$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: Mvj+FzAhOttUaGO3LUcplJ4csK8P4+gpYPU6zbeTLW0= Subject key identifier: 8F:68:81:F5:ED:19:B0:DE:7D:D5:68:BA:98:FC:BB:72:6F:5A:DD:51 Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 0778 Signing time: Fri 22 Nov 2024 20:58:14 +0000 Manifest this update: Fri 22 Nov 2024 20:58:13 +0000 Manifest next update: Fri 29 Nov 2024 20:58:13 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: jf/AYybeMaqIpevb0HXWc4H3rtnkJ0cDXR0cUZ4a91U=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Tzogk+KlaMGiRbq9BoG9FBqCIAU/Ao8ia39qrUgrDpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: Nov 22 20:58:13 2024 GMT Not After : Nov 29 20:58:13 2024 GMT Subject: CN=6740f066-a4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:f7:f8:95:39:b7:0f:5a:70:2f:d9:68:30: 28:bd:26:ec:76:a8:a5:3c:be:b2:04:1b:f5:f8:f7: 54:7d:a2:8e:a7:9e:73:2d:39:e4:8b:fd:86:ac:d6: dd:43:c6:15:4b:47:d1:6c:38:93:5c:64:69:16:5f: 04:73:1d:26:81:82:e8:01:6d:83:eb:20:a1:fa:28: 7c:c0:b7:5f:6f:df:11:3f:f8:59:fd:c2:bd:6b:2e: 86:34:fc:b8:e8:78:fb:51:b2:65:ef:59:33:28:21: d9:c1:06:a4:55:d2:d4:b3:59:8d:29:95:81:75:eb: e0:36:e5:a1:53:03:4c:6f:de:0b:73:23:b7:0e:46: a9:15:18:8e:cd:4b:5c:23:46:d4:79:d4:44:a9:84: 68:28:2b:b5:43:eb:bf:5f:79:bc:f8:cb:b9:66:6f: 24:37:fd:89:85:16:ee:d8:dc:04:ed:91:c6:d2:c5: ff:42:31:a9:69:88:c9:0c:1e:5c:26:7c:ee:79:18: cf:43:23:05:50:e9:95:42:9b:85:4d:17:42:c8:73: 72:70:c8:1a:ff:9f:12:e6:1d:0a:57:8f:17:e7:4c: e1:c4:f0:d9:c5:22:03:15:7f:52:4f:9f:91:5a:1d: 65:98:3d:47:65:43:e9:4a:3a:9c:da:9a:f3:ea:ea: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:68:81:F5:ED:19:B0:DE:7D:D5:68:BA:98:FC:BB:72:6F:5A:DD:51 X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:11:c4:b9:8d:12:6e:f4:ee:80:17:7f:b1:57:75:24:64:01: 98:76:ea:8d:75:31:a8:e6:b4:1d:7d:58:f0:c8:0b:bd:8a:e3: 40:4f:94:43:6a:44:16:a4:9a:51:4d:bc:e8:fb:d5:cb:22:25: 0b:f1:4a:77:a8:97:eb:44:b0:db:ff:3d:11:b2:a4:02:80:01: 2e:d8:a4:c9:0c:c6:0f:ed:75:e2:97:ca:57:b3:dd:3b:a8:d7: bc:1e:5c:df:74:fd:ce:da:e1:e8:b1:76:36:cf:83:ea:c5:cc: 26:dc:df:d1:d9:21:53:58:6d:67:0b:5d:1a:7a:a4:cd:ba:f7: 05:45:10:3c:ed:4f:f6:ea:10:54:ed:34:13:7a:ce:02:4c:c3: cf:74:af:8f:f7:0f:be:48:b0:75:f4:18:cd:5f:ff:f1:bc:75: cb:86:78:03:e0:2f:ef:24:46:5d:b8:4f:d4:f5:fe:a6:f8:b6: 06:20:36:0f:d8:6b:38:62:0d:b6:a5:71:58:06:92:b6:66:c8: 60:06:6f:cc:f5:54:d2:67:38:d4:7b:c5:b3:b3:fe:ff:17:22: 28:ec:7e:8b:9e:2a:c7:81:14:dc:42:28:a7:c2:6a:7d:71:6d: 19:ac:db:70:f8:de:b6:af:63:02:a1:60:4e:e4:a2:f6:68:aa: ce:43:58:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjQxMTIyMjA1ODEzWhcNMjQxMTI5MjA1ODEzWjAYMRYwFAYD VQQDEw02NzQwZjA2Ni1hNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxv3+JU5tw9acC/ZaDAovSbsdqilPL6yBBv1+PdUfaKOp55zLTnki/2GrNbd Q8YVS0fRbDiTXGRpFl8Ecx0mgYLoAW2D6yCh+ih8wLdfb98RP/hZ/cK9ay6GNPy4 6Hj7UbJl71kzKCHZwQakVdLUs1mNKZWBdevgNuWhUwNMb94LcyO3DkapFRiOzUtc I0bUedREqYRoKCu1Q+u/X3m8+Mu5Zm8kN/2JhRbu2NwE7ZHG0sX/QjGpaYjJDB5c JnzueRjPQyMFUOmVQpuFTRdCyHNycMga/58S5h0KV48X50zhxPDZxSIDFX9ST5+R Wh1lmD1HZUPpSjqc2prz6uq34QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9ogfXt GbDefdVoupj8u3JvWt1RMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACEcS5jRJu9O6AF3+xV3UkZAGYduqNdTGo5rQdfVjwyAu9iuNAT5RD akQWpJpRTbzo+9XLIiUL8Up3qJfrRLDb/z0RsqQCgAEu2KTJDMYP7XXil8pXs907 qNe8HlzfdP3O2uHosXY2z4Pqxcwm3N/R2SFTWG1nC10aeqTNuvcFRRA87U/26hBU 7TQTes4CTMPPdK+P9w++SLB19BjNX//xvHXLhngD4C/vJEZduE/U9f6m+LYGIDYP 2Gs4Yg22pXFYBpK2ZshgBm/M9VTSZzjUe8Wzs/7/FyIo7H6LnirHgRTcQiinwmp9 cW0ZrNtw+N62r2MCoWBO5KL2aKrOQ1ju -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org