$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft File: r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json) Hash identifier: dY4Camr77aMBCsN3F44suR7Iclem728+j720wG5NSEw= Subject key identifier: 53:39:A9:06:3C:0F:C6:E9:2B:DB:F1:3D:97:B2:70:B6:97:52:B3:B3 Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E Certificate issuer: /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft Manifest number: F9 Signing time: Thu 21 Nov 2024 03:22:27 +0000 Manifest this update: Thu 21 Nov 2024 03:22:27 +0000 Manifest next update: Thu 28 Nov 2024 03:22:27 +0000 Files and hashes: 1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: jgkaEIvRpJ6/mbfRF9rgrZTY7hPKHyEAgbTc+VtEgxI=) 2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: lV+gUq5xDXipc7yhrjptbxh+gyQhmn5NZA76UN2qadQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Validity Not Before: Nov 21 03:22:27 2024 GMT Not After : Nov 28 03:22:27 2024 GMT Subject: CN=673ea773-eee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b2:35:ca:db:97:5a:b4:16:4d:df:5e:16:79: 15:c3:ab:a3:c7:56:88:75:81:a3:a7:09:e5:c0:3d: 00:7f:da:60:a2:dc:3a:17:dd:46:f8:09:73:61:3e: df:dc:f3:64:f3:fb:5c:ab:3c:ce:cd:5e:04:ff:d8: c0:b9:62:e9:91:bd:e5:ab:8d:81:c2:43:43:64:0d: 71:c7:77:cb:f3:96:02:fc:b6:0d:72:1d:73:3e:2b: d5:eb:8c:7e:70:2e:40:cd:52:7a:c6:e2:5c:ed:3c: 50:55:e3:cf:5e:0b:b5:30:ca:9b:39:62:a1:04:41: 63:11:d8:f3:a8:c6:72:7e:23:01:a0:9f:be:c3:74: b0:ec:6a:5c:95:2f:f6:45:e9:bf:d3:ce:e2:fe:ca: 0c:a1:62:6c:1f:21:a8:2f:73:48:d0:d2:2e:c4:53: c9:35:df:dc:67:f1:91:3d:d6:20:9e:8d:b7:fb:b5: 7d:ed:f6:da:05:5a:15:ba:88:1f:2b:ce:af:cc:8f: 1f:f5:dc:d5:e2:df:0f:84:7b:f9:7d:d6:40:48:cf: 7c:53:46:9a:aa:17:17:44:fa:26:72:be:e6:32:90: 1a:69:ad:75:c9:43:a7:13:52:43:76:7e:ab:58:43: e2:23:86:bb:18:45:46:4f:dd:0a:68:8c:25:b1:57: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:A9:06:3C:0F:C6:E9:2B:DB:F1:3D:97:B2:70:B6:97:52:B3:B3 X509v3 Authority Key Identifier: keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:28:e8:6c:42:f6:f4:d3:e0:6c:c0:c9:f8:29:4a:0c:68: 8f:b7:88:fb:61:9f:d1:3c:ff:5b:ec:df:7c:a0:5c:fa:7d:c0: be:ba:29:c8:fd:62:36:72:ac:02:52:25:c3:8e:f9:38:a4:bd: 15:0b:d0:3d:6c:f3:ef:19:10:2e:55:30:02:b1:18:95:f0:84: 4e:04:2a:79:e8:70:c9:d9:8e:10:a7:4a:56:a1:3a:26:5c:1c: fd:b1:c5:73:96:34:e9:00:1f:40:23:d1:2f:bf:78:90:79:fb: c8:b4:c3:d7:0f:f5:1f:12:39:3a:ba:6a:6b:19:81:18:42:55: a2:1d:d8:a5:dd:c5:27:16:39:54:6d:05:79:92:c3:76:f6:63: e3:73:0c:59:4e:c7:b2:1f:41:81:75:5f:19:02:80:37:98:22: 1c:00:31:e3:43:a2:2a:ea:9f:18:a6:69:e2:99:69:b3:0e:b0: 1a:ff:7c:f5:85:52:83:98:4b:e2:5f:4a:24:73:c7:ae:95:8c: 4d:17:70:ae:90:75:4d:45:4c:57:ae:4b:fa:ea:53:26:c2:3d: a8:39:f8:44:5a:94:e7:bc:e3:4c:c4:8f:1f:d8:38:9f:39:58: 3e:ed:98:46:3a:4b:ee:20:7e:53:b7:a7:67:68:1d:53:30:58: 6b:e5:c5:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2NjMxMTAvBgNVBAUTKEFGQkE0REMxRkE0NTg5MjQ5MDIzMjMxQzZGRUVFM0Y3 QTcxREE0MEUwHhcNMjQxMTIxMDMyMjI3WhcNMjQxMTI4MDMyMjI3WjAYMRYwFAYD VQQDEw02NzNlYTc3My1lZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rI1ytuXWrQWTd9eFnkVw6ujx1aIdYGjpwnlwD0Af9pgotw6F91G+AlzYT7f 3PNk8/tcqzzOzV4E/9jAuWLpkb3lq42BwkNDZA1xx3fL85YC/LYNch1zPivV64x+ cC5AzVJ6xuJc7TxQVePPXgu1MMqbOWKhBEFjEdjzqMZyfiMBoJ++w3Sw7GpclS/2 Rem/087i/soMoWJsHyGoL3NI0NIuxFPJNd/cZ/GRPdYgno23+7V97fbaBVoVuogf K86vzI8f9dzV4t8PhHv5fdZASM98U0aaqhcXRPomcr7mMpAaaa11yUOnE1JDdn6r WEPiI4a7GEVGT90KaIwlsVfbxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM5qQY8 D8bpK9vxPZeycLaXUrOzMB8GA1UdIwQYMBaAFK+6TcH6RYkkkCMjHG/u4/enHaQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjY2My80RUNGRUI5ODJD RTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlTU1FJeU1jYi03ajk2Y2Rw QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cE53ZnBGaVNTUUl5TWNiLTdqOTZjZHBBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjY2My80RUNGRUI5ODJDRTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlT U1FJeU1jYi03ajk2Y2RwQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ4ijobEL29NPgbMDJ+ClKDGiPt4j7YZ/RPP9b7N98oFz6fcC+uinI /WI2cqwCUiXDjvk4pL0VC9A9bPPvGRAuVTACsRiV8IROBCp56HDJ2Y4Qp0pWoTom XBz9scVzljTpAB9AI9Evv3iQefvItMPXD/UfEjk6umprGYEYQlWiHdil3cUnFjlU bQV5ksN29mPjcwxZTseyH0GBdV8ZAoA3mCIcADHjQ6Iq6p8YpmnimWmzDrAa/3z1 hVKDmEviX0okc8eulYxNF3CukHVNRUxXrkv66lMmwj2oOfhEWpTnvONMxI8f2Dif OVg+7ZhGOkvuIH5Tt6dnaB1TMFhr5cWq -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org