$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft File: 7euW8EyNPtzL7rpAxCQpIqgTa1M.mft (raw, json) Hash identifier: GGc4XJM0UxdQeRQbmF1it/DNvh9of7f9Vf8nMRR2X8A= Subject key identifier: FF:79:73:B8:19:93:C4:06:07:55:7F:FC:16:DB:F7:38:02:BA:FC:17 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft Manifest number: 0669 Signing time: Sun 24 Nov 2024 21:54:50 +0000 Manifest this update: Sun 24 Nov 2024 21:54:49 +0000 Manifest next update: Sun 01 Dec 2024 21:54:49 +0000 Files and hashes: 1: 7euW8EyNPtzL7rpAxCQpIqgTa1M.crl (hash: tL0qMbMav7KNX1w52TfdCxmKTRyQuhPkL5q0U12jfJE=) 2: 065B926242FA11EDA305BE3EC4F9AE02.roa (hash: 2ATW6BMDSVhZS9dAhj+ZOS0wEMyX3D645t1IHArpIR4=) 3: CC57C044E84911EE9947A115C4F9AE02.roa (hash: l7QhCqZ0xOa/l0d6Ux5Cam1TFwRUXE7fvVtBWXcf7TY=) 4: B4A1A1BC82D711EF8AAD827BC4F9AE02.roa (hash: Aer2EVJwvv8DRhCM/pwQmGeBzPEc4LxuJZQZ2E9tgAs=) 5: 4D9E29A8305311EF9CFFF238C4F9AE02.roa (hash: qb3BJ6VPum0N37Y3mFlLsJHFaKFgEm26RoLZ15Rsubo=) 6: 5B096332BFDF11EC89ECF37BC4F9AE02.roa (hash: KwSrdUrsoFTrnFecXKL/1/hTJOcsdGlQTW0JfcT6/k4=) 7: EEBCC3028A7711EFBB6F4557C4F9AE02.roa (hash: wnhXyLSk1dHMmO9DzYtPASbLdH1BIyvsIkNZQJaPGG0=) 8: 4EDC52B27B3B11EFAF3B4433C4F9AE02.roa (hash: OfxHrVeBEOJWK/8VYNhuau5CqqrlskUO+d6ZSMFXMxU=) 9: 501915BA8A7811EF90D24F15C4F9AE02.roa (hash: OA2ko99bBHxJOXM8VQ03Oiibc5MqjzJixcg4DbTwTWk=) 10: 78287A4A8F9311EE9CC9E648C4F9AE02.roa (hash: rST+VyBGVPTMT2nSSTzmEE2Q3+Fy5/2QhXmo+jgtE/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Nov 24 21:54:49 2024 GMT Not After : Dec 1 21:54:49 2024 GMT Subject: CN=6743a0a9-140b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:6e:81:b2:7f:dd:fe:d5:28:f0:3d:c0:62: 2f:8c:32:11:85:c4:07:4d:10:4d:1e:ba:10:32:2a: 66:60:6b:8f:d9:d8:ee:3b:c4:bf:27:04:2c:f3:17: a7:91:b8:fc:84:7d:02:12:b7:9a:ad:4a:eb:8f:36: ad:29:bf:c1:b6:9c:7c:a1:27:fe:37:cd:dd:1e:dc: d9:26:11:b9:50:ce:8e:a5:73:af:fc:ec:d1:43:36: 27:af:3f:57:66:50:ea:8e:5b:36:d9:26:a3:55:63: ee:43:86:cc:54:fd:fc:e8:c8:f3:1f:88:cb:ba:df: bc:54:7d:e8:e2:3f:31:a0:d7:ef:7f:97:b8:5f:1a: bf:6f:40:4e:96:bf:cf:1f:34:2e:ed:9a:25:ff:fe: 60:30:f0:23:10:4b:35:7e:30:43:d6:46:70:c3:15: 8c:fc:e9:a2:08:af:c7:40:15:69:b6:9e:9f:c8:a8: cc:8d:5a:60:4d:3e:6b:8d:01:dd:b6:3e:fc:fe:71: ec:18:8c:7b:b5:3d:6f:53:5a:96:a5:6e:b6:85:98: 60:13:0d:81:9c:97:ae:8f:0a:ff:a1:5d:cb:54:fe: 0f:39:36:de:5a:91:30:e7:27:60:5e:ce:18:c2:92: f4:b9:00:79:6a:f3:7e:91:89:a7:6c:82:33:fb:81: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:73:B8:19:93:C4:06:07:55:7F:FC:16:DB:F7:38:02:BA:FC:17 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4e:ba:c3:b2:e7:f7:cf:6f:89:6a:fd:a0:d0:eb:3c:c6:ce: de:2f:2e:8d:45:45:20:cc:5d:57:24:05:45:59:45:00:86:87: a0:06:e2:a5:bc:46:0d:50:6b:b3:48:4e:64:fa:83:6d:79:f7: 43:7b:c9:15:c4:f3:74:78:c6:d2:64:8b:7b:6c:e7:37:95:ee: be:9b:8c:34:50:12:16:c0:06:98:53:73:b5:7c:30:c2:45:fb: cb:49:b0:68:7f:ef:7e:82:db:2e:39:a7:c8:d8:46:95:78:9e: 3b:8d:52:07:02:75:d9:bb:a1:be:59:ff:f8:5c:7c:f5:91:de: 8f:b0:53:47:0c:f4:38:d5:b3:f1:9b:92:ed:86:69:94:e8:75: 24:66:be:a0:1c:87:4b:51:84:62:dd:eb:06:11:a0:1f:ad:9a: d5:ec:de:a6:2e:10:11:9c:36:37:9b:06:4a:38:b3:cb:89:ac: 3c:67:89:3b:10:06:ae:ec:ea:35:f3:fa:a5:dc:e0:5f:c7:20: 09:fe:21:09:84:ea:2e:ff:68:4f:0c:cd:7b:2c:6e:17:07:a6: 44:80:03:b5:0f:ac:09:5a:57:28:f5:d4:99:19:9c:ad:12:44: 60:56:e1:f0:f8:9b:78:98:95:cd:40:d1:b6:ad:c6:d8:da:0e: f1:ea:c3:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjQxMTI0MjE1NDQ5WhcNMjQxMjAxMjE1NDQ5WjAYMRYwFAYD VQQDEw02NzQzYTBhOS0xNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIlugbJ/3f7VKPA9wGIvjDIRhcQHTRBNHroQMipmYGuP2djuO8S/JwQs8xen kbj8hH0CErearUrrjzatKb/Btpx8oSf+N83dHtzZJhG5UM6OpXOv/OzRQzYnrz9X ZlDqjls22SajVWPuQ4bMVP386MjzH4jLut+8VH3o4j8xoNfvf5e4Xxq/b0BOlr/P HzQu7Zol//5gMPAjEEs1fjBD1kZwwxWM/OmiCK/HQBVptp6fyKjMjVpgTT5rjQHd tj78/nHsGIx7tT1vU1qWpW62hZhgEw2BnJeujwr/oV3LVP4POTbeWpEw5ydgXs4Y wpL0uQB5avN+kYmnbIIz+4FCPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP95c7gZ k8QGB1V//Bbb9zgCuvwXMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFGRS8zODYyMzVGMDZGODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0 ekw3cnBBeENRcElxZ1RhMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpTrrDsuf3z2+Jav2g0Os8xs7eLy6NRUUgzF1XJAVFWUUAhoegBuKl vEYNUGuzSE5k+oNtefdDe8kVxPN0eMbSZIt7bOc3le6+m4w0UBIWwAaYU3O1fDDC RfvLSbBof+9+gtsuOafI2EaVeJ47jVIHAnXZu6G+Wf/4XHz1kd6PsFNHDPQ41bPx m5LthmmU6HUkZr6gHIdLUYRi3esGEaAfrZrV7N6mLhARnDY3mwZKOLPLiaw8Z4k7 EAau7Oo18/ql3OBfxyAJ/iEJhOou/2hPDM17LG4XB6ZEgAO1D6wJWlco9dSZGZyt EkRgVuHw+Jt4mJXNQNG2rcbY2g7x6sNu -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:53 2024 by rpki-client on console-ams.rpki-client.org