$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json) Hash identifier: k9sUl375Pgr9FywiUM7iYROIs0pnDGzCzw9rakBqqzc= Subject key identifier: 9D:41:04:89:3B:56:B5:FE:3A:B9:20:FA:D3:04:6C:7F:9A:D9:F0:28 Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9 Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9 Certificate serial: 3423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft Manifest number: 3EFF Signing time: Sun 24 Nov 2024 14:47:53 +0000 Manifest this update: Sun 24 Nov 2024 14:47:53 +0000 Manifest next update: Sun 01 Dec 2024 14:47:53 +0000 Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: uSsfPup3DhYfB+PoMTcsiwDTgrDnXJE2ZlvjvaQIEnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13347 (0x3423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9 Validity Not Before: Nov 24 14:47:53 2024 GMT Not After : Dec 1 14:47:53 2024 GMT Subject: CN=67433c99-34cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0e:74:d9:2d:12:5b:09:e2:1f:71:2c:e0:5e: 81:52:c3:7a:10:8d:dd:b6:64:aa:da:fb:3b:b9:a1: 4c:f2:23:4e:37:3b:fe:35:02:4b:27:3f:36:99:44: 8c:3d:ff:57:67:c5:74:7a:99:38:4f:84:94:d7:45: a2:df:8a:21:fd:02:9d:15:9f:58:fa:d3:69:a0:c8: 6d:fa:c1:42:f1:4e:6e:4e:75:4a:43:e5:87:05:60: 52:be:c9:56:9d:2c:3d:a8:9e:a5:49:0b:de:83:00: 43:ef:87:57:c6:9b:ce:3d:35:5c:07:0d:f4:05:72: 59:8a:fc:9b:3d:ea:1f:6d:a2:b0:64:b7:d1:e9:97: d5:cd:96:91:96:39:22:6a:f4:75:62:b4:a1:c9:00: bc:6c:77:01:0d:9a:85:55:f4:53:8e:75:25:e9:8c: 63:0f:93:a3:ff:6b:99:1d:2d:fb:cf:b2:af:f2:43: 03:65:a4:ca:b8:82:75:ab:de:06:7f:2b:d4:c4:62: 0c:3c:c9:6a:f9:3c:56:81:b4:45:a4:16:af:1a:cb: f9:7c:58:70:e3:40:5d:92:3f:f5:dd:fb:61:d3:68: f5:5e:a6:78:e4:51:ad:d0:5e:ca:48:b7:56:36:1e: 86:18:25:e2:3b:48:50:dd:d1:9b:44:23:bd:1c:87: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:41:04:89:3B:56:B5:FE:3A:B9:20:FA:D3:04:6C:7F:9A:D9:F0:28 X509v3 Authority Key Identifier: keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1f:a1:32:d9:c0:a9:4d:04:65:3f:34:b2:6a:5f:ba:de:76: 39:2c:da:07:ec:ec:b7:1d:fc:b7:fd:62:7b:16:e5:7d:06:35: 3a:df:11:ba:0f:27:39:64:41:a5:70:6d:af:f7:0b:89:2c:9c: 6f:62:36:8b:00:04:06:54:19:7a:59:85:b7:66:83:d1:25:cb: e2:ae:a9:96:f6:24:b7:cf:25:6e:3d:69:07:b0:7f:52:54:68: 8a:e8:41:98:a7:c3:d2:2e:e0:c3:ed:09:bd:c2:ce:bf:48:cc: 3c:8f:df:c0:2d:1c:a0:ee:7c:26:10:3b:25:d4:4c:0f:4f:25: 6c:c0:f9:5e:0d:c8:9a:ef:f2:12:73:c4:38:a9:00:6e:9a:c3: 1a:40:d2:a0:40:3e:ae:51:39:c7:ac:31:1c:9c:f8:ec:a9:df: 36:8b:47:00:42:bf:80:4e:81:a5:ca:f3:11:be:62:f7:8e:6c: 38:09:f2:49:7e:6f:1d:af:ef:3d:e9:96:f9:67:dd:12:0e:14: 5a:52:ca:47:7e:5d:27:33:8c:a8:38:61:4c:53:38:a8:37:f6: 77:da:35:1c:a8:bf:19:99:c9:40:81:af:be:b9:34:32:50:b6: 15:6e:b3:f7:ac:69:54:af:5c:18:a9:00:07:87:89:82:6f:5c: b9:6a:1a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKEVEQzFGRTc4QkM4N0JGMjVCMkUzOEQ3RDcyQ0Q5Q0Ez MzAyMjZDRTkwHhcNMjQxMTI0MTQ0NzUzWhcNMjQxMjAxMTQ0NzUzWjAYMRYwFAYD VQQDEw02NzQzM2M5OS0zNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5A502S0SWwniH3Es4F6BUsN6EI3dtmSq2vs7uaFM8iNONzv+NQJLJz82mUSM Pf9XZ8V0epk4T4SU10Wi34oh/QKdFZ9Y+tNpoMht+sFC8U5uTnVKQ+WHBWBSvslW nSw9qJ6lSQvegwBD74dXxpvOPTVcBw30BXJZivybPeofbaKwZLfR6ZfVzZaRljki avR1YrShyQC8bHcBDZqFVfRTjnUl6YxjD5Oj/2uZHS37z7Kv8kMDZaTKuIJ1q94G fyvUxGIMPMlq+TxWgbRFpBavGsv5fFhw40Bdkj/13fth02j1XqZ45FGt0F7KSLdW Nh6GGCXiO0hQ3dGbRCO9HIczRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1BBIk7 VrX+Orkg+tMEbH+a2fAoMB8GA1UdIwQYMBaAFO3B/ni8h78lsuONfXLNnKMwImzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi83Y0gtZUx5SHZ5V3k0NDE5Y3MyY296QWli T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjSC1lTHlIdnlXeTQ0MTljczJjb3pBaWJPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi83Y0gtZUx5SHZ5 V3k0NDE5Y3MyY296QWliT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPH6Ey2cCpTQRlPzSyal+63nY5LNoH7Oy3Hfy3/WJ7FuV9BjU63xG6 Dyc5ZEGlcG2v9wuJLJxvYjaLAAQGVBl6WYW3ZoPRJcvirqmW9iS3zyVuPWkHsH9S VGiK6EGYp8PSLuDD7Qm9ws6/SMw8j9/ALRyg7nwmEDsl1EwPTyVswPleDcia7/IS c8Q4qQBumsMaQNKgQD6uUTnHrDEcnPjsqd82i0cAQr+AToGlyvMRvmL3jmw4CfJJ fm8dr+896Zb5Z90SDhRaUspHfl0nM4yoOGFMUzioN/Z32jUcqL8ZmclAga++uTQy ULYVbrP3rGlUr1wYqQAHh4mCb1y5ahrI -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:50 2024 by rpki-client on console-fra.rpki-client.org