$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: 5VKCdbhc2glVhbrQ6goQg6gWoOApQX0KS8AGKj2nlhk= Subject key identifier: 27:DA:9F:3E:A1:69:FE:5B:97:02:7D:09:F5:B6:DE:90:E0:A0:B0:2A Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0D47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0D44 Signing time: Fri 22 Nov 2024 17:56:33 +0000 Manifest this update: Fri 22 Nov 2024 17:56:32 +0000 Manifest next update: Fri 29 Nov 2024 17:56:32 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: Ha7dsZJmaYLq6PuVEa72F2NQb02L4x0rbOLBTpKSBpc=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: GCvsBXw8hsLCyBZEAMehadv7yDLwMvsCH+SsV7Oukqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3399 (0xd47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Nov 22 17:56:32 2024 GMT Not After : Nov 29 17:56:32 2024 GMT Subject: CN=6740c5d0-e3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:c0:1b:d0:b0:3d:03:24:12:e1:08:8d:a0: bd:58:55:df:a2:fa:82:e6:65:47:88:81:44:4c:7e: 30:7d:3f:ab:e4:ac:44:f0:a4:86:f0:ca:af:b4:6c: 2d:8e:66:5e:fd:6c:9e:93:85:9b:4d:83:93:78:86: 84:ab:d5:f4:a0:54:91:8d:c8:5c:92:d6:d9:7f:2b: eb:6a:ec:43:3d:92:17:c0:03:b0:1b:75:cb:fa:d5: 7d:b4:6e:ce:eb:ba:f8:97:56:19:a8:fe:ac:cb:98: cd:51:9a:79:b1:ef:7a:58:11:87:69:c3:72:0b:7c: fd:81:97:9d:a1:93:f4:57:91:07:11:83:7b:b9:88: c7:51:93:d1:d6:6c:30:49:51:73:21:fe:75:cd:17: 76:f3:4d:5a:c1:28:62:a7:6c:59:e5:18:5f:ee:ce: d4:83:c2:24:56:a8:6f:76:92:4c:bd:20:57:48:eb: 51:5a:56:af:c3:5c:8d:be:3c:5a:19:67:59:74:89: 15:6e:72:ae:9a:bf:2a:98:21:eb:68:61:2a:4f:a0: 84:54:4f:c4:bd:34:3a:f6:05:60:b4:30:20:61:11: 9f:8a:f1:7f:14:59:9b:15:8f:98:fa:0d:bf:75:b4: 79:77:aa:b7:11:a1:6f:79:b8:f1:f3:3a:31:d8:0d: ba:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:9F:3E:A1:69:FE:5B:97:02:7D:09:F5:B6:DE:90:E0:A0:B0:2A X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:56:9d:11:05:39:9a:85:8b:11:a7:14:90:e6:8f:13:0c:2f: 0f:09:8f:5d:f0:a0:6f:8e:fe:a3:85:ab:96:48:83:b5:38:c6: d2:75:f8:66:06:c9:d6:75:03:8a:72:a7:d4:47:96:f1:65:ca: ff:b7:a2:dd:61:43:44:74:b3:d5:da:52:ef:77:6c:2e:fc:7d: 29:be:9e:0c:1a:4f:89:2e:b6:e0:3a:7d:9c:52:17:03:d7:2a: fe:cc:63:38:eb:2e:21:f7:dc:6b:28:51:9c:92:bd:c7:ba:fd: 76:f0:2f:b5:d6:a8:63:40:1d:8c:eb:48:6f:ac:65:94:c6:27: 64:ee:5e:78:16:87:28:30:0c:0e:5b:de:ac:85:2c:13:96:38: 56:50:e4:6b:37:61:af:56:c2:91:3e:77:8f:3f:2a:a0:70:e2: 41:46:ec:55:be:fd:ac:0f:7b:3b:62:88:4f:b9:7f:a9:88:6b: 01:9c:a9:0e:be:e2:3d:d3:93:4e:90:14:97:cf:97:d4:ca:1e: 49:c1:0c:65:63:48:31:d5:b4:b2:54:4b:eb:86:c7:5e:17:54: 3a:c7:06:ce:cc:7e:f6:ab:41:1c:68:40:3a:10:66:19:f9:37: b8:bb:32:ff:c0:fc:49:4a:7a:44:5d:e7:ec:ec:9f:f8:51:38: 21:45:89:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjQxMTIyMTc1NjMyWhcNMjQxMTI5MTc1NjMyWjAYMRYwFAYD VQQDEw02NzQwYzVkMC1lM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbDAG9CwPQMkEuEIjaC9WFXfovqC5mVHiIFETH4wfT+r5KxE8KSG8MqvtGwt jmZe/Wyek4WbTYOTeIaEq9X0oFSRjchcktbZfyvrauxDPZIXwAOwG3XL+tV9tG7O 67r4l1YZqP6sy5jNUZp5se96WBGHacNyC3z9gZedoZP0V5EHEYN7uYjHUZPR1mww SVFzIf51zRd2801awShip2xZ5Rhf7s7Ug8IkVqhvdpJMvSBXSOtRWlavw1yNvjxa GWdZdIkVbnKumr8qmCHraGEqT6CEVE/EvTQ69gVgtDAgYRGfivF/FFmbFY+Y+g2/ dbR5d6q3EaFvebjx8zox2A26xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfanz6h af5blwJ9CfW23pDgoLAqMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Vp0RBTmahYsRpxSQ5o8TDC8PCY9d8KBvjv6jhauWSIO1OMbSdfhm BsnWdQOKcqfUR5bxZcr/t6LdYUNEdLPV2lLvd2wu/H0pvp4MGk+JLrbgOn2cUhcD 1yr+zGM46y4h99xrKFGckr3Huv128C+11qhjQB2M60hvrGWUxidk7l54FocoMAwO W96shSwTljhWUORrN2GvVsKRPnePPyqgcOJBRuxVvv2sD3s7YohPuX+piGsBnKkO vuI905NOkBSXz5fUyh5JwQxlY0gx1bSyVEvrhsdeF1Q6xwbOzH72q0EcaEA6EGYZ +Te4uzL/wPxJSnpEXefs7J/4UTghRYkW -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org