$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json) Hash identifier: fgjpYFZM0QVVMHkTQ/85IgXK8gE7sE+5Edh7NS0Tmak= Subject key identifier: D8:3F:D3:08:50:66:85:36:AC:FF:96:BF:E0:40:92:D5:18:D9:5D:7A Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Certificate serial: 18C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft Manifest number: 18B8 Signing time: Fri 22 Nov 2024 16:28:01 +0000 Manifest this update: Fri 22 Nov 2024 16:28:00 +0000 Manifest next update: Fri 29 Nov 2024 16:28:00 +0000 Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: OyO4S2m891vkVMqRdCBldBf2Uc2TUBPhKihB+Z/7kUw=) 2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: y+MfqI2cG42vBRYBoHykjb5vD3SMrn8zJHxI3gTIab0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6343 (0x18c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Validity Not Before: Nov 22 16:28:00 2024 GMT Not After : Nov 29 16:28:00 2024 GMT Subject: CN=6740b110-637d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:bf:cc:99:7b:d1:26:d4:92:98:5f:e6:52: 91:46:17:20:e3:54:68:d9:66:85:3f:38:62:ab:4d: 38:fd:7b:85:48:d6:78:a4:50:36:89:44:09:ff:91: 8d:33:d1:7a:ba:b2:d5:03:fe:15:ab:2a:29:ad:6e: 85:ae:fe:12:87:87:b7:2e:ca:64:39:49:ce:b2:22: f8:7d:64:53:51:ce:43:37:06:67:6d:f9:f1:cc:48: c1:f1:b6:28:0b:4c:e2:5f:f8:17:d2:f3:a3:b9:e5: 57:60:b2:9b:d7:01:7c:b7:c6:4f:b5:f5:88:c6:4f: e9:38:20:32:15:fb:cd:2c:3a:19:de:66:cb:98:f8: a9:2e:d1:54:02:40:7c:2b:0d:43:f9:ac:3e:d0:e2: 0d:8a:ab:6b:41:68:e5:82:63:a5:e5:27:65:f8:15: 11:7f:3d:4d:54:71:8e:18:ae:2f:53:c9:2b:5b:db: c6:f4:40:76:c4:f5:72:79:ed:58:58:b1:ff:7f:51: 78:18:69:53:bc:8e:b5:50:a2:2c:37:1a:11:7a:a2: 4f:0d:79:cd:25:53:e9:f5:4d:e1:c4:97:bd:9e:4a: d1:51:20:ac:b5:ef:18:dd:ed:00:71:b2:94:9d:8a: db:13:0d:89:9d:85:1d:c8:06:55:29:63:bd:27:32: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3F:D3:08:50:66:85:36:AC:FF:96:BF:E0:40:92:D5:18:D9:5D:7A X509v3 Authority Key Identifier: keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:1b:a5:97:03:79:a4:7c:e0:79:1c:19:f8:de:f0:76:a2:55: 7d:c5:8d:e5:ad:e2:c3:9b:bb:20:e2:ff:06:58:a0:46:96:98: b4:d6:22:32:17:87:33:23:f8:b3:03:b6:bc:d8:0f:f8:b9:ef: 28:b7:f4:b5:66:ec:16:0f:09:cc:fc:53:5a:81:39:40:be:4b: ff:13:10:90:c5:6b:22:f8:03:36:c0:da:67:41:83:1f:17:97: fb:9a:43:86:7c:88:c3:08:d4:41:ad:b0:94:68:6d:5b:76:39: 77:6e:c6:ee:67:ea:9f:14:b9:f4:b2:08:e4:0c:ce:47:17:6c: 5d:86:b3:0c:b8:69:3f:fb:fc:8e:2e:71:d7:f5:d3:8e:2c:57: 1a:e5:95:57:19:48:91:07:1d:be:e2:99:e9:a7:0b:10:bb:3e: 4c:60:ad:76:9a:05:b8:28:cb:15:e4:b4:9a:0f:a9:22:59:7b: 42:aa:1d:35:4c:b0:9a:43:12:fe:7c:bf:ea:c9:a7:9f:74:3d: 15:cd:b2:eb:22:9f:ed:8b:f0:2a:bb:ee:ff:a4:a6:42:3d:d9: e6:c6:ed:3f:1e:9e:c2:b4:ab:4f:1b:e6:1d:7f:21:cc:49:b7: 89:62:88:87:23:ca:94:2e:66:58:cd:b9:08:7b:58:09:25:1b: 2c:2a:d3:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3MjUxMTAvBgNVBAUTKEVEMTdEMUJFM0Q1NzExQzZDOThDOENDQzU5QUFGNzM3 RTg2NUMzODQwHhcNMjQxMTIyMTYyODAwWhcNMjQxMTI5MTYyODAwWjAYMRYwFAYD VQQDEw02NzQwYjExMC02MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eu/zJl70SbUkphf5lKRRhcg41Ro2WaFPzhiq004/XuFSNZ4pFA2iUQJ/5GN M9F6urLVA/4VqyoprW6Frv4Sh4e3LspkOUnOsiL4fWRTUc5DNwZnbfnxzEjB8bYo C0ziX/gX0vOjueVXYLKb1wF8t8ZPtfWIxk/pOCAyFfvNLDoZ3mbLmPipLtFUAkB8 Kw1D+aw+0OINiqtrQWjlgmOl5Sdl+BURfz1NVHGOGK4vU8krW9vG9EB2xPVyee1Y WLH/f1F4GGlTvI61UKIsNxoReqJPDXnNJVPp9U3hxJe9nkrRUSCste8Y3e0AcbKU nYrbEw2JnYUdyAZVKWO9JzLAAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNg/0whQ ZoU2rP+Wv+BAktUY2V16MB8GA1UdIwQYMBaAFO0X0b49VxHGyYyMzFmq9zfoZcOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzcyNS8zMTg0NEMzNjgw OUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVjYkpqSXpNV2FyM04taGx3 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSZlJ2ajFYRWNiSmpJek1XYXIzTi1obHc0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzcyNS8zMTg0NEMzNjgwOUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVj YkpqSXpNV2FyM04taGx3NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkG6WXA3mkfOB5HBn43vB2olV9xY3lreLDm7sg4v8GWKBGlpi01iIy F4czI/izA7a82A/4ue8ot/S1ZuwWDwnM/FNagTlAvkv/ExCQxWsi+AM2wNpnQYMf F5f7mkOGfIjDCNRBrbCUaG1bdjl3bsbuZ+qfFLn0sgjkDM5HF2xdhrMMuGk/+/yO LnHX9dOOLFca5ZVXGUiRBx2+4pnppwsQuz5MYK12mgW4KMsV5LSaD6kiWXtCqh01 TLCaQxL+fL/qyaefdD0VzbLrIp/ti/Aqu+7/pKZCPdnmxu0/Hp7CtKtPG+YdfyHM SbeJYoiHI8qULmZYzbkIe1gJJRssKtNt -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:44 2024 by rpki-client on console-fra.rpki-client.org