$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: DsDOtODfsquAFsgiTR9G25oh/HLXpTKVucfBAlKAIRg= Subject key identifier: 1C:AB:B6:85:2A:51:A7:E9:B7:F5:06:2B:83:36:F6:E0:5B:4D:0C:E8 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 095A Signing time: Fri 22 Nov 2024 20:04:23 +0000 Manifest this update: Fri 22 Nov 2024 20:04:22 +0000 Manifest next update: Fri 29 Nov 2024 20:04:22 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: PxYZjJvom1ooj7DofbSaNSxvaqfZIJS2GNq1ou8A3lM=) 2: ED2F5B4436CB11EFB326B063C4F9AE02.roa (hash: CID6n2zXwAxwmSTWjcLoWIV0Txts8ARSy8Lk4Npd/h4=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: lHubJpI54TUZB9ErKrK2Uh2G0dB2IBaNDMotiEzD5Do=) 4: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: A7cl33/zLiHVgWJ56Etkw7nyJvndv/4HjDbWIFXfJfc=) 5: 25F5971053AD11EFA8F5BE0BC4F9AE02.roa (hash: mv7OzvFwcyZqmvPgdyrcrXAv3Hs2KlAjpY3WCt9pS8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2448 (0x990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Nov 22 20:04:22 2024 GMT Not After : Nov 29 20:04:22 2024 GMT Subject: CN=6740e3c7-a91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:7b:e2:fb:35:89:a4:64:fd:95:1f:66:e1: 98:34:cd:5f:e6:f4:9f:7a:d0:28:f1:18:67:d5:fd: 5f:ac:0c:54:05:10:72:60:81:06:68:99:77:63:91: d2:ea:36:ca:eb:90:62:43:d6:12:46:77:e3:64:0a: 5d:67:ef:bb:04:fb:db:b7:18:30:bc:e7:ca:56:47: d3:37:60:b8:56:fc:c1:04:88:23:6a:0f:9f:de:41: fc:25:0c:df:e5:de:0c:c0:72:3c:4f:1c:0c:59:76: 5b:13:9a:12:eb:63:d1:2e:f3:a5:8f:dd:dd:6c:82: b8:22:89:81:0f:2e:39:b6:d6:47:23:5c:f8:83:6c: e2:2c:5c:ce:26:4e:83:84:ff:3a:09:87:67:61:74: fb:6a:a8:91:0f:7c:9b:f9:94:0d:d3:a8:51:04:45: 50:dd:09:c7:be:c4:e6:6d:e3:b8:0e:24:3c:ca:6d: 17:30:33:0f:1b:b3:34:ca:b8:33:31:57:f1:8c:99: f3:ec:06:d0:3c:f8:1c:0a:76:72:46:1b:ab:39:a6: 6c:4e:4a:66:c4:79:5f:43:02:70:29:6b:22:f9:1c: d1:46:4e:8b:30:64:ae:4e:23:3a:7c:e3:d5:48:9d: 0c:29:97:a0:89:a9:9a:0c:59:e8:59:f9:95:0e:4c: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AB:B6:85:2A:51:A7:E9:B7:F5:06:2B:83:36:F6:E0:5B:4D:0C:E8 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:82:0b:26:ec:47:82:79:da:38:f8:5a:bf:8a:59:0d:24:ea: c1:53:bb:22:cd:57:a2:2b:11:94:08:24:6e:bf:7e:cd:d0:7d: 56:cc:57:d8:e2:a4:2e:cd:37:c8:02:e9:db:47:ee:b4:6d:2b: ec:10:8b:b9:8f:bd:be:a0:9b:fe:01:3e:19:60:b9:d8:75:c5: 1f:4f:e9:d9:e9:10:37:c2:b2:e9:af:48:18:ce:73:23:6b:9c: 00:de:eb:7e:35:40:39:35:cc:fc:98:bc:81:9b:97:f3:4c:1e: d7:a8:7c:70:25:50:40:a0:74:82:9e:b5:25:96:44:bd:fb:8e: 50:21:60:f9:0c:08:2f:56:38:da:d7:dd:dc:a8:75:8a:e6:7d: 7d:29:65:12:29:f2:35:ac:53:33:14:fd:97:33:c1:6c:80:3b: f8:47:36:e3:c1:5f:e3:32:ae:78:20:ec:42:f6:61:53:23:54: 05:f0:6f:56:8c:ed:f5:c3:8b:33:9c:74:ed:23:56:48:cf:aa: e3:e4:94:0c:2a:bc:7a:0b:c8:f6:8c:63:69:de:1d:1e:1d:dc: dd:6f:68:95:92:52:3d:31:cc:e1:93:ac:4a:48:2d:84:f2:8e: 14:66:3b:57:d7:d9:bf:f0:ef:6c:c9:39:2e:f9:b9:b7:38:cb: 86:5b:b1:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjQxMTIyMjAwNDIyWhcNMjQxMTI5MjAwNDIyWjAYMRYwFAYD VQQDEw02NzQwZTNjNy1hOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/974vs1iaRk/ZUfZuGYNM1f5vSfetAo8Rhn1f1frAxUBRByYIEGaJl3Y5HS 6jbK65BiQ9YSRnfjZApdZ++7BPvbtxgwvOfKVkfTN2C4VvzBBIgjag+f3kH8JQzf 5d4MwHI8TxwMWXZbE5oS62PRLvOlj93dbIK4IomBDy45ttZHI1z4g2ziLFzOJk6D hP86CYdnYXT7aqiRD3yb+ZQN06hRBEVQ3QnHvsTmbeO4DiQ8ym0XMDMPG7M0yrgz MVfxjJnz7AbQPPgcCnZyRhurOaZsTkpmxHlfQwJwKWsi+RzRRk6LMGSuTiM6fOPV SJ0MKZegiamaDFnoWfmVDkwupwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByrtoUq Uafpt/UGK4M29uBbTQzoMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwggsm7EeCedo4+Fq/ilkNJOrBU7sizVeiKxGUCCRuv37N0H1WzFfY 4qQuzTfIAunbR+60bSvsEIu5j72+oJv+AT4ZYLnYdcUfT+nZ6RA3wrLpr0gYznMj a5wA3ut+NUA5Ncz8mLyBm5fzTB7XqHxwJVBAoHSCnrUllkS9+45QIWD5DAgvVjja 193cqHWK5n19KWUSKfI1rFMzFP2XM8FsgDv4RzbjwV/jMq54IOxC9mFTI1QF8G9W jO31w4sznHTtI1ZIz6rj5JQMKrx6C8j2jGNp3h0eHdzdb2iVklI9Mczhk6xKSC2E 8o4UZjtX19m/8O9syTku+bm3OMuGW7Ev -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org