$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: y0er1PCR2gVTFCmBhN/huNRq2pt28kul0fgSXagpdQ0= Subject key identifier: 7C:8D:A1:09:50:4B:58:27:3A:9C:E6:DD:0F:87:F1:5A:7A:E3:E0:CE Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 0728 Signing time: Fri 22 Nov 2024 21:16:48 +0000 Manifest this update: Fri 22 Nov 2024 21:16:47 +0000 Manifest next update: Fri 29 Nov 2024 21:16:47 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: UTKI7evP7E0iJyw6usBO4BVoYZZVj9BV9PCpESuNArw=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: 0a3iDH5bkO5J9nl1C2L0muZWxN/ekxHt+EqAXGCfnCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: Nov 22 21:16:47 2024 GMT Not After : Nov 29 21:16:47 2024 GMT Subject: CN=6740f4bf-9d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:bb:67:89:58:95:86:3d:d2:38:0b:a6:de: 5b:5b:48:79:4c:93:4f:86:da:61:35:37:51:9c:80: c2:d6:a1:c0:0b:0b:a4:23:db:b1:cf:65:40:b9:89: 4b:56:6f:91:4e:83:94:ba:81:c5:5f:1d:3b:f0:9f: 8c:a1:2a:93:eb:32:b3:6b:bf:7d:0a:71:33:2b:79: 66:3a:3d:ec:2b:70:12:dc:31:6e:27:0c:7f:01:6a: 31:6a:b5:93:57:aa:55:49:c7:2d:71:7f:7a:d6:5e: 5d:f7:ad:3a:98:17:75:a0:ce:c6:c4:16:c4:5e:3a: 95:d7:39:a2:a9:0f:71:c2:48:fe:a3:d2:77:5f:b4: 7f:e1:e6:3a:2c:b1:f5:3d:be:c1:26:ad:a8:4e:2f: 5e:3b:e2:98:2e:0d:08:70:68:61:bf:fb:dc:2f:20: 4b:06:53:0d:c3:b5:8d:ab:d0:8b:bd:5f:ed:94:7b: 0e:8d:ff:5d:08:67:27:a7:5b:b6:ff:18:fb:bf:f6: a9:96:f6:5b:83:e1:94:46:11:8d:1f:29:38:11:c0: 91:2a:0a:69:06:9d:7d:e8:e0:69:49:b4:b5:71:10: f9:28:18:a8:de:5b:9d:c2:73:6f:01:82:c9:40:23: e3:93:51:a6:b1:0e:7e:49:6a:b8:bf:50:d5:e1:d6: a0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8D:A1:09:50:4B:58:27:3A:9C:E6:DD:0F:87:F1:5A:7A:E3:E0:CE X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a7:28:ab:bc:58:d7:38:da:9a:e5:b3:59:4f:aa:d7:97:2e: 73:81:9f:b3:f6:33:66:9e:f8:a6:31:84:42:08:db:d6:f6:05: 43:b5:d8:ec:18:83:4b:f6:d0:6c:3d:7a:b7:45:55:48:ab:d0: 60:1d:42:01:a2:bc:97:51:ac:dc:12:ca:2a:0e:f4:aa:54:03: 33:df:e3:6b:16:c3:c1:56:5d:d7:59:27:25:f1:ef:1e:ea:fb: 3e:18:67:e0:2a:78:1c:fc:51:ec:f2:c6:5d:71:ac:40:c9:d4: a0:93:3c:03:59:0b:0d:36:5e:40:09:75:99:54:74:be:d4:00: e9:ef:8c:ed:7c:4e:b6:dd:c3:7d:42:9f:0a:1c:0c:d1:b5:c3: 2f:6f:e0:57:00:a1:34:22:ce:97:de:47:83:94:15:13:f8:9c: 00:a8:84:b7:d2:d3:02:35:2d:de:db:c8:c3:46:b3:bb:09:48: b8:7b:ae:07:2e:6f:f4:41:85:3d:dd:b3:df:a1:5d:75:3f:bc: 70:00:6b:14:fb:ab:1c:6a:ce:c2:70:ef:24:41:e9:88:ae:45: 52:b6:d6:54:89:9a:1a:d5:ed:55:9a:b1:32:01:09:a6:f3:cd: 1d:ca:4f:68:89:0b:88:7f:fa:d3:ba:ab:52:78:c4:07:20:e5: e6:f8:46:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjQxMTIyMjExNjQ3WhcNMjQxMTI5MjExNjQ3WjAYMRYwFAYD VQQDEw02NzQwZjRiZi05ZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmG7Z4lYlYY90jgLpt5bW0h5TJNPhtphNTdRnIDC1qHACwukI9uxz2VAuYlL Vm+RToOUuoHFXx078J+MoSqT6zKza799CnEzK3lmOj3sK3AS3DFuJwx/AWoxarWT V6pVScctcX961l5d9606mBd1oM7GxBbEXjqV1zmiqQ9xwkj+o9J3X7R/4eY6LLH1 Pb7BJq2oTi9eO+KYLg0IcGhhv/vcLyBLBlMNw7WNq9CLvV/tlHsOjf9dCGcnp1u2 /xj7v/aplvZbg+GURhGNHyk4EcCRKgppBp196OBpSbS1cRD5KBio3ludwnNvAYLJ QCPjk1GmsQ5+SWq4v1DV4daggwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyNoQlQ S1gnOpzm3Q+H8Vp64+DOMB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/pyirvFjXONqa5bNZT6rXly5zgZ+z9jNmnvimMYRCCNvW9gVDtdjs GINL9tBsPXq3RVVIq9BgHUIBoryXUazcEsoqDvSqVAMz3+NrFsPBVl3XWScl8e8e 6vs+GGfgKngc/FHs8sZdcaxAydSgkzwDWQsNNl5ACXWZVHS+1ADp74ztfE623cN9 Qp8KHAzRtcMvb+BXAKE0Is6X3keDlBUT+JwAqIS30tMCNS3e28jDRrO7CUi4e64H Lm/0QYU93bPfoV11P7xwAGsU+6scas7CcO8kQemIrkVSttZUiZoa1e1VmrEyAQmm 880dyk9oiQuIf/rTuqtSeMQHIOXm+EbO -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org