$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json) Hash identifier: Ygf0CVPdAVdTrByFKA+kTLGks8j5B1TiKOmKZPsZZMw= Subject key identifier: 62:64:E3:13:1B:74:3E:7C:5C:4C:B8:8C:50:1A:9F:A4:BF:80:0A:AB Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft Manifest number: E7 Signing time: Sat 23 Nov 2024 03:33:11 +0000 Manifest this update: Sat 23 Nov 2024 03:33:10 +0000 Manifest next update: Sat 30 Nov 2024 03:33:10 +0000 Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: UxqS6vGSigblqXue+1fgmokmMWgkXMw3SjMTbuOwssQ=) 2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: cgKCscFwaw/2U5+hTiR/tOv2oFJWqQfbOoEz10tjRiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Validity Not Before: Nov 23 03:33:10 2024 GMT Not After : Nov 30 03:33:10 2024 GMT Subject: CN=67414cf6-10ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:5d:ca:3f:81:0f:e0:0e:fc:25:05:a4:71: 96:a0:e5:4d:62:22:7e:3c:26:e6:6c:b3:1a:24:20: 9b:3b:42:7b:7f:af:a9:10:f7:c7:a3:33:f4:c5:ef: 8f:25:44:d8:3b:33:10:00:fe:94:79:26:2e:d9:33: 4e:4c:7f:a7:c3:fc:fc:1e:78:a2:ee:de:ba:46:30: 47:8e:a4:09:7d:b2:5e:ba:f6:a6:8b:ea:a1:5c:b8: 90:a5:7d:43:e0:5c:0d:e7:c6:ea:be:d9:cb:69:63: 42:24:4b:d9:b6:fe:9b:57:0f:7a:a9:0d:79:6e:18: 5f:93:7d:12:d5:92:29:63:75:1e:7a:c4:02:73:58: 50:e9:4a:cc:50:e8:8d:72:cc:b0:56:20:96:9a:7f: ef:87:1b:66:32:bf:2c:46:b7:a6:3d:60:0b:11:e7: b6:67:12:fe:47:32:5d:87:ce:98:9a:e6:1b:77:de: 78:fb:b1:b3:8e:46:25:55:99:c3:55:8e:a5:f3:23: 9c:b0:a3:6c:0a:aa:95:48:9f:17:77:4b:01:a9:ee: 15:19:4f:de:c3:16:5b:8c:43:f0:e7:1a:f7:13:80: 65:74:ac:1e:9b:d3:87:aa:09:d2:93:7a:a7:6d:f6: 79:7b:59:22:2a:3d:39:37:36:85:d9:15:b2:fc:65: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:64:E3:13:1B:74:3E:7C:5C:4C:B8:8C:50:1A:9F:A4:BF:80:0A:AB X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:99:cb:54:e4:7c:c9:e0:10:09:78:5a:2e:b4:53:5b:2c:a4: 09:2d:4b:16:0c:2b:47:91:25:c7:cb:76:21:6d:6c:99:58:b7: 7c:cf:be:63:cf:9d:cb:eb:5a:04:8e:05:1e:26:99:2c:06:10: e8:bb:aa:f0:d8:19:92:9b:f0:e5:6b:1a:2f:d4:0e:00:e0:a6: 29:a0:94:1d:3e:bd:12:7d:05:c1:70:db:b2:22:c4:f3:f9:a8: 1a:75:8d:35:a8:65:fa:9c:1a:cb:ef:d4:59:10:11:f6:c8:19: cb:52:19:40:ab:ef:f9:86:a8:05:e4:2d:6f:8d:3a:73:cf:d4: 64:44:a9:cd:ad:93:48:e0:9a:83:c6:9d:2a:6c:ea:90:7e:66: b0:24:1f:b4:11:aa:be:b5:41:99:52:38:99:69:59:c2:44:36: 89:59:74:34:ad:8d:e7:76:de:67:79:6c:00:7d:89:0d:f1:90: f7:4a:65:8f:66:83:58:b8:7f:46:04:23:bf:cb:ba:93:32:a6: 68:9b:69:da:27:d9:74:78:b0:cd:79:97:f6:29:f9:ff:ea:87: 7c:fe:e7:ea:de:1d:88:4d:30:21:b7:39:4b:22:7f:e3:e6:6b: 3a:4e:1c:55:b6:29:3b:c6:3c:36:9c:2c:8d:0c:1a:b1:3e:64: b2:47:4b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjQxMTIzMDMzMzEwWhcNMjQxMTMwMDMzMzEwWjAYMRYwFAYD VQQDEw02NzQxNGNmNi0xMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZZdyj+BD+AO/CUFpHGWoOVNYiJ+PCbmbLMaJCCbO0J7f6+pEPfHozP0xe+P JUTYOzMQAP6UeSYu2TNOTH+nw/z8Hnii7t66RjBHjqQJfbJeuvami+qhXLiQpX1D 4FwN58bqvtnLaWNCJEvZtv6bVw96qQ15bhhfk30S1ZIpY3UeesQCc1hQ6UrMUOiN csywViCWmn/vhxtmMr8sRremPWALEee2ZxL+RzJdh86YmuYbd954+7GzjkYlVZnD VY6l8yOcsKNsCqqVSJ8Xd0sBqe4VGU/ewxZbjEPw5xr3E4BldKwem9OHqgnSk3qn bfZ5e1kiKj05NzaF2RWy/GUvPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJk4xMb dD58XEy4jFAan6S/gAqrMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDmctU5HzJ4BAJeFoutFNbLKQJLUsWDCtHkSXHy3YhbWyZWLd8z75j z53L61oEjgUeJpksBhDou6rw2BmSm/Dlaxov1A4A4KYpoJQdPr0SfQXBcNuyIsTz +agadY01qGX6nBrL79RZEBH2yBnLUhlAq+/5hqgF5C1vjTpzz9RkRKnNrZNI4JqD xp0qbOqQfmawJB+0Eaq+tUGZUjiZaVnCRDaJWXQ0rY3ndt5neWwAfYkN8ZD3SmWP ZoNYuH9GBCO/y7qTMqZom2naJ9l0eLDNeZf2Kfn/6od8/ufq3h2ITTAhtzlLIn/j 5ms6ThxVtik7xjw2nCyNDBqxPmSyR0sr -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org