$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: EgGSukuYNYgAgkntDHthAEfGr9OoCbF+qxHZilrHWOk= Subject key identifier: BE:C7:FB:AD:32:BE:76:B0:17:14:F4:75:D3:E9:41:E9:D0:3E:38:BE Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 07AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 07AA Signing time: Fri 22 Nov 2024 20:45:40 +0000 Manifest this update: Fri 22 Nov 2024 20:45:40 +0000 Manifest next update: Fri 29 Nov 2024 20:45:40 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: OUwgPdU4XIhjeWzA2CSmvRA/HVMhxR4qkUbmn4LFKv0=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: OYa6pZQjPMNNTwycOThVBVCHRmNZFoJ1RzY6PDCzyqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1967 (0x7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: Nov 22 20:45:40 2024 GMT Not After : Nov 29 20:45:40 2024 GMT Subject: CN=6740ed74-2939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:d5:da:1d:9f:aa:d3:0b:cc:be:01:4a:bf: c3:53:cc:7c:f9:5f:09:2b:9c:4a:f0:b5:0b:b4:64: 3a:dd:21:21:4e:0e:48:f9:a2:4b:52:9d:f6:ac:48: cd:20:d1:8d:2a:90:fe:14:01:52:51:18:92:f3:5b: 63:2d:fc:bb:56:8f:a7:4f:7b:d8:f3:c7:99:64:b1: fd:c3:fc:e5:7c:b7:22:42:3f:85:65:e0:75:a3:b5: 6c:53:a7:b9:e4:16:5a:c6:5a:ea:7e:c3:25:cc:e8: 98:8c:b9:02:f5:c5:22:af:de:1f:42:6f:3b:5e:30: d9:99:f9:4a:8c:fe:93:28:09:49:96:7e:84:f5:f7: e6:cb:db:1b:78:5c:3b:a8:7f:42:b5:68:ba:03:55: 88:64:1c:5a:9f:21:1c:94:c4:d5:95:f7:2e:aa:74: ea:3f:0d:d4:c0:7b:6e:b2:a7:1f:79:fe:5a:82:05: 20:8b:02:5c:5b:f7:2b:3d:4d:f8:58:3a:97:3e:6e: b4:e9:74:83:07:8f:45:96:3d:0e:f5:64:4e:79:de: b8:80:b7:18:dd:1c:5f:64:e8:e1:a5:08:33:71:d4: 84:a5:5b:11:f2:24:8e:93:da:21:0d:79:ea:79:41: 7f:2c:63:59:49:41:f3:59:0d:1b:ed:5c:63:7c:c2: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C7:FB:AD:32:BE:76:B0:17:14:F4:75:D3:E9:41:E9:D0:3E:38:BE X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6f:aa:28:78:1e:05:49:77:db:5b:e8:9e:7e:8d:1f:7b:1c: f9:ec:d6:43:a3:9f:7c:f7:cc:74:d5:47:0e:6c:d1:f5:69:6d: af:8a:4f:19:19:ae:5e:de:c1:57:9d:f6:d1:32:4e:cb:5e:ce: 7a:75:b4:0c:a9:72:3d:d4:52:51:a5:e0:f3:e1:57:cc:d8:e0: 44:c9:f0:dc:eb:ff:47:3b:17:66:08:2b:2e:45:72:67:cd:3d: 9f:5f:6f:45:2a:fd:33:15:79:04:c2:0e:ff:6b:b5:94:21:6d: 6c:d6:43:51:91:c9:24:77:00:7d:f6:2f:10:2b:00:0e:71:a7: 3b:3b:d7:ac:3e:26:7d:25:91:74:aa:e8:21:70:a1:ef:20:91: c2:22:e4:12:10:63:b4:b6:b9:e0:66:2f:29:ff:a9:2d:28:e6: e7:ed:7b:a1:11:94:36:1f:d6:7b:cc:ec:bb:ad:5f:b0:42:8c: dc:85:cd:4e:3a:65:51:5d:74:97:ca:3e:1c:25:eb:8a:27:dc: 8b:c6:a6:51:f1:75:2b:3e:fd:b7:14:ae:d9:57:17:79:bb:5b: 50:9e:20:26:a5:8c:b9:14:dd:62:69:3b:d4:b8:5a:26:22:3f: e3:8e:78:d2:33:17:2e:4d:01:27:03:85:ad:0f:1c:4f:97:1a: dd:45:eb:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjQxMTIyMjA0NTQwWhcNMjQxMTI5MjA0NTQwWjAYMRYwFAYD VQQDEw02NzQwZWQ3NC0yOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA137V2h2fqtMLzL4BSr/DU8x8+V8JK5xK8LULtGQ63SEhTg5I+aJLUp32rEjN INGNKpD+FAFSURiS81tjLfy7Vo+nT3vY88eZZLH9w/zlfLciQj+FZeB1o7VsU6e5 5BZaxlrqfsMlzOiYjLkC9cUir94fQm87XjDZmflKjP6TKAlJln6E9ffmy9sbeFw7 qH9CtWi6A1WIZBxanyEclMTVlfcuqnTqPw3UwHtusqcfef5aggUgiwJcW/crPU34 WDqXPm606XSDB49Flj0O9WROed64gLcY3RxfZOjhpQgzcdSEpVsR8iSOk9ohDXnq eUF/LGNZSUHzWQ0b7VxjfMJeQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7H+60y vnawFxT0ddPpQenQPji+MB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAb6ooeB4FSXfbW+iefo0fexz57NZDo59898x01UcObNH1aW2vik8Z Ga5e3sFXnfbRMk7LXs56dbQMqXI91FJRpeDz4VfM2OBEyfDc6/9HOxdmCCsuRXJn zT2fX29FKv0zFXkEwg7/a7WUIW1s1kNRkckkdwB99i8QKwAOcac7O9esPiZ9JZF0 qughcKHvIJHCIuQSEGO0trngZi8p/6ktKObn7XuhEZQ2H9Z7zOy7rV+wQozchc1O OmVRXXSXyj4cJeuKJ9yLxqZR8XUrPv23FK7ZVxd5u1tQniAmpYy5FN1iaTvUuFom Ij/jjnjSMxcuTQEnA4WtDxxPlxrdResC -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org