$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: fP0KgC05qA6DUuTI7qMXg3ttncWKapVo+HTJmIbGPLk= Subject key identifier: 2F:72:88:D9:89:3D:EE:4A:80:A2:38:E8:CE:54:79:54:66:42:CF:F3 Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1A76 Signing time: Fri 22 Nov 2024 16:21:06 +0000 Manifest this update: Fri 22 Nov 2024 16:21:06 +0000 Manifest next update: Fri 29 Nov 2024 16:21:06 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: oqAD95lwg55qNaim+1huVmYMXM+PwOuGw4g5UbvP/ao=) 2: DC3B90E4520011ECA6088714C4F9AE02.roa (hash: K5vX3/pfInzYJQMjnl6onnxbmvYpmQCUe18iHRzsIMI=) 3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: 4zbXGA1HyqHDY7edoWPP/N+Qt3x+ZxhB3yodtRRSg98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6811 (0x1a9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Nov 22 16:21:06 2024 GMT Not After : Nov 29 16:21:06 2024 GMT Subject: CN=6740af72-2f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:cb:20:b3:3d:12:be:a5:99:92:50:e4:56: 45:17:fa:a9:59:aa:5c:3d:6b:c1:cf:82:01:de:69: ff:2c:33:c1:45:29:54:93:b3:32:93:f0:b7:88:f6: aa:4a:89:4f:7e:17:45:41:1f:e8:a9:ec:91:5c:e1: 50:4b:c1:e5:95:b9:c2:7a:c9:3b:e7:ef:82:77:2a: 6a:1c:19:58:c9:67:d1:80:78:b9:7f:e6:f0:5d:37: b8:f7:9e:fb:20:b9:08:65:3e:ec:b2:56:06:b3:23: a2:20:36:d7:41:55:19:48:d3:ea:64:09:d3:b4:42: 4d:22:d8:01:50:24:ed:7e:ac:f0:51:5c:fd:24:f2: 66:d9:10:45:e5:4c:e9:be:55:c0:d9:21:cc:c0:3e: 35:90:ab:b9:53:8c:19:60:bb:f9:e0:85:74:b5:e9: 31:14:b8:36:b9:e0:ee:9e:aa:0a:03:f1:bc:42:9e: a2:a0:d3:b4:11:5f:cc:61:ef:6a:78:a2:51:e3:df: 5f:95:4e:34:78:4e:ff:83:4a:b5:56:8f:ee:f4:c5: c9:29:94:07:36:bb:4d:a6:39:7c:5a:c0:16:a7:3a: d3:08:0f:f7:1e:1b:48:df:f5:96:bd:92:a9:eb:c3: 1f:73:29:fb:e8:88:93:c5:55:d6:a3:44:39:4c:c8: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:72:88:D9:89:3D:EE:4A:80:A2:38:E8:CE:54:79:54:66:42:CF:F3 X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4d:17:e8:12:a9:92:77:97:3c:88:b7:72:cd:10:7c:9c:f8: a3:9c:85:b2:46:a9:15:0e:ab:4c:fd:9d:c4:49:76:07:44:d4: 0a:75:fb:87:1b:e9:a3:26:9e:41:32:d0:1a:9f:93:1e:e1:aa: 39:9f:4f:cd:02:b6:bc:40:db:26:46:c2:63:d9:79:3c:5e:dc: 15:31:f1:c8:90:a5:af:1f:89:d9:fa:c0:af:28:7d:8f:6e:be: 71:5c:fb:c3:77:e0:a4:f3:53:b6:d8:69:3e:d6:66:f4:f7:b8: 85:74:47:ac:e3:37:13:fb:73:39:e3:04:fb:45:41:27:2d:50: dd:7e:31:e9:be:22:86:1f:37:c0:a1:aa:c8:07:d9:a5:0a:2d: 8e:42:67:c2:d2:32:0a:46:75:83:8a:6e:52:9f:fe:31:06:86: b6:c9:64:1f:8a:d0:c3:a8:80:37:ff:b9:e6:0a:de:3e:5a:b7: 6e:39:ff:a6:e8:12:13:93:6b:be:05:f2:13:ab:41:d7:f3:70: ac:13:f3:2f:05:bc:64:6c:5b:82:d4:a9:7e:1c:99:5e:ff:04: 7a:8c:65:e2:c0:de:81:ad:82:92:d8:fd:63:53:de:92:6d:86: 61:97:c6:30:f6:5e:5f:07:40:e1:ba:5e:80:12:68:b9:32:77: 0c:5d:de:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjQxMTIyMTYyMTA2WhcNMjQxMTI5MTYyMTA2WjAYMRYwFAYD VQQDEw02NzQwYWY3Mi0yZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaLLILM9Er6lmZJQ5FZFF/qpWapcPWvBz4IB3mn/LDPBRSlUk7Myk/C3iPaq SolPfhdFQR/oqeyRXOFQS8HllbnCesk75++CdypqHBlYyWfRgHi5f+bwXTe49577 ILkIZT7sslYGsyOiIDbXQVUZSNPqZAnTtEJNItgBUCTtfqzwUVz9JPJm2RBF5Uzp vlXA2SHMwD41kKu5U4wZYLv54IV0tekxFLg2ueDunqoKA/G8Qp6ioNO0EV/MYe9q eKJR499flU40eE7/g0q1Vo/u9MXJKZQHNrtNpjl8WsAWpzrTCA/3HhtI3/WWvZKp 68Mfcyn76IiTxVXWo0Q5TMjrkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9yiNmJ Pe5KgKI46M5UeVRmQs/zMB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxTRfoEqmSd5c8iLdyzRB8nPijnIWyRqkVDqtM/Z3ESXYHRNQKdfuH G+mjJp5BMtAan5Me4ao5n0/NAra8QNsmRsJj2Xk8XtwVMfHIkKWvH4nZ+sCvKH2P br5xXPvDd+Ck81O22Gk+1mb097iFdEes4zcT+3M54wT7RUEnLVDdfjHpviKGHzfA oarIB9mlCi2OQmfC0jIKRnWDim5Sn/4xBoa2yWQfitDDqIA3/7nmCt4+WrduOf+m 6BITk2u+BfITq0HX83CsE/MvBbxkbFuC1Kl+HJle/wR6jGXiwN6BrYKS2P1jU96S bYZhl8Yw9l5fB0Dhul6AEmi5MncMXd5E -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:21 2024 by rpki-client on console-ams.rpki-client.org