$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: cJ5eTHpnwPaSplAgObgZ+fRILxK5MeO+5B0MoIKrrBY= Subject key identifier: 47:2C:E7:84:EB:9C:95:C8:00:20:D6:02:E6:2B:27:0C:F9:48:C6:B4 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0CBB Signing time: Fri 22 Nov 2024 18:06:11 +0000 Manifest this update: Fri 22 Nov 2024 18:06:10 +0000 Manifest next update: Fri 29 Nov 2024 18:06:10 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: 6/L45JSDg926JMED9IF0ItFmThHqjJvO0bRC4QJM+Ws=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: o1E2TDzfrYXVJOP/YJY3szBmvDulSoV6uw7KuOgewO4=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: +In7lqAfHKKuHVBt4b296chjrd7RaFgigBnxlxSxJ4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Nov 22 18:06:10 2024 GMT Not After : Nov 29 18:06:10 2024 GMT Subject: CN=6740c812-b149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:bc:55:0e:d5:b5:7f:37:8d:ad:01:8d:8d: 1e:ec:c5:96:33:69:a1:ab:b6:bf:92:de:9e:3a:0a: b3:ed:18:d8:c4:74:f8:3f:3b:f8:2d:22:1e:59:24: 5c:28:73:37:a7:17:cc:8f:9f:6c:ac:82:3a:d3:20: 56:70:9d:ef:b4:b6:0f:1e:17:07:ce:4b:05:57:8a: eb:ec:17:f2:6d:21:59:70:8a:e3:de:ec:56:e6:95: 03:05:09:05:f3:fb:5c:ab:33:d3:76:54:18:7b:36: a4:cf:64:a1:05:a9:56:e1:9e:36:bd:55:c0:25:16: d0:8e:80:81:6e:f0:74:e7:28:b5:86:11:cc:f8:f5: f0:ce:24:f3:9c:bb:8c:65:b0:90:e5:93:a3:95:09: 32:23:9c:6b:57:44:02:02:3b:60:64:88:04:67:86: 7c:45:50:e1:17:5b:d3:6d:12:fe:a2:fb:81:f1:c8: 84:2c:96:3b:c1:f5:6a:0f:51:75:f7:ad:0a:38:6c: 97:17:ed:9e:de:07:ff:e7:0b:ba:c2:3a:be:13:29: da:a4:7d:33:30:59:65:ad:dc:73:52:ac:90:1d:89: a6:5b:5c:c1:df:f9:fe:d9:28:23:0e:3f:69:6d:bd: 52:bb:5f:df:87:1a:a4:83:9a:82:53:9e:26:1f:61: f7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:E7:84:EB:9C:95:C8:00:20:D6:02:E6:2B:27:0C:F9:48:C6:B4 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:2d:e0:92:cf:78:88:6b:b5:e6:a9:e7:4c:08:c9:3b:05:7f: d0:ef:90:6d:e0:69:a6:dc:fb:d7:e0:4e:3f:2b:74:a3:e3:04: 2d:9f:79:82:ff:09:74:8e:4b:52:56:8e:d2:0b:42:38:c8:2c: eb:14:d5:0c:24:15:14:2b:b8:53:8c:03:45:b9:de:b2:81:f0: 56:82:03:32:07:ea:81:f6:54:94:64:81:f9:62:59:9f:07:9d: 38:46:1a:da:29:c7:0a:12:47:d6:aa:e8:65:1d:c6:fb:65:05: 1d:31:1b:cc:80:36:e8:25:c3:c5:fc:32:48:0b:46:f3:8c:f2: ac:cb:cd:05:ee:a2:51:47:7c:13:e4:a2:c9:54:c4:88:0a:e0: ac:a3:28:a7:6c:ea:42:77:b6:91:4b:fb:a1:32:e4:e6:57:61: b8:df:75:16:bb:40:06:01:4d:aa:63:3d:09:0a:3a:a8:a9:ed: cf:60:3e:71:d2:68:2a:43:d4:67:73:ce:42:74:e0:b2:75:08: a0:49:19:40:24:ce:0c:0a:a2:f3:7f:9f:27:7b:58:c2:fc:2f: f4:20:cf:7f:a3:0f:6f:ba:00:b0:89:2f:a4:67:f4:0b:ff:13: ee:c5:40:c3:4d:ad:48:ee:68:50:a6:3d:69:a0:89:be:70:3c: c3:74:0a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjQxMTIyMTgwNjEwWhcNMjQxMTI5MTgwNjEwWjAYMRYwFAYD VQQDEw02NzQwYzgxMi1iMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGi8VQ7VtX83ja0BjY0e7MWWM2mhq7a/kt6eOgqz7RjYxHT4Pzv4LSIeWSRc KHM3pxfMj59srII60yBWcJ3vtLYPHhcHzksFV4rr7BfybSFZcIrj3uxW5pUDBQkF 8/tcqzPTdlQYezakz2ShBalW4Z42vVXAJRbQjoCBbvB05yi1hhHM+PXwziTznLuM ZbCQ5ZOjlQkyI5xrV0QCAjtgZIgEZ4Z8RVDhF1vTbRL+ovuB8ciELJY7wfVqD1F1 960KOGyXF+2e3gf/5wu6wjq+EynapH0zMFllrdxzUqyQHYmmW1zB3/n+2SgjDj9p bb1Su1/fhxqkg5qCU54mH2H39QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcs54Tr nJXIACDWAuYrJwz5SMa0MB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnLeCSz3iIa7XmqedMCMk7BX/Q75Bt4Gmm3PvX4E4/K3Sj4wQtn3mC /wl0jktSVo7SC0I4yCzrFNUMJBUUK7hTjANFud6ygfBWggMyB+qB9lSUZIH5Ylmf B504RhraKccKEkfWquhlHcb7ZQUdMRvMgDboJcPF/DJIC0bzjPKsy80F7qJRR3wT 5KLJVMSICuCsoyinbOpCd7aRS/uhMuTmV2G433UWu0AGAU2qYz0JCjqoqe3PYD5x 0mgqQ9Rnc85CdOCydQigSRlAJM4MCqLzf58ne1jC/C/0IM9/ow9vugCwiS+kZ/QL /xPuxUDDTa1I7mhQpj1poIm+cDzDdAqI -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org