$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json) Hash identifier: PlA9uYT4PwG12bhracRba5No+hLDuPXUZWoYdR482i0= Subject key identifier: 16:35:E5:08:DA:D2:57:8E:86:74:75:51:0A:78:FF:CA:E5:40:D2:C4 Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Certificate serial: 0B51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft Manifest number: 0B4C Signing time: Fri 22 Nov 2024 18:55:30 +0000 Manifest this update: Fri 22 Nov 2024 18:55:29 +0000 Manifest next update: Fri 29 Nov 2024 18:55:29 +0000 Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: dYhpmdfktw9O3KU//N1J80caJvlHRCj5pVxa0Ces5II=) 2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: HXsMAwlgB+stY5+xQ42R6DsukdPkIbskDCow1gArnpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2897 (0xb51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Validity Not Before: Nov 22 18:55:29 2024 GMT Not After : Nov 29 18:55:29 2024 GMT Subject: CN=6740d3a1-3bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:33:29:4d:a5:bb:23:e7:e8:cf:14:65:c9:78: 74:fc:56:99:76:fb:63:f5:38:c5:2b:f2:7d:7f:22: 51:65:60:33:d1:f5:50:b5:58:ec:51:91:db:5f:e6: af:68:03:a0:39:d7:3e:11:7d:62:0a:f2:b8:d1:3b: f1:dd:8a:96:bb:18:63:76:bf:c1:61:6b:d3:0d:c8: aa:e3:a1:a8:4c:22:fe:d1:ad:2c:c2:1e:e3:cc:2c: 13:48:14:31:bd:f8:20:46:4a:c9:92:5b:38:bb:41: ed:a9:c1:30:f7:28:a3:f7:f0:b2:92:22:b3:77:4f: c7:55:4e:f7:33:74:ab:3d:92:1b:21:c9:61:af:37: 47:15:c3:84:da:6d:66:2a:51:ee:93:5b:c9:e4:34: c2:65:16:c4:f8:cb:4d:40:f2:b9:60:1d:89:b3:dc: 2b:1e:5a:56:c0:1e:6c:b3:74:20:84:97:e5:2d:d4: 32:1b:32:08:59:db:13:c5:04:d2:67:21:99:d8:5a: fa:f7:e2:23:91:08:c5:99:60:90:0f:2a:17:ac:1f: 5e:70:3e:2f:2f:e5:64:55:69:dc:4a:0b:c5:77:94: 19:34:11:22:8e:6e:31:07:60:8c:78:9d:16:fb:42: 0b:45:59:2f:6c:05:1d:ba:7c:52:8b:4e:6d:33:b8: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:35:E5:08:DA:D2:57:8E:86:74:75:51:0A:78:FF:CA:E5:40:D2:C4 X509v3 Authority Key Identifier: keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d9:a9:3b:25:7a:fb:04:c7:a5:f0:0f:2c:9d:96:72:76:e5: cc:24:e8:fa:93:4d:83:dd:52:e1:4b:a8:11:94:ba:d9:c9:79: 1d:53:0c:5e:49:a9:ae:2e:86:44:15:6a:b6:7f:dd:d8:db:35: 9d:3c:ce:90:e3:cb:23:df:81:9d:a5:c3:fa:68:51:df:d4:46: e2:0d:f9:61:19:a2:f2:c6:85:fb:d6:39:18:ac:9d:5d:69:68: f1:23:d8:f6:54:1d:78:bb:e3:30:e3:76:ce:90:fa:d1:d7:f6: 6f:ec:fa:38:9b:2d:22:31:96:05:be:f3:27:cd:5d:da:0e:04: 04:ab:da:3c:c4:f9:fb:db:e0:9d:c9:c0:c2:46:d7:5f:bf:ef: 98:9b:f5:c3:93:e5:79:80:27:6e:d5:f0:9d:a5:1b:79:05:6c: 86:c6:8a:42:68:e5:04:02:a7:58:c6:5b:eb:a2:20:8a:4d:35: ed:b4:58:38:e6:5f:2f:fd:9b:90:43:f5:44:b9:1e:bd:a8:6b: e8:f7:7e:bd:cc:1e:06:06:36:f7:4e:ad:58:3e:86:2e:4c:9d: f3:30:42:af:7e:9c:88:ed:86:d9:7e:49:08:54:02:d0:55:f7: 71:02:ea:46:23:1e:c4:d3:a0:74:00:50:2f:07:96:1e:d4:6b: ed:12:8a:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0 RDE0MTRCMkQwHhcNMjQxMTIyMTg1NTI5WhcNMjQxMTI5MTg1NTI5WjAYMRYwFAYD VQQDEw02NzQwZDNhMS0zYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DMpTaW7I+fozxRlyXh0/FaZdvtj9TjFK/J9fyJRZWAz0fVQtVjsUZHbX+av aAOgOdc+EX1iCvK40Tvx3YqWuxhjdr/BYWvTDciq46GoTCL+0a0swh7jzCwTSBQx vfggRkrJkls4u0HtqcEw9yij9/CykiKzd0/HVU73M3SrPZIbIclhrzdHFcOE2m1m KlHuk1vJ5DTCZRbE+MtNQPK5YB2Js9wrHlpWwB5ss3QghJflLdQyGzIIWdsTxQTS ZyGZ2Fr69+IjkQjFmWCQDyoXrB9ecD4vL+VkVWncSgvFd5QZNBEijm4xB2CMeJ0W +0ILRVkvbAUdunxSi05tM7gg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBY15Qja 0leOhnR1UQp4/8rlQNLEMB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0 Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB52ak7JXr7BMel8A8snZZyduXMJOj6k02D3VLhS6gRlLrZyXkdUwxe SamuLoZEFWq2f93Y2zWdPM6Q48sj34GdpcP6aFHf1EbiDflhGaLyxoX71jkYrJ1d aWjxI9j2VB14u+Mw43bOkPrR1/Zv7Po4my0iMZYFvvMnzV3aDgQEq9o8xPn72+Cd ycDCRtdfv++Ym/XDk+V5gCdu1fCdpRt5BWyGxopCaOUEAqdYxlvroiCKTTXttFg4 5l8v/ZuQQ/VEuR69qGvo9369zB4GBjb3Tq1YPoYuTJ3zMEKvfpyI7YbZfkkIVALQ VfdxAupGIx7E06B0AFAvB5Ye1GvtEoo5 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org