$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: QWXgAJ1B3Us+F+OEU+Vs42jyoJNCo8UQVURpfqnr0vQ= Subject key identifier: CC:B1:92:EC:CB:51:2A:70:1C:1E:11:02:D5:80:68:38:B2:7F:06:74 Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0BE2 Signing time: Fri 22 Nov 2024 18:27:44 +0000 Manifest this update: Fri 22 Nov 2024 18:27:43 +0000 Manifest next update: Fri 29 Nov 2024 18:27:43 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: M3w6bRz1VZMFRuzUW/Bj1Iqoj4+RSptBv2XQlKBCs94=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: 03PZ9RQjgxD40nMbJ2eys41ohZjgGWxawEredJUIf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3051 (0xbeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: Nov 22 18:27:43 2024 GMT Not After : Nov 29 18:27:43 2024 GMT Subject: CN=6740cd20-e9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:08:d3:b7:4e:0e:57:02:ee:b0:d4:d1:ac: f2:1c:23:f5:5e:c2:a4:41:6a:09:53:86:71:16:e1: ec:aa:94:1d:da:ac:97:90:81:04:46:ac:37:81:57: 6b:12:fc:07:9f:a6:87:ad:ba:11:8a:29:46:a5:e9: d4:b1:99:04:ad:6a:b8:94:57:9c:34:bf:99:47:c5: ea:22:af:7c:92:85:b4:85:95:3a:21:21:f6:ec:e6: ce:32:21:7e:f2:89:fc:c4:82:f8:45:00:63:a7:68: 9a:4d:0c:4b:1a:5e:c5:4c:27:92:c2:a8:cd:ef:7c: 0b:2f:88:db:cf:97:5b:8a:05:3f:0d:90:e4:c1:0a: a2:93:9c:b1:e3:50:99:c0:33:05:94:fc:d4:41:0a: bc:95:bc:15:c9:ae:b3:52:52:ae:fa:d0:dd:14:38: 59:a3:61:df:82:7a:11:ee:9b:2d:b5:01:1d:c0:ae: 34:d8:f3:30:d4:ec:2c:88:97:2a:78:c5:a9:a8:dc: fa:21:f3:85:ef:11:41:8e:c6:52:0a:30:70:bc:80: 21:cc:ae:0d:af:5b:50:37:09:63:6c:8a:4a:ad:2d: 7b:8b:df:dc:12:f6:c5:7f:d1:f2:29:19:20:f9:5d: ea:6c:ba:f1:1e:48:d3:08:19:31:8b:35:2d:b0:bd: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B1:92:EC:CB:51:2A:70:1C:1E:11:02:D5:80:68:38:B2:7F:06:74 X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a8:f2:4f:bf:b6:30:7c:ec:b6:19:58:c7:00:fa:44:a2:36: bf:2d:1a:5c:0c:ac:1c:6a:d3:79:8a:53:07:88:f4:38:12:a0: b7:9b:bf:00:d5:5a:04:e9:4e:cc:d9:82:c5:ac:c9:bf:95:56: f7:cb:04:e7:89:cf:82:0b:d9:ca:0d:cf:5d:49:c6:ef:b3:ee: 58:6a:a9:0f:1a:31:67:a9:a1:a1:64:d0:57:a1:3f:8f:ef:32: 4b:76:39:76:dd:f1:d7:10:e3:c9:73:10:e2:72:06:9c:ff:7e: 85:0c:ee:3d:4d:45:4f:d6:66:2f:b6:48:72:3a:60:21:a0:9c: a5:7d:45:73:ea:3e:07:eb:b2:b3:86:5c:e8:5c:30:72:af:37: 29:45:dc:fe:1d:f0:15:1b:00:3b:9f:34:2a:c0:8b:44:a7:c5: ff:af:f5:58:af:af:48:94:d9:10:41:54:0b:cb:5b:64:78:ea: 66:87:14:06:d6:20:9c:1b:da:ef:31:0e:1f:d5:23:4b:98:dc: 77:3e:e2:d0:9c:55:39:67:62:61:d3:66:9e:59:02:46:03:a7: 86:92:ca:f1:8b:a6:05:93:3e:af:33:c0:b1:ea:95:cb:b7:fa: bc:6c:8e:1a:67:74:f5:c9:c2:47:98:91:ab:c0:e6:35:90:5e: e0:8f:46:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjQxMTIyMTgyNzQzWhcNMjQxMTI5MTgyNzQzWjAYMRYwFAYD VQQDEw02NzQwY2QyMC1lOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WQI07dODlcC7rDU0azyHCP1XsKkQWoJU4ZxFuHsqpQd2qyXkIEERqw3gVdr EvwHn6aHrboRiilGpenUsZkErWq4lFecNL+ZR8XqIq98koW0hZU6ISH27ObOMiF+ 8on8xIL4RQBjp2iaTQxLGl7FTCeSwqjN73wLL4jbz5dbigU/DZDkwQqik5yx41CZ wDMFlPzUQQq8lbwVya6zUlKu+tDdFDhZo2HfgnoR7psttQEdwK402PMw1OwsiJcq eMWpqNz6IfOF7xFBjsZSCjBwvIAhzK4Nr1tQNwljbIpKrS17i9/cEvbFf9HyKRkg +V3qbLrxHkjTCBkxizUtsL1iEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyxkuzL USpwHB4RAtWAaDiyfwZ0MB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkqPJPv7YwfOy2GVjHAPpEoja/LRpcDKwcatN5ilMHiPQ4EqC3m78A 1VoE6U7M2YLFrMm/lVb3ywTnic+CC9nKDc9dScbvs+5YaqkPGjFnqaGhZNBXoT+P 7zJLdjl23fHXEOPJcxDicgac/36FDO49TUVP1mYvtkhyOmAhoJylfUVz6j4H67Kz hlzoXDByrzcpRdz+HfAVGwA7nzQqwItEp8X/r/VYr69IlNkQQVQLy1tkeOpmhxQG 1iCcG9rvMQ4f1SNLmNx3PuLQnFU5Z2Jh02aeWQJGA6eGksrxi6YFkz6vM8Cx6pXL t/q8bI4aZ3T1ycJHmJGrwOY1kF7gj0b4 -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org