$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json) Hash identifier: WA0Gc2nJTlucIvzSIrIBRI0iVsmoyYJvXGg8XFtN8OI= Subject key identifier: 65:BB:3C:40:39:46:53:1E:50:8A:65:B3:FD:76:04:DC:C7:D1:69:B7 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 06C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft Manifest number: 06BF Signing time: Fri 22 Nov 2024 21:42:38 +0000 Manifest this update: Fri 22 Nov 2024 21:42:38 +0000 Manifest next update: Fri 29 Nov 2024 21:42:38 +0000 Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: kpwD1etJMbUOxTKonkrvQfWeauRd6elS13Pt9g9snE8=) 2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: aYe7jpDbVLpSbmC+1cWkvEJAvjZYidvSDHpeA1ubI/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: Nov 22 21:42:38 2024 GMT Not After : Nov 29 21:42:38 2024 GMT Subject: CN=6740face-26eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:cc:f8:a0:3a:18:2c:69:fe:c4:b5:40:aa: 5d:b5:29:57:a6:e1:74:b8:65:e2:79:d6:49:94:25: 2b:9d:67:65:f1:96:ec:cf:de:c6:7b:5f:68:f4:69: 65:b6:d7:8b:d9:2f:4e:f6:2c:5e:c1:8d:00:56:98: 9b:cc:c7:d8:9e:4b:17:c0:0a:ae:08:a8:9b:47:ef: 60:68:80:1d:ca:9f:a6:98:0c:ae:b6:9d:f5:ba:7b: 35:9a:be:f5:b8:ed:d3:55:8a:7b:f9:e0:4a:98:19: d7:a5:17:97:7e:e9:6d:e4:60:40:bb:86:c7:ca:08: 55:3e:d5:10:94:ce:63:94:7a:cd:31:2a:42:08:91: e5:e8:1c:62:3f:65:f7:71:69:ee:98:ac:38:ca:2c: 2a:84:30:34:26:92:fe:0e:9d:1d:8e:e1:a9:bc:c1: f9:fc:fc:6a:17:f1:1b:21:cd:b1:75:0e:1b:42:28: 67:42:a2:59:d2:7a:1b:af:e2:4d:ab:fc:b7:c6:c2: da:eb:96:03:23:0d:44:ce:ed:a5:00:c8:66:1d:48: 42:41:04:b5:0e:45:d6:5f:b7:dc:a4:5b:8a:57:64: 8f:41:fa:d7:1c:d7:bb:56:62:77:0f:7f:e4:17:43: 9e:7a:c6:61:4b:21:ae:d6:bb:0d:ed:0d:1c:f4:96: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BB:3C:40:39:46:53:1E:50:8A:65:B3:FD:76:04:DC:C7:D1:69:B7 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:62:ee:bd:b7:3e:66:4c:d3:3c:7b:57:97:e2:6c:1f:a6:93: 72:da:32:5e:53:a2:61:1b:1f:66:18:6d:c2:36:1f:41:90:b6: 81:29:3d:da:80:b1:b6:f5:d9:04:b6:38:b6:68:18:56:23:49: 74:eb:78:00:7b:31:34:70:91:07:f3:54:4c:17:10:8b:e7:17: 52:39:26:cb:d0:a0:bf:42:d9:0a:6f:41:b9:01:72:ec:ec:82: 55:cc:46:36:19:d9:0b:73:81:76:26:58:b0:5f:4e:26:1c:a2: b4:2f:bc:5c:5f:35:fb:a0:08:10:4a:54:0c:b5:15:b5:49:b1: 1e:28:4d:00:18:2e:66:63:aa:ee:5e:62:50:1c:eb:a7:5a:3e: 2d:a5:c4:78:fe:f2:7d:16:f8:d0:96:d1:47:94:78:f4:43:5a: 67:59:55:d8:32:7f:10:c1:ca:99:87:41:8f:65:a4:cb:eb:c9: e0:9e:a0:6b:be:9f:23:77:f9:0f:f9:89:7a:5f:ba:0b:0a:e3: 5d:0c:88:09:72:93:3f:f3:47:aa:62:02:8e:3d:74:3e:39:8b: d4:81:63:02:16:47:25:5c:93:c5:21:ae:b1:9e:5e:33:db:b3: 01:3c:29:69:c7:c6:d7:7c:d2:df:8d:71:4f:d0:4d:d4:83:ed: b7:86:3e:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjQxMTIyMjE0MjM4WhcNMjQxMTI5MjE0MjM4WjAYMRYwFAYD VQQDEw02NzQwZmFjZS0yNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+bM+KA6GCxp/sS1QKpdtSlXpuF0uGXiedZJlCUrnWdl8Zbsz97Ge19o9Gll tteL2S9O9ixewY0AVpibzMfYnksXwAquCKibR+9gaIAdyp+mmAyutp31uns1mr71 uO3TVYp7+eBKmBnXpReXfult5GBAu4bHyghVPtUQlM5jlHrNMSpCCJHl6BxiP2X3 cWnumKw4yiwqhDA0JpL+Dp0djuGpvMH5/PxqF/EbIc2xdQ4bQihnQqJZ0nobr+JN q/y3xsLa65YDIw1Ezu2lAMhmHUhCQQS1DkXWX7fcpFuKV2SPQfrXHNe7VmJ3D3/k F0OeesZhSyGu1rsN7Q0c9Jb1iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW7PEA5 RlMeUIpls/12BNzH0Wm3MB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE5My9DQThBNEIzQzM5RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1 bFBLaU1SVERVVUVpQVZWYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkYu69tz5mTNM8e1eX4mwfppNy2jJeU6JhGx9mGG3CNh9BkLaBKT3a gLG29dkEtji2aBhWI0l063gAezE0cJEH81RMFxCL5xdSOSbL0KC/QtkKb0G5AXLs 7IJVzEY2GdkLc4F2JliwX04mHKK0L7xcXzX7oAgQSlQMtRW1SbEeKE0AGC5mY6ru XmJQHOunWj4tpcR4/vJ9FvjQltFHlHj0Q1pnWVXYMn8QwcqZh0GPZaTL68ngnqBr vp8jd/kP+Yl6X7oLCuNdDIgJcpM/80eqYgKOPXQ+OYvUgWMCFkclXJPFIa6xnl4z 27MBPClpx8bXfNLfjXFP0E3Ug+23hj7F -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org