$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: yKQ1o18cm9NfZD8gUTgbE38wDaKtZBAYyVRJnT6bPzs= Subject key identifier: E6:63:83:1B:AC:9D:65:67:DC:AD:33:80:C0:CB:02:49:FA:DB:F7:5A Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0EF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0EE8 Signing time: Fri 22 Nov 2024 17:37:38 +0000 Manifest this update: Fri 22 Nov 2024 17:37:38 +0000 Manifest next update: Fri 29 Nov 2024 17:37:38 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: KXn1hhN46sUZJNZQC9+QBvHcs2XiScaNmfsH/zST1wA=) 2: 05B3C1D2134511EAB2075B28C4F9AE02.roa (hash: NWv/gzV10Mc+64t21yfDkLnUn3XApor/AaqWMuLfZ6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3827 (0xef3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Nov 22 17:37:38 2024 GMT Not After : Nov 29 17:37:38 2024 GMT Subject: CN=6740c162-4720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:91:d8:d9:5d:41:23:92:0a:bd:c9:b9:2b: 77:77:4d:7b:d3:57:a3:46:05:fe:53:ff:f4:7c:73: df:ce:fa:a9:4b:3c:f8:0d:69:29:ac:46:06:06:86: 08:a9:75:04:d1:08:30:d5:ba:2c:f3:22:99:ed:06: 6f:b7:4b:80:d4:16:88:d3:64:44:c1:81:78:bd:06: bc:5b:bd:76:e6:95:69:4d:04:d6:a8:c2:6d:1e:8d: 45:08:fe:5a:19:91:5b:c4:cf:39:6d:58:30:53:11: fb:e2:89:71:3a:51:73:58:db:d9:e1:7e:fd:0a:fb: 65:9c:bd:57:ee:b1:d5:e0:3f:3f:66:db:6f:8f:d6: 65:7d:71:59:12:52:c1:5e:8b:ce:f9:c0:87:37:d0: ba:eb:b9:e0:ed:89:05:1d:52:0d:a9:b8:69:66:2d: 24:36:42:b0:18:88:06:79:70:c4:59:30:7e:34:95: 19:bc:d2:d9:17:56:a6:51:bf:3c:21:69:f8:72:7c: 6e:91:10:2f:58:db:34:25:36:cf:a3:d2:a1:df:22: e3:33:08:13:b5:73:4b:b4:f6:7c:3c:5b:3f:d4:9d: ff:07:6b:d1:9e:79:81:45:f1:ef:f8:5f:66:31:36: e4:58:54:00:2e:d2:59:bb:97:86:2e:7b:f8:ef:a5: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:63:83:1B:AC:9D:65:67:DC:AD:33:80:C0:CB:02:49:FA:DB:F7:5A X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:8a:af:b1:94:7e:ed:a1:70:12:ff:93:cf:93:45:1e:8b:d0: 4f:e5:a0:15:76:41:8a:6c:c1:ba:23:1e:5c:fc:17:23:75:b3: 75:55:4b:af:45:00:83:83:87:4c:bd:24:39:35:18:5b:06:61: 37:e9:20:79:86:a2:3e:c3:8b:fb:f4:43:9e:99:47:84:24:9c: 0c:d2:aa:3e:0c:72:cc:25:a6:f1:6f:5c:92:38:c5:88:67:d4: a9:bb:58:49:3e:a5:19:dd:b2:36:eb:27:6d:8c:29:7b:43:04: 18:1d:5d:3e:72:df:6e:0d:14:3a:e0:5a:c9:2d:e9:6f:cc:0c: 89:39:c3:8d:43:1f:8e:51:c9:26:29:40:d6:dd:bc:c6:8d:83: 06:6b:f3:7f:1b:e1:58:a0:2b:74:28:0d:37:a7:e7:0f:c7:0e: 6c:63:f5:86:ae:ba:fe:e3:47:c2:58:72:c1:cd:e3:38:e4:00: 70:af:4b:ce:d2:a2:e8:4e:a9:46:a0:0f:5c:5d:76:c2:e9:7c: fa:00:e1:3e:69:84:f9:1a:e3:00:47:5d:71:69:87:0d:bb:05: c5:e2:2d:52:a8:aa:f9:db:b3:5a:f8:0d:3d:fa:fa:ad:39:c5: fe:04:53:6f:16:66:af:98:7a:d1:0e:cb:76:42:3a:2a:15:1f: 59:4d:5e:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjQxMTIyMTczNzM4WhcNMjQxMTI5MTczNzM4WjAYMRYwFAYD VQQDEw02NzQwYzE2Mi00NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFeR2NldQSOSCr3JuSt3d01701ejRgX+U//0fHPfzvqpSzz4DWkprEYGBoYI qXUE0Qgw1bos8yKZ7QZvt0uA1BaI02REwYF4vQa8W7125pVpTQTWqMJtHo1FCP5a GZFbxM85bVgwUxH74olxOlFzWNvZ4X79CvtlnL1X7rHV4D8/Zttvj9ZlfXFZElLB XovO+cCHN9C667ng7YkFHVINqbhpZi0kNkKwGIgGeXDEWTB+NJUZvNLZF1amUb88 IWn4cnxukRAvWNs0JTbPo9Kh3yLjMwgTtXNLtPZ8PFs/1J3/B2vRnnmBRfHv+F9m MTbkWFQALtJZu5eGLnv476XWVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZjgxus nWVn3K0zgMDLAkn62/daMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoiq+xlH7toXAS/5PPk0Uei9BP5aAVdkGKbMG6Ix5c/BcjdbN1VUuv RQCDg4dMvSQ5NRhbBmE36SB5hqI+w4v79EOemUeEJJwM0qo+DHLMJabxb1ySOMWI Z9Spu1hJPqUZ3bI26ydtjCl7QwQYHV0+ct9uDRQ64FrJLelvzAyJOcONQx+OUckm KUDW3bzGjYMGa/N/G+FYoCt0KA03p+cPxw5sY/WGrrr+40fCWHLBzeM45ABwr0vO 0qLoTqlGoA9cXXbC6Xz6AOE+aYT5GuMAR11xaYcNuwXF4i1SqKr527Na+A09+vqt OcX+BFNvFmavmHrRDst2QjoqFR9ZTV7q -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org