$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json) Hash identifier: 42wqUWs9AzZwkIblTBMG+ldp/9tgEKz5yTHFUubaquI= Subject key identifier: 5B:FD:D7:46:20:04:D4:BA:EB:36:0F:A6:94:6F:B2:37:68:A4:34:97 Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft Manifest number: 8F Signing time: Thu 21 Nov 2024 04:37:23 +0000 Manifest this update: Thu 21 Nov 2024 04:37:23 +0000 Manifest next update: Thu 28 Nov 2024 04:37:23 +0000 Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: z5O3aW1zgUN09KmIGrWIAxiMTHRS+IrGtXr7ZhLl8cg=) 2: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: bPf9OeOoi06Rnw8uv3TpDzvZ9rbymPD0sd16mNTyii0=) 3: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: l2/AcYIuuEmWmC/Xu8FUURnDfGYw2qZ7H+y/uBwBrJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Validity Not Before: Nov 21 04:37:23 2024 GMT Not After : Nov 28 04:37:23 2024 GMT Subject: CN=673eb903-b86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:84:38:90:47:e3:ed:2d:9d:19:61:75:b6: 82:c4:0d:8e:68:dc:1e:7e:4e:a1:1e:fe:a8:80:bf: 07:bc:29:5c:3d:cb:2d:59:d8:f8:72:ba:20:dd:c8: 03:c2:1d:90:5d:32:cb:d7:34:14:15:b3:18:05:a6: a6:db:fe:d0:9f:19:21:ed:a4:96:37:ab:5b:bc:26: be:2b:5e:bc:04:3e:a2:40:d0:45:20:7e:f7:b8:66: 1d:e3:2d:4a:0a:8a:8c:00:bf:94:5b:6f:81:69:a5: 94:aa:00:d9:f1:29:7a:b3:88:d2:82:30:55:21:d3: 88:66:62:cc:00:01:df:e7:95:d0:3a:b7:e8:1f:50: 60:bb:d0:fd:62:b0:57:41:70:4c:68:b1:3a:c5:d7: e6:85:4a:99:c8:5b:ec:ec:ba:01:80:b5:c3:5d:23: 5a:e0:67:6a:7f:68:fc:f5:13:ed:95:79:7a:dd:99: 31:93:31:fe:2e:9d:ef:c7:8d:a2:b4:79:8b:52:04: 86:5f:50:fe:81:60:90:82:2a:6c:de:eb:d7:74:06: 8d:a4:5e:98:9b:32:ce:fb:31:88:51:c1:97:eb:98: e9:b1:c9:25:77:c1:5f:56:dd:c9:d4:b8:97:ba:08: 48:8b:fe:8a:5d:ef:50:fa:92:f1:4c:4e:46:1b:5e: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FD:D7:46:20:04:D4:BA:EB:36:0F:A6:94:6F:B2:37:68:A4:34:97 X509v3 Authority Key Identifier: keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c7:0c:18:93:8e:77:09:36:a8:8d:42:b9:b0:29:b0:1e:5a: d6:03:9d:28:64:7a:03:1a:61:88:23:16:e4:68:84:20:c6:30: c5:32:02:49:de:2b:f1:55:88:ce:b1:a1:88:16:67:79:02:53: 37:e9:e1:2b:73:bc:aa:4c:f0:58:0e:97:08:26:d7:5b:28:03: dc:55:39:91:d7:c3:0b:a8:ed:c3:25:a4:87:65:c0:16:41:dd: a9:47:b3:f2:ee:42:a5:87:7c:38:18:86:0f:c9:6c:0d:74:15: 71:a3:38:4e:6a:1b:48:12:d1:59:e1:3c:2e:36:4e:fb:21:2f: 6d:7c:ee:8a:b1:d9:08:76:34:98:45:f5:d6:27:1b:2d:30:9f: c2:3c:31:7c:e8:f1:07:c4:b7:9a:1c:f8:c6:1a:c2:48:f3:8b: ac:8b:7e:5a:49:97:e6:84:9c:d6:46:00:ab:da:e7:c2:4c:ee: 67:26:71:33:51:6e:66:9b:93:2e:31:7c:45:a3:9f:04:01:4d: 05:8a:f8:ef:96:ab:cd:94:52:3d:79:c2:2b:75:a1:cc:b9:54: 5a:05:8c:46:69:29:8b:89:c5:b3:d0:7c:58:9f:70:67:b5:29: b8:67:d7:73:de:92:c0:e0:86:61:a6:e4:5f:b7:56:df:7b:b0: 5b:fa:d9:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEFGQjhGRkUxRTg2ODYyOTZCOTk2QzYzQUE5MDJFQTlD MTI4RjQ4RkUwHhcNMjQxMTIxMDQzNzIzWhcNMjQxMTI4MDQzNzIzWjAYMRYwFAYD VQQDEw02NzNlYjkwMy1iODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA246EOJBH4+0tnRlhdbaCxA2OaNwefk6hHv6ogL8HvClcPcstWdj4crog3cgD wh2QXTLL1zQUFbMYBaam2/7Qnxkh7aSWN6tbvCa+K168BD6iQNBFIH73uGYd4y1K CoqMAL+UW2+BaaWUqgDZ8Sl6s4jSgjBVIdOIZmLMAAHf55XQOrfoH1Bgu9D9YrBX QXBMaLE6xdfmhUqZyFvs7LoBgLXDXSNa4Gdqf2j89RPtlXl63ZkxkzH+Lp3vx42i tHmLUgSGX1D+gWCQgips3uvXdAaNpF6YmzLO+zGIUcGX65jpsckld8FfVt3J1LiX ughIi/6KXe9Q+pLxTE5GG15S1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv910Yg BNS66zYPppRvsjdopDSXMB8GA1UdIwQYMBaAFK+4/+HoaGKWuZbGOqkC6pwSj0j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GQkREQUMyNENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lwYTVsc1k2cVFMcW5CS1BT UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GQkREQUMyNENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lw YTVsc1k2cVFMcW5CS1BTUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGxwwYk453CTaojUK5sCmwHlrWA50oZHoDGmGIIxbkaIQgxjDFMgJJ 3ivxVYjOsaGIFmd5AlM36eErc7yqTPBYDpcIJtdbKAPcVTmR18MLqO3DJaSHZcAW Qd2pR7Py7kKlh3w4GIYPyWwNdBVxozhOahtIEtFZ4TwuNk77IS9tfO6KsdkIdjSY RfXWJxstMJ/CPDF86PEHxLeaHPjGGsJI84usi35aSZfmhJzWRgCr2ufCTO5nJnEz UW5mm5MuMXxFo58EAU0FivjvlqvNlFI9ecIrdaHMuVRaBYxGaSmLicWz0HxYn3Bn tSm4Z9dz3pLA4IZhpuRft1bfe7Bb+tn2 -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org