$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft File: MfUEGe8ZsP2mG2Y5DBLur27L50E.mft (raw, json) Hash identifier: eFpFpEbIaOnITsIiAZT402uGZ//VtRKUTx5y52KRLUE= Subject key identifier: D0:79:D3:BC:26:2A:6F:9C:6B:EF:B0:6D:61:C8:D6:EB:A6:4A:6F:AF Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41 Certificate issuer: /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741 Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft Manifest number: 07B7 Signing time: Fri 22 Nov 2024 20:43:47 +0000 Manifest this update: Fri 22 Nov 2024 20:43:47 +0000 Manifest next update: Fri 29 Nov 2024 20:43:47 +0000 Files and hashes: 1: MfUEGe8ZsP2mG2Y5DBLur27L50E.crl (hash: a6hyg26hGFGSzuOnuZ6YPaXFGH6ZzJ7wYwCCaYOu8LY=) 2: 1F820766D66F11EAB2766134C4F9AE02.roa (hash: h0dn50b7QuXZQH9z/TlYGwvvwAVteTyA+MUQUvW3Ikc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741 Validity Not Before: Nov 22 20:43:47 2024 GMT Not After : Nov 29 20:43:47 2024 GMT Subject: CN=6740ed03-cfad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:c6:6f:11:e9:fc:7b:4d:76:46:87:d6:63: 77:fa:1a:12:9b:8f:4f:1e:02:48:bf:5d:85:d9:21: 83:5e:da:11:ca:95:75:6e:7e:09:45:a3:01:5a:3c: 61:e9:9a:f4:e4:ac:fd:f0:f9:f9:22:8c:52:19:02: c1:3a:ff:96:2c:ed:13:c7:9a:a0:50:66:99:1e:8d: fc:ea:f3:82:49:0f:de:67:ef:5f:5a:e7:27:01:05: e5:c1:ce:de:65:63:f0:8c:9e:8e:89:a8:48:a8:f2: dc:b7:47:df:db:60:7d:5d:91:58:ab:d7:c1:8c:ff: ae:9a:f6:af:65:41:48:09:93:d2:cf:39:b7:03:a1: a3:04:ca:e3:aa:67:b6:23:de:64:a6:9f:bf:33:42: 36:73:81:d3:f7:3b:b3:08:e7:2d:84:12:21:c1:06: 65:64:53:b4:90:a4:ad:7a:e4:d5:06:4b:68:ca:73: 8b:a2:f6:ca:37:c8:f8:40:43:7a:4b:b7:86:6e:31: 47:0e:2c:0c:f5:56:26:63:dd:8e:f2:0f:0c:39:a8: ac:a6:11:04:93:b0:ce:55:cc:cb:42:40:d8:ca:85: ce:50:8c:d3:f8:c6:71:39:9a:30:b1:41:a4:de:07: 58:47:44:a5:27:c3:91:05:a8:d0:31:17:48:d1:11: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:D3:BC:26:2A:6F:9C:6B:EF:B0:6D:61:C8:D6:EB:A6:4A:6F:AF X509v3 Authority Key Identifier: keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9f:6c:8f:24:4d:f5:a2:9d:64:6d:0c:89:68:4e:2b:ce:50: bd:e9:94:cb:80:69:6c:44:c2:b0:12:71:d2:c7:8a:86:4c:ad: 89:6e:26:fd:50:56:76:c6:f7:2f:bc:1e:88:50:b5:d7:fa:42: fc:a2:49:19:80:6e:8d:2e:16:f2:ce:1c:1f:4d:3b:8c:02:c5: c4:9e:36:12:9f:8c:67:73:98:ad:3c:56:4f:9a:c3:7d:c0:0d: 24:20:11:9e:33:8f:06:2a:ea:bb:ce:d2:6d:42:97:67:5f:1a: 56:1c:fc:a0:d0:b8:95:8f:fa:84:aa:65:88:78:7e:17:8a:e3: ae:56:95:6d:e5:e6:47:4e:0d:43:3f:58:76:7c:c3:59:96:d4: 32:2d:c4:76:6a:e6:37:86:5e:ba:f0:ac:ee:8a:50:00:4d:1f: 81:d3:f0:eb:f0:bf:fd:33:1d:5c:8b:32:a9:d8:6c:58:83:b1: 25:e7:1f:c5:10:0c:f0:9c:b7:bd:00:e4:e1:b9:84:72:c9:4f: 0c:43:2a:5b:c9:b1:43:db:80:86:77:5a:39:d8:32:cd:ec:25: 67:2f:e8:1f:63:6f:02:13:32:d9:4c:12:05:60:ac:48:7a:5a: 98:11:d0:e8:c6:33:35:db:49:39:a1:0c:cc:49:2e:45:24:cd: db:ca:08:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1ODQxMTAvBgNVBAUTKDMxRjUwNDE5RUYxOUIwRkRBNjFCNjYzOTBDMTJFRUFG NkVDQkU3NDEwHhcNMjQxMTIyMjA0MzQ3WhcNMjQxMTI5MjA0MzQ3WjAYMRYwFAYD VQQDEw02NzQwZWQwMy1jZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtTGbxHp/HtNdkaH1mN3+hoSm49PHgJIv12F2SGDXtoRypV1bn4JRaMBWjxh 6Zr05Kz98Pn5IoxSGQLBOv+WLO0Tx5qgUGaZHo386vOCSQ/eZ+9fWucnAQXlwc7e ZWPwjJ6OiahIqPLct0ff22B9XZFYq9fBjP+umvavZUFICZPSzzm3A6GjBMrjqme2 I95kpp+/M0I2c4HT9zuzCOcthBIhwQZlZFO0kKSteuTVBktoynOLovbKN8j4QEN6 S7eGbjFHDiwM9VYmY92O8g8MOaisphEEk7DOVczLQkDYyoXOUIzT+MZxOZowsUGk 3gdYR0SlJ8ORBajQMRdI0RHMcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB507wm Km+ca++wbWHI1uumSm+vMB8GA1UdIwQYMBaAFDH1BBnvGbD9phtmOQwS7q9uy+dB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjU4NC81M0YwRkVFMEQ2 NkUxMUVBQjdGMzM1MzRDNEY5QUUwMi9NZlVFR2U4WnNQMm1HMlk1REJMdXIyN0w1 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVUVHZThac1AybUcyWTVEQkx1cjI3TDUwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjU4NC81M0YwRkVFMEQ2NkUxMUVBQjdGMzM1MzRDNEY5QUUwMi9NZlVFR2U4WnNQ Mm1HMlk1REJMdXIyN0w1MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKn2yPJE31op1kbQyJaE4rzlC96ZTLgGlsRMKwEnHSx4qGTK2Jbib9 UFZ2xvcvvB6IULXX+kL8okkZgG6NLhbyzhwfTTuMAsXEnjYSn4xnc5itPFZPmsN9 wA0kIBGeM48GKuq7ztJtQpdnXxpWHPyg0LiVj/qEqmWIeH4XiuOuVpVt5eZHTg1D P1h2fMNZltQyLcR2auY3hl668KzuilAATR+B0/Dr8L/9Mx1cizKp2GxYg7El5x/F EAzwnLe9AOThuYRyyU8MQypbybFD24CGd1o52DLN7CVnL+gfY28CEzLZTBIFYKxI elqYEdDoxjM120k5oQzMSS5FJM3byghB -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org