$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json) Hash identifier: vFM64rYUkExF+c1FiK1kkoJs8ms9Wd/KdnPkCVJToHE= Subject key identifier: A8:C2:F1:14:F5:0F:A3:2A:DB:4C:33:51:8C:B9:5A:92:AF:EF:06:D7 Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft Manifest number: 93 Signing time: Sun 24 Nov 2024 23:57:13 +0000 Manifest this update: Sun 24 Nov 2024 23:57:12 +0000 Manifest next update: Sun 01 Dec 2024 23:57:12 +0000 Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: dAhfjoI7vdy7KnrD6OpbNG/JXsk1UZGTA3Hoz8Sdfac=) 2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: vgycUMJflkOKjlkv8zbw+R+KI7mdfPpws5+U5fcO9GA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Nov 24 23:57:12 2024 GMT Not After : Dec 1 23:57:12 2024 GMT Subject: CN=6743bd58-45be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:1b:eb:df:a7:42:4d:70:36:94:b8:c3:3e: 68:c3:fa:fe:fc:7b:51:8d:2f:9d:49:ac:3e:c7:33: ea:1b:be:4f:a9:5f:63:01:f4:bd:c6:4a:43:e3:8e: 1d:be:f4:36:9b:93:8c:50:7c:b5:af:53:08:19:33: cb:b7:f4:34:f3:d7:55:49:a7:36:76:1d:31:32:3a: ce:3f:1b:f4:bb:c4:65:06:29:a7:e5:cd:af:54:27: 00:23:df:13:07:3b:82:16:50:3d:dc:2d:92:f5:96: 7e:b3:9b:32:8f:78:dd:08:63:d8:9d:93:bd:5d:43: ce:38:d0:19:51:53:f8:35:ed:e6:af:6d:ce:f7:6a: 25:82:a2:c1:23:1d:81:84:bd:8e:3c:78:28:19:99: d5:59:96:79:b7:b2:af:4e:21:da:4f:c6:9c:55:db: 28:21:94:4b:d5:8b:a4:38:e8:13:75:14:36:57:3b: 61:91:6f:0d:28:7e:fb:4c:e1:89:bb:3e:65:74:79: f6:85:9c:ff:05:4a:8a:d6:b2:74:23:97:2a:da:cb: c0:bb:3c:e0:d0:fe:71:38:63:65:d8:3e:f4:25:98: 0a:ae:b4:df:15:08:ee:d9:14:38:7d:0a:48:57:a9: d8:f8:da:08:7a:78:56:33:38:38:d1:99:3a:32:5e: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C2:F1:14:F5:0F:A3:2A:DB:4C:33:51:8C:B9:5A:92:AF:EF:06:D7 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b7:62:f2:2d:71:b8:9c:e7:8d:e5:4d:64:3d:20:a2:8e:92: 32:c6:91:c0:a4:2c:fd:d5:91:26:74:53:00:d7:74:d9:f1:83: 22:02:cc:63:25:e3:cd:f7:8e:0f:26:a6:f2:3c:99:0f:8c:9a: da:38:98:3b:f7:3a:55:ce:b1:90:90:64:bf:48:4c:bb:92:e1: 68:af:6c:49:bb:e6:ab:e0:29:b6:7e:8e:06:8a:25:e1:3e:bd: c6:89:3e:24:1f:ca:49:e0:9a:a2:e9:54:85:14:b4:34:e9:17: d7:0c:55:10:c9:bd:6c:15:22:ca:4c:05:ea:ca:f4:71:d5:13: 3d:a9:65:bf:d7:bd:6a:81:68:c8:6b:78:91:f8:4e:f7:99:cf: 50:f1:f8:31:d4:da:c6:b7:6f:2d:07:f0:99:9d:af:b9:d3:8b: df:00:9a:eb:41:ec:19:88:7f:db:5b:dc:5e:05:fa:33:b5:01: 32:df:0d:a6:35:ba:12:9f:ad:9e:75:88:c8:7c:43:13:c5:0c: 53:c3:60:7f:d5:39:91:9d:5a:06:8a:21:56:16:90:ec:2e:28: a8:b5:2e:22:7f:d9:81:80:86:35:80:10:06:63:f1:30:f2:d4: 25:26:cc:7b:85:78:ee:91:74:0d:be:3c:84:f5:fc:a5:5a:ad: 24:3b:99:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjQxMTI0MjM1NzEyWhcNMjQxMjAxMjM1NzEyWjAYMRYwFAYD VQQDEw02NzQzYmQ1OC00NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKIb69+nQk1wNpS4wz5ow/r+/HtRjS+dSaw+xzPqG75PqV9jAfS9xkpD444d vvQ2m5OMUHy1r1MIGTPLt/Q089dVSac2dh0xMjrOPxv0u8RlBimn5c2vVCcAI98T BzuCFlA93C2S9ZZ+s5syj3jdCGPYnZO9XUPOONAZUVP4Ne3mr23O92olgqLBIx2B hL2OPHgoGZnVWZZ5t7KvTiHaT8acVdsoIZRL1YukOOgTdRQ2VzthkW8NKH77TOGJ uz5ldHn2hZz/BUqK1rJ0I5cq2svAuzzg0P5xOGNl2D70JZgKrrTfFQju2RQ4fQpI V6nY+NoIenhWMzg40Zk6Ml4RcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjC8RT1 D6Mq20wzUYy5WpKv7wbXMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRM cnZVa1ZxczdNSnQwY0VEZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUt2LyLXG4nOeN5U1kPSCijpIyxpHApCz91ZEmdFMA13TZ8YMiAsxj JePN944PJqbyPJkPjJraOJg79zpVzrGQkGS/SEy7kuFor2xJu+ar4Cm2fo4GiiXh Pr3GiT4kH8pJ4Jqi6VSFFLQ06RfXDFUQyb1sFSLKTAXqyvRx1RM9qWW/171qgWjI a3iR+E73mc9Q8fgx1NrGt28tB/CZna+504vfAJrrQewZiH/bW9xeBfoztQEy3w2m NboSn62edYjIfEMTxQxTw2B/1TmRnVoGiiFWFpDsLiiotS4if9mBgIY1gBAGY/Ew 8tQlJsx7hXjukXQNvjyE9fylWq0kO5mK -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:32 2024 by rpki-client on console-ams.rpki-client.org