$ rpki-client -vvf rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft File: 7hyKGwbDa9zEPHECS1LZHGpq9ro.mft (raw, json) Hash identifier: RQzYWlMklUFTfSPrvRnAThvo8AZ9uxBWrytpB64jCR4= Subject key identifier: 22:FE:52:C6:76:F3:0A:1A:98:6C:31:CD:18:C1:24:D5:C6:81:14:C9 Authority key identifier: EE:1C:8A:1B:06:C3:6B:DC:C4:3C:71:02:4B:52:D9:1C:6A:6A:F6:BA Certificate issuer: /CN=A911513F/serialNumber=EE1C8A1B06C36BDCC43C71024B52D91C6A6AF6BA Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft Manifest number: 0671 Signing time: Fri 22 Nov 2024 21:52:34 +0000 Manifest this update: Fri 22 Nov 2024 21:52:34 +0000 Manifest next update: Fri 29 Nov 2024 21:52:34 +0000 Files and hashes: 1: 7hyKGwbDa9zEPHECS1LZHGpq9ro.crl (hash: q6DBGgcqmAF4XR6bpuvce0iXXDCdKjX5VZkGDHg9J5E=) 2: B9F42C72554D11EBA9D33130C4F9AE02.roa (hash: cB3h0BwU7n31UJ46QG5DLAIX4mE+Nr0sDLSdub3xWHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.crl rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911513F/serialNumber=EE1C8A1B06C36BDCC43C71024B52D91C6A6AF6BA Validity Not Before: Nov 22 21:52:34 2024 GMT Not After : Nov 29 21:52:34 2024 GMT Subject: CN=6740fd22-a966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:fb:ae:4b:ed:26:72:52:e2:1a:70:4d:2c: 70:16:73:26:f0:7f:7c:a1:4b:81:82:24:e7:09:08: af:37:f1:25:0c:8c:02:14:64:72:1e:95:bb:63:07: 63:27:37:be:4a:4f:be:59:de:78:33:25:2b:59:4f: 01:00:b4:fa:de:03:45:68:a7:87:40:51:ef:0d:ec: a9:77:80:a9:d6:20:76:43:6a:af:56:8e:71:27:d4: 43:5d:66:e3:e5:9d:d1:01:99:9d:9b:35:73:4f:bd: 1b:2c:aa:1f:d2:c7:43:b0:98:61:b6:46:50:1b:f4: 93:4f:e8:63:47:5b:f6:15:86:89:11:bc:cf:ae:30: 92:d2:42:b2:a1:aa:ae:4d:4c:f5:26:b6:ad:c8:de: 41:93:f6:cd:3d:a3:ac:c2:1b:f0:3e:f7:ff:3f:cb: db:01:71:b9:e0:ef:b1:ff:c2:40:0a:e1:d3:e8:9d: 53:c4:dd:b6:0f:25:84:1f:fd:91:f7:42:2d:1c:92: 71:a1:6c:a7:9f:15:f0:90:55:51:02:8a:8f:3a:70: 16:fb:82:8f:9c:08:94:71:4a:bd:18:24:8c:1c:56: fa:fb:49:1a:bd:bd:9f:b0:47:a6:75:97:dd:45:98: 50:77:d6:d7:01:d4:7f:1d:29:7c:f5:79:b4:c4:6a: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FE:52:C6:76:F3:0A:1A:98:6C:31:CD:18:C1:24:D5:C6:81:14:C9 X509v3 Authority Key Identifier: keyid:EE:1C:8A:1B:06:C3:6B:DC:C4:3C:71:02:4B:52:D9:1C:6A:6A:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:51:c9:0e:40:5c:c3:e6:5d:f0:7d:75:6c:ef:0d:4e:20:ea: b4:c3:8b:56:51:5d:ae:17:56:06:d5:c4:60:f6:73:c6:89:06: 15:01:c3:b4:99:1f:13:23:d3:3f:a0:a1:13:7d:10:f0:aa:59: 76:5c:0d:79:35:78:a3:ec:69:85:d0:1d:02:54:e0:47:72:05: 32:a4:59:43:cd:7c:0c:0d:d9:6c:85:99:3e:70:67:d1:4e:30: b3:c7:ab:2c:dd:4c:86:52:d9:0e:70:8a:fc:63:43:b5:0d:a4: 6a:02:eb:bf:f3:72:26:f2:43:9d:47:bc:12:41:79:e4:b2:40: c8:8d:2d:4b:be:b6:d8:4c:4e:32:e1:28:b6:88:7a:aa:8a:6a: f8:09:56:e3:55:b6:47:01:f6:ca:b0:23:43:34:d5:d8:3c:62: 7a:22:f4:7c:60:5c:8c:47:18:16:40:bf:0b:28:30:85:75:9e: e4:06:3b:09:b9:0b:6e:59:9c:0d:91:9c:00:46:93:58:5c:65: 15:70:03:33:c8:8f:8f:47:5f:ce:cc:a0:9d:b4:42:79:c9:ca: 53:5a:0e:52:e5:bf:06:d4:2a:88:b3:bf:63:02:5d:b6:de:07: 4d:87:e1:bb:a2:f8:83:67:01:8e:75:56:7b:98:be:0e:52:ea: 03:29:44:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxM0YxMTAvBgNVBAUTKEVFMUM4QTFCMDZDMzZCRENDNDNDNzEwMjRCNTJEOTFD NkE2QUY2QkEwHhcNMjQxMTIyMjE1MjM0WhcNMjQxMTI5MjE1MjM0WjAYMRYwFAYD VQQDEw02NzQwZmQyMi1hOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4L7rkvtJnJS4hpwTSxwFnMm8H98oUuBgiTnCQivN/ElDIwCFGRyHpW7Ywdj Jze+Sk++Wd54MyUrWU8BALT63gNFaKeHQFHvDeypd4Cp1iB2Q2qvVo5xJ9RDXWbj 5Z3RAZmdmzVzT70bLKof0sdDsJhhtkZQG/STT+hjR1v2FYaJEbzPrjCS0kKyoaqu TUz1JratyN5Bk/bNPaOswhvwPvf/P8vbAXG54O+x/8JACuHT6J1TxN22DyWEH/2R 90ItHJJxoWynnxXwkFVRAoqPOnAW+4KPnAiUcUq9GCSMHFb6+0kavb2fsEemdZfd RZhQd9bXAdR/HSl89Xm0xGpihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL+UsZ2 8woamGwxzRjBJNXGgRTJMB8GA1UdIwQYMBaAFO4cihsGw2vcxDxxAktS2Rxqava6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEzRi9DQ0Q3RjkzNDU1 M0IxMUVCQjEzREZFNkZDNEY5QUUwMi83aHlLR3diRGE5ekVQSEVDUzFMWkhHcHE5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdoeUtHd2JEYTl6RVBIRUNTMUxaSEdwcTlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTEzRi9DQ0Q3RjkzNDU1M0IxMUVCQjEzREZFNkZDNEY5QUUwMi83aHlLR3diRGE5 ekVQSEVDUzFMWkhHcHE5cm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOUckOQFzD5l3wfXVs7w1OIOq0w4tWUV2uF1YG1cRg9nPGiQYVAcO0 mR8TI9M/oKETfRDwqll2XA15NXij7GmF0B0CVOBHcgUypFlDzXwMDdlshZk+cGfR TjCzx6ss3UyGUtkOcIr8Y0O1DaRqAuu/83Im8kOdR7wSQXnkskDIjS1LvrbYTE4y 4Si2iHqqimr4CVbjVbZHAfbKsCNDNNXYPGJ6IvR8YFyMRxgWQL8LKDCFdZ7kBjsJ uQtuWZwNkZwARpNYXGUVcAMzyI+PR1/OzKCdtEJ5ycpTWg5S5b8G1CqIs79jAl22 3gdNh+G7oviDZwGOdVZ7mL4OUuoDKUS+ -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org