$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: Fim0qwg0ytH1gN+bVFU6+zniCERLEzGo2L6PXlLBWwY= Subject key identifier: 76:00:3C:8D:7E:64:41:94:14:D6:9D:04:B7:0E:47:F4:9E:3F:B6:7B Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: 03 Signing time: Sat 23 Nov 2024 06:10:48 +0000 Manifest this update: Sat 23 Nov 2024 06:10:47 +0000 Manifest next update: Sat 30 Nov 2024 06:10:47 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: f4HUZbBjhr1wzHt+KW1WorJjnPcBHwUtBjXxCF7EAyA=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: Nov 23 06:10:47 2024 GMT Not After : Nov 30 06:10:47 2024 GMT Subject: CN=674171e7-d479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2c:2a:69:04:da:17:91:1d:1a:2c:72:7b:30: c0:35:be:f7:65:9c:3c:58:69:79:82:2e:74:5f:75: d4:ca:c3:bd:cd:9d:6c:6f:c2:af:0c:95:32:49:65: ba:16:ce:fb:2b:f3:bb:17:be:dd:f6:2d:fb:2d:a2: d6:21:cd:ef:5c:2a:ac:bb:4e:8b:e2:c9:e8:cf:4b: a1:13:9f:c7:f4:5b:e1:f4:b1:24:00:82:7f:cd:18: ca:3f:f3:10:70:9f:2b:94:9f:de:7a:4b:84:7d:ed: 0c:6a:2b:c3:96:68:07:b7:15:b6:c6:3f:2c:59:b1: 73:02:30:dc:f2:39:d1:9b:f8:c7:6c:9b:c2:37:34: c4:65:7e:99:16:d0:d9:0c:96:f4:23:a0:89:b2:5f: cd:a4:24:3f:49:03:b6:d6:72:9f:52:f3:de:2e:dd: 00:0b:99:6a:67:fc:99:21:e5:4b:ef:2a:c5:c4:1f: 07:16:c6:ac:67:10:3d:08:76:cf:22:b9:2c:7a:3f: 99:20:f0:a1:a2:c8:c4:35:f6:43:30:fc:10:dc:df: bb:38:36:9e:34:d7:89:2a:2d:74:91:c1:92:22:f1: b1:e3:06:d4:f8:9e:0f:e3:61:c0:23:77:1e:d8:ee: 82:5b:61:83:f6:8b:b1:d0:a6:d1:e5:dc:07:0e:56: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:00:3C:8D:7E:64:41:94:14:D6:9D:04:B7:0E:47:F4:9E:3F:B6:7B X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:70:84:7b:25:30:b2:f0:7d:87:00:df:77:e1:22:22:da:47: 26:81:ca:99:4e:fd:2c:8c:05:77:99:41:ae:74:04:31:29:9e: 8a:90:2c:38:4e:6c:70:a0:36:b4:d7:db:80:2e:09:87:a4:87: e6:a6:e1:ad:16:21:51:9a:bf:31:c3:9b:fa:f1:be:e3:58:08: d2:1d:1e:56:13:95:f9:26:df:e2:96:f4:d9:21:45:f4:41:9a: e4:50:2e:b6:47:90:ba:b4:f7:0f:fb:51:17:71:e2:49:24:3a: 81:61:6a:f1:39:b8:cf:ff:2b:ac:17:71:9b:2d:a0:ed:3e:47: 16:28:43:c3:f7:50:91:8f:14:84:9a:ac:5d:4d:1f:3c:fe:3f: 9c:f4:e0:a3:5d:18:ef:0a:ee:92:2e:5c:e7:07:8c:dd:05:ec: 0f:a1:15:ee:9a:6e:a6:8f:60:23:ce:58:70:42:4d:c3:42:b2: 55:ee:19:ad:54:27:17:af:0b:fe:cb:63:ff:e9:fc:a5:4a:f1: 3e:a5:41:ed:28:29:b1:5d:1e:52:8f:20:20:c5:32:a9:52:2f: 0c:c3:c5:71:ae:c6:58:e5:46:ea:90:16:33:2d:49:f2:e8:44: cb:a8:3d:cc:10:ee:c6:69:c8:d4:aa:ab:97:dc:cd:74:65:38: 30:ef:9d:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzYyNzExMC8GA1UEBRMoMDgwRUMxNEEwMDEyNUQ5MTRDN0U2Mjg1REU5QzU2Njg5 QzU4NzJBNDAeFw0yNDExMjMwNjEwNDdaFw0yNDExMzAwNjEwNDdaMBgxFjAUBgNV BAMTDTY3NDE3MWU3LWQ0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsLCppBNoXkR0aLHJ7MMA1vvdlnDxYaXmCLnRfddTKw73NnWxvwq8MlTJJZboW zvsr87sXvt32LfstotYhze9cKqy7ToviyejPS6ETn8f0W+H0sSQAgn/NGMo/8xBw nyuUn956S4R97QxqK8OWaAe3FbbGPyxZsXMCMNzyOdGb+Mdsm8I3NMRlfpkW0NkM lvQjoImyX82kJD9JA7bWcp9S894u3QALmWpn/Jkh5UvvKsXEHwcWxqxnED0Ids8i uSx6P5kg8KGiyMQ19kMw/BDc37s4Np4014kqLXSRwZIi8bHjBtT4ng/jYcAjdx7Y 7oJbYYP2i7HQptHl3AcOVmWBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdgA8jX5k QZQU1p0Etw5H9J4/tnswHwYDVR0jBBgwFoAUCA7BSgASXZFMfmKF3pxWaJxYcqQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3NjI3L0U3RDI1Nzg2QTg5 MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0E3QlNnQVNYWkZNZm1LRjNweFdhSnhZY3FRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 NjI3L0U3RDI1Nzg2QTg5MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpG TWZtS0YzcHhXYUp4WWNxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADBwhHslMLLwfYcA33fhIiLaRyaByplO/SyMBXeZQa50BDEpnoqQLDhO bHCgNrTX24AuCYekh+am4a0WIVGavzHDm/rxvuNYCNIdHlYTlfkm3+KW9NkhRfRB muRQLrZHkLq09w/7URdx4kkkOoFhavE5uM//K6wXcZstoO0+RxYoQ8P3UJGPFISa rF1NHzz+P5z04KNdGO8K7pIuXOcHjN0F7A+hFe6abqaPYCPOWHBCTcNCslXuGa1U JxevC/7LY//p/KVK8T6lQe0oKbFdHlKPICDFMqlSLwzDxXGuxljlRuqQFjMtSfLo RMuoPcwQ7sZpyNSqq5fczXRlODDvnSs= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org