$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: 5A5udrVDNrEPSBL/A40rQzogjeZUpMt7pCoJSAqn94o= Subject key identifier: 2D:4A:C2:65:A2:4F:2F:57:DC:7A:FF:F6:61:B5:46:F7:75:3B:8E:35 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 17D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 17B7 Signing time: Fri 22 Nov 2024 16:34:56 +0000 Manifest this update: Fri 22 Nov 2024 16:34:55 +0000 Manifest next update: Fri 29 Nov 2024 16:34:55 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: 1xQL4HcieZ/T9sdbklQNU0bwIp25hSaQLpMSt6JNOFI=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: mlV5FElI2KfwPw+F74U5A5+ugzB0GpF8appz7O1hrRc=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: d2SHnZ0bs3Ad8y5hDn3mylfyHabzy/8uFTs+4jhjfXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6102 (0x17d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Nov 22 16:34:55 2024 GMT Not After : Nov 29 16:34:55 2024 GMT Subject: CN=6740b2af-351e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:69:3d:d0:83:7e:5d:04:c6:e4:9a:b2:5e: fb:50:66:39:d4:61:7b:dc:7f:08:27:b4:5f:43:c1: 18:d4:1e:46:5c:aa:68:45:f2:1d:fa:67:27:93:b1: 9c:1e:6a:cb:6a:e0:e0:c7:6a:b1:b2:bb:16:63:a0: a2:b9:5a:c8:62:5c:fe:81:d8:ae:0a:43:a9:f5:31: 63:97:d4:50:3d:98:3d:e7:8d:0e:b6:16:f6:f1:75: a2:0e:f6:87:11:89:52:f8:dd:9e:86:04:a1:1e:14: 48:d8:d8:2a:b9:03:d8:d0:cc:49:45:91:c5:ae:46: 94:32:3b:a4:46:24:2b:0f:1d:46:c2:7b:31:e2:92: 4c:85:eb:7c:31:91:35:e5:90:c1:9a:71:58:c4:da: 91:4f:d9:8c:b1:b1:0a:55:6f:fb:f7:b0:68:0c:35: 41:80:56:89:f9:11:bc:f1:f4:ee:b5:95:c7:5c:a0: 25:8b:75:b3:31:f1:c0:5e:02:0c:4e:a5:08:d3:ad: b2:c3:43:10:ba:3e:7d:19:58:91:22:88:57:c8:d6: a9:4f:7b:c2:36:6d:b6:f7:1b:97:8f:15:9f:8b:c6: 46:f1:98:e3:65:7b:6b:dc:db:7c:aa:f6:5d:b8:77: 24:ee:fd:07:63:54:3d:c4:12:0e:7f:93:19:38:46: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4A:C2:65:A2:4F:2F:57:DC:7A:FF:F6:61:B5:46:F7:75:3B:8E:35 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e0:e1:2a:5f:ec:1b:f4:9c:93:12:5d:5d:fa:94:5c:0f:80: 71:cd:da:f6:3d:73:6a:f7:bc:df:36:fe:49:a7:9f:59:14:63: 02:68:4a:17:f1:97:96:a7:ac:89:61:d3:bf:3d:a9:c7:a9:a8: f6:9a:48:3b:63:f7:2d:16:1a:79:47:66:ad:6a:2f:2f:04:c6: da:a7:09:87:de:75:f9:6f:2e:87:52:67:97:3a:60:42:a7:a2: 7f:71:77:70:1b:92:be:77:b8:44:ad:08:16:74:b7:9d:25:d7: e3:56:c9:36:0f:35:1c:9b:61:67:76:2a:71:cc:6b:0c:27:37: 97:97:84:1e:c3:fd:fc:0b:bd:99:36:fc:04:eb:13:c7:b2:3d: 35:70:29:f1:f4:71:cc:46:9e:80:5d:0e:14:d3:ef:a0:7c:c3: f1:de:52:0c:69:be:79:22:9d:1e:5d:14:35:b6:72:a3:da:0d: 6f:7a:44:b4:37:c0:4e:d7:47:9f:2e:0e:9e:66:76:93:d3:ba: b2:0b:1e:13:50:fa:68:b2:eb:5f:c6:c9:b7:d7:af:43:61:d9: 25:7b:1b:c4:1a:f1:05:6d:1a:fb:46:59:30:31:15:88:51:51: 58:72:90:26:16:d6:91:bc:e2:be:2a:6c:a0:a2:03:5a:2c:10: d1:6a:57:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjQxMTIyMTYzNDU1WhcNMjQxMTI5MTYzNDU1WjAYMRYwFAYD VQQDEw02NzQwYjJhZi0zNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh5pPdCDfl0ExuSasl77UGY51GF73H8IJ7RfQ8EY1B5GXKpoRfId+mcnk7Gc HmrLauDgx2qxsrsWY6CiuVrIYlz+gdiuCkOp9TFjl9RQPZg9540Othb28XWiDvaH EYlS+N2ehgShHhRI2NgquQPY0MxJRZHFrkaUMjukRiQrDx1Gwnsx4pJMhet8MZE1 5ZDBmnFYxNqRT9mMsbEKVW/797BoDDVBgFaJ+RG88fTutZXHXKAli3WzMfHAXgIM TqUI062yw0MQuj59GViRIohXyNapT3vCNm229xuXjxWfi8ZG8ZjjZXtr3Nt8qvZd uHck7v0HY1Q9xBIOf5MZOEZyKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1KwmWi Ty9X3Hr/9mG1Rvd1O441MB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj4OEqX+wb9JyTEl1d+pRcD4Bxzdr2PXNq97zfNv5Jp59ZFGMCaEoX 8ZeWp6yJYdO/PanHqaj2mkg7Y/ctFhp5R2atai8vBMbapwmH3nX5by6HUmeXOmBC p6J/cXdwG5K+d7hErQgWdLedJdfjVsk2DzUcm2FndipxzGsMJzeXl4Qew/38C72Z NvwE6xPHsj01cCnx9HHMRp6AXQ4U0++gfMPx3lIMab55Ip0eXRQ1tnKj2g1vekS0 N8BO10efLg6eZnaT07qyCx4TUPposutfxsm3169DYdklexvEGvEFbRr7RlkwMRWI UVFYcpAmFtaRvOK+KmygogNaLBDRaleu -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org