$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: U0lhMCWjYVzKVp2WIGDROzLNLDJ9CAtM7QPJFhBggrs= Subject key identifier: 6E:E9:99:D5:EC:DF:54:11:6C:2F:0D:59:19:17:9F:F8:9D:FF:A3:95 Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: 56 Signing time: Sat 23 Nov 2024 05:08:35 +0000 Manifest this update: Sat 23 Nov 2024 05:08:34 +0000 Manifest next update: Sat 30 Nov 2024 05:08:34 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: bGJeeP4uXQM+ny7EpJT0Y84uHaIM2nXOpu2/Yjpknkk=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: dEaYlEkH9R7ZFvmgUUxoyfXOgBDXEq+zy0JoQWINyBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Nov 23 05:08:34 2024 GMT Not After : Nov 30 05:08:34 2024 GMT Subject: CN=67416352-c250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:9d:7b:89:c5:e1:51:73:52:77:74:d2:96: 9a:75:35:e0:46:f0:3b:f8:5b:8b:39:89:39:18:bf: ad:4f:f8:32:13:6a:52:a6:1b:b5:1b:22:8c:26:76: c1:9a:b8:ae:de:4f:10:69:49:71:d5:45:6d:77:1c: 7b:a1:82:c6:56:ec:58:66:1d:64:8c:ca:e8:1a:80: c4:5d:ae:59:c4:e7:84:85:c5:a7:7e:8c:9f:73:a7: 4f:97:c8:0e:20:69:36:06:7c:79:ff:02:5d:18:93: 8e:83:c6:bd:25:fc:14:90:68:7f:e8:5f:a3:b6:fa: b8:2b:be:4e:73:42:fd:2b:6e:78:cc:0f:49:a7:a3: 14:c6:fe:9b:c9:ab:64:5a:ec:cd:75:a5:1d:2d:d2: c6:b9:7d:22:0c:32:62:72:3d:4e:61:0a:03:ba:22: 08:9c:c1:c0:d9:3b:38:c3:94:17:c0:0b:fd:d5:30: 27:06:a2:59:a9:64:79:ab:00:98:c4:2a:18:f3:96: 87:af:88:e3:6b:b2:08:d0:67:21:64:26:d9:0b:b4: 56:84:5e:5e:a9:8e:97:ae:d9:f6:81:87:94:56:13: be:f0:86:1f:fe:2f:09:91:b6:a9:f9:2e:80:73:ef: 6e:85:bc:e5:c4:ac:15:89:e9:75:81:08:1d:77:29: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E9:99:D5:EC:DF:54:11:6C:2F:0D:59:19:17:9F:F8:9D:FF:A3:95 X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:70:23:87:a5:bb:01:51:fc:0d:96:09:d8:a7:ae:7e:21:3e: d0:27:7a:4d:d7:e8:21:6c:93:3d:4b:58:5a:01:61:c3:08:0e: 29:cc:b7:d9:13:51:28:8d:da:15:b8:a8:2f:5d:ae:40:d4:5b: cd:42:bb:ce:e8:e4:59:01:dc:c8:f1:0b:cc:9b:4a:d4:ec:40: 48:a5:68:f4:5c:14:03:17:64:43:c9:47:cc:d0:6b:08:77:50: 02:91:f2:36:3c:60:c4:c4:68:44:e2:1a:49:6b:4c:51:c2:98: b2:ab:44:68:5e:13:3f:fd:b3:48:b8:c7:34:1e:10:07:73:89: ab:b3:a7:b5:9e:3c:4e:16:77:3c:9e:e5:17:e7:f1:13:88:02: 47:8f:67:04:a1:1f:e9:ce:bf:a6:cb:cd:0c:a1:a7:0b:e4:c9: 3c:62:d7:85:0c:49:45:9f:27:bc:ae:27:8b:3a:cc:14:6d:e8: a5:5b:30:a5:15:11:39:6e:b4:c1:95:51:27:23:4d:89:2d:87: b4:5e:31:a3:e6:b4:e4:d6:8a:97:91:08:0f:87:34:ec:c7:f4: 61:3c:34:ae:bd:aa:2b:cf:08:6c:28:d4:83:fe:c4:b0:9e:6b: ec:b9:78:f9:21:a3:49:06:a5:eb:6f:06:66:87:a9:d5:8e:c1: 5b:56:eb:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDJEODExMC8GA1UEBRMoRUQ5QjBFNjA4NUEyNURGMjY3NDlGRjI3NTgxQTRFOEJD N0MxODZDQzAeFw0yNDExMjMwNTA4MzRaFw0yNDExMzAwNTA4MzRaMBgxFjAUBgNV BAMTDTY3NDE2MzUyLWMyNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvZZ17icXhUXNSd3TSlpp1NeBG8Dv4W4s5iTkYv61P+DITalKmG7UbIowmdsGa uK7eTxBpSXHVRW13HHuhgsZW7FhmHWSMyugagMRdrlnE54SFxad+jJ9zp0+XyA4g aTYGfHn/Al0Yk46Dxr0l/BSQaH/oX6O2+rgrvk5zQv0rbnjMD0mnoxTG/pvJq2Ra 7M11pR0t0sa5fSIMMmJyPU5hCgO6IgicwcDZOzjDlBfAC/3VMCcGolmpZHmrAJjE KhjzloeviONrsgjQZyFkJtkLtFaEXl6pjpeu2faBh5RWE77whh/+LwmRtqn5LoBz 726FvOXErBWJ6XWBCB13KYadAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbumZ1ezf VBFsLw1ZGRef+J3/o5UwHwYDVR0jBBgwFoAU7ZsOYIWiXfJnSf8nWBpOi8fBhsww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMkQ4L0UwOTI0OEVBMkFC NjExRUZCMzM5RkQ4MUM0RjlBRTAyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1pzT1lJV2lYZkpuU2Y4bldCcE9pOGZCaHN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MkQ4L0UwOTI0OEVBMkFCNjExRUZCMzM5RkQ4MUM0RjlBRTAyLzdac09ZSVdpWGZK blNmOG5XQnBPaThmQmhzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHtwI4eluwFR/A2WCdinrn4hPtAnek3X6CFskz1LWFoBYcMIDinMt9kT USiN2hW4qC9drkDUW81Cu87o5FkB3MjxC8ybStTsQEilaPRcFAMXZEPJR8zQawh3 UAKR8jY8YMTEaETiGklrTFHCmLKrRGheEz/9s0i4xzQeEAdziauzp7WePE4Wdzye 5Rfn8ROIAkePZwShH+nOv6bLzQyhpwvkyTxi14UMSUWfJ7yuJ4s6zBRt6KVbMKUV ETlutMGVUScjTYkth7ReMaPmtOTWipeRCA+HNOzH9GE8NK69qivPCGwo1IP+xLCe a+y5ePkho0kGpetvBmaHqdWOwVtW68g= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:18 2024 by rpki-client on console-ams.rpki-client.org