$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft File: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json) Hash identifier: m7YHWldk18TTSTVZEUVCoVjJKsD/R+AwHIUyAl7RMys= Subject key identifier: 88:47:74:01:3F:A9:CA:9E:A7:CD:FA:22:DA:92:C5:73:07:7B:32:B2 Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C Certificate issuer: /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft Manifest number: E1 Signing time: Sat 23 Nov 2024 03:33:18 +0000 Manifest this update: Sat 23 Nov 2024 03:33:17 +0000 Manifest next update: Sat 30 Nov 2024 03:33:17 +0000 Files and hashes: 1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: L4WBFadwJmf03wq1PO9j19VfNToMx2/DVEQ/GmTFcZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Validity Not Before: Nov 23 03:33:17 2024 GMT Not After : Nov 30 03:33:17 2024 GMT Subject: CN=67414cfd-2ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:82:f6:02:d2:d0:ab:a2:f1:b6:40:5e:b0: e2:a5:f6:03:0e:01:57:f8:28:bb:c5:b6:2f:fb:07: b7:25:72:20:61:7a:31:dd:37:c5:d3:8e:86:79:1f: 7f:1c:2a:92:38:34:cc:95:4a:64:87:1a:fc:b6:3a: 60:b2:0f:bc:dd:eb:a6:5a:05:7a:2c:3c:e3:bd:25: c8:4b:fa:f1:bb:58:53:fa:b2:76:ac:e8:f0:e3:30: ea:bc:72:cd:8c:c9:3b:bb:48:e8:5d:1c:44:99:5b: d7:3d:56:14:35:5b:76:02:2e:21:b4:80:2a:8f:eb: d3:ae:d6:94:f0:af:d6:eb:a7:e0:1d:35:00:1e:1b: 21:0e:dc:6f:d6:16:fb:3f:6d:67:04:90:de:b1:64: ab:03:5a:80:2a:e3:f8:ee:7c:d8:32:1a:98:ac:83: ab:f6:17:0a:67:92:ed:38:38:21:96:46:7d:e9:ec: 11:7d:1e:04:0c:7a:45:42:28:2d:92:d0:81:2c:2a: d9:76:15:a2:43:5b:3b:64:8d:7d:c2:eb:d2:0a:f2: ce:c0:a0:bc:59:45:06:03:75:0c:79:a3:88:d1:43: fb:a4:43:f2:f6:d9:eb:e4:5e:02:30:c4:2b:37:a8: b0:cc:2a:e1:2c:39:07:fb:2f:69:87:2d:14:99:f7: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:47:74:01:3F:A9:CA:9E:A7:CD:FA:22:DA:92:C5:73:07:7B:32:B2 X509v3 Authority Key Identifier: keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a5:1f:44:68:11:ec:26:68:13:44:67:39:fb:1e:04:68:4b: fa:dd:6f:37:61:df:4c:29:9d:a3:cc:b7:74:af:fc:c9:e7:ac: b6:19:fd:1f:4d:99:3f:ad:d2:5d:85:4b:7c:31:7e:b3:9d:29: ea:b4:75:8d:bc:a5:2f:61:7e:93:08:52:b9:44:53:1e:0e:5c: 1a:02:ac:60:48:1e:79:d8:0d:5f:a9:85:df:f2:53:cb:76:68: fb:50:e1:0a:33:57:cc:9e:23:16:29:48:32:37:b4:ea:fa:f8: c3:41:6e:cc:7c:a8:b9:42:54:fc:d0:6e:13:43:cc:5e:12:0a: ea:48:f4:15:6a:7b:78:7e:61:76:0a:8e:f2:2f:cb:1f:4e:1f: 40:84:f5:15:3b:47:7e:4d:a1:15:87:35:db:0c:10:89:1e:ff: 07:69:1e:77:18:12:04:7a:c2:16:32:79:02:87:60:cd:00:77: 65:e8:ca:2b:84:7e:73:81:1c:ad:cb:32:5b:d9:7e:74:c5:d0: 29:55:20:e4:dd:bf:b3:ce:f1:85:55:40:7b:42:99:67:85:5a: 7c:57:25:3d:ec:98:8f:7e:0c:54:48:6c:cb:38:0c:eb:cd:2c: 2c:7a:1a:47:61:37:bf:c5:61:c0:55:83:76:db:50:a4:3f:01: c7:9b:9d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzNjkxMTAvBgNVBAUTKEVFQUU1MjkyM0IwQkFFNzJDOTgzRDAxMDVGNTA5REYy MTBCQzA5MUMwHhcNMjQxMTIzMDMzMzE3WhcNMjQxMTMwMDMzMzE3WjAYMRYwFAYD VQQDEw02NzQxNGNmZC0yZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtb6C9gLS0Kui8bZAXrDipfYDDgFX+Ci7xbYv+we3JXIgYXox3TfF046GeR9/ HCqSODTMlUpkhxr8tjpgsg+83eumWgV6LDzjvSXIS/rxu1hT+rJ2rOjw4zDqvHLN jMk7u0joXRxEmVvXPVYUNVt2Ai4htIAqj+vTrtaU8K/W66fgHTUAHhshDtxv1hb7 P21nBJDesWSrA1qAKuP47nzYMhqYrIOr9hcKZ5LtODghlkZ96ewRfR4EDHpFQigt ktCBLCrZdhWiQ1s7ZI19wuvSCvLOwKC8WUUGA3UMeaOI0UP7pEPy9tnr5F4CMMQr N6iwzCrhLDkH+y9phy0UmfdhzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhHdAE/ qcqep836ItqSxXMHezKyMB8GA1UdIwQYMBaAFO6uUpI7C65yyYPQEF9QnfIQvAkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM2OS9BNTFDNENBQTRF RkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJuTEpnOUFRWDFDZDhoQzhD UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxNVNranNMcm5MSmc5QVFYMUNkOGhDOENSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM2OS9BNTFDNENBQTRFRkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJu TEpnOUFRWDFDZDhoQzhDUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRpR9EaBHsJmgTRGc5+x4EaEv63W83Yd9MKZ2jzLd0r/zJ56y2Gf0f TZk/rdJdhUt8MX6znSnqtHWNvKUvYX6TCFK5RFMeDlwaAqxgSB552A1fqYXf8lPL dmj7UOEKM1fMniMWKUgyN7Tq+vjDQW7MfKi5QlT80G4TQ8xeEgrqSPQVant4fmF2 Co7yL8sfTh9AhPUVO0d+TaEVhzXbDBCJHv8HaR53GBIEesIWMnkCh2DNAHdl6Mor hH5zgRytyzJb2X50xdApVSDk3b+zzvGFVUB7QplnhVp8VyU97JiPfgxUSGzLOAzr zSwsehpHYTe/xWHAVYN221CkPwHHm52O -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:14 2024 by rpki-client on console-ams.rpki-client.org