$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: qQ7nh3vib1RLw4EHTHtaMRwP93BJFvwl141wsC1VYqA= Subject key identifier: 84:04:C8:AA:22:80:67:0E:A7:F8:BE:ED:C0:C9:FD:9E:15:57:2F:49 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 1B Signing time: Thu 21 Nov 2024 05:59:19 +0000 Manifest this update: Thu 21 Nov 2024 05:59:19 +0000 Manifest next update: Thu 28 Nov 2024 05:59:19 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: yWxkiCgSQE9QfDDs9ikrwohp6A6RPEMWqz1GogjrTWA=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA=) 3: F57FBEDA861011EF888F8F5AC4F9AE02.roa (hash: tz2fUeIwatcKYEXtQ/GGzjppX1MUCwnBHLeKlsBKEGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Nov 21 05:59:19 2024 GMT Not After : Nov 28 05:59:19 2024 GMT Subject: CN=673ecc37-77f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:80:57:79:a9:c5:02:6c:5a:51:cf:fc:e6: 53:24:a0:09:4b:f5:3d:30:d6:1a:21:d8:e3:39:2c: 14:19:85:58:d8:fe:0b:0a:34:d3:32:59:ec:b3:1a: eb:e2:23:4a:23:a1:ac:77:5f:7a:9a:43:10:b9:96: 8a:ef:7c:a9:a5:4d:f3:2d:b5:2d:bc:a0:b1:25:d5: 63:3b:e5:62:26:74:81:02:2a:64:93:47:1e:3a:32: 0e:06:73:7a:89:94:be:cc:4f:38:6c:66:54:0a:53: 7e:8c:a0:f2:61:58:d2:96:bc:a3:19:00:c9:2f:81: a1:47:96:08:15:b4:3b:0b:a2:a3:fe:bd:59:e8:e2: 0f:04:4e:df:b1:8b:3f:d5:f6:2b:9f:90:f7:39:d3: 00:f2:2a:39:3f:3d:d2:55:d8:7e:28:83:c9:75:64: 65:b5:66:ff:4e:7f:62:f1:01:c7:7e:26:11:8b:9c: e3:6e:d3:33:ed:e5:84:02:53:99:18:bb:a0:3c:64: e8:46:f4:37:6c:7e:61:67:6c:01:84:5d:67:75:59: 77:c4:b0:b3:b7:b7:9e:4d:97:79:59:e1:bd:71:c0: 61:3d:40:6e:05:cf:d2:5d:be:56:65:0f:1e:0d:09: bc:3b:65:dc:97:d9:f0:f9:a0:ca:13:ce:15:93:04: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:04:C8:AA:22:80:67:0E:A7:F8:BE:ED:C0:C9:FD:9E:15:57:2F:49 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:40:48:2a:1a:49:cc:2a:92:ae:e7:e6:fb:de:48:02:1e:4e: 43:80:87:1e:97:c8:ea:9a:d0:9d:d9:4c:77:cd:7d:a4:65:b8: dc:e8:86:56:e7:a5:d1:51:f1:69:0d:a0:96:83:a3:fc:38:23: a4:18:4b:ff:fc:55:82:4f:0b:cd:ee:14:72:e5:54:d8:33:f3: 72:a4:42:f9:85:a4:95:16:6c:30:c8:2f:90:5a:f7:2e:3e:28: 5c:43:37:37:7b:c8:1f:89:c9:71:93:16:f2:df:5a:53:a4:1f: e1:96:e5:4e:34:1b:69:32:47:f3:43:89:70:43:6e:68:cd:f9: 12:55:54:b8:66:a4:6b:b3:ce:3b:59:59:e6:e5:dc:60:9d:54: b7:aa:c8:1e:2c:29:2f:a6:a3:6d:2a:21:d0:52:4c:f6:e3:4f: 91:27:6e:46:b2:b8:5c:d3:6a:0c:11:26:7a:03:71:05:c9:50: 46:7c:6f:d2:96:25:58:0e:a9:7b:62:65:27:4c:86:73:b7:9a: 75:24:47:0c:b4:6b:6d:c8:cd:15:94:95:d7:db:25:74:b6:1b: 98:d5:94:c6:91:9d:e1:f4:c2:42:3e:cd:f0:9d:cc:6e:3f:de: 62:43:dc:3c:fc:c1:db:a7:88:4b:f8:a8:a7:66:44:d5:8e:32: 59:79:fe:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEVFRDExMC8GA1UEBRMoRURGRTcwNkM5NDlCNUVDRjFEQkJFNDYwREJEMDRFRkU3 QzFFMTI4QjAeFw0yNDExMjEwNTU5MTlaFw0yNDExMjgwNTU5MTlaMBgxFjAUBgNV BAMTDTY3M2VjYzM3LTc3ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrMoBXeanFAmxaUc/85lMkoAlL9T0w1hoh2OM5LBQZhVjY/gsKNNMyWeyzGuvi I0ojoax3X3qaQxC5lorvfKmlTfMttS28oLEl1WM75WImdIECKmSTRx46Mg4Gc3qJ lL7MTzhsZlQKU36MoPJhWNKWvKMZAMkvgaFHlggVtDsLoqP+vVno4g8ETt+xiz/V 9iufkPc50wDyKjk/PdJV2H4og8l1ZGW1Zv9Of2LxAcd+JhGLnONu0zPt5YQCU5kY u6A8ZOhG9DdsfmFnbAGEXWd1WXfEsLO3t55Nl3lZ4b1xwGE9QG4Fz9JdvlZlDx4N Cbw7ZdyX2fD5oMoTzhWTBMRlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhATIqiKA Zw6n+L7twMn9nhVXL0kwHwYDVR0jBBgwFoAU7f5wbJSbXs8du+Rg29BO/nweEosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRUVELzNGRjM5NDBFODUz QjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2Y1d2JKU2JYczhkdS1SZzI5Qk9fbndlRW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RUVELzNGRjM5NDBFODUzQjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4 ZHUtUmcyOUJPX253ZUVvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGVASCoaScwqkq7n5vveSAIeTkOAhx6XyOqa0J3ZTHfNfaRluNzohlbn pdFR8WkNoJaDo/w4I6QYS//8VYJPC83uFHLlVNgz83KkQvmFpJUWbDDIL5Ba9y4+ KFxDNzd7yB+JyXGTFvLfWlOkH+GW5U40G2kyR/NDiXBDbmjN+RJVVLhmpGuzzjtZ Webl3GCdVLeqyB4sKS+mo20qIdBSTPbjT5EnbkayuFzTagwRJnoDcQXJUEZ8b9KW JVgOqXtiZSdMhnO3mnUkRwy0a23IzRWUldfbJXS2G5jVlMaRneH0wkI+zfCdzG4/ 3mJD3Dz8wduniEv4qKdmRNWOMll5/os= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org