$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft File: 7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json) Hash identifier: jv6RxBYroYwBF3sQxDl1XP9tRa3Lr+9uBXblTlSLftI= Subject key identifier: AE:48:B8:0F:69:6B:C3:25:3A:C1:BA:3C:5E:ED:73:5E:5E:66:5A:60 Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7 Certificate issuer: /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7 Certificate serial: 093A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft Manifest number: 0934 Signing time: Fri 22 Nov 2024 20:02:04 +0000 Manifest this update: Fri 22 Nov 2024 20:02:03 +0000 Manifest next update: Fri 29 Nov 2024 20:02:03 +0000 Files and hashes: 1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: neVtCFPAM1laFJV9rGrKgFf1kncCL5G67pZkvNMwSTI=) 2: FA7CB46C8AB411EA89D83541C4F9AE02.roa (hash: yD0pXJuzsIcwlQVDxXtH8gNE+deycvgoI/IITsyuLRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2362 (0x93a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7 Validity Not Before: Nov 22 20:02:03 2024 GMT Not After : Nov 29 20:02:03 2024 GMT Subject: CN=6740e33c-fa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:ac:04:75:e5:b0:60:cc:73:80:ae:23:cf: 19:bf:66:72:0f:97:7b:65:9d:58:3d:1a:1b:a9:91: 39:06:ca:b2:31:ba:45:ff:d9:38:cb:5b:c0:76:f0: 44:df:46:22:be:1a:d3:8e:4a:3d:80:07:14:bf:9a: 4f:80:96:61:e2:bb:56:a4:9b:58:80:b6:04:5d:46: 7b:1c:be:89:d6:f7:cc:05:f6:6a:37:9f:70:22:f2: 65:16:16:25:5e:04:00:74:86:f9:a5:37:34:cf:15: 60:e6:ac:28:c0:5f:82:f5:64:10:7f:85:64:36:a1: bd:31:35:64:a3:13:7c:b3:41:54:8d:f4:56:3c:58: 0c:fe:5a:08:e8:ea:cb:4d:7b:8f:4f:b6:28:9d:95: e2:71:c5:d4:a6:61:9e:07:6e:fe:0d:5d:65:39:21: 30:d0:22:15:23:e5:34:a3:f2:ff:a8:52:c8:39:11: a1:d0:be:de:5e:4b:d0:aa:e6:76:aa:14:8e:cc:7a: 71:9a:ad:27:25:13:b5:59:a5:4f:f0:d1:2e:50:1b: 21:2f:77:7f:55:23:ac:f9:bd:41:3d:43:74:e0:d6: e1:61:98:33:88:8c:05:42:88:4c:98:85:ad:2e:ef: 42:fa:ae:88:52:85:ff:b7:f7:3d:7e:82:e6:6a:55: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:48:B8:0F:69:6B:C3:25:3A:C1:BA:3C:5E:ED:73:5E:5E:66:5A:60 X509v3 Authority Key Identifier: keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c7:48:ad:63:12:1d:87:f8:4b:3d:dd:90:ca:6a:ce:76:34: e3:e4:2a:28:28:8e:65:1e:b7:2a:34:6c:35:d7:13:f6:01:f2: 36:ca:17:07:8f:8b:04:4a:cf:f0:c6:1d:d5:9a:bb:99:67:0c: ef:19:4d:71:af:2b:b8:fc:42:15:bc:e9:b8:bc:08:cf:98:10: 6d:1d:f7:16:7e:aa:82:a3:67:35:c4:ce:f9:22:a1:42:37:26: 21:2c:94:2a:87:92:9e:2b:04:9b:f1:4b:79:77:42:c4:e3:ea: 9c:e8:9a:a6:b6:d8:5c:80:49:e8:2b:f5:61:3d:35:06:5f:8c: 14:69:4a:f9:f1:b0:e1:01:f2:30:ec:cb:36:ed:5e:a1:2f:4b: cf:5a:3a:2d:3e:fc:38:e3:97:c9:d0:d6:2f:c2:30:85:8e:87: 50:26:6c:12:21:bb:4e:47:2d:c4:e0:fa:22:0a:7c:ae:bd:24: 12:6c:95:03:ce:86:e6:95:8a:65:72:8d:e8:82:44:ec:3b:54: 3b:0f:01:f2:4a:b2:72:d8:95:87:2f:53:dc:7e:7f:ae:44:d3: cb:4a:9a:4b:d4:4c:be:90:ec:fc:04:48:56:b8:fd:b7:67:58: 0d:7e:a0:0f:02:58:3d:b5:dc:c1:60:f0:04:ef:95:e9:7f:6b: 42:91:15:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGNkMxMTAvBgNVBAUTKEVEQUYxRTlBNzlEOUZFQ0IxMDc4ODNBRkQzNzU3RkE4 RjcwQTMyRDcwHhcNMjQxMTIyMjAwMjAzWhcNMjQxMTI5MjAwMjAzWjAYMRYwFAYD VQQDEw02NzQwZTMzYy1mYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTKsBHXlsGDMc4CuI88Zv2ZyD5d7ZZ1YPRobqZE5BsqyMbpF/9k4y1vAdvBE 30YivhrTjko9gAcUv5pPgJZh4rtWpJtYgLYEXUZ7HL6J1vfMBfZqN59wIvJlFhYl XgQAdIb5pTc0zxVg5qwowF+C9WQQf4VkNqG9MTVkoxN8s0FUjfRWPFgM/loI6OrL TXuPT7YonZXiccXUpmGeB27+DV1lOSEw0CIVI+U0o/L/qFLIORGh0L7eXkvQquZ2 qhSOzHpxmq0nJRO1WaVP8NEuUBshL3d/VSOs+b1BPUN04NbhYZgziIwFQohMmIWt Lu9C+q6IUoX/t/c9foLmalVLTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5IuA9p a8MlOsG6PF7tc15eZlpgMB8GA1UdIwQYMBaAFO2vHpp52f7LEHiDr9N1f6j3CjLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkY2Qy85RTMxRjNCMjhB QjMxMUVBOTNBNkJBM0VDNEY5QUUwMi83YThlbW5uWl9zc1FlSU92MDNWX3FQY0tN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhOGVtbm5aX3NzUWVJT3YwM1ZfcVBjS010Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkY2Qy85RTMxRjNCMjhBQjMxMUVBOTNBNkJBM0VDNEY5QUUwMi83YThlbW5uWl9z c1FlSU92MDNWX3FQY0tNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGx0itYxIdh/hLPd2QymrOdjTj5CooKI5lHrcqNGw11xP2AfI2yhcH j4sESs/wxh3VmruZZwzvGU1xryu4/EIVvOm4vAjPmBBtHfcWfqqCo2c1xM75IqFC NyYhLJQqh5KeKwSb8Ut5d0LE4+qc6JqmtthcgEnoK/VhPTUGX4wUaUr58bDhAfIw 7Ms27V6hL0vPWjotPvw445fJ0NYvwjCFjodQJmwSIbtORy3E4PoiCnyuvSQSbJUD zobmlYplco3ogkTsO1Q7DwHySrJy2JWHL1Pcfn+uRNPLSppL1Ey+kOz8BEhWuP23 Z1gNfqAPAlg9tdzBYPAE75Xpf2tCkRUU -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org