$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft File: e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json) Hash identifier: A8IrOAEIhlJqFzQX5EFa11MTLVrgpgeE/ganj54UyBg= Subject key identifier: 62:E7:60:FB:37:22:B8:43:8C:A5:EC:D9:D9:BB:F7:64:3D:ED:CA:B0 Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6 Certificate issuer: /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft Manifest number: 02B5 Signing time: Sat 23 Nov 2024 01:07:34 +0000 Manifest this update: Sat 23 Nov 2024 01:07:34 +0000 Manifest next update: Sat 30 Nov 2024 01:07:34 +0000 Files and hashes: 1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: wxsezI/XKLk3KvPBqCJdXueucPLPo9amC634t0s9pIw=) 2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: UDsBn5PvZT9d8TXHaLnosXPpBPHeYaVzwhGnl9mAcIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6 Validity Not Before: Nov 23 01:07:34 2024 GMT Not After : Nov 30 01:07:34 2024 GMT Subject: CN=67412ad6-7c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:b1:04:e3:e3:76:fd:ae:6c:08:ba:56:c6: 66:10:75:d1:65:34:95:3b:7f:41:72:18:23:d4:c3: d3:e2:15:58:60:bd:79:df:76:08:e7:e5:b4:b3:7b: 8e:6f:11:c2:ed:3d:d1:eb:62:f2:75:29:60:39:25: b3:00:e3:8e:49:4f:47:9b:4e:28:58:6b:05:34:1f: 54:9e:8e:6f:fb:1f:2e:fb:92:c0:b8:4d:15:e8:24: 71:07:b5:ef:28:a1:d2:0f:2e:db:a0:a5:9c:6f:8f: f6:6a:f0:65:62:ff:3a:d5:d0:7c:2c:63:22:6a:09: 9e:f9:42:54:b1:18:0c:94:34:3f:dd:0f:aa:91:6f: 7f:1e:0d:0f:bb:6e:56:0f:96:75:b5:64:08:08:a7: 1d:10:5a:fe:a4:57:64:95:25:b7:ec:eb:22:74:c7: 2c:84:30:d7:88:61:5d:b9:35:6a:e9:4e:df:e2:8a: 9d:02:00:76:8a:c7:e5:5f:cf:11:c4:85:39:ce:65: 54:f0:73:43:59:90:88:4b:14:80:8b:0f:c6:26:9f: 0a:99:2b:01:80:b7:99:4a:8e:64:8f:f1:cc:80:1d: 28:72:69:0e:48:c9:33:ce:e2:25:84:5c:4f:d9:f3: 44:9b:c5:d7:aa:cc:96:51:ab:ae:c7:0c:cc:11:fd: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E7:60:FB:37:22:B8:43:8C:A5:EC:D9:D9:BB:F7:64:3D:ED:CA:B0 X509v3 Authority Key Identifier: keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:69:68:eb:68:89:1b:3d:6d:40:d0:29:f8:cf:54:fe:df:e0: 04:dc:07:c0:06:5f:c9:7b:c9:34:7e:3d:3e:0c:43:6b:02:82: 23:c4:34:d9:30:93:5c:11:1a:22:1b:66:d7:f5:21:fd:57:73: af:c9:c6:d1:77:e0:83:f4:e2:e9:fe:01:6f:72:e9:6f:e4:ba: 01:89:8b:b4:bd:04:be:5a:2d:b6:9b:29:8d:4d:c8:2d:f5:d6: ac:c2:d8:4a:f6:40:30:5d:1d:6f:c1:21:85:f1:96:79:73:61: 4e:44:18:d0:dc:ff:6e:55:13:94:54:82:6a:e1:0e:d2:03:02: b5:7d:e1:74:8f:42:2d:0e:33:71:4b:0c:49:a0:04:ff:26:4d: 9b:38:67:08:cc:73:2e:59:29:5f:22:69:5f:d0:fc:d3:e3:f6: 92:7a:50:58:2f:c4:6f:35:4d:74:d9:6c:09:a6:61:36:f9:dc: 04:8c:2a:f4:d1:3d:d6:3b:de:a5:79:35:1d:ca:e0:7a:a1:b4: 49:60:24:00:02:25:e3:40:a3:bf:ed:ed:0f:a8:cd:f9:47:af: 3c:a6:a9:43:fd:bf:42:16:c6:6d:1f:65:d6:6f:e2:53:50:7b: 7f:7a:e6:9d:ce:e2:fc:59:f6:c2:a2:45:3a:3e:22:80:89:86: 0b:d9:c0:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2MzExMTAvBgNVBAUTKDdCRDNFNDNEMTM0RTUyMzVFOTc2MDNDRThCQTk0ODZC NjJBOUIxRTYwHhcNMjQxMTIzMDEwNzM0WhcNMjQxMTMwMDEwNzM0WjAYMRYwFAYD VQQDEw02NzQxMmFkNi03YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3mxBOPjdv2ubAi6VsZmEHXRZTSVO39Bchgj1MPT4hVYYL1533YI5+W0s3uO bxHC7T3R62LydSlgOSWzAOOOSU9Hm04oWGsFNB9Uno5v+x8u+5LAuE0V6CRxB7Xv KKHSDy7boKWcb4/2avBlYv861dB8LGMiagme+UJUsRgMlDQ/3Q+qkW9/Hg0Pu25W D5Z1tWQICKcdEFr+pFdklSW37OsidMcshDDXiGFduTVq6U7f4oqdAgB2isflX88R xIU5zmVU8HNDWZCISxSAiw/GJp8KmSsBgLeZSo5kj/HMgB0ocmkOSMkzzuIlhFxP 2fNEm8XXqsyWUauuxwzMEf1ZKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLnYPs3 IrhDjKXs2dm792Q97cqwMB8GA1UdIwQYMBaAFHvT5D0TTlI16XYDzoupSGtiqbHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYzMS8zOUU0RDdBOERD NzgxMUVDQTRFMzA2MTdDNEY5QUUwMi9lOVBrUFJOT1VqWHBkZ1BPaTZsSWEyS3Bz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5UGtQUk5PVWpYcGRnUE9pNmxJYTJLcHNlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzYzMS8zOUU0RDdBOERDNzgxMUVDQTRFMzA2MTdDNEY5QUUwMi9lOVBrUFJOT1Vq WHBkZ1BPaTZsSWEyS3BzZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWaWjraIkbPW1A0Cn4z1T+3+AE3AfABl/Je8k0fj0+DENrAoIjxDTZ MJNcERoiG2bX9SH9V3OvycbRd+CD9OLp/gFvculv5LoBiYu0vQS+Wi22mymNTcgt 9daswthK9kAwXR1vwSGF8ZZ5c2FORBjQ3P9uVROUVIJq4Q7SAwK1feF0j0ItDjNx SwxJoAT/Jk2bOGcIzHMuWSlfImlf0PzT4/aSelBYL8RvNU102WwJpmE2+dwEjCr0 0T3WO96leTUdyuB6obRJYCQAAiXjQKO/7e0PqM35R688pqlD/b9CFsZtH2XWb+JT UHt/euadzuL8WfbCokU6PiKAiYYL2cBh -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org