$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: 0OUlaVMq6X3xehcEc4XmIjUn1QiNZwt6n/9q7yySCNM= Subject key identifier: 39:1D:AD:C5:2D:D7:2C:F4:E2:3D:D6:E9:93:FE:13:DF:16:F5:5F:2C Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 012C Signing time: Thu 21 Nov 2024 02:53:30 +0000 Manifest this update: Thu 21 Nov 2024 02:53:29 +0000 Manifest next update: Thu 28 Nov 2024 02:53:29 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: vSZZTmUYFuSe4ADE6SRb58x+9/Izif+YIVnOutnyzic=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: XNf/2Q6uWI444vIMmSBl+gGmGXhm3xu89mz5NFyHmH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Nov 21 02:53:29 2024 GMT Not After : Nov 28 02:53:29 2024 GMT Subject: CN=673ea0a9-32c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:ee:f4:83:4f:2e:4e:e0:36:dc:08:88:7c: 44:7a:a6:f7:7e:96:42:b2:d7:d8:19:64:5b:fb:a9: e6:7a:df:05:cf:1e:d5:de:fc:88:d0:83:18:d0:0a: e9:28:55:5c:82:49:32:ff:cb:77:2f:54:fa:4c:1c: 57:bd:58:e0:12:0d:c1:3c:17:6f:4b:9d:6c:4f:90: de:0a:e9:d0:07:4a:1d:49:7a:35:fd:73:25:db:29: 5e:56:47:05:c7:fe:60:23:2b:bc:11:e3:94:ae:af: 0a:da:bf:db:b1:9f:61:60:da:3a:49:2d:c4:44:16: 5d:5f:3a:9a:b6:98:14:53:2b:5e:8a:72:a9:e5:a4: 08:94:77:b0:17:f7:0a:6e:80:fd:78:00:8a:3f:e0: d1:7e:9e:25:3e:2f:9d:aa:38:f4:90:4f:27:da:5f: ae:9a:f5:42:56:13:38:49:e1:91:63:b3:5e:2c:81: 36:fa:b8:0a:55:cc:d5:f3:29:5a:14:cf:b9:86:80: 73:20:9c:bc:f4:6a:a2:19:1b:69:c2:4a:c0:4b:48: 5b:a1:2f:4a:fb:ad:1b:51:f0:30:ab:f1:f4:ea:08: 84:cd:58:c4:bb:37:32:c3:77:c2:5d:22:1f:cf:eb: 60:77:a1:27:6c:5c:ab:05:06:7c:16:38:06:1a:7c: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1D:AD:C5:2D:D7:2C:F4:E2:3D:D6:E9:93:FE:13:DF:16:F5:5F:2C X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c4:ee:75:39:63:5f:52:36:af:c4:16:ec:53:51:c2:12:91: c9:de:09:e9:90:c3:a1:2e:db:6e:ef:1e:92:9e:20:a3:28:42: e2:c7:c4:58:f2:a4:ee:95:4a:c4:e6:3d:d2:f2:1d:dd:a0:ce: eb:fe:44:6f:71:df:c2:0f:5c:9a:72:8b:c3:08:3a:1d:20:cd: 99:23:bc:71:e9:18:8c:f8:95:e3:9a:91:8b:b4:85:2e:63:64: b4:c4:3d:5b:39:a0:3e:b7:46:c6:25:00:cd:14:4d:c5:1f:96: d1:a1:57:17:de:e5:e8:45:fb:20:1b:72:fc:a4:1c:64:99:04: f6:3a:35:fb:0c:26:c8:17:32:b2:de:89:ec:d7:6f:72:e3:7d: 1c:43:4e:6a:09:2d:26:d1:a5:09:aa:86:3e:45:3d:2a:6a:e4: 10:6b:b0:b5:44:fa:ce:3f:4a:d1:05:bd:89:f4:b2:80:4e:d1: 00:a0:40:12:ac:02:9c:89:6b:54:95:ec:5c:71:6a:cb:2c:16: 8a:a4:df:23:8b:07:81:4e:d5:3f:09:72:b6:3e:25:6c:46:00: c8:ed:38:c7:a3:6d:59:d3:29:d0:85:f8:c8:f0:e3:40:2c:45: 16:bf:f2:d2:74:62:41:80:c3:d4:7f:7e:27:23:b9:57:19:ab: e8:66:c5:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjQxMTIxMDI1MzI5WhcNMjQxMTI4MDI1MzI5WjAYMRYwFAYD VQQDEw02NzNlYTBhOS0zMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySbu9INPLk7gNtwIiHxEeqb3fpZCstfYGWRb+6nmet8Fzx7V3vyI0IMY0Arp KFVcgkky/8t3L1T6TBxXvVjgEg3BPBdvS51sT5DeCunQB0odSXo1/XMl2yleVkcF x/5gIyu8EeOUrq8K2r/bsZ9hYNo6SS3ERBZdXzqatpgUUyteinKp5aQIlHewF/cK boD9eACKP+DRfp4lPi+dqjj0kE8n2l+umvVCVhM4SeGRY7NeLIE2+rgKVczV8yla FM+5hoBzIJy89GqiGRtpwkrAS0hboS9K+60bUfAwq/H06giEzVjEuzcyw3fCXSIf z+tgd6EnbFyrBQZ8FjgGGnxzGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkdrcUt 1yz04j3W6ZP+E98W9V8sMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkxO51OWNfUjavxBbsU1HCEpHJ3gnpkMOhLttu7x6SniCjKELix8RY 8qTulUrE5j3S8h3doM7r/kRvcd/CD1yacovDCDodIM2ZI7xx6RiM+JXjmpGLtIUu Y2S0xD1bOaA+t0bGJQDNFE3FH5bRoVcX3uXoRfsgG3L8pBxkmQT2OjX7DCbIFzKy 3ons129y430cQ05qCS0m0aUJqoY+RT0qauQQa7C1RPrOP0rRBb2J9LKATtEAoEAS rAKciWtUlexccWrLLBaKpN8jiweBTtU/CXK2PiVsRgDI7TjHo21Z0ynQhfjI8ONA LEUWv/LSdGJBgMPUf34nI7lXGavoZsWY -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org