$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json) Hash identifier: mAulgzdmqWyaahpwXD43e0T56Lc6PVCKI2pQQPnV60U= Subject key identifier: 0F:B7:0A:EA:E4:BF:61:4E:7A:8D:97:2A:07:EE:0F:9C:B7:86:A0:CF Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft Manifest number: 08F5 Signing time: Fri 22 Nov 2024 20:09:11 +0000 Manifest this update: Fri 22 Nov 2024 20:09:11 +0000 Manifest next update: Fri 29 Nov 2024 20:09:11 +0000 Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: FZM+S3Z2QqFgWxn3rTL5ABUYNRqOQhG4igNmtvdSG8M=) 2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: bloQYzrAn+4ONkIrVOLLF4mqOoi8QLeVq0prE6sonCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Nov 22 20:09:11 2024 GMT Not After : Nov 29 20:09:11 2024 GMT Subject: CN=6740e4e7-4c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:17:2b:be:40:ac:80:97:50:44:a9:94:62: 77:04:60:db:97:d3:63:20:c0:92:2d:34:3d:1f:47: ad:b4:67:9c:a3:46:b6:89:bb:cb:ec:ee:d8:4b:22: 01:cf:a5:c6:8c:ed:30:3a:b4:38:eb:ac:0b:ba:30: 58:24:7b:26:b5:f6:9f:ae:2c:38:ef:ac:a1:d0:b8: bd:a4:4e:2c:e9:3f:7f:1b:6b:02:2e:32:dd:a4:88: 18:47:3c:59:5b:c5:35:df:7d:c5:cb:61:0d:b4:64: f0:05:5e:a2:87:5c:94:e4:79:38:db:39:e5:6f:13: 83:1b:04:25:5c:c9:23:5c:97:cf:31:c5:8a:60:d0: b4:e2:56:1f:da:4e:57:01:02:0d:cc:15:09:9c:52: e2:07:d5:f5:70:66:a9:15:d1:40:f2:26:c3:a4:e5: 7f:39:05:2b:52:7c:46:6d:0e:38:0b:e3:38:87:11: 2b:d4:cf:20:6c:3c:5a:fc:02:46:6a:4a:72:02:93: ec:39:f3:6b:7b:00:a4:6a:fe:f3:81:b0:fe:dd:35: 9f:23:93:38:28:b4:56:9d:e8:8c:90:0d:c4:51:93: 2d:32:86:aa:55:61:83:81:37:29:4f:4c:d7:50:2e: 27:0a:f7:9f:e7:4c:41:c9:aa:6a:2d:98:86:bb:10: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B7:0A:EA:E4:BF:61:4E:7A:8D:97:2A:07:EE:0F:9C:B7:86:A0:CF X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e9:ae:fc:c9:9b:80:31:1c:61:63:32:9d:f0:0d:d4:14:44: 2d:56:60:f1:9d:e4:b0:9c:cc:cd:64:2b:ec:ab:35:04:8f:61: 82:4a:4a:27:ea:70:56:d0:a4:35:bb:e1:05:c5:d8:8e:b1:66: 2b:a7:6e:ef:29:53:e8:17:50:ea:c7:bc:2c:ca:2c:cd:2a:f0: d0:7a:e5:bf:71:3c:92:57:dd:a2:df:b0:99:ca:c9:08:61:50: 8b:51:a8:87:fb:9f:82:0b:5d:6d:42:e2:a1:5e:7b:e8:52:21: b7:4a:08:69:18:bf:34:9c:47:1f:5c:95:d8:3d:19:98:00:f2: e5:2a:c3:04:30:2a:f8:cd:d1:34:0b:23:f9:bf:c9:cb:b4:fa: 62:6f:23:9e:92:0c:3d:91:51:04:4d:72:40:2f:b8:33:c4:47: ba:cf:e0:91:7d:15:01:26:f2:24:93:fb:2c:a5:c3:65:49:4b: c1:35:07:ac:82:e2:cb:76:53:91:30:f4:41:65:d8:d7:10:94: 7c:23:10:5e:e1:cc:d6:64:62:57:32:71:07:bc:86:6c:4f:9b: 94:40:ec:8f:b9:a7:f5:b5:22:5d:94:08:f0:55:7b:44:eb:6e: 9d:48:2b:ed:ac:98:d7:91:0a:08:29:f6:1a:ce:46:88:b6:fd: 15:f7:90:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjQxMTIyMjAwOTExWhcNMjQxMTI5MjAwOTExWjAYMRYwFAYD VQQDEw02NzQwZTRlNy00YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK0XK75ArICXUESplGJ3BGDbl9NjIMCSLTQ9H0ettGeco0a2ibvL7O7YSyIB z6XGjO0wOrQ466wLujBYJHsmtfafriw476yh0Li9pE4s6T9/G2sCLjLdpIgYRzxZ W8U1333Fy2ENtGTwBV6ih1yU5Hk42znlbxODGwQlXMkjXJfPMcWKYNC04lYf2k5X AQINzBUJnFLiB9X1cGapFdFA8ibDpOV/OQUrUnxGbQ44C+M4hxEr1M8gbDxa/AJG akpyApPsOfNrewCkav7zgbD+3TWfI5M4KLRWneiMkA3EUZMtMoaqVWGDgTcpT0zX UC4nCvef50xByapqLZiGuxBllwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+3Curk v2FOeo2XKgfuD5y3hqDPMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt6a78yZuAMRxhYzKd8A3UFEQtVmDxneSwnMzNZCvsqzUEj2GCSkon 6nBW0KQ1u+EFxdiOsWYrp27vKVPoF1Dqx7wsyizNKvDQeuW/cTySV92i37CZyskI YVCLUaiH+5+CC11tQuKhXnvoUiG3SghpGL80nEcfXJXYPRmYAPLlKsMEMCr4zdE0 CyP5v8nLtPpibyOekgw9kVEETXJAL7gzxEe6z+CRfRUBJvIkk/sspcNlSUvBNQes guLLdlORMPRBZdjXEJR8IxBe4czWZGJXMnEHvIZsT5uUQOyPuaf1tSJdlAjwVXtE 626dSCvtrJjXkQoIKfYazkaItv0V95A4 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org