$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: 9oMWb64F8geOnBkxHJAcroNV8D8OmsifAbzpw/uaRWU= Subject key identifier: 17:4E:1F:7E:BE:8F:12:3F:58:E3:D3:AE:69:82:57:A6:CC:86:E9:90 Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 3018 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 3017 Signing time: Fri 22 Nov 2024 15:28:38 +0000 Manifest this update: Fri 22 Nov 2024 15:28:38 +0000 Manifest next update: Fri 29 Nov 2024 15:28:38 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: +sI9GRRYyq1OOM3lbBeqxOPCVYnnXmAAsm0XFmLGLOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12312 (0x3018) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: Nov 22 15:28:38 2024 GMT Not After : Nov 29 15:28:38 2024 GMT Subject: CN=6740a326-a89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:f3:75:ca:e7:ef:e8:2b:33:eb:cb:fb:0c: e5:bc:e7:cb:a8:3f:9c:6c:25:d3:e9:f3:74:38:96: 9a:7d:96:a9:75:00:c7:e6:ca:b8:37:06:f7:cf:c2: 1d:b2:b2:1b:0c:63:16:05:69:d1:c3:e9:0b:4a:9f: d6:11:2e:53:b3:90:d4:2e:86:9b:c5:4c:0e:80:7d: 52:63:71:6a:f6:a9:99:7b:5a:c6:4e:c8:36:cb:eb: da:19:d4:65:03:5e:bb:2d:f7:dd:bf:e5:18:05:fc: fb:6e:43:f4:1e:23:7f:f7:c7:0d:24:4a:3d:fe:f0: 1b:cb:14:c7:76:68:48:5d:2e:b9:1d:0f:21:aa:2f: 1d:d7:b1:d8:bf:00:ca:fe:ab:c3:80:8e:0d:f8:74: 24:b5:45:fd:23:1e:53:a0:06:53:77:7b:ca:e5:75: 31:1a:b4:e5:e5:31:d1:c9:69:cb:e1:04:8c:58:ad: fd:cf:b5:41:1f:ef:fa:93:3c:7d:3a:54:1e:2a:1d: d3:f3:62:d5:1d:34:bb:b5:46:29:72:90:0e:52:9a: a4:65:eb:f0:f8:30:af:57:b4:1a:cd:54:0e:81:b1: e2:75:99:b4:03:76:1f:02:d1:81:7c:c0:67:d5:b3: 1a:9c:0a:52:d4:b4:6f:6a:50:5e:d2:fe:91:08:31: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4E:1F:7E:BE:8F:12:3F:58:E3:D3:AE:69:82:57:A6:CC:86:E9:90 X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f1:9f:ce:f3:93:50:c1:3e:41:08:21:30:15:24:e6:ce:4b: bd:25:28:72:ea:3d:c2:15:67:c7:c8:01:0e:6c:d0:29:95:b1: 64:03:14:c6:c6:44:63:11:26:38:cf:f5:b2:f9:9d:46:1b:72: fb:66:42:cc:fd:d5:d0:0f:ac:6d:e9:2a:29:3e:6b:a9:80:d2: 53:60:ad:9d:c0:f7:0e:bd:bd:de:39:d3:08:4c:74:f2:9e:2b: 25:75:5f:d2:f9:0d:73:9e:34:ca:e2:8d:8c:ce:1d:e7:d2:c7: 1d:1d:ad:d1:87:57:17:d1:1c:2f:b7:e1:9c:b7:8a:b0:ec:a6: 76:a5:cc:94:41:10:2b:26:38:2b:2e:3c:2f:e6:02:64:9f:f8: 95:2a:82:0d:7b:0b:46:28:5c:5c:0f:0b:78:e8:13:19:96:1c: cb:1a:05:0a:3b:a5:0d:51:2d:de:18:42:25:1c:3c:2d:28:c8: 22:d2:b2:87:ff:0b:11:d4:7f:a4:7a:28:75:e5:c7:33:60:69: 85:9d:2b:05:f0:cf:d2:16:47:78:24:68:8f:e8:f7:f5:36:cb: 4d:99:8d:81:77:e0:58:8a:25:9b:09:63:98:72:cc:7a:a0:fa: 70:27:9e:9d:32:0e:35:20:ae:a1:f5:57:37:03:12:0d:a8:cc: 4d:c0:a2:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjQxMTIyMTUyODM4WhcNMjQxMTI5MTUyODM4WjAYMRYwFAYD VQQDEw02NzQwYTMyNi1hODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgDzdcrn7+grM+vL+wzlvOfLqD+cbCXT6fN0OJaafZapdQDH5sq4Nwb3z8Id srIbDGMWBWnRw+kLSp/WES5Ts5DULoabxUwOgH1SY3Fq9qmZe1rGTsg2y+vaGdRl A167Lffdv+UYBfz7bkP0HiN/98cNJEo9/vAbyxTHdmhIXS65HQ8hqi8d17HYvwDK /qvDgI4N+HQktUX9Ix5ToAZTd3vK5XUxGrTl5THRyWnL4QSMWK39z7VBH+/6kzx9 OlQeKh3T82LVHTS7tUYpcpAOUpqkZevw+DCvV7QazVQOgbHidZm0A3YfAtGBfMBn 1bManApS1LRvalBe0v6RCDG2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdOH36+ jxI/WOPTrmmCV6bMhumQMB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM8Z/O85NQwT5BCCEwFSTmzku9JShy6j3CFWfHyAEObNAplbFkAxTG xkRjESY4z/Wy+Z1GG3L7ZkLM/dXQD6xt6SopPmupgNJTYK2dwPcOvb3eOdMITHTy nisldV/S+Q1znjTK4o2Mzh3n0scdHa3Rh1cX0Rwvt+Gct4qw7KZ2pcyUQRArJjgr Ljwv5gJkn/iVKoINewtGKFxcDwt46BMZlhzLGgUKO6UNUS3eGEIlHDwtKMgi0rKH /wsR1H+keih15cczYGmFnSsF8M/SFkd4JGiP6Pf1NstNmY2Bd+BYiiWbCWOYcsx6 oPpwJ56dMg41IK6h9Vc3AxINqMxNwKKI -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org