$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft File: eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json) Hash identifier: B0Te4y+FxBJN69XY3DWvyU4hpZ+oT3am/bUBBwfC8bY= Subject key identifier: B9:52:F8:6F:F0:27:E1:5A:BA:0F:39:72:02:13:5E:38:95:1C:5B:3E Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 Certificate issuer: /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft Manifest number: 07 Signing time: Thu 21 Nov 2024 06:15:28 +0000 Manifest this update: Thu 21 Nov 2024 06:15:27 +0000 Manifest next update: Thu 28 Nov 2024 06:15:27 +0000 Files and hashes: 1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: 4By1wks5sBTENAtWNfs7YTQXq3DvyWKBI/H5cRf43y4=) 2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Validity Not Before: Nov 21 06:15:27 2024 GMT Not After : Nov 28 06:15:27 2024 GMT Subject: CN=673ecfff-84a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:6f:8c:81:31:ef:07:c5:52:88:d9:6c:5c: 93:ce:9a:38:56:9a:e6:8a:f1:8a:c3:03:da:75:ff: a4:89:74:19:ca:fc:f8:0a:ab:f8:e3:c6:81:b1:c6: 7a:71:1a:a0:ac:23:70:50:2b:40:d6:a7:8e:40:63: 1b:df:62:fd:1a:9b:71:04:4e:cd:0b:ec:0d:40:6f: 36:d9:4e:88:43:28:43:19:aa:c6:32:48:40:c7:f1: 62:56:56:f2:dd:8c:c4:ac:a3:a6:f1:8b:b5:fe:7a: af:83:78:f0:71:b3:b6:9c:cd:03:f5:5d:00:3e:41: d5:81:5e:b9:77:f5:b2:47:bf:99:25:11:b9:9e:15: 22:08:8e:84:db:9b:cc:19:7e:07:f4:70:fd:a2:25: 79:38:9e:b5:f0:46:67:e0:4e:ba:f6:73:3b:78:6e: a0:0a:f3:80:f2:14:e3:d5:12:f2:c9:4d:4a:c8:ce: 0d:50:3f:66:5f:ce:62:06:6c:30:60:e4:75:51:b8: 59:6d:d0:1f:ad:df:26:72:91:e4:7a:fc:36:44:92: 73:2a:cc:2e:4f:be:61:6e:a9:9b:2c:d1:a1:f1:04: b2:d9:08:b2:38:a7:bf:47:22:9f:2a:c3:ad:6a:c5: e9:1b:ae:bd:de:64:ed:69:ae:14:1c:b5:bc:1a:a8: 2d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:F8:6F:F0:27:E1:5A:BA:0F:39:72:02:13:5E:38:95:1C:5B:3E X509v3 Authority Key Identifier: keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0f:97:03:7a:47:52:91:64:54:54:7e:c1:64:0c:d7:d8:2a: 9a:c9:d8:53:a3:eb:bd:9c:d6:c3:3e:08:9f:e3:13:64:d5:33: 49:41:64:13:8d:27:f0:3e:cc:27:a6:7b:4d:e7:9e:02:45:e1: 6a:35:f7:ac:61:0a:49:ba:61:55:66:4d:8d:31:3f:d3:98:5b: b6:66:bf:b2:5c:a6:a0:a1:ba:56:c4:a4:9b:d1:48:65:47:72: 06:63:f8:3f:9f:d0:4a:b7:a1:b9:02:9b:b0:15:cb:f8:a4:28: 2e:41:7b:25:9a:bf:ec:e4:a8:d6:17:e0:24:74:10:71:ac:54: 12:c8:35:81:86:81:60:92:ab:e0:7f:b4:d7:36:a9:e5:ce:18: 82:be:bd:87:c0:8d:42:45:37:4a:af:cb:10:95:ec:65:7d:5d: ba:89:09:64:9f:7a:f1:61:b2:21:6b:af:06:b6:61:cb:5e:e8: 10:98:ae:a7:53:bb:55:ce:75:16:e9:f1:6d:34:6e:b8:b9:a9: fa:fc:10:00:1e:56:f5:4e:5a:89:9f:b4:1d:f0:a0:21:de:79: 94:75:34:60:db:1e:b1:b1:b2:6c:c3:38:60:e6:51:7c:0f:33: 0a:13:d1:97:94:18:5d:e8:45:11:ec:27:ae:dc:c7:15:4c:d3: 70:75:cf:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoNzlFOTIzRDUwNjk1N0ZEMzBERDI2RDYyNzkzQjlCNDBG OEZFODk1NjAeFw0yNDExMjEwNjE1MjdaFw0yNDExMjgwNjE1MjdaMBgxFjAUBgNV BAMTDTY3M2VjZmZmLTg0YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzN2+MgTHvB8VSiNlsXJPOmjhWmuaK8YrDA9p1/6SJdBnK/PgKq/jjxoGxxnpx GqCsI3BQK0DWp45AYxvfYv0am3EETs0L7A1AbzbZTohDKEMZqsYySEDH8WJWVvLd jMSso6bxi7X+eq+DePBxs7aczQP1XQA+QdWBXrl39bJHv5klEbmeFSIIjoTbm8wZ fgf0cP2iJXk4nrXwRmfgTrr2czt4bqAK84DyFOPVEvLJTUrIzg1QP2ZfzmIGbDBg 5HVRuFlt0B+t3yZykeR6/DZEknMqzC5PvmFuqZss0aHxBLLZCLI4p79HIp8qw61q xekbrr3eZO1prhQctbwaqC0RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuVL4b/An 4Vq6DzlyAhNeOJUcWz4wHwYDVR0jBBgwFoAUeekj1QaVf9MN0m1ieTubQPj+iVYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0M3M0EzODk0QTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlNTjBtMWllVHViUVBqLWlW WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWVrajFRYVZmOU1OMG0xaWVUdWJRUGotaVZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0M3M0EzODk0QTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlN TjBtMWllVHViUVBqLWlWWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEsPlwN6R1KRZFRUfsFkDNfYKprJ2FOj672c1sM+CJ/jE2TVM0lBZBON J/A+zCeme03nngJF4Wo196xhCkm6YVVmTY0xP9OYW7Zmv7JcpqChulbEpJvRSGVH cgZj+D+f0Eq3obkCm7AVy/ikKC5BeyWav+zkqNYX4CR0EHGsVBLINYGGgWCSq+B/ tNc2qeXOGIK+vYfAjUJFN0qvyxCV7GV9XbqJCWSfevFhsiFrrwa2Ycte6BCYrqdT u1XOdRbp8W00bri5qfr8EAAeVvVOWomftB3woCHeeZR1NGDbHrGxsmzDOGDmUXwP MwoT0ZeUGF3oRRHsJ67cxxVM03B1zww= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org