$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json) Hash identifier: J5dRG8ONBVR+VqzGQs7c2J0sGFSeGn9WofzmOr6wzMM= Subject key identifier: 53:D9:E7:AB:1D:CB:1B:5F:57:02:59:96:16:12:13:6C:43:86:B8:1C Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft Manifest number: 0BD5 Signing time: Fri 22 Nov 2024 18:39:57 +0000 Manifest this update: Fri 22 Nov 2024 18:39:57 +0000 Manifest next update: Fri 29 Nov 2024 18:39:57 +0000 Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: tPjEeFNTGuKT/kZQ4oBuXBRFKUscTkmO8c5APAgNVJU=) 2: 392036B4808B11EFAB024F45C4F9AE02.roa (hash: KxBznzzIjiiWziQBttPlsvKpm1Ne1EHTuACq/qobY/M=) 3: 92F7BE58815511EF94F0101AC4F9AE02.roa (hash: iR7R0Q5cUse9aitnJ6QMDQAjrBMPKnkO6yIZQMvxGeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Nov 22 18:39:57 2024 GMT Not After : Nov 29 18:39:57 2024 GMT Subject: CN=6740cffd-4d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:00:94:d6:9e:e5:34:cd:7a:10:53:31:31: d5:bd:fc:91:6d:5a:2c:4c:25:bd:21:36:39:34:14: 3d:68:5e:b1:7c:e5:38:cb:70:dc:51:97:bf:e1:11: a2:56:09:6b:07:6a:80:6f:72:73:0e:4b:26:1f:49: 19:d5:d6:05:07:57:25:53:30:e9:60:93:06:9e:c8: cf:cb:27:7c:9a:d9:ce:8a:0a:b4:80:62:65:3e:0d: 38:25:08:0c:24:d7:05:15:4f:92:ac:40:68:1e:1d: 66:45:0e:f9:16:d5:58:5a:43:a0:3c:27:20:6d:8d: c9:6b:9a:81:65:b8:d1:77:29:18:65:e1:6a:06:e7: e7:36:04:75:f2:ec:57:95:a5:49:26:03:17:2a:3c: 70:fb:f7:d3:cb:c9:cb:ff:7b:76:a6:a6:e8:c9:28: fa:e9:3d:f4:37:af:8a:5f:d1:be:d1:32:a7:77:6d: c7:25:ea:fb:d4:d0:c6:e1:81:03:c4:61:64:7a:92: 06:94:ea:39:09:11:3e:1e:95:a2:98:cd:e0:2c:58: 5b:4c:c5:2d:97:cf:ed:c4:12:74:b3:36:e4:f6:e5: 96:0b:56:03:70:a0:b2:d9:95:42:14:34:fc:01:a8: 83:a6:13:2d:83:7a:e8:24:6b:75:c2:1e:ad:c0:8d: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:E7:AB:1D:CB:1B:5F:57:02:59:96:16:12:13:6C:43:86:B8:1C X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:61:65:df:d0:15:37:48:a1:92:5c:59:a2:b0:9d:70:55:48: 14:be:35:48:b3:1b:ac:30:2d:53:5c:81:a9:29:ad:24:b9:a3: 84:f5:66:19:bf:3d:76:ff:c0:d0:4e:5a:3a:0e:76:a6:23:3d: fa:34:98:89:98:08:ec:36:1c:bc:2e:f8:0d:37:b4:58:d8:33: 20:f0:97:97:25:a2:b2:fd:56:02:41:49:7a:04:61:53:cc:7f: 41:d8:bf:20:4e:f7:56:3c:e5:69:54:bf:23:5f:24:34:d1:3a: 1e:b5:dc:f6:54:f2:c5:9b:54:d5:9f:f4:f0:45:00:5b:47:10: 51:8f:51:1d:a3:84:f3:e2:f3:b9:00:4f:3e:0c:96:8e:f5:ff: 96:07:72:21:1a:a2:d4:77:f0:dd:36:21:92:31:e9:12:99:5a: 91:05:a4:a1:98:9e:d5:8a:cc:b9:99:ae:91:56:a6:82:a3:19: 6c:b7:3f:97:67:74:9c:d4:f7:00:91:04:c7:35:8f:a8:e9:c9: c9:26:9d:e0:62:cb:6b:fe:fa:84:f6:4c:41:12:c2:9e:a5:d7: 89:50:cc:ef:5e:77:0e:5b:62:86:7d:a9:98:d7:d8:dd:5c:0d: cc:fc:60:b2:e5:c9:03:88:bc:37:2c:7e:27:1b:05:d1:d7:ac: 85:c4:f4:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjQxMTIyMTgzOTU3WhcNMjQxMTI5MTgzOTU3WjAYMRYwFAYD VQQDEw02NzQwY2ZmZC00ZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3M4AlNae5TTNehBTMTHVvfyRbVosTCW9ITY5NBQ9aF6xfOU4y3DcUZe/4RGi VglrB2qAb3JzDksmH0kZ1dYFB1clUzDpYJMGnsjPyyd8mtnOigq0gGJlPg04JQgM JNcFFU+SrEBoHh1mRQ75FtVYWkOgPCcgbY3Ja5qBZbjRdykYZeFqBufnNgR18uxX laVJJgMXKjxw+/fTy8nL/3t2pqboySj66T30N6+KX9G+0TKnd23HJer71NDG4YED xGFkepIGlOo5CRE+HpWimM3gLFhbTMUtl8/txBJ0szbk9uWWC1YDcKCy2ZVCFDT8 AaiDphMtg3roJGt1wh6twI0kSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPZ56sd yxtfVwJZlhYSE2xDhrgcMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw NXN0SHVWZzA0cW5EMldobU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaYWXf0BU3SKGSXFmisJ1wVUgUvjVIsxusMC1TXIGpKa0kuaOE9WYZ vz12/8DQTlo6DnamIz36NJiJmAjsNhy8LvgNN7RY2DMg8JeXJaKy/VYCQUl6BGFT zH9B2L8gTvdWPOVpVL8jXyQ00Toetdz2VPLFm1TVn/TwRQBbRxBRj1Edo4Tz4vO5 AE8+DJaO9f+WB3IhGqLUd/DdNiGSMekSmVqRBaShmJ7Visy5ma6RVqaCoxlstz+X Z3Sc1PcAkQTHNY+o6cnJJp3gYstr/vqE9kxBEsKepdeJUMzvXncOW2KGfamY19jd XA3M/GCy5ckDiLw3LH4nGwXR16yFxPRa -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org