$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json) Hash identifier: cHTYLxF0dzu3hkVbUoBdNGnsh43VvejvzAzqKtMwqFk= Subject key identifier: 54:46:50:52:E8:9E:4B:67:35:9D:C8:E2:75:B0:5D:0B:9D:CB:FF:09 Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Certificate serial: 1C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft Manifest number: 1C99 Signing time: Wed 20 Nov 2024 16:09:38 +0000 Manifest this update: Wed 20 Nov 2024 16:09:38 +0000 Manifest next update: Wed 27 Nov 2024 16:09:38 +0000 Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: wwEPykbRvi4r4RfMuHS7pO7nLLr6kOsxouP/9Bihaxw=) 2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: lKb0rShsvsq6/PiRFV9WYxvr2Wk6w8LZDzoWqk9lB7U=) 3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: Qb2a5Um+RHBVJhp5rbhaL4h5O8P9X+wU4eMF3v1ky5k=) 4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: W9WZGIxbYrjYpSpY3e8lvF4TArk2aRuFMQkSa8eE5aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7327 (0x1c9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Validity Not Before: Nov 20 16:09:38 2024 GMT Not After : Nov 27 16:09:38 2024 GMT Subject: CN=673e09c2-65be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:93:e1:c3:37:ee:66:b6:d0:26:6b:92:4e: 14:9b:04:59:d4:97:2f:be:d8:ea:cb:24:22:52:7c: 34:5c:cf:b3:00:f6:a4:a5:8f:3f:35:55:7d:a3:d2: 7b:96:35:f1:8e:aa:42:6c:58:29:0a:68:1c:d5:66: 2e:3d:c3:9e:b4:76:04:7d:fe:77:6b:ed:5d:1c:69: cc:75:9e:cf:bd:30:69:f3:4d:19:8a:5d:a7:e5:69: 90:5e:55:11:ad:8e:2c:d4:de:ff:9b:bc:fe:41:c8: 32:34:15:79:f0:b6:89:c0:da:11:2a:63:10:ad:ee: 01:d7:a5:6c:b4:9d:f2:43:5e:10:92:e1:18:42:2b: 59:ab:6f:82:90:58:45:e6:b4:c3:2e:56:ce:69:4e: 40:fa:b6:ab:be:bb:f6:ce:6e:4f:c2:2d:9a:76:61: b5:11:9d:c1:c3:d6:a1:5a:14:4e:66:9f:53:7f:93: 87:38:f4:49:12:7b:e7:30:11:07:21:01:b0:eb:ef: 0c:a2:3d:71:1e:3c:c2:62:ff:38:1d:62:ff:c6:fe: a7:f7:65:7a:e1:57:ee:36:75:92:8c:4a:b2:76:c1: 92:21:57:33:d2:04:1b:e5:3e:fd:4d:78:2f:a3:89: 1d:c9:e4:43:58:50:38:e7:b6:1b:ef:31:c5:8b:a4: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:46:50:52:E8:9E:4B:67:35:9D:C8:E2:75:B0:5D:0B:9D:CB:FF:09 X509v3 Authority Key Identifier: keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:da:b5:75:d8:b6:80:c8:0c:d8:8c:53:02:6f:59:76:bb:21: 18:fc:e8:3f:c8:75:09:d8:bb:bd:94:56:6d:22:39:9d:0e:c9: 48:55:fb:5d:57:70:9b:f3:64:6d:49:a4:dc:d9:b5:88:f3:07: af:b8:00:9e:48:d7:f1:9c:11:56:42:22:67:c5:e6:d6:58:ae: 60:e6:c5:0a:8e:1b:63:9a:48:d0:d7:a3:a3:b2:f8:5c:5d:98: 1a:22:61:29:73:1c:0b:a9:2d:59:8f:f4:58:54:5b:73:cc:fd: f5:d5:26:1e:ba:d0:a2:5d:b8:21:52:c3:22:8d:1d:2c:af:bf: a7:49:1e:0c:17:40:eb:a5:9b:2d:b2:fd:45:69:c1:a5:bd:17: 23:9b:19:b0:d8:4e:0f:5d:ce:05:9b:ee:59:3a:09:19:db:7e: 78:0d:47:e0:03:d2:82:1c:9f:7d:36:98:3d:10:0e:59:4c:52: 96:6d:32:2e:4b:49:14:54:69:d3:dd:4f:15:2d:3e:b3:0d:3d: dd:c8:8e:5f:ab:ba:3e:9b:d5:17:0b:cc:fd:bb:e9:1a:b2:a3: 8e:80:3c:0c:aa:a0:0b:f5:8b:bb:ec:1a:72:dc:64:ae:d2:df: 9a:bc:ca:73:92:ad:59:e0:a4:71:9a:26:f4:f9:6f:11:9e:90: b2:f8:dc:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw OThDOUNCM0QwHhcNMjQxMTIwMTYwOTM4WhcNMjQxMTI3MTYwOTM4WjAYMRYwFAYD VQQDEw02NzNlMDljMi02NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi2T4cM37ma20CZrkk4UmwRZ1JcvvtjqyyQiUnw0XM+zAPakpY8/NVV9o9J7 ljXxjqpCbFgpCmgc1WYuPcOetHYEff53a+1dHGnMdZ7PvTBp800Zil2n5WmQXlUR rY4s1N7/m7z+QcgyNBV58LaJwNoRKmMQre4B16VstJ3yQ14QkuEYQitZq2+CkFhF 5rTDLlbOaU5A+rarvrv2zm5Pwi2admG1EZ3Bw9ahWhROZp9Tf5OHOPRJEnvnMBEH IQGw6+8Moj1xHjzCYv84HWL/xv6n92V64VfuNnWSjEqydsGSIVcz0gQb5T79TXgv o4kdyeRDWFA457Yb7zHFi6SFywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRGUFLo nktnNZ3I4nWwXQudy/8JMB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE0QS83MjU3RjkzMkJDQjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwt MEpSeDZ3VkZIcXdKakp5ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo2rV12LaAyAzYjFMCb1l2uyEY/Og/yHUJ2Lu9lFZtIjmdDslIVftd V3Cb82RtSaTc2bWI8wevuACeSNfxnBFWQiJnxebWWK5g5sUKjhtjmkjQ16Ojsvhc XZgaImEpcxwLqS1Zj/RYVFtzzP311SYeutCiXbghUsMijR0sr7+nSR4MF0DrpZst sv1FacGlvRcjmxmw2E4PXc4Fm+5ZOgkZ2354DUfgA9KCHJ99Npg9EA5ZTFKWbTIu S0kUVGnT3U8VLT6zDT3dyI5fq7o+m9UXC8z9u+kasqOOgDwMqqAL9Yu77Bpy3GSu 0t+avMpzkq1Z4KRxmib0+W8RnpCy+NxF -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:47 2024 by rpki-client on console-fra.rpki-client.org