$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: s7yUDpdcfw6U8zjgSU9RBcIyUDiAIHXKMwOQ+WjsKp0= Subject key identifier: B8:03:65:15:EE:56:DC:BE:63:97:7E:68:EB:6F:FE:4B:21:F9:E5:24 Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0B25 Signing time: Fri 22 Nov 2024 19:01:27 +0000 Manifest this update: Fri 22 Nov 2024 19:01:27 +0000 Manifest next update: Fri 29 Nov 2024 19:01:27 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: yPdEm31VHkYSQyLrDWwrU+J6WmQrS4Z1WiplIz4rLgc=) 2: 7510C8E4A58111EFB180AE4CC4F9AE02.roa (hash: E/BGID6Gby6v5QvQj4hPXMbAhQVogenf9fUtMLowUnA=) 3: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: xCXQqgm7s0yqcl5rlXb69u+J291yS3/BUfkPMKe4WIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Nov 22 19:01:27 2024 GMT Not After : Nov 29 19:01:27 2024 GMT Subject: CN=6740d507-932a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:ae:1c:2e:cc:d8:b3:a2:ed:62:a5:28:50: 35:69:90:53:9f:3b:4a:54:54:82:3d:e4:f5:00:9b: 26:e2:51:0b:a3:4d:c3:fc:ee:0e:56:7a:e0:36:91: 9c:6f:b4:2b:77:ac:5b:77:1a:9e:c2:e6:eb:5b:d5: ce:f2:13:94:cc:7e:f5:a1:a1:59:cc:ba:a0:3c:8e: 21:3a:b5:dd:39:40:39:cc:88:f6:e3:d9:b8:71:9f: 56:df:1c:bc:0b:f8:df:08:dc:4a:68:ff:2b:ec:b1: 52:b5:70:9c:16:58:ca:a8:bf:15:7f:90:6f:a3:e6: 76:e9:2e:d1:89:bc:26:46:80:18:55:7d:75:0f:87: 57:94:3c:b5:e7:c9:28:83:f6:a6:41:c5:e0:f4:6a: 7a:b4:d2:56:40:76:90:12:69:5a:ae:cd:3c:1e:87: e8:50:0b:81:ca:44:6d:b8:36:c2:17:a2:fd:90:dc: c3:a9:05:7b:72:4c:d2:83:1f:a4:85:a8:30:e1:14: c9:d4:6a:10:28:31:fd:a8:42:94:b4:97:bf:da:ee: a4:38:13:af:09:ff:32:62:a7:b4:c6:a4:14:bc:b7: 0b:b3:90:19:fd:f8:c4:4c:71:46:dd:28:6e:75:11: 24:0d:57:a3:30:b8:cc:bc:e1:d7:31:d6:b1:65:11: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:03:65:15:EE:56:DC:BE:63:97:7E:68:EB:6F:FE:4B:21:F9:E5:24 X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:5a:57:a2:db:04:46:60:7e:9c:90:b6:02:3d:2b:05:f4:5b: d4:73:e5:6f:c3:a5:27:86:59:d2:d5:28:28:48:3f:30:56:ca: 38:1d:b3:48:31:fa:8e:60:6b:3c:84:8d:14:0b:a9:ce:5a:22: 6c:c4:5e:03:6a:0f:15:73:d4:9e:0e:f0:e8:5d:a1:ed:bc:15: 24:e7:05:76:c8:b9:5c:fd:bc:71:88:a4:4b:e6:c0:c0:9d:df: 61:75:83:3a:04:c0:f6:7e:66:35:27:ac:37:a8:84:46:d3:af: 82:51:15:71:7c:9f:f8:cf:87:1f:99:8d:6c:84:98:ba:0d:1a: 9e:98:07:83:91:05:5f:61:37:7a:dd:61:9e:3c:c3:cc:4a:22: 0b:f5:01:42:ed:60:94:c2:b2:53:e3:ae:c4:9f:79:8e:45:4d: 84:96:2e:fc:05:dd:ca:97:20:22:fa:4b:ff:b7:78:c7:a2:03: 76:2a:b3:ee:51:46:0f:dc:80:22:d0:4e:22:0f:17:75:5c:c6: 6a:21:53:ab:3a:ba:9c:80:a7:97:e9:77:ab:49:7c:00:8c:3b: f9:a5:82:de:15:55:14:e8:1b:e0:7a:22:bc:02:47:bd:c2:62: a3:a5:1d:3e:64:64:ef:62:46:85:a2:ca:5c:d8:96:b4:45:9c: f3:39:25:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjQxMTIyMTkwMTI3WhcNMjQxMTI5MTkwMTI3WjAYMRYwFAYD VQQDEw02NzQwZDUwNy05MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnj6uHC7M2LOi7WKlKFA1aZBTnztKVFSCPeT1AJsm4lELo03D/O4OVnrgNpGc b7Qrd6xbdxqewubrW9XO8hOUzH71oaFZzLqgPI4hOrXdOUA5zIj249m4cZ9W3xy8 C/jfCNxKaP8r7LFStXCcFljKqL8Vf5Bvo+Z26S7RibwmRoAYVX11D4dXlDy158ko g/amQcXg9Gp6tNJWQHaQEmlars08HofoUAuBykRtuDbCF6L9kNzDqQV7ckzSgx+k hagw4RTJ1GoQKDH9qEKUtJe/2u6kOBOvCf8yYqe0xqQUvLcLs5AZ/fjETHFG3Shu dREkDVejMLjMvOHXMdaxZREltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgDZRXu Vty+Y5d+aOtv/ksh+eUkMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOWlei2wRGYH6ckLYCPSsF9FvUc+Vvw6UnhlnS1SgoSD8wVso4HbNI MfqOYGs8hI0UC6nOWiJsxF4Dag8Vc9SeDvDoXaHtvBUk5wV2yLlc/bxxiKRL5sDA nd9hdYM6BMD2fmY1J6w3qIRG06+CURVxfJ/4z4cfmY1shJi6DRqemAeDkQVfYTd6 3WGePMPMSiIL9QFC7WCUwrJT467En3mORU2Eli78Bd3KlyAi+kv/t3jHogN2KrPu UUYP3IAi0E4iDxd1XMZqIVOrOrqcgKeX6XerSXwAjDv5pYLeFVUU6BvgeiK8Ake9 wmKjpR0+ZGTvYkaFospc2Ja0RZzzOSXt -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org