$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: Z0/YtJh9egA+5vDe+fzpUcPVr6AY+2dr+v8bZ3T7j1I= Subject key identifier: DE:0B:43:5D:BA:D8:BA:1F:D1:77:20:E0:5C:A0:CE:BB:22:4E:E0:3F Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: B7 Signing time: Thu 21 Nov 2024 04:08:22 +0000 Manifest this update: Thu 21 Nov 2024 04:08:22 +0000 Manifest next update: Thu 28 Nov 2024 04:08:22 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: naKS/MHReze5a09vLmFz4mi2aBixYHspydbSXDc2G+M=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: Nov 21 04:08:22 2024 GMT Not After : Nov 28 04:08:22 2024 GMT Subject: CN=673eb236-dc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:67:f6:d3:df:ca:a2:a7:99:bc:f7:99:fd: 45:23:38:83:10:6d:34:36:e6:74:db:9f:6e:84:18: bc:b0:1e:e3:cd:5f:87:ac:2e:a5:5a:12:77:18:aa: f1:ac:45:bb:80:d4:16:83:c3:d9:30:d2:f0:e0:ab: 6d:9e:59:b1:94:fb:04:de:c2:d6:d9:b6:7c:23:aa: ad:b4:f4:d3:6c:92:f8:61:e6:16:ec:db:1d:7c:d3: 8b:54:6f:87:f7:3c:e1:f9:c3:af:a5:48:39:54:88: 0f:5a:be:42:78:6e:c1:b5:00:64:3a:48:73:7c:6c: ca:8c:79:fd:2b:16:da:fa:28:95:f5:11:00:bf:5a: 7b:2f:31:91:b6:05:f5:44:2f:9f:b9:ed:77:41:be: 00:65:c5:59:db:7e:6f:6e:f3:8a:d4:6d:1b:71:f8: 26:db:44:5d:e4:a9:6c:10:b6:f9:a3:f9:52:f5:d1: ba:48:23:09:4f:f9:30:36:a4:54:3d:bd:46:7f:cd: 6d:1a:2c:e6:0b:44:6b:34:67:66:c4:cc:3f:d7:32: dc:96:c4:d2:3f:d7:3d:bc:7d:02:35:63:44:d4:23: 99:38:03:dc:e3:52:76:fb:14:8d:32:e4:d7:cc:92: 59:3f:12:97:79:ea:31:e0:13:e6:57:61:b5:34:88: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0B:43:5D:BA:D8:BA:1F:D1:77:20:E0:5C:A0:CE:BB:22:4E:E0:3F X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2f:37:3f:a7:f0:97:d8:0e:0c:44:d9:d2:23:bf:05:84:84: 37:24:38:3f:5b:97:8a:55:b2:81:aa:52:31:86:88:47:d2:cf: 2d:85:e9:88:c1:bd:fb:a3:ad:63:c4:75:bc:3f:db:eb:30:fc: 2e:4d:66:b8:b5:e4:a1:2d:e4:7e:0b:cf:25:b2:90:09:79:55: 0a:65:4a:13:71:c8:d2:8a:9d:a0:ff:7b:45:26:d0:61:b5:1d: 88:83:8a:28:c9:31:36:76:05:9b:b6:50:4a:38:55:58:4c:36: ce:b1:0c:d0:d6:d4:c9:5d:c1:9b:43:2d:3e:51:ab:8d:f6:af: a2:d0:11:44:ac:24:f8:57:a6:3d:bd:9c:93:92:6c:fe:ce:f4: 38:26:21:04:f5:ac:81:04:ea:d3:0e:55:0d:c8:82:36:e7:98: 74:1c:40:d2:45:78:18:7d:50:18:a6:5f:4f:52:a4:be:26:0a: 8a:8c:76:6c:d6:54:60:90:f7:1a:68:b2:8d:a9:36:63:d5:3d: fa:ca:94:6a:8b:34:c4:44:32:67:3e:65:93:e7:91:d8:50:b7: 77:97:c4:d3:87:3d:9b:d1:ad:0d:df:b5:be:41:1e:74:23:28: c3:95:5c:a4:60:da:d7:15:cc:de:71:05:c6:97:a4:5e:cd:29: c4:6e:a9:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjQxMTIxMDQwODIyWhcNMjQxMTI4MDQwODIyWjAYMRYwFAYD VQQDEw02NzNlYjIzNi1kYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nNn9tPfyqKnmbz3mf1FIziDEG00NuZ0259uhBi8sB7jzV+HrC6lWhJ3GKrx rEW7gNQWg8PZMNLw4KttnlmxlPsE3sLW2bZ8I6qttPTTbJL4YeYW7NsdfNOLVG+H 9zzh+cOvpUg5VIgPWr5CeG7BtQBkOkhzfGzKjHn9Kxba+iiV9REAv1p7LzGRtgX1 RC+fue13Qb4AZcVZ235vbvOK1G0bcfgm20Rd5KlsELb5o/lS9dG6SCMJT/kwNqRU Pb1Gf81tGizmC0RrNGdmxMw/1zLclsTSP9c9vH0CNWNE1COZOAPc41J2+xSNMuTX zJJZPxKXeeox4BPmV2G1NIjpoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4LQ126 2Lof0Xcg4FygzrsiTuA/MB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Lzc/p/CX2A4MRNnSI78FhIQ3JDg/W5eKVbKBqlIxhohH0s8themI wb37o61jxHW8P9vrMPwuTWa4teShLeR+C88lspAJeVUKZUoTccjSip2g/3tFJtBh tR2Ig4ooyTE2dgWbtlBKOFVYTDbOsQzQ1tTJXcGbQy0+UauN9q+i0BFErCT4V6Y9 vZyTkmz+zvQ4JiEE9ayBBOrTDlUNyII255h0HEDSRXgYfVAYpl9PUqS+JgqKjHZs 1lRgkPcaaLKNqTZj1T36ypRqizTERDJnPmWT55HYULd3l8TThz2b0a0N37W+QR50 IyjDlVykYNrXFczecQXGl6RezSnEbqle -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org