$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft File: EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json) Hash identifier: zEqLPoAhCBOcQDQem6KCbVo6AK7LX+cMelpuFGwHkyE= Subject key identifier: 74:9C:DB:52:21:7E:DB:8E:DC:0B:66:8C:E9:3E:8B:34:25:D9:A9:62 Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8 Certificate issuer: /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8 Certificate serial: 0B84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft Manifest number: 0B75 Signing time: Fri 22 Nov 2024 18:48:38 +0000 Manifest this update: Fri 22 Nov 2024 18:48:38 +0000 Manifest next update: Fri 29 Nov 2024 18:48:38 +0000 Files and hashes: 1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: YfCXzfukcRqLe5txsoRiWTljX6QUj4Bww17ecpD0TbI=) 2: A80715221A7711EAA20A077FC4F9AE02.roa (hash: oOAOfj2Fb6WqqoSTANNGosErePG33nN7BkMZewQ2Jsc=) 3: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: 8Xyzk1L+JNQfdD42/eX0feZyOdxHJzv1XzZ/tUy/AcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2948 (0xb84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8 Validity Not Before: Nov 22 18:48:38 2024 GMT Not After : Nov 29 18:48:38 2024 GMT Subject: CN=6740d206-6386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:3a:83:ea:72:6e:a0:1b:82:83:77:dd:4e: 66:90:27:1f:a4:13:01:ab:6b:ae:ad:05:77:98:4f: 3d:4a:4b:20:18:cd:5a:84:da:4e:82:98:31:3e:16: 60:69:45:93:51:91:35:ef:ce:ef:4a:e4:bd:f2:e8: 8e:f1:78:3a:ca:f2:e9:70:d7:e2:64:a4:d5:10:b0: 12:59:1e:e0:31:ff:5b:ef:c1:a6:a7:dd:29:26:a0: a7:65:18:4e:f4:d5:f3:63:1e:29:f2:5a:ca:bd:f3: 39:f6:54:a6:07:1b:9f:da:2d:20:d4:1e:01:26:ca: 6b:8e:7d:0a:66:2d:cc:6b:50:b2:41:e2:10:3b:c7: f6:85:44:61:f9:25:c9:54:3a:1f:25:23:c8:04:4d: a2:cc:b6:2b:61:a1:5b:34:75:60:19:50:e8:78:b3: d0:de:14:e9:bf:4e:ea:28:cc:6b:f4:f9:1c:9e:6c: 53:1e:10:73:f3:5e:92:25:24:67:86:bc:81:86:d6: c3:6d:6a:22:15:21:4d:a1:63:b2:27:27:32:ff:73: 57:10:ac:be:f6:03:e5:71:9d:f1:e0:ca:9b:78:9c: 2c:d2:5d:fe:b9:24:a7:1d:a5:96:df:31:78:18:7c: 5c:48:2a:8c:5d:b7:f7:24:18:6a:8f:36:31:ca:de: c3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9C:DB:52:21:7E:DB:8E:DC:0B:66:8C:E9:3E:8B:34:25:D9:A9:62 X509v3 Authority Key Identifier: keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:df:34:cc:76:c8:bf:30:3f:59:ce:85:84:64:9a:08:a5:98: d7:dc:d4:86:92:28:6f:93:b7:99:b6:b5:90:3b:dc:5f:66:d2: 2d:a3:14:bb:01:75:06:ca:c0:56:3d:c9:59:1b:39:b4:de:72: 23:91:df:a7:a0:6d:0e:75:82:4b:c0:fc:b7:53:47:30:ce:48: c8:c3:f6:bb:ff:88:87:e1:da:6d:13:7e:c1:4b:8b:12:99:da: 19:cb:09:24:23:83:38:ee:c3:46:37:5b:ab:30:24:f3:4d:5f: 05:41:7e:8b:ed:73:b3:0c:59:d0:c2:36:5b:83:c7:9f:ac:77: b0:44:7c:30:42:f5:46:da:79:58:29:25:8b:c3:4f:18:d1:20: 78:d4:7a:92:b8:a7:96:e6:fb:cf:c7:5b:22:e1:d0:36:06:cb: 14:f2:df:ae:9b:fa:b8:b5:c7:d5:07:4d:27:6f:a4:be:78:2d: 5e:88:5b:09:f0:42:4b:9d:ad:df:7c:28:8b:51:91:e7:06:df: aa:6d:10:bb:cd:52:a7:58:e9:ed:73:4f:f0:39:d0:ee:c7:cf: 33:dc:ac:09:ad:06:b5:47:0c:83:c1:14:b5:c8:cb:95:0f:b1: 24:04:54:da:76:d7:dc:7b:2c:f7:e9:57:95:30:1e:66:23:97: 6e:57:1a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCNEMxMTAvBgNVBAUTKDEyMDA4REJBQjc4Q0IzMUYyOTk0RTE0ODRFQTNGMjQy NzRCOUQxQTgwHhcNMjQxMTIyMTg0ODM4WhcNMjQxMTI5MTg0ODM4WjAYMRYwFAYD VQQDEw02NzQwZDIwNi02Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG46g+pybqAbgoN33U5mkCcfpBMBq2uurQV3mE89SksgGM1ahNpOgpgxPhZg aUWTUZE1787vSuS98uiO8Xg6yvLpcNfiZKTVELASWR7gMf9b78Gmp90pJqCnZRhO 9NXzYx4p8lrKvfM59lSmBxuf2i0g1B4BJsprjn0KZi3Ma1CyQeIQO8f2hURh+SXJ VDofJSPIBE2izLYrYaFbNHVgGVDoeLPQ3hTpv07qKMxr9PkcnmxTHhBz816SJSRn hryBhtbDbWoiFSFNoWOyJycy/3NXEKy+9gPlcZ3x4MqbeJws0l3+uSSnHaWW3zF4 GHxcSCqMXbf3JBhqjzYxyt7DZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSc21Ih ftuO3AtmjOk+izQl2aliMB8GA1UdIwQYMBaAFBIAjbq3jLMfKZThSE6j8kJ0udGo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkI0Qy83QkE1NDI1ODFB NzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4OHBsT0ZJVHFQeVFuUzUw YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VnQ051cmVNc3g4cGxPRklUcVB5UW5TNTBhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkI0Qy83QkE1NDI1ODFBNzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4 OHBsT0ZJVHFQeVFuUzUwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ3zTMdsi/MD9ZzoWEZJoIpZjX3NSGkihvk7eZtrWQO9xfZtItoxS7 AXUGysBWPclZGzm03nIjkd+noG0OdYJLwPy3U0cwzkjIw/a7/4iH4dptE37BS4sS mdoZywkkI4M47sNGN1urMCTzTV8FQX6L7XOzDFnQwjZbg8efrHewRHwwQvVG2nlY KSWLw08Y0SB41HqSuKeW5vvPx1si4dA2BssU8t+um/q4tcfVB00nb6S+eC1eiFsJ 8EJLna3ffCiLUZHnBt+qbRC7zVKnWOntc0/wOdDux88z3KwJrQa1RwyDwRS1yMuV D7EkBFTadtfceyz36VeVMB5mI5duVxqv -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org