$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: rW7UtCpvggk++0EJsuh7GGzZtIsEye4JhYe32T9uOs4= Subject key identifier: E5:3B:D1:4C:AF:26:34:06:E7:D6:A3:82:6B:7F:C6:A9:86:FF:FF:A0 Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: 91 Signing time: Thu 21 Nov 2024 04:35:28 +0000 Manifest this update: Thu 21 Nov 2024 04:35:28 +0000 Manifest next update: Thu 28 Nov 2024 04:35:28 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: lmgumOlUfgicufBaPMlrAjWyoc+i5PT7pfT0aZ026vs=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: Kic8h5EKd6f6RJkj1KvOZp4O1CzZUY/VSl4mLsZ7Pfc=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: pDNT90FCM+cZ/wTmkGN2qw6fYi9CK445g/weGQTkxo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Nov 21 04:35:28 2024 GMT Not After : Nov 28 04:35:28 2024 GMT Subject: CN=673eb890-a2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:ec:e9:1d:cb:55:f6:a0:95:f6:63:7a:2b: c3:00:ce:05:ea:95:40:83:b5:43:f2:19:a7:a2:06: dd:6d:c7:f6:e6:a4:e7:15:89:35:ae:98:48:f6:66: a8:81:3e:07:d1:a9:5b:3f:dc:d2:8a:15:6d:64:89: de:1e:84:dc:31:14:0c:4a:a9:74:d8:66:41:35:9b: 3a:b0:d3:af:62:73:20:88:17:30:e4:38:61:67:cc: 90:13:f6:8c:8f:8e:14:9d:dd:34:44:b8:84:5f:ab: 3e:95:a0:92:45:d1:15:24:2c:f7:9c:ab:97:4a:51: a2:68:19:43:2d:e7:2f:77:df:d7:2e:41:ce:ef:ff: 28:2c:e6:c4:4f:b9:6a:93:b6:fb:c0:ca:44:02:1a: e4:de:ba:6f:3d:6f:de:0f:03:25:b9:6e:7b:c7:e5: 46:d1:e5:c0:4f:b7:f1:fd:ac:3b:cf:d6:d2:dd:05: fd:1d:89:a5:58:f9:2f:06:dd:5b:28:0c:a4:8f:e6: ab:a5:61:f9:74:6a:e4:c7:c9:84:d2:9b:68:0b:0b: 48:e2:22:b6:a0:12:2d:85:52:bf:8c:09:34:87:8d: 8a:a8:89:75:11:a6:c2:07:57:b8:ff:37:fb:2b:ce: d5:a0:fc:9d:69:4f:c0:d5:da:7c:57:11:15:18:c5: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3B:D1:4C:AF:26:34:06:E7:D6:A3:82:6B:7F:C6:A9:86:FF:FF:A0 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:8f:c2:45:b2:da:2b:f0:d8:c3:28:0c:5e:38:e4:4e:f2:b9: 16:0b:e1:21:3e:2b:6c:35:74:d1:7f:64:ec:9c:92:30:ef:5c: 48:11:8f:22:84:96:12:e0:cf:0f:b0:44:3f:b4:2c:e4:10:1a: 70:66:d5:89:3a:4b:df:37:73:12:61:4e:98:3f:55:f9:2b:6b: 56:a2:3d:d0:49:b3:78:40:73:aa:56:da:67:c4:0d:a5:80:c1: 29:09:e2:0b:99:a1:f8:e6:a2:29:13:3e:07:0c:9c:ce:c7:a4: 8e:98:90:69:35:fa:0b:88:46:74:08:39:7e:94:4e:6c:bb:8e: cb:6f:4a:32:2e:48:a6:47:a0:41:ee:10:16:9b:4d:cb:40:1e: 46:d2:40:22:56:d7:6b:ee:3d:24:19:46:e2:15:39:96:42:1c: 6d:cb:ba:26:c6:2b:29:77:61:52:48:c1:fe:56:b4:7b:35:d4: 39:ad:84:f3:5f:08:93:e3:e8:39:3c:fd:d3:c6:f5:ae:35:53: 6d:be:be:0b:e0:b8:3d:48:ee:d9:45:8c:7e:c5:7d:45:dc:12: 56:8f:e1:84:bf:d0:33:9b:f0:26:f5:bf:95:15:ee:fc:e6:cb: ed:3e:e9:e4:3d:88:4a:43:08:e9:81:d0:83:5a:66:51:73:e4: ec:a5:9f:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjQxMTIxMDQzNTI4WhcNMjQxMTI4MDQzNTI4WjAYMRYwFAYD VQQDEw02NzNlYjg5MC1hMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR3s6R3LVfaglfZjeivDAM4F6pVAg7VD8hmnogbdbcf25qTnFYk1rphI9mao gT4H0albP9zSihVtZIneHoTcMRQMSql02GZBNZs6sNOvYnMgiBcw5DhhZ8yQE/aM j44Und00RLiEX6s+laCSRdEVJCz3nKuXSlGiaBlDLecvd9/XLkHO7/8oLObET7lq k7b7wMpEAhrk3rpvPW/eDwMluW57x+VG0eXAT7fx/aw7z9bS3QX9HYmlWPkvBt1b KAykj+arpWH5dGrkx8mE0ptoCwtI4iK2oBIthVK/jAk0h42KqIl1EabCB1e4/zf7 K87VoPydaU/A1dp8VxEVGMVNTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU70Uyv JjQG59ajgmt/xqmG//+gMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8j8JFstor8NjDKAxeOORO8rkWC+EhPitsNXTRf2TsnJIw71xIEY8i hJYS4M8PsEQ/tCzkEBpwZtWJOkvfN3MSYU6YP1X5K2tWoj3QSbN4QHOqVtpnxA2l gMEpCeILmaH45qIpEz4HDJzOx6SOmJBpNfoLiEZ0CDl+lE5su47Lb0oyLkimR6BB 7hAWm03LQB5G0kAiVtdr7j0kGUbiFTmWQhxty7omxispd2FSSMH+VrR7NdQ5rYTz XwiT4+g5PP3TxvWuNVNtvr4L4Lg9SO7ZRYx+xX1F3BJWj+GEv9Azm/Am9b+VFe78 5svtPunkPYhKQwjpgdCDWmZRc+TspZ9C -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org