$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft File: EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json) Hash identifier: UhoRHMeYzZ4UPO5VJkzYBX6pqSPD/jlwx+Nu/Jm4fm0= Subject key identifier: B7:5D:35:1A:C7:8B:B2:B3:D8:E8:0C:9A:F6:EC:2F:B4:5F:B7:25:0D Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 Certificate issuer: /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Certificate serial: 0E85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft Manifest number: 0E7F Signing time: Fri 22 Nov 2024 17:41:51 +0000 Manifest this update: Fri 22 Nov 2024 17:41:50 +0000 Manifest next update: Fri 29 Nov 2024 17:41:50 +0000 Files and hashes: 1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: v3z4cqf/wZvN12SNo3v4mO+Wanj6MOaSMq7C+3uwpQA=) 2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: 4nWtvEAf9d3E14HBFgTaH0QO/wlhVDZLBiHadsasEhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Validity Not Before: Nov 22 17:41:50 2024 GMT Not After : Nov 29 17:41:50 2024 GMT Subject: CN=6740c25e-38e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:bd:34:b8:b5:5b:fa:60:59:b2:7f:48:20: 8e:99:09:68:a7:77:22:96:fc:cd:d0:f1:6d:6e:61: 33:89:92:08:fb:ec:a1:ff:f6:43:8a:2a:ab:bf:89: ea:39:a4:b9:ae:a5:4d:c3:d1:02:e1:d0:2c:bc:95: 04:c3:34:75:12:1f:75:95:74:e7:26:78:5e:94:9c: 16:1b:b2:40:b7:43:e2:0c:14:bd:99:1b:55:82:76: 14:b6:04:07:e8:f2:1f:19:15:c4:9d:8e:c9:ce:30: 3f:01:19:24:ba:30:6a:dd:20:46:71:c7:d3:d1:a7: 04:e4:65:0f:d5:81:e5:39:11:b0:ba:5e:7f:fd:41: f0:18:28:0c:19:35:b7:03:59:6a:1c:b1:49:20:d6: 19:48:d2:47:7e:bb:1d:48:5f:d7:f5:1f:54:25:a8: 5e:fa:3a:5a:1e:a6:38:3f:5b:65:f4:d9:a4:3d:15: 32:14:81:65:ea:03:66:d0:1d:b2:de:bb:87:d2:29: 72:59:0a:65:c4:bd:3d:1c:d5:e1:1e:35:c9:20:c8: c2:ae:60:e6:85:45:a7:87:b9:79:68:97:a2:cf:fc: a3:46:2e:ad:de:69:61:b5:11:41:a5:ee:74:98:d6: 0d:58:f6:12:18:91:a0:2a:be:54:48:16:e5:17:54: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:35:1A:C7:8B:B2:B3:D8:E8:0C:9A:F6:EC:2F:B4:5F:B7:25:0D X509v3 Authority Key Identifier: keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:36:d5:0d:12:fc:35:49:32:59:ca:1b:3d:d8:fe:80:d9:75: 14:3e:1c:66:33:d2:5e:ed:04:66:68:e1:a1:5b:11:07:5c:42: 8b:aa:5a:41:0c:9d:fa:e2:1c:14:ea:69:58:fb:c2:5a:c8:f5: 0d:cc:36:72:1d:97:a7:ee:7a:9e:74:7e:75:04:65:a8:4a:bf: 65:a5:74:36:e0:2f:ec:ac:2b:bf:0f:57:6c:df:0b:5c:94:00: b7:dc:83:33:4a:b9:bc:fe:55:97:4f:1e:d8:00:90:71:30:fa: 55:08:19:4c:77:55:df:9a:12:6d:b2:60:bf:b8:1a:53:09:7b: 78:ad:e2:fe:bc:2b:c0:35:09:97:d2:bf:76:b1:67:c8:09:e7: 14:8a:26:86:40:b7:0c:0a:f4:07:4b:e5:e8:80:d6:a5:54:76: 0a:b7:41:a8:4e:f1:9c:0a:de:88:62:c9:ab:7c:0b:0e:59:72: 93:05:1e:7b:13:39:5d:09:74:d1:b4:8e:10:e7:45:51:1e:b6: d3:be:e8:20:89:c9:2d:e4:7e:cd:b4:b5:84:1c:2d:4c:62:63: d8:71:4f:7d:42:5b:81:8e:99:5c:40:b8:69:82:de:2d:2f:23: d5:16:1d:37:7c:2f:52:6d:47:fa:12:96:21:90:a3:62:35:ec: 16:a0:8c:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQyOUM4RUM3MzdB NTYwNTBCNzkwHhcNMjQxMTIyMTc0MTUwWhcNMjQxMTI5MTc0MTUwWjAYMRYwFAYD VQQDEw02NzQwYzI1ZS0zOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSq9NLi1W/pgWbJ/SCCOmQlop3cilvzN0PFtbmEziZII++yh//ZDiiqrv4nq OaS5rqVNw9EC4dAsvJUEwzR1Eh91lXTnJnhelJwWG7JAt0PiDBS9mRtVgnYUtgQH 6PIfGRXEnY7JzjA/ARkkujBq3SBGccfT0acE5GUP1YHlORGwul5//UHwGCgMGTW3 A1lqHLFJINYZSNJHfrsdSF/X9R9UJahe+jpaHqY4P1tl9NmkPRUyFIFl6gNm0B2y 3ruH0ilyWQplxL09HNXhHjXJIMjCrmDmhUWnh7l5aJeiz/yjRi6t3mlhtRFBpe50 mNYNWPYSGJGgKr5USBblF1QDcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLddNRrH i7Kz2OgMmvbsL7RftyUNMB8GA1UdIwQYMBaAFBHVenV+1WV10EnkKcjsc3pWBQt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJGMi9ERDhFQzFDODgw RDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpYWFFTZVFweU94emVsWUZD M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkVjZkWDdWWlhYUVNlUXB5T3h6ZWxZRkMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJGMi9ERDhFQzFDODgwRDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpY WFFTZVFweU94emVsWUZDM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkNtUNEvw1STJZyhs92P6A2XUUPhxmM9Je7QRmaOGhWxEHXEKLqlpB DJ364hwU6mlY+8JayPUNzDZyHZen7nqedH51BGWoSr9lpXQ24C/srCu/D1ds3wtc lAC33IMzSrm8/lWXTx7YAJBxMPpVCBlMd1XfmhJtsmC/uBpTCXt4reL+vCvANQmX 0r92sWfICecUiiaGQLcMCvQHS+XogNalVHYKt0GoTvGcCt6IYsmrfAsOWXKTBR57 EzldCXTRtI4Q50VRHrbTvuggickt5H7NtLWEHC1MYmPYcU99QluBjplcQLhpgt4t LyPVFh03fC9SbUf6EpYhkKNiNewWoIzQ -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org