$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: QFFu6vTIxTtq9Ye5hXdfsQi0gcYbZCF5N+aZysTTS3Y= Subject key identifier: 89:F7:69:AE:84:EB:FB:EA:AF:A5:DA:2D:F2:27:82:6F:AD:DF:A0:30 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 134D Signing time: Fri 22 Nov 2024 18:29:02 +0000 Manifest this update: Fri 22 Nov 2024 18:29:02 +0000 Manifest next update: Fri 29 Nov 2024 18:29:02 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: yE4ZnmkAJWrdMgvvKJbK0HK9JQQ7g70QJOmwLu4lfME=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: wVNJXIBMdOA17Qx14FaFmrSL3yk1+Qgxj7UVSyMJrHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Nov 22 18:29:02 2024 GMT Not After : Nov 29 18:29:02 2024 GMT Subject: CN=6740cd6e-47f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:52:fb:e3:3a:99:eb:18:4d:20:b4:f0:95: 14:e3:b0:2d:c0:88:b8:50:51:8f:fc:28:9d:c6:0a: fa:38:4d:73:95:08:3d:b5:eb:77:c6:3e:6a:88:ff: 18:77:9d:6a:f4:16:4e:1e:65:da:d0:68:9a:86:a8: fb:48:1f:43:1f:85:4d:bf:bc:03:10:f7:db:98:43: 7e:e9:11:c7:ab:a8:ff:64:96:49:23:e1:c4:f4:83: f1:94:ad:59:77:cd:fc:49:27:4d:d7:30:52:70:81: bb:b9:07:f7:e8:7c:01:2b:dd:d6:5f:6c:fc:d2:bb: 33:50:df:3a:81:18:1f:88:32:34:4c:93:1a:78:bb: ac:9c:df:9f:6c:4f:e2:26:fd:26:fb:4b:c7:9a:2e: c0:35:64:e6:b8:bd:76:60:86:ed:8c:47:8d:8a:1a: 4f:be:c6:e8:47:42:24:6e:6d:5f:62:c9:77:60:f7: 10:10:7e:eb:4e:47:c3:cb:3d:0a:3d:22:54:f0:3a: be:8e:db:1a:82:b4:4b:96:eb:c1:89:06:f1:d6:28: f2:7f:a2:c4:a6:6b:53:29:6c:e3:e4:bb:cc:fd:aa: d7:64:9f:49:5f:ed:3d:e6:76:dd:0c:c3:24:7d:d0: 12:6e:ee:cf:ef:49:99:20:fb:e7:ac:26:3d:53:a0: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F7:69:AE:84:EB:FB:EA:AF:A5:DA:2D:F2:27:82:6F:AD:DF:A0:30 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6a:3f:b2:73:a4:df:ed:2a:24:71:85:48:58:f2:df:b3:8a: 0d:7a:0f:25:8f:a4:00:88:5a:5b:4f:1b:da:38:8a:20:03:b2: 8b:97:ae:bf:8a:40:f5:55:00:47:c4:bb:24:cf:74:a9:07:17: 19:8b:89:2a:c0:a4:2d:39:08:89:f5:11:4c:0f:30:5e:6f:59: aa:15:b3:c6:d9:06:35:d9:3c:10:14:be:4d:0b:f1:cf:ab:ee: b9:80:eb:bb:52:ed:0f:64:93:e1:96:ca:62:db:da:41:70:cb: de:cf:20:1f:8c:b1:4e:39:aa:3b:51:4a:ff:4c:58:a0:7d:b8: 45:9a:45:5e:cb:6f:82:55:b5:4f:fc:b9:4a:fa:fb:ed:f1:2f: 96:dc:1e:e9:30:38:3f:29:74:81:15:0b:52:f1:4b:a4:d7:79: 1d:c4:9e:1c:11:3e:fc:df:0b:0a:16:81:59:95:a9:7c:3e:7a: b4:2b:36:19:86:88:60:51:55:db:f0:b7:ce:9c:90:9a:90:6e: 8f:aa:7c:46:36:9d:ca:c4:45:4b:06:d1:63:46:7d:d1:1c:9c: e2:94:6a:0d:35:7c:2e:53:1b:7f:45:1e:67:f4:7e:d8:ce:99: 23:58:6b:93:12:ac:5c:2a:f4:52:ce:a2:52:01:90:30:dd:b1: 58:57:13:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjQxMTIyMTgyOTAyWhcNMjQxMTI5MTgyOTAyWjAYMRYwFAYD VQQDEw02NzQwY2Q2ZS00N2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOxS++M6mesYTSC08JUU47AtwIi4UFGP/Cidxgr6OE1zlQg9tet3xj5qiP8Y d51q9BZOHmXa0Giahqj7SB9DH4VNv7wDEPfbmEN+6RHHq6j/ZJZJI+HE9IPxlK1Z d838SSdN1zBScIG7uQf36HwBK93WX2z80rszUN86gRgfiDI0TJMaeLusnN+fbE/i Jv0m+0vHmi7ANWTmuL12YIbtjEeNihpPvsboR0Ikbm1fYsl3YPcQEH7rTkfDyz0K PSJU8Dq+jtsagrRLluvBiQbx1ijyf6LEpmtTKWzj5LvM/arXZJ9JX+095nbdDMMk fdASbu7P70mZIPvnrCY9U6BPxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIn3aa6E 6/vqr6XaLfIngm+t36AwMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOaj+yc6Tf7SokcYVIWPLfs4oNeg8lj6QAiFpbTxvaOIogA7KLl66/ ikD1VQBHxLskz3SpBxcZi4kqwKQtOQiJ9RFMDzBeb1mqFbPG2QY12TwQFL5NC/HP q+65gOu7Uu0PZJPhlspi29pBcMvezyAfjLFOOao7UUr/TFigfbhFmkVey2+CVbVP /LlK+vvt8S+W3B7pMDg/KXSBFQtS8Uuk13kdxJ4cET783wsKFoFZlal8Pnq0KzYZ hohgUVXb8LfOnJCakG6PqnxGNp3KxEVLBtFjRn3RHJzilGoNNXwuUxt/RR5n9H7Y zpkjWGuTEqxcKvRSzqJSAZAw3bFYVxPm -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org