$ rpki-client -vvf rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft File: euliL4NM9MbPWtGpivB9UBVFpL8.mft (raw, json) Hash identifier: UtRI8tZWg/L+IDExVJR00hf21CH5vq5H8d07+y6rc5U= Subject key identifier: 50:89:62:D2:20:57:47:A8:A8:1B:60:0E:15:B3:50:26:FC:73:8F:9A Authority key identifier: 7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF Certificate issuer: /CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF Certificate serial: 09E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft Manifest number: 09E0 Signing time: Fri 22 Nov 2024 19:41:59 +0000 Manifest this update: Fri 22 Nov 2024 19:41:59 +0000 Manifest next update: Fri 29 Nov 2024 19:41:59 +0000 Files and hashes: 1: euliL4NM9MbPWtGpivB9UBVFpL8.crl (hash: cgn//SnVZGlsLL83Ox8Eug18bUyRhMkONmHhLPO9Ytk=) 2: 61096B522DB111EDA42EBE42C4F9AE02.roa (hash: MLOp/VyTI9zALKbWjaowS/AQ+yDzGywTskit04hrMIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2537 (0x9e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF Validity Not Before: Nov 22 19:41:59 2024 GMT Not After : Nov 29 19:41:59 2024 GMT Subject: CN=6740de87-4088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f1:74:66:ad:57:33:39:7e:67:de:75:4c:16: 44:65:bc:de:15:74:0f:c9:cb:eb:ac:3f:a4:32:3b: c7:91:53:f4:82:83:1e:f3:8d:8c:bb:a3:a5:98:1b: 4c:7c:ae:bb:bd:1b:71:c4:14:21:b5:e2:09:87:ca: 90:3a:7e:f5:98:36:4d:8a:dc:ca:a2:64:02:7c:6e: 87:d8:3d:8d:44:a2:09:b9:f6:7a:7c:db:a0:ac:f8: ac:a6:57:12:7f:80:43:53:07:74:d4:ea:c4:2a:76: 0c:c9:ee:0b:c1:e6:cd:c2:14:54:34:73:56:85:6b: 1a:a4:0e:8e:d5:5f:31:34:5f:03:c7:d2:11:9d:b2: 81:7e:ce:4a:3c:a8:f6:7a:30:6a:ff:33:37:d7:b1: 25:9b:d5:d6:0e:9b:43:36:c4:cd:74:c1:57:3f:af: 26:3f:58:a0:e1:0f:6f:84:9e:3f:94:1f:4c:ba:a6: 9f:88:77:7d:5c:c3:ad:8d:e3:ab:7a:ab:eb:b1:9b: 54:54:68:04:6e:9d:7f:a4:12:38:be:17:84:f6:6b: 78:9e:d4:b2:85:e6:11:7a:46:8a:87:6b:5c:76:97: bc:fb:89:61:61:71:0c:10:29:2e:08:2c:84:ed:0b: 92:8d:fb:d9:00:66:ae:54:9f:9a:b0:ff:02:96:72: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:89:62:D2:20:57:47:A8:A8:1B:60:0E:15:B3:50:26:FC:73:8F:9A X509v3 Authority Key Identifier: keyid:7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:23:f0:dc:7d:09:c5:73:66:76:43:84:1f:50:9d:91:9f:e6: 59:91:22:61:00:40:7d:74:66:63:4f:e8:d7:a3:47:30:4f:da: a2:13:90:5c:7d:be:e2:c0:bf:0f:62:0b:34:9b:04:e3:26:88: d4:8e:70:de:3d:08:fd:bd:de:4d:58:4f:2b:42:2d:2d:be:79: f5:61:eb:0d:93:70:f4:cc:44:88:34:f9:85:27:c4:f9:43:51: f8:61:6b:a5:99:c4:f8:29:fd:93:cd:c1:80:3e:a8:67:24:2e: c7:85:d1:d2:0c:b2:6d:04:79:c3:9a:6c:e9:76:a0:5e:fc:ef: 6f:36:39:1f:ed:27:27:38:21:8b:e3:59:c9:aa:de:ab:85:cd: 0e:b7:21:d9:f4:a5:c5:4c:80:08:72:a6:2f:5e:30:51:8f:9c: b8:96:dd:45:81:1f:b7:f5:49:69:12:00:5b:6d:57:6a:6c:9c: db:01:00:98:79:2b:18:11:e9:74:f1:94:94:9c:0a:08:6a:25: 69:e4:81:59:6a:5b:4c:e2:50:1e:9e:9d:d3:cc:f7:55:33:29: fc:f0:d0:51:f7:80:d0:36:e3:f3:6a:e8:ff:c8:a0:ea:1d:1b: 3a:f9:0e:90:38:d7:1f:47:03:4f:8b:d3:f0:43:76:a5:2c:a3: 07:db:4d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI2NjExMTAvBgNVBAUTKDdBRTk2MjJGODM0Q0Y0QzZDRjVBRDFBOThBRjA3RDUw MTU0NUE0QkYwHhcNMjQxMTIyMTk0MTU5WhcNMjQxMTI5MTk0MTU5WjAYMRYwFAYD VQQDEw02NzQwZGU4Ny00MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/F0Zq1XMzl+Z951TBZEZbzeFXQPycvrrD+kMjvHkVP0goMe842Mu6OlmBtM fK67vRtxxBQhteIJh8qQOn71mDZNitzKomQCfG6H2D2NRKIJufZ6fNugrPisplcS f4BDUwd01OrEKnYMye4LwebNwhRUNHNWhWsapA6O1V8xNF8Dx9IRnbKBfs5KPKj2 ejBq/zM317Elm9XWDptDNsTNdMFXP68mP1ig4Q9vhJ4/lB9MuqafiHd9XMOtjeOr eqvrsZtUVGgEbp1/pBI4vheE9mt4ntSyheYRekaKh2tcdpe8+4lhYXEMECkuCCyE 7QuSjfvZAGauVJ+asP8ClnIiUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCJYtIg V0eoqBtgDhWzUCb8c4+aMB8GA1UdIwQYMBaAFHrpYi+DTPTGz1rRqYrwfVAVRaS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjY2MS80Q0M3NzI3NjY5 QkMxMUVBQUYxQjlGNjlDNEY5QUUwMi9ldWxpTDROTTlNYlBXdEdwaXZCOVVCVkZw TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V1bGlMNE5NOU1iUFd0R3BpdkI5VUJWRnBMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjY2MS80Q0M3NzI3NjY5QkMxMUVBQUYxQjlGNjlDNEY5QUUwMi9ldWxpTDROTTlN YlBXdEdwaXZCOVVCVkZwTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZI/DcfQnFc2Z2Q4QfUJ2Rn+ZZkSJhAEB9dGZjT+jXo0cwT9qiE5Bc fb7iwL8PYgs0mwTjJojUjnDePQj9vd5NWE8rQi0tvnn1YesNk3D0zESINPmFJ8T5 Q1H4YWulmcT4Kf2TzcGAPqhnJC7HhdHSDLJtBHnDmmzpdqBe/O9vNjkf7ScnOCGL 41nJqt6rhc0OtyHZ9KXFTIAIcqYvXjBRj5y4lt1FgR+39UlpEgBbbVdqbJzbAQCY eSsYEel08ZSUnAoIaiVp5IFZaltM4lAenp3TzPdVMyn88NBR94DQNuPzauj/yKDq HRs6+Q6QONcfRwNPi9PwQ3alLKMH200n -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org