$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: 5IWwSDGZV0nVDTZISh//WoP96hn58XCU1LxfSsAviEE= Subject key identifier: 24:8A:BF:00:DF:41:B1:B2:05:FF:13:9C:EE:17:81:5E:53:E0:BE:A7 Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 0466 Signing time: Wed 20 Nov 2024 23:39:55 +0000 Manifest this update: Wed 20 Nov 2024 23:39:54 +0000 Manifest next update: Wed 27 Nov 2024 23:39:54 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: aENvZVjeMHcDfsHmOwD2bodQtbOTXZYSeu/8q7PR+4w=) 2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: 6texudPJbHfd6J0MPN1D5Oqp/jznw5zyBOIDtk3K0JM=) 3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: JXwBxiGEkFaFWVz8HbHFVp2nlp17eTZBvyxAVrqYWhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: Nov 20 23:39:54 2024 GMT Not After : Nov 27 23:39:54 2024 GMT Subject: CN=673e734b-4327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:fc:a4:04:ee:f7:df:5e:49:fe:9f:b1:5b: 48:4c:0c:8e:41:19:34:2f:62:d4:60:42:43:2c:e6: c7:df:f9:90:ba:61:2f:46:5c:6d:3d:dd:01:55:d8: 65:74:a7:8e:4a:ea:11:33:d5:fc:7e:44:e6:59:64: 65:84:f2:d4:be:58:dc:14:2d:df:20:e9:be:53:1f: e6:cf:2f:ad:35:ce:44:7e:e8:1e:b7:84:2f:12:b4: c7:f8:35:4a:da:ac:74:49:bd:78:70:46:55:47:5c: a3:33:89:5a:87:63:d2:62:f8:d8:b8:38:b6:a4:2b: 2c:96:cc:f3:9a:bf:e4:71:36:cd:26:08:5c:32:b1: 66:ed:34:83:f4:f1:c5:84:b9:29:84:38:d4:4b:53: f1:c8:c0:b7:7a:bf:b9:8c:81:b2:43:58:dc:a5:76: 65:93:dd:e1:4a:0a:0a:70:73:f3:2d:e6:9a:05:44: 20:30:7d:1f:30:f7:7f:58:90:4f:a0:6d:d3:21:c6: 5e:da:ab:d0:74:5c:5e:c8:f2:02:36:a9:de:19:d3: 7e:0f:06:5d:a7:4b:c1:ed:5a:f0:f4:a6:7a:eb:67: 5e:ab:fb:7c:20:65:39:9f:cd:81:f6:f6:7b:c0:24: a3:5b:7a:73:1b:6e:99:b4:ac:87:93:e5:10:96:b4: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8A:BF:00:DF:41:B1:B2:05:FF:13:9C:EE:17:81:5E:53:E0:BE:A7 X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:25:f6:0d:2d:21:2c:f6:52:d0:52:8d:b7:d8:4d:8c:ec:b3: d5:dd:33:bb:47:a9:4c:ba:04:ac:64:98:9a:b8:80:93:fe:47: d9:41:a0:ba:f8:de:72:1a:3a:2c:21:1b:24:66:55:d3:28:ab: 2f:60:d8:98:83:9a:ad:12:25:13:32:48:36:d7:5e:a7:49:0c: c8:95:cf:db:7c:53:83:cc:e7:49:35:4e:48:d7:89:d1:68:d2: 6f:8c:fb:6d:79:d0:96:c2:57:98:61:2b:b6:a6:15:5c:b9:91: db:aa:eb:6f:93:36:d5:58:2c:92:c4:97:12:24:57:00:48:71: b4:fe:3c:7c:7b:6e:04:bf:d2:22:90:47:b6:11:92:d6:b6:4f: 92:ab:4f:a4:eb:a1:d0:45:52:27:e3:45:42:41:48:e9:1b:85: f8:04:eb:a8:cb:18:83:69:0c:d8:70:a8:1c:03:a9:10:b7:e3: 66:3c:1d:61:25:5c:51:37:71:fd:78:45:da:7a:98:ef:fb:6e: 06:88:c5:79:64:7b:5c:ad:3b:4e:1c:ac:8f:fa:36:1e:4a:f9: 59:db:48:0a:b3:ad:5a:af:f2:6c:65:96:d3:17:13:55:42:e1: 3b:d0:b1:4e:90:30:ec:1b:d8:03:a0:03:11:96:e5:ae:c6:6b: 97:07:ce:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjQxMTIwMjMzOTU0WhcNMjQxMTI3MjMzOTU0WjAYMRYwFAYD VQQDEw02NzNlNzM0Yi00MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3k38pATu999eSf6fsVtITAyOQRk0L2LUYEJDLObH3/mQumEvRlxtPd0BVdhl dKeOSuoRM9X8fkTmWWRlhPLUvljcFC3fIOm+Ux/mzy+tNc5Efuget4QvErTH+DVK 2qx0Sb14cEZVR1yjM4lah2PSYvjYuDi2pCsslszzmr/kcTbNJghcMrFm7TSD9PHF hLkphDjUS1PxyMC3er+5jIGyQ1jcpXZlk93hSgoKcHPzLeaaBUQgMH0fMPd/WJBP oG3TIcZe2qvQdFxeyPICNqneGdN+DwZdp0vB7Vrw9KZ662deq/t8IGU5n82B9vZ7 wCSjW3pzG26ZtKyHk+UQlrRfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSKvwDf QbGyBf8TnO4XgV5T4L6nMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeJfYNLSEs9lLQUo232E2M7LPV3TO7R6lMugSsZJiauICT/kfZQaC6 +N5yGjosIRskZlXTKKsvYNiYg5qtEiUTMkg2116nSQzIlc/bfFODzOdJNU5I14nR aNJvjPttedCWwleYYSu2phVcuZHbqutvkzbVWCySxJcSJFcASHG0/jx8e24Ev9Ii kEe2EZLWtk+Sq0+k66HQRVIn40VCQUjpG4X4BOuoyxiDaQzYcKgcA6kQt+NmPB1h JVxRN3H9eEXaepjv+24GiMV5ZHtcrTtOHKyP+jYeSvlZ20gKs61ar/JsZZbTFxNV QuE70LFOkDDsG9gDoAMRluWuxmuXB87g -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:21 2024 by rpki-client on console-fra.rpki-client.org