$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json) Hash identifier: TOvfzYWNmt1tm1M0atL5G5pS92FuJeXVBddQrm9fWIU= Subject key identifier: 63:2F:71:93:58:53:9B:B3:84:62:DB:2F:B2:99:D5:77:84:84:EC:48 Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 1765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft Manifest number: 175A Signing time: Fri 22 Nov 2024 16:36:37 +0000 Manifest this update: Fri 22 Nov 2024 16:36:36 +0000 Manifest next update: Fri 29 Nov 2024 16:36:36 +0000 Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: rHzKnxK1ApM/5nhLuUAMdFgYQVLhhMDPRNdhpdbiRIs=) 2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: MtUOG8te7vvd8OgcyO+YgqB1a0uCeqPJKDSTrguzMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5989 (0x1765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: Nov 22 16:36:36 2024 GMT Not After : Nov 29 16:36:36 2024 GMT Subject: CN=6740b314-49a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2b:34:8c:21:4e:3c:7a:50:b8:4a:76:7c:d3: ed:eb:5e:8f:39:69:40:c0:a4:40:b6:84:ab:e4:46: 88:3b:11:f5:25:e8:cd:33:94:71:7c:4c:80:12:6c: 26:44:0a:44:7c:40:01:72:ff:b2:8d:d9:26:71:e0: 00:d6:4d:01:f8:b7:e9:fb:5c:93:21:70:11:4f:ee: 66:57:4b:ce:e9:45:c7:80:96:fe:bf:6f:cc:68:eb: 6f:46:a5:7b:8a:46:14:69:c5:d5:57:b6:17:cf:b4: 5f:95:90:73:e7:2b:40:0c:17:c3:30:48:56:42:d8: 91:0a:e7:e6:64:fe:7a:28:38:2a:b4:9f:4f:84:f6: 58:b6:c1:78:7b:40:0c:87:92:5b:47:c1:e9:c4:73: bb:96:6a:20:1b:0c:3c:d5:9f:b7:59:0f:42:01:15: d7:9f:0d:06:e4:b7:12:b4:5b:a4:09:30:98:7e:2e: 01:c6:fb:df:93:39:b6:d9:ce:4b:f1:de:d0:3e:bd: 18:2a:2d:9f:ee:fd:fc:6d:d1:08:22:76:71:4c:5e: f8:55:0d:35:5c:60:49:a1:c7:0c:7e:39:5b:96:a2: fc:07:90:2e:da:6a:fb:fa:d5:52:b0:0f:02:fb:f3: 8d:23:ca:e0:65:42:56:a5:87:e7:54:f9:cd:19:29: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2F:71:93:58:53:9B:B3:84:62:DB:2F:B2:99:D5:77:84:84:EC:48 X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:33:6b:7f:17:45:e2:93:52:48:f2:51:cf:6a:06:dd:d4:85: 3d:e9:e0:61:e4:0b:d3:46:9a:f2:bf:de:80:5a:6f:53:c0:fb: 9b:07:b7:6d:46:b9:8a:4d:6a:15:a5:a2:37:2d:44:63:fe:a0: 4a:e4:a8:7b:12:b5:3d:15:7c:5e:83:cf:ad:77:a6:3c:50:55: d5:07:01:06:12:57:05:bc:ad:dc:04:f7:d4:3c:2c:e0:bf:07: 59:30:50:da:8b:b9:19:46:26:03:c6:22:41:34:4e:79:d1:17: 79:1b:db:f3:14:34:4d:55:79:1f:2e:4b:4b:c7:fd:04:73:69: 6a:a0:68:38:f9:5c:c7:20:a1:e5:2a:1f:46:1f:e8:c0:d4:16: 5c:e7:10:60:50:98:68:9b:85:b1:0f:cc:ab:e8:5b:43:2b:cd: 69:10:2c:f0:b5:94:95:fe:6d:09:00:94:22:6d:83:06:51:0a: 09:fa:55:4f:2c:f4:b9:5c:89:b5:01:fa:e1:21:70:83:87:a5: 9b:0f:10:26:39:67:15:52:c8:20:1f:fe:a7:06:81:87:76:6d: 34:70:d3:e0:62:4e:71:5c:cd:44:9e:ef:e2:32:19:8e:d9:fe: 7c:a0:e3:e5:b8:6e:5f:7b:93:e9:1b:04:57:60:6a:98:2c:06: 3e:07:c9:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjQxMTIyMTYzNjM2WhcNMjQxMTI5MTYzNjM2WjAYMRYwFAYD VQQDEw02NzQwYjMxNC00OWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ys0jCFOPHpQuEp2fNPt616POWlAwKRAtoSr5EaIOxH1JejNM5RxfEyAEmwm RApEfEABcv+yjdkmceAA1k0B+Lfp+1yTIXART+5mV0vO6UXHgJb+v2/MaOtvRqV7 ikYUacXVV7YXz7RflZBz5ytADBfDMEhWQtiRCufmZP56KDgqtJ9PhPZYtsF4e0AM h5JbR8HpxHO7lmogGww81Z+3WQ9CARXXnw0G5LcStFukCTCYfi4Bxvvfkzm22c5L 8d7QPr0YKi2f7v38bdEIInZxTF74VQ01XGBJoccMfjlblqL8B5Au2mr7+tVSsA8C +/ONI8rgZUJWpYfnVPnNGSkvJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMvcZNY U5uzhGLbL7KZ1XeEhOxIMB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUQyRS8wNzhDNjJBQUM1MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRW NGY3ZFFOMENQdmV2UW91dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDM2t/F0Xik1JI8lHPagbd1IU96eBh5AvTRpryv96AWm9TwPubB7dt RrmKTWoVpaI3LURj/qBK5Kh7ErU9FXxeg8+td6Y8UFXVBwEGElcFvK3cBPfUPCzg vwdZMFDai7kZRiYDxiJBNE550Rd5G9vzFDRNVXkfLktLx/0Ec2lqoGg4+VzHIKHl Kh9GH+jA1BZc5xBgUJhom4WxD8yr6FtDK81pECzwtZSV/m0JAJQibYMGUQoJ+lVP LPS5XIm1AfrhIXCDh6WbDxAmOWcVUsggH/6nBoGHdm00cNPgYk5xXM1Enu/iMhmO 2f58oOPluG5fe5PpGwRXYGqYLAY+B8nN -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org