$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: GxJ7sPfG/jhZXXHgU4yZv1cm8MfY5fr6f+1slj6gNF8= Subject key identifier: E8:2E:D6:FC:FE:67:D2:D3:AC:9A:F6:47:AC:8E:C5:8F:46:2C:6C:14 Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 0405 Signing time: Sat 23 Nov 2024 00:02:25 +0000 Manifest this update: Sat 23 Nov 2024 00:02:25 +0000 Manifest next update: Sat 30 Nov 2024 00:02:25 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: 74kJmyVR9r5wbpRXihrAPiKUJTLHY51xvPR0e0wOvUI=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: OL26pWJP72CidPW/pasZewNbqUAaL+m9GOhNNiqNULM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Validity Not Before: Nov 23 00:02:25 2024 GMT Not After : Nov 30 00:02:25 2024 GMT Subject: CN=67411b91-0fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:50:8b:cb:ac:7a:48:ee:49:05:d2:2c:51: 2a:f3:f8:28:f0:51:19:98:d2:e5:87:bf:1f:84:bd: 25:e4:c8:0a:35:d3:cb:ce:d4:95:c6:d8:87:5e:27: 15:eb:f0:29:de:d7:39:71:bb:7e:04:d7:b4:65:d7: 95:ab:a6:a0:bc:a2:92:a6:0d:29:43:3f:72:08:3e: ab:67:77:b4:79:17:79:40:96:50:83:38:a0:b4:e5: 90:c2:98:89:4c:64:76:87:ff:c1:02:a7:de:98:bf: d3:d8:e6:8b:d2:80:b4:6c:3a:d1:4f:5c:c5:27:63: 04:8f:fe:4b:ca:5d:21:5a:bd:6e:ad:02:b4:13:bf: 8d:bb:70:c9:08:46:88:37:74:50:e8:a5:44:70:59: 77:94:5f:a4:e8:bf:43:ea:1c:96:3a:1e:6f:7e:a6: 6a:19:de:ae:f7:86:38:57:f6:f4:aa:0a:25:11:a2: fd:80:65:e5:7e:71:55:57:53:02:3d:9d:6f:19:40: 33:1d:2e:84:6e:60:28:26:6c:9e:6b:b4:fa:a3:7a: de:2e:63:9f:14:6c:22:65:99:65:18:0b:c9:b6:99: ef:47:98:0b:9d:ae:1f:02:71:3e:cc:d8:80:d9:52: ab:6e:c9:df:d0:28:71:0e:3a:c8:53:90:fd:01:67: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2E:D6:FC:FE:67:D2:D3:AC:9A:F6:47:AC:8E:C5:8F:46:2C:6C:14 X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:67:4e:39:47:22:a3:ca:ec:df:39:7d:56:8d:8b:ec:55:5c: 42:95:b5:07:72:c9:89:ee:73:ef:84:25:51:ca:87:9e:42:78: cb:fd:91:2b:87:e0:28:56:49:7f:16:f5:5c:cc:db:9a:e7:e7: 99:71:4b:9b:6f:8d:29:a5:43:74:d6:87:99:f4:14:18:ab:a8: 28:fb:6d:00:23:24:68:57:f3:a2:c1:c7:0f:ec:59:bb:5e:ae: 0e:39:84:bc:9c:d5:d9:97:f0:a9:e2:27:03:eb:31:92:f8:37: 3e:d4:8f:fe:24:e7:65:5c:c5:59:da:a3:61:73:a5:27:28:76: f8:23:cd:89:06:30:49:0d:e2:9f:87:83:57:0e:00:57:07:27: 71:db:1c:0d:d1:2a:99:6a:fc:20:00:de:70:e0:48:7a:13:ad: ec:96:c3:96:f2:55:f6:b2:03:91:6a:fe:4d:3d:ef:03:2f:98: e0:29:1f:b5:70:50:56:ed:e5:28:c6:8b:ff:1c:11:c3:c9:cf: 86:97:52:33:c6:5f:58:f8:6a:eb:30:97:42:83:be:f6:7a:08: 40:d7:62:47:be:8a:9e:91:67:98:9e:5d:12:33:c1:1f:3f:cf: 47:6b:23:46:19:90:1f:ef:c2:b7:03:bf:06:3e:c3:90:21:fc: d3:4d:00:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjQxMTIzMDAwMjI1WhcNMjQxMTMwMDAwMjI1WjAYMRYwFAYD VQQDEw02NzQxMWI5MS0wZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApehQi8usekjuSQXSLFEq8/go8FEZmNLlh78fhL0l5MgKNdPLztSVxtiHXicV 6/Ap3tc5cbt+BNe0ZdeVq6agvKKSpg0pQz9yCD6rZ3e0eRd5QJZQgzigtOWQwpiJ TGR2h//BAqfemL/T2OaL0oC0bDrRT1zFJ2MEj/5Lyl0hWr1urQK0E7+Nu3DJCEaI N3RQ6KVEcFl3lF+k6L9D6hyWOh5vfqZqGd6u94Y4V/b0qgolEaL9gGXlfnFVV1MC PZ1vGUAzHS6EbmAoJmyea7T6o3reLmOfFGwiZZllGAvJtpnvR5gLna4fAnE+zNiA 2VKrbsnf0ChxDjrIU5D9AWe13wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgu1vz+ Z9LTrJr2R6yOxY9GLGwUMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHZ045RyKjyuzfOX1WjYvsVVxClbUHcsmJ7nPvhCVRyoeeQnjL/ZEr h+AoVkl/FvVczNua5+eZcUubb40ppUN01oeZ9BQYq6go+20AIyRoV/OiwccP7Fm7 Xq4OOYS8nNXZl/Cp4icD6zGS+Dc+1I/+JOdlXMVZ2qNhc6UnKHb4I82JBjBJDeKf h4NXDgBXBydx2xwN0SqZavwgAN5w4Eh6E63slsOW8lX2sgORav5NPe8DL5jgKR+1 cFBW7eUoxov/HBHDyc+Gl1Izxl9Y+GrrMJdCg772eghA12JHvoqekWeYnl0SM8Ef P89HayNGGZAf78K3A78GPsOQIfzTTQDD -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org