$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: j7RHHqVAr7H3vIpSGoQiOaQHLlDrC+7asHwLN4X2pic= Subject key identifier: DB:5C:9A:B6:98:F9:E5:EE:37:5C:EB:54:61:50:41:40:D9:F4:C4:3D Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 070B Signing time: Fri 22 Nov 2024 21:26:56 +0000 Manifest this update: Fri 22 Nov 2024 21:26:55 +0000 Manifest next update: Fri 29 Nov 2024 21:26:55 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: 2++UHRdIRyjrLsfJ5tvwLvwfvnDFTqD5X2XfozMHefU=) 2: 1709C2B8168A11EF9AB3AC81C4F9AE02.roa (hash: 6ukVhtJE+bKZARPHEUWUBvLoTn8fZc7n+h9SK3WSSeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Nov 22 21:26:55 2024 GMT Not After : Nov 29 21:26:55 2024 GMT Subject: CN=6740f71f-4a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:14:42:9d:61:6c:cc:34:12:27:85:d8:5e: ea:1d:5c:a6:06:a9:dd:c8:91:e3:32:1e:6f:c5:50: 3b:db:db:95:5e:98:87:2a:0f:02:ba:03:ad:ac:ed: 90:1d:58:ea:a7:b2:78:06:50:49:b5:de:62:38:42: c7:ee:a0:05:0a:2b:50:6a:62:03:11:09:9d:e7:81: ee:fd:fd:89:94:76:4f:72:1e:f1:77:e2:e1:98:5e: a0:74:96:70:42:2b:0b:58:6f:55:49:13:f2:e8:49: 0d:6a:51:b1:85:12:d1:36:03:e3:48:fc:04:29:73: bb:77:79:44:f0:f8:bc:32:05:58:c6:87:4a:71:70: 97:b7:45:13:c9:03:a1:36:03:77:36:a8:db:2e:b1: 89:70:30:75:ac:fa:51:3b:39:7a:dc:a2:d7:8c:84: 8e:7d:bd:99:08:21:4e:7c:0f:b8:01:b5:93:6b:ce: ac:5a:00:b3:03:52:8a:34:a2:e5:12:04:5c:c1:2f: ff:5d:5c:c5:ec:36:1e:d4:89:83:09:90:3f:6a:62: 42:a4:8b:84:cc:34:4c:2a:fb:4d:d2:bc:e0:2f:19: 5a:6e:54:8a:9e:cc:01:da:3a:57:38:a5:05:73:11: 7a:bc:c9:41:9d:f9:bf:75:c7:19:5e:0f:5c:13:4f: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5C:9A:B6:98:F9:E5:EE:37:5C:EB:54:61:50:41:40:D9:F4:C4:3D X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:47:cd:bc:74:23:b7:69:38:e5:62:75:d5:0b:04:3c:7f:fe: b0:59:60:f9:2e:99:92:84:35:04:86:44:6f:c8:f2:53:15:d8: 18:a6:58:b4:17:59:51:ca:94:fb:48:91:b2:c3:bb:ad:f2:f4: f9:02:80:d0:9c:8a:71:47:2f:47:4b:57:28:5b:e5:0d:52:ef: a8:cd:9d:ef:2c:ce:a6:d1:47:60:c8:5f:68:53:f7:c2:8f:e9: ee:4d:29:66:bd:4f:07:6d:2c:3a:3e:0e:12:9b:88:0b:fa:08: 9e:86:9f:ed:e7:89:32:5a:b7:dc:22:18:b9:ab:38:89:43:47: f6:f5:71:4b:d2:ca:37:3d:b8:5b:2e:2c:3b:17:9e:b8:92:87: 38:62:fe:ad:e2:fd:ae:18:d4:c8:52:7d:82:1a:bb:fe:16:bd: f5:5d:23:b7:97:38:09:51:8d:5e:33:8d:91:95:6c:ce:fd:54: 0e:29:c3:5b:39:31:be:87:a2:46:30:7c:ba:cb:1d:5e:8f:85: 2d:50:69:2b:d9:b3:1a:c2:31:e4:84:ef:9b:9d:f8:c7:f6:cb: a6:df:e4:35:81:39:f7:5c:ca:a4:35:5b:8a:62:39:97:0c:6d: 72:67:99:2d:11:4e:d5:2f:b0:c4:ab:63:b3:80:eb:65:2b:40: bd:20:bf:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjQxMTIyMjEyNjU1WhcNMjQxMTI5MjEyNjU1WjAYMRYwFAYD VQQDEw02NzQwZjcxZi00YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumgUQp1hbMw0EieF2F7qHVymBqndyJHjMh5vxVA729uVXpiHKg8CugOtrO2Q HVjqp7J4BlBJtd5iOELH7qAFCitQamIDEQmd54Hu/f2JlHZPch7xd+LhmF6gdJZw QisLWG9VSRPy6EkNalGxhRLRNgPjSPwEKXO7d3lE8Pi8MgVYxodKcXCXt0UTyQOh NgN3NqjbLrGJcDB1rPpROzl63KLXjISOfb2ZCCFOfA+4AbWTa86sWgCzA1KKNKLl EgRcwS//XVzF7DYe1ImDCZA/amJCpIuEzDRMKvtN0rzgLxlablSKnswB2jpXOKUF cxF6vMlBnfm/dccZXg9cE09h4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtcmraY +eXuN1zrVGFQQUDZ9MQ9MB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1R828dCO3aTjlYnXVCwQ8f/6wWWD5LpmShDUEhkRvyPJTFdgYpli0 F1lRypT7SJGyw7ut8vT5AoDQnIpxRy9HS1coW+UNUu+ozZ3vLM6m0UdgyF9oU/fC j+nuTSlmvU8HbSw6Pg4Sm4gL+giehp/t54kyWrfcIhi5qziJQ0f29XFL0so3Pbhb Liw7F564koc4Yv6t4v2uGNTIUn2CGrv+Fr31XSO3lzgJUY1eM42RlWzO/VQOKcNb OTG+h6JGMHy6yx1ej4UtUGkr2bMawjHkhO+bnfjH9sum3+Q1gTn3XMqkNVuKYjmX DG1yZ5ktEU7VL7DEq2OzgOtlK0C9IL/V -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:15 2024 by rpki-client on console-fra.rpki-client.org