5:62:60:6d:03:34:c3:9f:cb:27:80: aa:be:9d:34:65:43:6b:88:f8:8c:85:de:b5:e8:82: 67:46:a5:d6:11:03:fa:40:74:9a:90:bb:ff:f7:6e: 38:27:f3:0a:48:8a:91:81:81:b3:94:69:d3:ed:ef: 9a:63:27:35:5c:28:83:58:86:88:bf:24:cb:35:7f: 1b:39:9d:c8:d4:75:39:2b:c8:4e:2a:4f:85:7a:26: 9b:88:3f:f3:a6:84:c9:e5:39:d0:ff:0a:b7:28:e7: 01:c0:b1:5c:ed:e5:1f:38:66:77:5d:2f:37:59:2c: a5:a9:0a:ff:cf:c2:cc:e3:9c:7f:6e:ce:61:22:84: de:e3:02:c8:d2:0f:4e:aa:d9:84:ea:1b:75:31:ef: 0d:40:23:bb:91:0b:99:43:4c:1d:29:50:52:6b:11: 36:6a:dc:b7:1d:f2:15:7e:8c:df:b1:52:36:a6:04: 72:cb:c3:de:b1:1d:db:b3:94:59:4f:6d:18:1d:f7: 89:48:82:7f:8d:71:d2:52:4a:cc:a4:97:4e:22:d5: b4:2a:f8:9d:46:fc:71:e4:bb:c9:36:9d:5c:79:31: 5e:d8:30:84:4c:34:a5:65:7f:42:c1:84:2e:1e:7a: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:6C:17:E8:CF:DD:93:78:C2:61:EF:88:DE:71:A3:13:82:B4:D5 X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:67:db:2b:13:ab:80:5a:18:5a:ce:d8:6b:c4:7c:c5:12:59: 17:fa:d2:46:c1:f7:2a:c6:e2:33:10:25:35:17:29:9b:b6:be: 81:a9:32:4c:15:78:6f:5b:3b:8d:86:fc:c6:41:74:7b:62:15: 85:76:83:3e:ee:38:d4:57:d2:4d:79:90:8a:9d:67:d7:34:6d: 6f:f2:b2:2b:5a:4d:b4:bb:92:52:7a:55:aa:b5:31:f1:ca:44: 41:fb:78:cc:ea:59:0e:80:49:b5:f0:80:df:b5:74:cf:e5:c2: fe:d6:8a:8d:0c:62:43:10:5d:2b:19:17:79:28:8a:b3:44:0b: 61:6b:ea:f5:45:ca:1f:39:fe:5f:4d:cd:6e:36:d3:f1:44:66: 95:81:70:89:3e:64:f4:54:77:79:2f:97:c4:1f:c7:4e:fa:27: d4:11:be:8a:1c:c0:1e:2b:55:d8:bb:01:4a:ab:79:56:b4:19: 5e:9d:58:58:9d:29:71:11:6d:e2:d2:2a:a0:a7:20:b8:c0:be: c3:a7:cb:03:a1:e0:ee:45:3a:54:7e:89:36:0e:a0:97:d6:37: 0b:c7:15:17:ec:fc:fe:50:c1:8e:1b:f0:b9:c5:70:83:37:65: 11:f9:81:4b:e2:69:89:35:9e:db:5c:5d:7a:45:0e:69:81:ba: b0:0c:5c:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjQxMTIyMjIxMzQxWhcNMjQxMTI5MjIxMzQxWjAYMRYwFAYD VQQDEw02NzQxMDIxNS05NGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAgSy3WZy5/0Aye6Wmv4M8GepWJgbQM0w5/LJ4Cqvp00ZUNriPiMhd616IJn RqXWEQP6QHSakLv/9244J/MKSIqRgYGzlGnT7e+aYyc1XCiDWIaIvyTLNX8bOZ3I 1HU5K8hOKk+FeiabiD/zpoTJ5TnQ/wq3KOcBwLFc7eUfOGZ3XS83WSylqQr/z8LM 45x/bs5hIoTe4wLI0g9OqtmE6ht1Me8NQCO7kQuZQ0wdKVBSaxE2aty3HfIVfozf sVI2pgRyy8PesR3bs5RZT20YHfeJSIJ/jXHSUkrMpJdOItW0KvidRvxx5LvJNp1c eTFe2DCETDSlZX9CwYQuHnrj5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPj8bBfo z92TeMJh74jecaMTgrTVMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMZ9srE6uAWhhazthrxHzFElkX+tJGwfcqxuIzECU1Fymbtr6BqTJM FXhvWzuNhvzGQXR7YhWFdoM+7jjUV9JNeZCKnWfXNG1v8rIrWk20u5JSelWqtTHx ykRB+3jM6lkOgEm18IDftXTP5cL+1oqNDGJDEF0rGRd5KIqzRAtha+r1RcofOf5f Tc1uNtPxRGaVgXCJPmT0VHd5L5fEH8dO+ifUEb6KHMAeK1XYuwFKq3lWtBlenVhY nSlxEW3i0iqgpyC4wL7Dp8sDoeDuRTpUfok2DqCX1jcLxxUX7Pz+UMGOG/C5xXCD N2UR+YFL4mmJNZ7bXF16RQ5pgbqwDFz5 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org