$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: m+jOfoyHaKAUkTQyzie8gWI/5IYGdFWTJDWqLTD+W8Y= Subject key identifier: 6A:2D:79:88:8E:41:5A:10:28:83:84:06:12:4D:2A:A3:79:89:26:D2 Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 014D Signing time: Thu 21 Nov 2024 02:34:36 +0000 Manifest this update: Thu 21 Nov 2024 02:34:36 +0000 Manifest next update: Thu 28 Nov 2024 02:34:36 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: T/MCupIelniIFLjw8GF3WHm0BZRVSmn17WVmbK3fHqs=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: JfMofx6efmNrALly6LfWx1mO0pCrYZC1n6UcCfMKtOU=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: u8kIsJVIp78SEEepgF6rWdlvVZL0QiUXSZNCFyMREy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: Nov 21 02:34:36 2024 GMT Not After : Nov 28 02:34:36 2024 GMT Subject: CN=673e9c3c-a836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:bf:76:f3:19:2b:e4:8f:fe:bf:46:ef:cc: 3c:e1:c4:33:b9:4a:ab:94:a9:c6:ee:a4:dd:01:96: 02:3b:2c:77:87:0c:1c:e6:86:b1:8d:00:cd:d7:ae: ea:34:f8:d3:b6:60:60:77:17:bd:5f:d9:03:87:76: 01:37:ec:7a:95:99:df:d9:5d:41:2a:ce:e1:d6:c0: 63:71:8f:63:cf:ec:ec:02:58:1b:0d:02:c5:40:f6: fe:49:8e:7b:1a:4e:cf:47:74:56:f5:74:31:66:43: 5b:6b:bf:fb:1c:b9:35:6a:b3:3a:40:cc:b5:99:40: 18:2d:df:b5:ab:a7:e9:75:68:76:06:2f:17:42:94: f4:19:13:1b:ca:b1:da:c3:b7:ee:7d:08:4c:a8:25: f8:ce:ba:e0:34:81:84:7d:f9:93:c1:cb:71:34:bb: 87:f6:ba:6f:d4:b7:70:6f:6a:75:e8:e9:b5:32:90: a0:cc:42:00:a0:05:a1:24:07:30:ea:bb:49:88:8f: b6:da:9e:5e:b6:af:24:cd:91:df:08:64:73:dc:6b: 78:21:cf:eb:a4:d6:fe:4f:4a:c3:bf:9f:07:f8:14: b6:0d:e3:f1:af:eb:07:8e:6b:60:b9:49:fc:76:42: ce:43:c3:00:c4:fd:8b:67:75:e5:6d:f8:c9:1a:74: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2D:79:88:8E:41:5A:10:28:83:84:06:12:4D:2A:A3:79:89:26:D2 X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:85:61:b9:52:89:75:05:24:28:cd:28:da:b3:00:73:5d:6a: e7:c8:85:a0:a0:0e:d2:05:09:fc:28:cd:65:45:a2:13:30:16: 1b:6d:8f:fc:77:bf:69:f4:e8:20:28:dc:4f:05:72:c3:b2:88: f8:11:02:4b:81:59:0a:46:cd:bc:5f:3a:37:d0:ad:5d:8e:cd: 2f:4c:0c:fa:53:dc:13:a7:75:ac:d2:e2:85:ef:92:aa:72:91: db:2e:99:28:4c:39:25:1e:fc:59:46:da:10:c1:88:9e:ad:36: 5e:f1:46:cd:2c:84:57:89:aa:fa:69:11:ff:5d:fd:06:f7:96: da:be:65:d2:84:c8:49:d3:7c:0f:8c:c8:3c:b1:76:94:d7:11: da:35:3f:39:72:35:d8:50:63:98:80:7e:20:12:d0:b5:1a:19: dd:9c:72:06:3d:96:5e:f3:98:8d:93:bb:8c:60:7e:10:f1:d9: 35:15:aa:ca:49:ce:68:83:e9:0b:57:d4:b5:c9:c8:f4:49:2a: 5d:23:5c:40:82:df:be:ae:72:66:c3:f1:6c:df:02:8e:00:3a: b9:c5:7a:da:20:7e:c6:ff:10:b8:0d:66:8c:2e:2a:69:d3:e4: 96:27:c6:da:7c:ec:31:5c:4c:08:82:74:00:59:2f:d2:27:87: 75:10:dc:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjQxMTIxMDIzNDM2WhcNMjQxMTI4MDIzNDM2WjAYMRYwFAYD VQQDEw02NzNlOWMzYy1hODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0We/dvMZK+SP/r9G78w84cQzuUqrlKnG7qTdAZYCOyx3hwwc5oaxjQDN167q NPjTtmBgdxe9X9kDh3YBN+x6lZnf2V1BKs7h1sBjcY9jz+zsAlgbDQLFQPb+SY57 Gk7PR3RW9XQxZkNba7/7HLk1arM6QMy1mUAYLd+1q6fpdWh2Bi8XQpT0GRMbyrHa w7fufQhMqCX4zrrgNIGEffmTwctxNLuH9rpv1Ldwb2p16Om1MpCgzEIAoAWhJAcw 6rtJiI+22p5etq8kzZHfCGRz3Gt4Ic/rpNb+T0rDv58H+BS2DePxr+sHjmtguUn8 dkLOQ8MAxP2LZ3XlbfjJGnTpUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoteYiO QVoQKIOEBhJNKqN5iSbSMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzhWG5Uol1BSQozSjaswBzXWrnyIWgoA7SBQn8KM1lRaITMBYbbY/8 d79p9OggKNxPBXLDsoj4EQJLgVkKRs28Xzo30K1djs0vTAz6U9wTp3Ws0uKF75Kq cpHbLpkoTDklHvxZRtoQwYierTZe8UbNLIRXiar6aRH/Xf0G95bavmXShMhJ03wP jMg8sXaU1xHaNT85cjXYUGOYgH4gEtC1GhndnHIGPZZe85iNk7uMYH4Q8dk1FarK Sc5og+kLV9S1ycj0SSpdI1xAgt++rnJmw/Fs3wKOADq5xXraIH7G/xC4DWaMLipp 0+SWJ8bafOwxXEwIgnQAWS/SJ4d1ENyZ -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:56 2024 by rpki-client on console-fra.rpki-client.org