$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: Vgxv8a+zs+q5hSzbDl3FmOGBuEQduQQRxxpZ/PlM67g= Subject key identifier: FD:AA:A1:AB:85:95:71:DF:97:23:92:48:FE:73:B9:1C:BA:9F:C6:37 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 0363 Signing time: Thu 21 Nov 2024 00:29:41 +0000 Manifest this update: Thu 21 Nov 2024 00:29:40 +0000 Manifest next update: Thu 28 Nov 2024 00:29:40 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: TAF8w9KkkrkETXKCEvr3QkNuBUeeLUU9PpfaULNtFl8=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: erdVNwH0UzA72sptu4dShBZKcXvsv4fNLD5eVyRL2JU=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: 1MM8LiFKd98y99R7RjtnSTphmbUq66PI+63QYocbpck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Nov 21 00:29:40 2024 GMT Not After : Nov 28 00:29:40 2024 GMT Subject: CN=673e7ef5-6055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:b1:0e:c6:15:c3:b3:c6:f5:14:a7:1d:6c: ce:b7:51:4a:c0:94:40:a0:9d:89:ed:c0:39:53:10: 4f:94:11:5d:cd:fe:34:0b:bf:62:45:87:74:35:98: 4e:1c:95:09:5d:c8:93:f8:10:38:40:02:8a:81:1a: 7c:92:3d:a2:a8:dd:e4:f8:0a:b4:85:16:39:7f:ac: 96:ee:5a:6e:a3:63:d3:53:f1:5a:6c:d5:5d:3c:43: dd:37:ea:1e:62:7b:8b:0f:80:26:6c:46:53:8d:bb: 6a:37:4b:95:d7:af:d7:1e:00:8b:a3:5d:0e:19:11: 0b:30:ff:e1:ec:04:a8:ad:c9:4b:9a:02:94:45:b1: ed:17:ab:b3:e1:25:b2:6c:4c:98:39:c6:75:be:73: 3c:f3:cb:83:5d:8f:4a:66:47:88:93:61:22:44:71: 6f:ce:53:b4:c5:fb:ed:04:9a:9d:34:7c:41:95:e6: 43:34:b1:f9:ad:19:64:38:e5:d8:0f:96:77:b8:b8: e0:32:3a:44:48:cf:a8:e8:e0:45:28:ce:f0:68:da: 36:0e:ec:d4:62:1a:ec:f3:85:5a:d0:88:0e:a4:19: 00:a8:92:c8:21:4a:f1:9e:78:52:91:83:be:31:7d: b5:7e:d3:73:25:8e:50:57:ee:8a:80:bb:de:cd:91: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AA:A1:AB:85:95:71:DF:97:23:92:48:FE:73:B9:1C:BA:9F:C6:37 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:cb:77:48:07:90:83:63:7a:c2:08:ff:98:c6:5f:b4:80:3f: 4d:c0:46:cc:82:54:d6:54:2b:66:21:2a:3e:e7:de:27:0b:b8: ac:ec:cc:65:03:8c:1c:01:61:e7:09:a4:0e:6d:c2:a7:f7:54: 91:61:4f:36:fb:62:db:bd:c7:89:ac:36:a4:26:0f:b3:5b:d3: 3f:91:47:04:1a:76:ab:21:f6:42:89:38:00:4f:10:d5:e3:cf: a5:34:48:45:86:f7:2d:8d:32:d9:03:60:c2:07:a9:de:80:96: 95:5a:fc:67:9f:6d:37:d8:3e:4f:fe:80:14:c4:bf:5a:3e:38: 97:74:8d:99:a4:e3:ac:ed:38:96:e6:22:e5:77:fd:dd:68:36: 30:b0:9a:62:73:ae:f5:70:83:88:24:9b:69:f3:e7:4c:7e:a2: 59:d4:34:3e:fe:a0:04:e6:65:aa:4d:0a:23:3c:82:99:48:fc: 70:94:93:6d:ec:12:bb:ec:b2:4a:69:21:9f:84:5c:83:e6:18: 73:4b:57:90:59:a4:8f:f9:82:e3:80:67:b6:8c:8e:61:4d:cd: 2d:dc:c0:45:c4:ce:a6:dd:e9:08:37:08:1f:65:d3:cb:67:c3: ae:58:ed:c4:7f:e2:fd:5c:76:5e:69:4b:f9:cb:a5:cd:e3:30: 62:6e:a6:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjQxMTIxMDAyOTQwWhcNMjQxMTI4MDAyOTQwWjAYMRYwFAYD VQQDEw02NzNlN2VmNS02MDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAmxDsYVw7PG9RSnHWzOt1FKwJRAoJ2J7cA5UxBPlBFdzf40C79iRYd0NZhO HJUJXciT+BA4QAKKgRp8kj2iqN3k+Aq0hRY5f6yW7lpuo2PTU/FabNVdPEPdN+oe YnuLD4AmbEZTjbtqN0uV16/XHgCLo10OGRELMP/h7ASorclLmgKURbHtF6uz4SWy bEyYOcZ1vnM888uDXY9KZkeIk2EiRHFvzlO0xfvtBJqdNHxBleZDNLH5rRlkOOXY D5Z3uLjgMjpESM+o6OBFKM7waNo2DuzUYhrs84Va0IgOpBkAqJLIIUrxnnhSkYO+ MX21ftNzJY5QV+6KgLvezZEddwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2qoauF lXHflyOSSP5zuRy6n8Y3MB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuy3dIB5CDY3rCCP+Yxl+0gD9NwEbMglTWVCtmISo+594nC7is7Mxl A4wcAWHnCaQObcKn91SRYU82+2LbvceJrDakJg+zW9M/kUcEGnarIfZCiTgATxDV 48+lNEhFhvctjTLZA2DCB6negJaVWvxnn2032D5P/oAUxL9aPjiXdI2ZpOOs7TiW 5iLld/3daDYwsJpic671cIOIJJtp8+dMfqJZ1DQ+/qAE5mWqTQojPIKZSPxwlJNt 7BK77LJKaSGfhFyD5hhzS1eQWaSP+YLjgGe2jI5hTc0t3MBFxM6m3ekINwgfZdPL Z8OuWO3Ef+L9XHZeaUv5y6XN4zBibqY8 -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:05 2024 by rpki-client on console-ams.rpki-client.org