$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: WCUp5LPgoXMm6SNWLnh2EnGEBTUsxgV+k7+jbWwvRuU= Subject key identifier: 4C:56:B1:FA:69:CE:95:71:10:32:50:AA:71:63:BB:E5:57:D1:90:B0 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 0C Signing time: Wed 23 Oct 2024 06:47:44 +0000 Manifest this update: Wed 23 Oct 2024 06:47:44 +0000 Manifest next update: Wed 30 Oct 2024 06:47:44 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: /mWzKYM2KYiXjqS9TpPPu2V2NSOcT2h4k0RUbjGN1oU=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA=) 3: F57FBEDA861011EF888F8F5AC4F9AE02.roa (hash: tz2fUeIwatcKYEXtQ/GGzjppX1MUCwnBHLeKlsBKEGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Oct 23 06:47:44 2024 GMT Not After : Oct 30 06:47:44 2024 GMT Subject: CN=67189c10-5acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:d6:6b:d1:0c:71:67:dc:a1:0f:7b:c3:ed: cb:a3:68:c5:03:b3:3c:f3:02:52:fd:26:9f:ae:50: 04:94:b6:d0:c3:83:25:de:ef:5c:5b:f1:82:c5:52: 67:57:47:69:a0:e0:b7:c9:d8:b0:53:75:f0:d9:14: 24:e5:1c:4c:4e:8c:4f:48:ad:ad:38:a8:bd:76:ec: 4c:3b:ea:91:90:6e:05:b7:9d:e1:e1:69:2e:b7:95: 21:df:04:1a:fc:81:82:27:74:23:1a:3b:c5:d9:96: 6b:98:b7:f3:8d:86:f5:3d:5b:fd:3f:68:1c:9a:62: a7:44:8f:d8:86:e9:2d:a7:6c:b3:09:59:12:e0:28: 25:73:15:27:a0:cc:0d:4b:44:3e:a6:7d:6e:b7:27: fc:f2:1f:ef:0b:5e:60:c6:53:f8:0f:c9:a6:8c:ff: 46:f7:ea:34:83:2c:8f:8a:e6:1d:96:03:14:43:16: 08:9f:8d:08:81:c1:8b:66:a6:70:55:93:0a:4d:98: 39:96:4d:1f:1a:12:cc:ba:17:78:7f:9b:ed:78:6c: 8c:c7:19:f8:2d:c9:f0:3d:6f:46:ab:12:ad:dc:28: 7d:57:77:ed:44:84:b6:a6:fb:98:be:ff:a3:d9:7c: e7:3f:a3:96:fd:fa:82:ba:6a:4e:bf:5f:3a:f9:7c: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:56:B1:FA:69:CE:95:71:10:32:50:AA:71:63:BB:E5:57:D1:90:B0 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:01:fa:62:3c:c2:5c:4c:41:3f:a7:fe:a2:8d:19:08:be:de: 98:cf:41:fa:8f:a6:b0:02:ca:a2:67:6f:79:ab:fd:ba:b0:e0: 6f:b7:10:86:97:08:9d:ea:4f:be:57:6c:9a:02:f8:9f:6a:b0: c0:dc:8a:03:d0:65:72:96:7f:9c:62:83:01:f8:f7:1f:af:bf: 78:51:d0:db:e8:c5:ff:53:00:cb:9c:36:ca:e8:c4:2c:51:67: 4b:e0:78:21:ed:fa:5c:55:9c:c0:93:fb:48:53:20:7e:0e:18: 2a:58:2d:bf:6e:e4:1d:41:cc:01:28:99:d2:c3:39:0a:6f:d6: ce:b2:92:56:77:01:a0:78:ee:b6:d1:e5:c2:8c:48:98:19:95: 5b:14:66:89:d3:28:a2:1a:1f:7c:2b:8e:f7:1b:cb:cb:a2:7b: a5:5e:40:6e:90:95:d4:c1:c1:ad:d2:1a:0f:cd:76:08:6d:fc: c3:66:dd:ae:ce:1f:6e:61:20:e1:42:af:52:ce:c6:55:b8:02: 3a:fd:42:3b:d2:59:e9:4b:67:31:b5:50:89:02:a0:88:0b:b1: 84:99:e6:a8:d0:a5:53:98:8f:cd:7c:60:0d:0a:39:cf:a6:6f: f9:4a:d1:cf:70:7e:53:b4:48:e4:25:1c:08:40:45:89:a3:1a: 47:bf:b8:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEVFRDExMC8GA1UEBRMoRURGRTcwNkM5NDlCNUVDRjFEQkJFNDYwREJEMDRFRkU3 QzFFMTI4QjAeFw0yNDEwMjMwNjQ3NDRaFw0yNDEwMzAwNjQ3NDRaMBgxFjAUBgNV BAMTDTY3MTg5YzEwLTVhY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAYtZr0QxxZ9yhD3vD7cujaMUDszzzAlL9Jp+uUASUttDDgyXe71xb8YLFUmdX R2mg4LfJ2LBTdfDZFCTlHExOjE9Ira04qL127Ew76pGQbgW3neHhaS63lSHfBBr8 gYIndCMaO8XZlmuYt/ONhvU9W/0/aByaYqdEj9iG6S2nbLMJWRLgKCVzFSegzA1L RD6mfW63J/zyH+8LXmDGU/gPyaaM/0b36jSDLI+K5h2WAxRDFgifjQiBwYtmpnBV kwpNmDmWTR8aEsy6F3h/m+14bIzHGfgtyfA9b0arEq3cKH1Xd+1EhLam+5i+/6PZ fOc/o5b9+oK6ak6/Xzr5fDjjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTFax+mnO lXEQMlCqcWO75VfRkLAwHwYDVR0jBBgwFoAU7f5wbJSbXs8du+Rg29BO/nweEosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRUVELzNGRjM5NDBFODUz QjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2Y1d2JKU2JYczhkdS1SZzI5Qk9fbndlRW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RUVELzNGRjM5NDBFODUzQjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4 ZHUtUmcyOUJPX253ZUVvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJAB+mI8wlxMQT+n/qKNGQi+3pjPQfqPprACyqJnb3mr/bqw4G+3EIaX CJ3qT75XbJoC+J9qsMDcigPQZXKWf5xigwH49x+vv3hR0Nvoxf9TAMucNsroxCxR Z0vgeCHt+lxVnMCT+0hTIH4OGCpYLb9u5B1BzAEomdLDOQpv1s6yklZ3AaB47rbR 5cKMSJgZlVsUZonTKKIaH3wrjvcby8uie6VeQG6QldTBwa3SGg/Ndght/MNm3a7O H25hIOFCr1LOxlW4Ajr9QjvSWelLZzG1UIkCoIgLsYSZ5qjQpVOYj818YA0KOc+m b/lK0c9wflO0SOQlHAhARYmjGke/uIw= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org