$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: AvEco2umGVh29kjCnHaywPATcNG6FrRKCS8DPQYm9Ic= Subject key identifier: F7:F2:DB:7B:EB:5B:11:37:73:F6:2B:91:42:21:C6:4D:37:88:41:F5 Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: 43 Signing time: Thu 17 Oct 2024 05:48:28 +0000 Manifest this update: Thu 17 Oct 2024 05:48:27 +0000 Manifest next update: Thu 24 Oct 2024 05:48:27 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: khMAI9CNar5mSpANYg7o3zNvqMn66UUe+lZpS9J2X1c=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: dEaYlEkH9R7ZFvmgUUxoyfXOgBDXEq+zy0JoQWINyBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Oct 17 05:48:27 2024 GMT Not After : Oct 24 05:48:27 2024 GMT Subject: CN=6710a52c-028c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:35:b1:39:ce:85:9d:9e:02:87:eb:26:b8: 45:cf:d8:4e:dd:ac:3a:e9:78:db:44:ef:9a:b1:4f: 23:60:16:d8:4c:2f:b8:b1:d3:83:a9:5d:3b:92:88: 80:88:cc:6d:de:85:ce:dc:8e:e4:ab:e6:f7:c9:78: b6:b6:93:b0:64:84:e8:d8:8a:3f:19:6f:7d:20:32: f9:9b:d7:34:af:a0:9e:51:35:b9:8c:61:8b:43:8b: b2:a3:27:cc:89:5e:97:24:90:e7:03:72:dc:d7:c9: 2a:79:e6:66:25:fe:e9:e3:f8:62:d5:7c:bd:bb:c8: 97:b3:2f:66:1f:2e:0b:70:af:ab:4f:8f:24:3b:ab: c2:9a:18:26:0b:08:a3:4d:5c:de:c8:d0:82:ec:e5: 9d:2a:b3:24:26:61:65:de:b1:e4:45:50:30:b9:1f: fa:6f:57:42:e6:dc:1a:94:41:7b:04:35:6b:50:eb: 1e:85:e8:f3:a7:1b:7b:be:e8:b5:ad:d6:90:30:5a: ee:d1:9a:56:27:5d:a5:13:d8:99:ea:2e:01:3f:42: 3b:32:94:87:a3:41:35:45:4e:b9:fe:04:9b:f0:08: 17:18:72:cb:c9:21:f9:a4:64:76:86:73:f8:9c:27: 55:b8:d0:87:e4:7d:b6:f5:05:e0:af:97:54:7b:48: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F2:DB:7B:EB:5B:11:37:73:F6:2B:91:42:21:C6:4D:37:88:41:F5 X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:5c:66:6d:3f:39:4b:a9:7e:f5:78:cf:b8:ef:f5:2d:af:70: 71:bc:66:6d:7d:46:8c:15:36:a8:e5:b8:39:06:eb:1c:98:12: 8a:d3:c3:a4:dc:df:cc:0d:00:fc:b9:fc:13:81:13:f9:f6:1d: 80:95:a4:37:f6:40:0b:f1:93:2a:a8:d1:d1:37:96:d1:77:be: 6c:84:08:25:af:b4:87:fc:db:7e:b9:cf:06:f3:2c:d0:ce:36: 78:92:b4:31:bf:04:d4:de:24:ee:02:1e:b5:fe:83:c9:6c:c0: bf:37:a5:32:79:37:98:d5:b9:e5:92:a6:1e:04:57:16:b6:86: 3b:10:44:ed:b4:d3:42:18:89:a5:3e:71:64:38:1a:4c:ee:73: 77:d7:cc:24:d3:29:11:d0:b6:c6:b6:47:0a:29:96:05:79:13: 45:53:90:89:bf:1e:d2:bc:6c:95:d2:2d:0f:32:f8:3d:25:96: bf:8d:ec:cc:81:06:50:b0:5d:f5:b5:8c:00:b6:f2:90:56:fb: 0d:9c:f9:86:74:f6:61:97:1c:2a:cf:c9:2b:c8:06:b8:37:8e: aa:23:70:6f:56:fb:6f:2c:9d:46:9a:30:a5:2f:d8:13:50:60: 54:8e:50:0d:6d:a3:3b:18:d2:80:51:a8:d3:94:42:44:90:b3: 1a:0f:5c:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDJEODExMC8GA1UEBRMoRUQ5QjBFNjA4NUEyNURGMjY3NDlGRjI3NTgxQTRFOEJD N0MxODZDQzAeFw0yNDEwMTcwNTQ4MjdaFw0yNDEwMjQwNTQ4MjdaMBgxFjAUBgNV BAMTDTY3MTBhNTJjLTAyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2UzWxOc6FnZ4Ch+smuEXP2E7drDrpeNtE75qxTyNgFthML7ix04OpXTuSiICI zG3ehc7cjuSr5vfJeLa2k7BkhOjYij8Zb30gMvmb1zSvoJ5RNbmMYYtDi7KjJ8yJ XpckkOcDctzXySp55mYl/unj+GLVfL27yJezL2YfLgtwr6tPjyQ7q8KaGCYLCKNN XN7I0ILs5Z0qsyQmYWXeseRFUDC5H/pvV0Lm3BqUQXsENWtQ6x6F6POnG3u+6LWt 1pAwWu7RmlYnXaUT2JnqLgE/QjsylIejQTVFTrn+BJvwCBcYcsvJIfmkZHaGc/ic J1W40Ifkfbb1BeCvl1R7SMXLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9/Lbe+tb ETdz9iuRQiHGTTeIQfUwHwYDVR0jBBgwFoAU7ZsOYIWiXfJnSf8nWBpOi8fBhsww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMkQ4L0UwOTI0OEVBMkFC NjExRUZCMzM5RkQ4MUM0RjlBRTAyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1pzT1lJV2lYZkpuU2Y4bldCcE9pOGZCaHN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MkQ4L0UwOTI0OEVBMkFCNjExRUZCMzM5RkQ4MUM0RjlBRTAyLzdac09ZSVdpWGZK blNmOG5XQnBPaThmQmhzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIVcZm0/OUupfvV4z7jv9S2vcHG8Zm19RowVNqjluDkG6xyYEorTw6Tc 38wNAPy5/BOBE/n2HYCVpDf2QAvxkyqo0dE3ltF3vmyECCWvtIf82365zwbzLNDO NniStDG/BNTeJO4CHrX+g8lswL83pTJ5N5jVueWSph4EVxa2hjsQRO2000IYiaU+ cWQ4Gkzuc3fXzCTTKRHQtsa2RwoplgV5E0VTkIm/HtK8bJXSLQ8y+D0llr+N7MyB BlCwXfW1jAC28pBW+w2c+YZ09mGXHCrPySvIBrg3jqojcG9W+28snUaaMKUv2BNQ YFSOUA1tozsY0oBRqNOUQkSQsxoPXPQ= -----END CERTIFICATE-----Generated at Thu Oct 17 06:46:18 2024 by rpki-client on console-fra.rpki-client.org