$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: //ZdxrHkgKhce80LIx8EUKhMOe9/hcnstwjk88108Bo= Subject key identifier: 2A:F3:C2:6C:56:FA:2B:53:FA:D4:F3:4E:A9:42:C6:38:73:0E:81:B8 Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: 16 Signing time: Sat 23 Nov 2024 05:59:47 +0000 Manifest this update: Sat 23 Nov 2024 05:59:46 +0000 Manifest next update: Sat 30 Nov 2024 05:59:46 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: 8tELVflQju2lWYLEmjlRzn53ADXuy9tgzbDAdCVdZ0g=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: 6Ekj1nXZBXdZ0SK5obl2WhrbeIrpop08pwoR14tlr2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Nov 23 05:59:46 2024 GMT Not After : Nov 30 05:59:46 2024 GMT Subject: CN=67416f52-ce55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:f5:f6:f4:74:46:15:5a:ad:85:7f:d5:9a: d2:65:f3:68:cc:da:61:fc:21:0d:1b:f7:f8:b4:56: cb:06:bd:42:e1:53:fa:31:0c:7f:30:87:e7:c5:49: 94:f6:6a:b5:97:2a:d6:f3:dc:20:24:52:62:67:84: 38:20:5e:b4:d9:33:06:ff:dc:4e:46:ac:6b:71:60: e4:8f:63:f3:8c:8f:f8:a5:1b:6b:75:f8:b8:ba:73: 2e:91:63:1e:19:5d:f9:6e:98:22:a5:ad:1f:15:4d: 78:50:7c:55:4c:3c:7e:7a:6e:90:ed:3e:41:ff:fc: 15:e8:d2:f1:ec:e0:3b:b0:bf:5d:90:e7:77:5f:6e: 89:a5:9e:d4:00:f3:a2:bf:55:db:b8:16:57:5d:ea: 84:14:8b:64:d2:a5:19:35:f6:ff:b1:f9:f0:fa:41: ad:9a:6a:05:53:64:e8:8b:1d:c6:49:dd:ba:0e:9c: 74:fd:0f:f6:62:dc:1f:ee:2b:cf:04:4f:10:61:d3: d9:35:b5:84:cc:b1:61:7b:e0:ec:13:40:e7:f4:76: 9c:b8:a7:79:57:b8:ff:26:18:c8:2c:5f:bd:8d:9f: 38:48:58:d0:57:7d:3b:94:68:e2:4b:03:2a:46:8f: 54:94:c6:55:c5:ab:a3:8e:5f:45:33:3c:e6:21:f0: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:C2:6C:56:FA:2B:53:FA:D4:F3:4E:A9:42:C6:38:73:0E:81:B8 X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a1:fd:be:15:d1:83:7c:84:63:6f:29:de:e2:69:f2:44:f4: 12:dc:1b:16:3c:38:bf:25:19:17:29:87:14:f9:d9:9f:44:22: 6b:b7:02:16:6b:22:2e:7a:2d:b4:77:c8:c8:a3:0e:d9:07:a0: 0a:3c:8d:fa:1a:f8:24:17:06:18:e9:36:91:22:75:d4:ae:48: 0d:3b:ae:06:d9:20:47:0e:0c:ab:36:ce:be:f6:55:a5:0c:f6: 4c:af:9b:ea:aa:5e:34:f4:7a:ff:5f:a8:ab:7a:72:cf:2e:55: 92:b8:b8:c0:99:b3:3a:63:5f:59:65:54:7b:d2:d9:a6:cf:9f: 58:22:de:f6:6c:c7:76:ad:a9:cb:95:3a:1f:4c:bf:f8:a7:f3: 77:b9:53:f7:9b:96:34:b9:7f:eb:39:be:be:b3:e6:00:8b:90: 52:76:25:02:f3:16:c9:fc:6c:c5:fb:e9:23:4f:e7:55:45:34: 84:27:55:b3:13:68:34:3d:9a:fe:8c:9c:df:04:7c:88:b7:d8: 57:cf:e8:38:24:be:88:2d:a8:1e:de:c1:3c:11:3d:1d:78:57: 98:08:0f:a1:0b:f9:bc:74:35:2b:60:57:fd:52:62:bf:37:94: bb:3e:d7:2b:94:5d:fd:2a:30:be:04:42:00:b4:66:45:60:98: e6:77:23:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUU1MDExMC8GA1UEBRMoRUNCNDg0MDA1NjA0NkE4QTkzMjI4NEVBNUYxRTA0NkEw MjMzMUNFOTAeFw0yNDExMjMwNTU5NDZaFw0yNDExMzAwNTU5NDZaMBgxFjAUBgNV BAMTDTY3NDE2ZjUyLWNlNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9wfX29HRGFVqthX/VmtJl82jM2mH8IQ0b9/i0VssGvULhU/oxDH8wh+fFSZT2 arWXKtbz3CAkUmJnhDggXrTZMwb/3E5GrGtxYOSPY/OMj/ilG2t1+Li6cy6RYx4Z XflumCKlrR8VTXhQfFVMPH56bpDtPkH//BXo0vHs4Duwv12Q53dfbomlntQA86K/ Vdu4Fldd6oQUi2TSpRk19v+x+fD6Qa2aagVTZOiLHcZJ3boOnHT9D/Zi3B/uK88E TxBh09k1tYTMsWF74OwTQOf0dpy4p3lXuP8mGMgsX72NnzhIWNBXfTuUaOJLAypG j1SUxlXFq6OOX0UzPOYh8LbFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKvPCbFb6 K1P61PNOqULGOHMOgbgwHwYDVR0jBBgwFoAU7LSEAFYEaoqTIoTqXx4EagIzHOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5RTUwLzJERDc2MzhDOTI0 MTExRUZBNTZDQ0UyMUM0RjlBRTAyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0xTRUFGWUVhb3FUSW9UcVh4NEVhZ0l6SE9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 RTUwLzJERDc2MzhDOTI0MTExRUZBNTZDQ0UyMUM0RjlBRTAyLzdMU0VBRllFYW9x VElvVHFYeDRFYWdJekhPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABOh/b4V0YN8hGNvKd7iafJE9BLcGxY8OL8lGRcphxT52Z9EImu3AhZr Ii56LbR3yMijDtkHoAo8jfoa+CQXBhjpNpEiddSuSA07rgbZIEcODKs2zr72VaUM 9kyvm+qqXjT0ev9fqKt6cs8uVZK4uMCZszpjX1llVHvS2abPn1gi3vZsx3atqcuV Oh9Mv/in83e5U/ebljS5f+s5vr6z5gCLkFJ2JQLzFsn8bMX76SNP51VFNIQnVbMT aDQ9mv6MnN8EfIi32FfP6DgkvogtqB7ewTwRPR14V5gID6EL+bx0NStgV/1SYr83 lLs+1yuUXf0qML4EQgC0ZkVgmOZ3I1Q= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org