$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft File: P7ClbiDxlMd0mHnU0iWz-X6evs8.mft (raw, json) Hash identifier: U6i1LhjUn9wiL7ENHV+omUuqNqaIFAf+Q66Tyl22LgI= Subject key identifier: 16:39:97:15:B2:99:9D:AE:D0:35:BF:7E:2E:1D:74:40:BF:85:03:44 Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft Manifest number: 0702 Signing time: Wed 20 Nov 2024 21:38:32 +0000 Manifest this update: Wed 20 Nov 2024 21:38:31 +0000 Manifest next update: Wed 27 Nov 2024 21:38:31 +0000 Files and hashes: 1: P7ClbiDxlMd0mHnU0iWz-X6evs8.crl (hash: zSEsS6ujRhhwO0MAzUmH6quP3GNRjwJyBWH+A1fZGaI=) 2: 7B6600CA4B0911EEA98A477BC4F9AE02.roa (hash: rUqI8w2nCD+cKM66t2FzCRpsANMOP6oxAEjbkDoG4y8=) 3: 06B5C9F2BE4C11EEA9314929C4F9AE02.roa (hash: 2/Ftunk18DWk1z6jxOsX2JBWOcMTbhRLeLLl78CtQBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF Validity Not Before: Nov 20 21:38:31 2024 GMT Not After : Nov 27 21:38:31 2024 GMT Subject: CN=673e56d8-6962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:6b:e7:e6:d3:89:4b:0f:a1:22:b2:fc:ad: bd:ed:d3:7f:50:0c:c2:d5:02:98:e7:4d:fe:02:f3: 8e:16:9b:1d:53:2b:2d:82:5d:2d:47:05:2f:9b:ee: 6f:c8:db:af:09:a3:1a:f8:72:e2:96:74:aa:9d:fd: 91:bc:18:de:cd:72:0d:cf:1a:f8:c9:80:66:d1:7f: 4d:23:51:c9:5f:0c:52:c7:5f:85:9c:13:ce:74:2b: da:39:a1:56:c4:47:b6:61:f8:85:89:97:46:cf:b9: 7c:87:e3:bb:72:e5:60:b8:77:8a:8f:81:dc:8e:54: c7:ea:a8:6e:d1:dd:0c:ee:b2:5a:54:14:73:0c:38: d3:f3:52:65:db:39:b9:8e:76:46:95:22:c9:27:17: ab:81:a2:f1:c9:de:df:af:d9:a8:a6:d0:af:53:62: 12:c2:0a:dc:8e:8f:4d:11:4b:86:c3:87:0b:87:a1: a5:ff:1f:d4:f0:8d:55:c5:7b:56:df:f6:39:bb:35: f2:1a:58:08:40:c8:6b:12:0e:46:41:53:b2:10:09: 8d:74:5f:aa:0e:70:02:f6:b1:5f:95:33:11:b4:94: 79:35:8f:e7:cf:4d:15:c1:3a:f6:d4:21:ea:40:04: aa:57:b2:9d:b0:51:8b:a4:af:7d:5d:2a:f6:60:4a: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:39:97:15:B2:99:9D:AE:D0:35:BF:7E:2E:1D:74:40:BF:85:03:44 X509v3 Authority Key Identifier: keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:80:04:24:81:80:e9:14:b3:4b:44:9a:34:87:7a:30:90:88: 6e:e9:a3:d1:43:11:58:e8:56:62:1b:be:cb:90:71:8a:49:96: 07:c8:b5:e3:c6:8e:ba:58:c3:42:43:4d:67:36:e2:28:bc:b1: 37:df:f3:1b:ce:93:47:38:6b:b9:5d:e4:e1:2a:66:f4:c5:d1: 51:4f:ae:e5:bc:8f:5f:20:09:4a:c6:db:97:d3:31:ba:a5:17: ed:3a:d4:13:7f:f3:6c:cf:b3:91:76:ce:44:60:c1:d9:01:b6: 94:50:5a:d6:51:e0:07:04:6c:33:fa:27:ad:d7:87:05:86:69: 3b:66:76:5c:23:4a:5b:51:45:17:de:f4:ed:56:72:3c:f4:30: ed:22:fa:e2:8c:24:10:e4:ef:55:d1:9c:26:5c:75:e3:b4:89: 47:83:fd:0b:a4:fc:ce:c1:3e:70:78:ec:43:29:09:7c:ee:7a: 0f:aa:af:6e:da:cb:e1:9f:68:43:b2:02:65:4c:81:55:d0:f0: 25:83:f7:ee:87:f1:dd:1f:80:eb:55:2a:e1:2e:d5:b1:dc:c6: 23:18:1f:06:27:8f:89:5d:51:39:80:37:da:bb:d8:d9:52:9d: 59:27:3d:e1:5c:a5:d3:31:4a:1c:3c:fd:fd:d9:51:de:15:5b: f3:b4:b2:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NTYxMTAvBgNVBAUTKDNGQjBBNTZFMjBGMTk0Qzc3NDk4NzlENEQyMjVCM0Y5 N0U5RUJFQ0YwHhcNMjQxMTIwMjEzODMxWhcNMjQxMTI3MjEzODMxWjAYMRYwFAYD VQQDEw02NzNlNTZkOC02OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZhr5+bTiUsPoSKy/K297dN/UAzC1QKY503+AvOOFpsdUystgl0tRwUvm+5v yNuvCaMa+HLilnSqnf2RvBjezXINzxr4yYBm0X9NI1HJXwxSx1+FnBPOdCvaOaFW xEe2YfiFiZdGz7l8h+O7cuVguHeKj4HcjlTH6qhu0d0M7rJaVBRzDDjT81Jl2zm5 jnZGlSLJJxergaLxyd7fr9moptCvU2ISwgrcjo9NEUuGw4cLh6Gl/x/U8I1VxXtW 3/Y5uzXyGlgIQMhrEg5GQVOyEAmNdF+qDnAC9rFflTMRtJR5NY/nz00VwTr21CHq QASqV7KdsFGLpK99XSr2YErP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBY5lxWy mZ2u0DW/fi4ddEC/hQNEMB8GA1UdIwQYMBaAFD+wpW4g8ZTHdJh51NIls/l+nr7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni83NzE5QzcxMDMw NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9QN0NsYmlEeGxNZDBtSG5VMGlXei1YNmV2 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3Q2xiaUR4bE1kMG1IblUwaVd6LVg2ZXZzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQ1Ni83NzE5QzcxMDMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9QN0NsYmlEeGxN ZDBtSG5VMGlXei1YNmV2czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAygAQkgYDpFLNLRJo0h3owkIhu6aPRQxFY6FZiG77LkHGKSZYHyLXj xo66WMNCQ01nNuIovLE33/MbzpNHOGu5XeThKmb0xdFRT67lvI9fIAlKxtuX0zG6 pRftOtQTf/Nsz7ORds5EYMHZAbaUUFrWUeAHBGwz+iet14cFhmk7ZnZcI0pbUUUX 3vTtVnI89DDtIvrijCQQ5O9V0ZwmXHXjtIlHg/0LpPzOwT5weOxDKQl87noPqq9u 2svhn2hDsgJlTIFV0PAlg/fuh/HdH4DrVSrhLtWx3MYjGB8GJ4+JXVE5gDfau9jZ Up1ZJz3hXKXTMUocPP392VHeFVvztLIL -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:44 2024 by rpki-client on console-fra.rpki-client.org