$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: CPZbTVfPaeNkVkAlE7A17+ATRjn6zi9LRc+vtOi0v5g= Subject key identifier: 5E:2B:35:0B:52:02:9A:2C:61:C7:1C:59:E9:16:63:D0:17:41:E7:3A Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: C6 Signing time: Sat 23 Nov 2024 03:54:34 +0000 Manifest this update: Sat 23 Nov 2024 03:54:33 +0000 Manifest next update: Sat 30 Nov 2024 03:54:33 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: s7PYdZ39ryKDi/nq62Rgs7ALH98gtLEBvFXaphmYzjY=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: D3pmccxd7HAcoRpNwl+DNJm+TOWT+mbBNl5xHiUaFnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Nov 23 03:54:33 2024 GMT Not After : Nov 30 03:54:33 2024 GMT Subject: CN=674151f9-3184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:0f:9a:78:4b:26:7d:28:8f:e7:36:d1:2b: 38:48:1b:42:ae:1d:a1:b3:09:8e:ca:b5:0e:4e:aa: cb:73:ac:fb:65:a9:f7:77:08:82:23:1a:74:77:24: ee:b9:70:fb:f7:c3:49:75:2e:40:c4:51:07:92:a8: d2:99:9b:29:8f:46:f8:a5:33:9c:4a:8b:29:53:c6: 5c:6d:ec:fb:71:a7:6d:47:de:d5:87:58:88:f8:c8: 04:15:60:f5:a4:02:63:57:7c:a8:c3:10:43:aa:71: db:19:f3:1f:cf:a9:82:08:95:a6:d9:5e:c8:f5:27: 65:c2:6e:54:49:8a:07:84:14:ec:be:7d:9e:c7:2f: 9c:aa:b4:87:fe:fb:df:59:bd:60:c4:e1:1b:1f:9e: 22:93:d3:14:be:aa:53:17:38:4a:72:93:26:8c:40: c3:49:b6:26:9b:0b:4f:f9:8d:8e:8c:ff:a1:44:bb: 20:33:1c:e7:4e:17:75:26:9a:86:83:87:40:69:be: d8:06:ca:a1:f5:6e:4d:1a:26:95:82:82:9a:ff:eb: 10:98:0b:28:d0:bc:d5:d0:7c:8b:53:67:03:ec:5c: 2e:32:24:17:a0:c8:95:a4:89:0a:35:0f:bf:ec:5a: 3d:de:f0:64:89:8c:9e:08:92:02:7b:d4:65:bc:8c: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2B:35:0B:52:02:9A:2C:61:C7:1C:59:E9:16:63:D0:17:41:E7:3A X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:88:8f:ab:3e:29:83:01:0e:b6:2e:ba:43:57:6f:b1:a5:b1: 7f:fe:0b:64:77:3e:63:64:ca:b8:d4:4b:4e:00:23:21:0a:63: 68:30:d1:62:58:b0:4f:1f:96:98:9d:e5:bd:18:47:83:92:6d: 51:44:68:5d:ac:f8:1a:07:d4:5b:11:df:b4:1f:c7:6a:f1:25: cf:21:1b:3d:55:f6:fc:8d:11:42:3c:37:44:1c:41:10:31:8c: fe:26:de:bf:b2:d7:82:72:f4:a7:56:0d:c6:f1:a0:e1:1a:fc: c4:fc:c9:c6:aa:13:73:f9:b8:5b:2b:c6:5a:b4:19:fd:11:97: 94:f3:09:0e:80:e2:0a:5e:6d:1f:23:47:4c:5b:d6:37:b2:2b: 88:51:cb:a3:d3:de:90:4d:6c:a7:e8:96:f4:b7:22:22:40:b5: 42:44:28:20:fb:27:6f:ef:f7:51:b9:2a:1d:80:2d:f5:34:84: d6:47:72:5c:11:ca:ef:6f:83:5f:57:ca:bb:3c:54:c3:a1:78: fe:46:c8:1a:3c:8b:e6:d9:35:ab:b5:78:e4:c4:e6:9d:b4:03: b2:9c:60:df:2a:f8:22:92:b6:3b:1f:0e:c6:78:cf:8e:e6:d6: 94:85:3d:e7:45:47:84:88:7a:6d:de:4e:9e:87:70:7e:0e:06: f3:fd:f9:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjQxMTIzMDM1NDMzWhcNMjQxMTMwMDM1NDMzWjAYMRYwFAYD VQQDEw02NzQxNTFmOS0zMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o4PmnhLJn0oj+c20Ss4SBtCrh2hswmOyrUOTqrLc6z7Zan3dwiCIxp0dyTu uXD798NJdS5AxFEHkqjSmZspj0b4pTOcSospU8Zcbez7cadtR97Vh1iI+MgEFWD1 pAJjV3yowxBDqnHbGfMfz6mCCJWm2V7I9Sdlwm5USYoHhBTsvn2exy+cqrSH/vvf Wb1gxOEbH54ik9MUvqpTFzhKcpMmjEDDSbYmmwtP+Y2OjP+hRLsgMxznThd1JpqG g4dAab7YBsqh9W5NGiaVgoKa/+sQmAso0LzV0HyLU2cD7FwuMiQXoMiVpIkKNQ+/ 7Fo93vBkiYyeCJICe9RlvIweyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4rNQtS AposYcccWekWY9AXQec6MB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJV TTJMdDl5WmZVMzRzXzUtQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHiI+rPimDAQ62LrpDV2+xpbF//gtkdz5jZMq41EtOACMhCmNoMNFi WLBPH5aYneW9GEeDkm1RRGhdrPgaB9RbEd+0H8dq8SXPIRs9Vfb8jRFCPDdEHEEQ MYz+Jt6/steCcvSnVg3G8aDhGvzE/MnGqhNz+bhbK8ZatBn9EZeU8wkOgOIKXm0f I0dMW9Y3siuIUcuj096QTWyn6Jb0tyIiQLVCRCgg+ydv7/dRuSodgC31NITWR3Jc Ecrvb4NfV8q7PFTDoXj+RsgaPIvm2TWrtXjkxOadtAOynGDfKvgikrY7Hw7GeM+O 5taUhT3nRUeEiHpt3k6eh3B+Dgbz/fkS -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org