$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: a3a8FHoNRHPWo2bnq6HCKu0Qvfx52ANqHn9Fkc+OvN4= Subject key identifier: 6C:CD:2A:E0:24:A3:A4:6C:5A:65:6E:BA:C0:9E:1D:1C:70:32:D0:55 Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0A63 Signing time: Fri 22 Nov 2024 19:27:54 +0000 Manifest this update: Fri 22 Nov 2024 19:27:53 +0000 Manifest next update: Fri 29 Nov 2024 19:27:53 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: vOx4Vs/yWfkMF4YCqlAC/8PiyI3VgGG0BtDHdKSUyaQ=) 2: 64460F68F17B11EC806AC312C4F9AE02.roa (hash: Cg+ozZFKJS0FjsmqsA75/MWl3j+ogYPR/cxj43bck4Y=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: IOzHtTbWHhgsZHthrmnKo8KE4uFqwhbjTMYbOTQH+38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Nov 22 19:27:53 2024 GMT Not After : Nov 29 19:27:53 2024 GMT Subject: CN=6740db3a-5500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:e9:ec:33:fc:3c:2c:b7:89:ee:14:a0:4e: b4:02:ca:28:91:c2:ea:a0:e2:17:bc:9f:de:65:4a: c5:b2:7d:6b:35:c7:1b:0c:7a:bf:2f:38:cf:7e:1f: 1f:67:15:f5:48:2b:e2:3e:96:c5:32:2c:ce:41:dd: 4f:8e:c4:23:1e:a6:a0:d9:ff:a7:db:c3:97:2f:84: 38:a2:36:ad:9c:37:85:0a:05:6b:cb:6c:b1:c7:f9: a7:d8:29:94:8d:16:b4:ea:d2:71:7f:30:19:13:b2: 51:fd:d8:bd:f4:55:f8:35:92:ac:6f:05:46:f6:e4: 0a:3c:9d:e0:f1:09:79:90:cb:71:85:28:ea:0c:98: fa:d2:28:22:42:d4:eb:63:83:e6:a4:cd:2b:4a:36: 40:10:39:d2:b2:b8:3b:6f:9b:2d:e4:c8:bd:dd:f3: 59:cc:3f:09:88:f8:e1:a3:35:3d:33:09:18:b7:5a: 3d:c5:30:28:ea:89:e0:5e:2c:e0:33:92:9c:7d:c2: 7e:8a:a4:ab:9e:7f:38:f9:57:18:f8:d3:84:93:af: 24:bd:3a:83:6d:5a:c0:b8:b5:01:e2:50:46:a7:ed: d6:a0:b1:c8:54:20:ef:4d:5e:51:65:92:78:bb:f0: af:a7:82:49:bc:93:bc:e9:e2:fd:93:6f:8e:6b:68: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CD:2A:E0:24:A3:A4:6C:5A:65:6E:BA:C0:9E:1D:1C:70:32:D0:55 X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:6d:85:7b:d6:2a:42:ea:b4:4a:b5:d4:8b:93:83:93:3a:a6: 74:0b:fe:25:c9:0a:0f:a8:ee:99:6a:b3:a8:00:58:91:e5:5a: 47:65:44:e6:3d:dd:90:46:19:5d:c4:6b:a5:b4:90:52:84:d8: 5f:73:0c:eb:45:ce:23:69:87:1a:ac:72:f3:07:7d:e8:31:16: 86:ae:3d:ed:f9:15:bc:d2:c6:bc:83:64:0e:53:5c:a9:8a:43: 0d:e5:e0:dc:ef:b3:20:44:c9:f6:0f:94:f5:51:32:05:32:fe: 1c:88:30:7b:12:58:00:fa:e2:80:23:c7:84:30:7b:c9:50:2b: 8d:cb:71:aa:17:95:5d:5f:5f:dc:c9:fd:fb:bf:22:ec:cf:61: 01:3a:10:6d:b5:4d:00:59:7d:e2:d2:ec:24:59:ad:80:a9:af: b3:8a:b1:98:6f:ea:e9:b6:7e:63:d2:e0:d9:18:1a:d3:46:33: ee:b2:76:88:48:70:73:f5:ee:59:5b:90:5c:d9:d9:bb:9e:83: be:0b:b6:2a:5e:0d:ad:3a:fd:85:a4:8e:c4:c0:eb:ae:08:36: 12:7b:d2:bd:da:07:e2:96:c1:7a:95:7b:7d:ba:b2:95:60:49: 13:28:87:ef:f5:66:cf:8d:65:20:02:22:c3:0b:6d:f6:45:fd: 90:76:fe:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjQxMTIyMTkyNzUzWhcNMjQxMTI5MTkyNzUzWjAYMRYwFAYD VQQDEw02NzQwZGIzYS01NTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNrp7DP8PCy3ie4UoE60AsookcLqoOIXvJ/eZUrFsn1rNccbDHq/LzjPfh8f ZxX1SCviPpbFMizOQd1PjsQjHqag2f+n28OXL4Q4ojatnDeFCgVry2yxx/mn2CmU jRa06tJxfzAZE7JR/di99FX4NZKsbwVG9uQKPJ3g8Ql5kMtxhSjqDJj60igiQtTr Y4PmpM0rSjZAEDnSsrg7b5st5Mi93fNZzD8JiPjhozU9MwkYt1o9xTAo6ongXizg M5KcfcJ+iqSrnn84+VcY+NOEk68kvTqDbVrAuLUB4lBGp+3WoLHIVCDvTV5RZZJ4 u/Cvp4JJvJO86eL9k2+Oa2ij9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzNKuAk o6RsWmVuusCeHRxwMtBVMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9bYV71ipC6rRKtdSLk4OTOqZ0C/4lyQoPqO6ZarOoAFiR5VpHZUTm Pd2QRhldxGultJBShNhfcwzrRc4jaYcarHLzB33oMRaGrj3t+RW80sa8g2QOU1yp ikMN5eDc77MgRMn2D5T1UTIFMv4ciDB7ElgA+uKAI8eEMHvJUCuNy3GqF5VdX1/c yf37vyLsz2EBOhBttU0AWX3i0uwkWa2Aqa+zirGYb+rptn5j0uDZGBrTRjPusnaI SHBz9e5ZW5Bc2dm7noO+C7YqXg2tOv2FpI7EwOuuCDYSe9K92gfilsF6lXt9urKV YEkTKIfv9WbPjWUgAiLDC232Rf2Qdv4F -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org