$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: ECBItvOY/6kIaanpYt9kZdJwY7sSe73YSstY+xXPVxk= Subject key identifier: 2A:AE:D7:F0:90:93:F0:F4:11:B1:48:BE:1C:16:20:62:60:78:08:77 Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0AD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0AC7 Signing time: Fri 22 Nov 2024 19:10:09 +0000 Manifest this update: Fri 22 Nov 2024 19:10:08 +0000 Manifest next update: Fri 29 Nov 2024 19:10:08 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: Rny6w4EsvnH86HSe2toQydzGe2bUun4wEQxvfF5gEH0=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yUzUPNwrnnqA9y2QcEn+ohx6QfzL71Dl4zwJAGApA/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2768 (0xad0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Nov 22 19:10:08 2024 GMT Not After : Nov 29 19:10:08 2024 GMT Subject: CN=6740d710-cb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:5a:5c:db:ec:f4:11:a2:3f:78:70:1a:a0: 07:c8:f5:b1:35:40:22:b9:b7:72:13:7c:c0:b3:d5: c5:24:12:c6:3b:e9:d9:10:21:f8:6f:bf:a4:a0:67: 15:7b:de:bf:db:69:94:2f:9a:a2:86:6c:fe:14:6e: ce:26:4f:9a:db:9b:30:b5:d6:23:ac:da:3b:b5:81: c0:69:2c:36:d5:34:fe:f0:f8:7c:a7:f8:ef:f7:7b: fe:7c:c8:47:f4:f9:51:10:68:6e:b3:7f:bb:10:d5: e6:99:71:b8:6f:bb:91:32:47:c2:55:1e:5c:55:5b: 11:87:ea:cb:96:3b:17:6b:c7:3a:f6:4d:f4:43:8c: b2:45:89:59:86:be:81:23:33:81:2d:61:1c:7e:ba: f5:0a:ad:bd:af:13:26:be:2d:81:2f:4f:06:22:01: ae:ff:a6:41:e7:55:b6:34:7a:c8:b6:6f:37:cf:6c: df:e2:0b:2b:b2:73:04:e2:bc:db:c4:17:86:05:ce: 3a:fe:16:71:57:7e:f9:c9:a8:69:f3:90:50:5c:b3: c6:87:fd:27:0f:c7:3a:c5:bb:6d:77:9b:2c:dd:21: 43:7a:4b:0f:f2:50:3e:4c:dc:d4:42:da:f6:1a:c1: 24:e9:fa:74:5e:ef:0b:da:1e:99:f0:1f:68:11:1a: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AE:D7:F0:90:93:F0:F4:11:B1:48:BE:1C:16:20:62:60:78:08:77 X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8c:6a:86:49:bb:6d:cc:ea:71:08:af:e6:bb:fc:ca:5a:56: 2f:ff:08:ad:2b:6c:29:f2:c2:b2:69:55:7b:75:dd:b1:64:41: 01:91:dd:1f:51:a7:9d:18:95:d8:9c:82:ea:0a:36:1e:54:5c: d7:ca:ae:ce:4f:91:09:87:22:10:18:ef:64:cf:3d:73:19:77: e1:95:1d:6f:99:c7:b0:55:f7:6c:2a:fa:97:af:54:f7:a7:1c: 27:95:12:4f:43:39:58:23:32:f4:bf:14:f3:51:4d:92:38:6d: 6c:d3:2c:ff:68:16:c5:d0:c3:b8:f3:89:1f:90:e4:38:ec:4f: 33:5b:c0:cd:f8:83:47:90:1e:a6:c8:5a:e0:68:88:6b:f0:fc: f4:a4:77:1f:ee:1b:ed:2c:6c:d6:c1:e7:ac:7b:b1:01:93:d5: 29:59:f0:48:6c:bb:da:f8:43:8b:37:c2:89:bb:db:05:c2:19: 33:16:b1:37:4f:e9:81:f5:c3:b7:2c:0d:f5:92:2c:c2:91:8c: af:64:e6:b4:bb:5f:05:67:6c:8c:ef:4a:d6:74:f8:7a:d3:ec: 06:51:ac:a8:2d:53:ba:a9:64:cc:b9:a2:6f:4d:b8:e7:26:c1: da:b8:cc:db:51:dd:18:cb:e0:39:98:91:06:20:76:fc:88:df: 5d:3e:94:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjQxMTIyMTkxMDA4WhcNMjQxMTI5MTkxMDA4WjAYMRYwFAYD VQQDEw02NzQwZDcxMC1jYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeJaXNvs9BGiP3hwGqAHyPWxNUAiubdyE3zAs9XFJBLGO+nZECH4b7+koGcV e96/22mUL5qihmz+FG7OJk+a25swtdYjrNo7tYHAaSw21TT+8Ph8p/jv93v+fMhH 9PlREGhus3+7ENXmmXG4b7uRMkfCVR5cVVsRh+rLljsXa8c69k30Q4yyRYlZhr6B IzOBLWEcfrr1Cq29rxMmvi2BL08GIgGu/6ZB51W2NHrItm83z2zf4gsrsnME4rzb xBeGBc46/hZxV375yahp85BQXLPGh/0nD8c6xbttd5ss3SFDeksP8lA+TNzUQtr2 GsEk6fp0Xu8L2h6Z8B9oERpw2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqu1/CQ k/D0EbFIvhwWIGJgeAh3MB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWjGqGSbttzOpxCK/mu/zKWlYv/witK2wp8sKyaVV7dd2xZEEBkd0f UaedGJXYnILqCjYeVFzXyq7OT5EJhyIQGO9kzz1zGXfhlR1vmcewVfdsKvqXr1T3 pxwnlRJPQzlYIzL0vxTzUU2SOG1s0yz/aBbF0MO484kfkOQ47E8zW8DN+INHkB6m yFrgaIhr8Pz0pHcf7hvtLGzWweese7EBk9UpWfBIbLva+EOLN8KJu9sFwhkzFrE3 T+mB9cO3LA31kizCkYyvZOa0u18FZ2yM70rWdPh60+wGUayoLVO6qWTMuaJvTbjn JsHauMzbUd0Yy+A5mJEGIHb8iN9dPpQC -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org