$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: F75GSrPRek+6GI80EKeTMEt1/cQRjsGr//fa9Liu438= Subject key identifier: 48:90:EC:2F:4B:99:6A:62:47:78:D4:42:61:D1:0C:8F:CC:74:40:9B Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0DAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0D9F Signing time: Fri 22 Nov 2024 17:52:15 +0000 Manifest this update: Fri 22 Nov 2024 17:52:14 +0000 Manifest next update: Fri 29 Nov 2024 17:52:14 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: 9ATFBSQOBB9SbDpbVVYLTjYmF8+BRzsfgKsqhzalbHQ=) 2: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: tRUYfW/mxJFIRHVM9QsIKc4UoKBg/TdEbDm54bKQfQg=) 3: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: frbKmKZ/HkPfIsExphPK4/29KT8ut0jhVn7FWlBmQ8E=) 4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: agk9fTE0Dhy5dYc90EBQeapRa6cEZ8A1rQ5/CvNJ7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Nov 22 17:52:14 2024 GMT Not After : Nov 29 17:52:14 2024 GMT Subject: CN=6740c4cf-b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c0:02:f1:0c:bd:05:78:c8:85:74:5c:aa:8a: 7c:91:35:cd:b4:4f:f1:a8:a2:8e:de:ac:52:01:5a: e1:fb:fc:3d:17:34:b4:19:fd:f1:db:4d:92:99:f9: ec:c9:d6:13:38:eb:91:28:39:cb:1f:ed:de:85:23: e9:a1:d4:12:04:de:d4:36:ff:52:5e:cf:68:4c:42: 66:97:a4:f2:74:a5:d4:e6:48:3d:aa:b4:86:aa:fd: 64:53:aa:2b:61:0c:f9:24:6a:be:43:c2:bc:a3:bd: 42:90:c1:8e:c9:00:d4:f8:b8:c9:3a:96:11:36:8c: 4b:bd:58:d1:fe:b2:c0:dd:22:38:cf:fb:e1:47:c7: 99:80:5e:56:79:85:0d:59:27:f6:dd:11:0b:30:49: 3b:a9:3f:b0:05:85:ca:bc:aa:2a:af:66:c1:91:45: c5:72:62:1c:f1:18:23:d8:e6:5e:13:0c:a7:0a:c8: 30:0f:0c:db:a3:97:ff:c2:bf:28:5e:7f:b7:4c:f6: aa:fd:ba:3d:62:24:8e:fe:0a:8d:4c:50:1a:33:68: f4:ee:ba:5e:33:9b:1a:1c:ca:c9:1f:85:b8:54:40: c9:38:7f:ee:45:f0:24:f7:1e:fd:a8:fa:74:9f:bc: ca:02:0f:53:44:09:a0:34:07:e5:91:c5:c2:f7:40: 5b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:90:EC:2F:4B:99:6A:62:47:78:D4:42:61:D1:0C:8F:CC:74:40:9B X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:5c:ca:a1:e3:86:ad:84:b0:fa:a2:7b:b9:37:b8:41:1a:71: e8:ab:db:00:05:84:1c:6a:dd:65:fd:b7:d2:bc:8e:39:53:ae: df:70:a0:07:1f:6e:95:ac:1b:dd:be:f6:9f:e5:e4:d1:51:11: 00:0e:cf:60:61:b4:4a:d6:37:b9:e3:69:da:81:70:cb:d6:3d: 4d:82:19:60:de:5f:36:b1:2b:cc:45:f1:64:59:47:4b:bd:3d: fc:2a:63:0b:b7:2a:5f:6e:90:74:ac:50:e8:a4:d6:1e:ed:e8: aa:09:56:8b:79:20:60:da:1f:2d:bc:01:18:96:b8:0e:c6:9f: f2:49:97:16:9e:8f:b8:83:89:8a:26:36:3b:3a:48:d5:4e:ba: bc:ea:a2:ee:c9:99:62:57:d6:90:3e:c1:45:9a:c6:56:01:1e: 44:71:8d:84:26:a6:c4:58:e2:75:76:f8:5b:fd:a2:db:db:d7: 59:7c:e5:1b:bc:66:c8:bb:2f:13:33:c5:2f:d6:92:f5:c3:ec: 25:43:fe:eb:e9:20:ef:53:75:e4:75:a2:a8:8f:70:85:46:71: 77:ed:29:20:35:84:c2:47:a8:b3:6a:79:96:02:f9:43:ac:69: 2d:d4:c1:a3:01:0a:14:18:ae:83:dd:97:87:71:39:2c:28:64: 88:20:c3:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjQxMTIyMTc1MjE0WhcNMjQxMTI5MTc1MjE0WjAYMRYwFAYD VQQDEw02NzQwYzRjZi1iOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38AC8Qy9BXjIhXRcqop8kTXNtE/xqKKO3qxSAVrh+/w9FzS0Gf3x202Smfns ydYTOOuRKDnLH+3ehSPpodQSBN7UNv9SXs9oTEJml6TydKXU5kg9qrSGqv1kU6or YQz5JGq+Q8K8o71CkMGOyQDU+LjJOpYRNoxLvVjR/rLA3SI4z/vhR8eZgF5WeYUN WSf23RELMEk7qT+wBYXKvKoqr2bBkUXFcmIc8Rgj2OZeEwynCsgwDwzbo5f/wr8o Xn+3TPaq/bo9YiSO/gqNTFAaM2j07rpeM5saHMrJH4W4VEDJOH/uRfAk9x79qPp0 n7zKAg9TRAmgNAflkcXC90BbgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiQ7C9L mWpiR3jUQmHRDI/MdECbMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3XMqh44athLD6onu5N7hBGnHoq9sABYQcat1l/bfSvI45U67fcKAH H26VrBvdvvaf5eTRUREADs9gYbRK1je542nagXDL1j1Nghlg3l82sSvMRfFkWUdL vT38KmMLtypfbpB0rFDopNYe7eiqCVaLeSBg2h8tvAEYlrgOxp/ySZcWno+4g4mK JjY7OkjVTrq86qLuyZliV9aQPsFFmsZWAR5EcY2EJqbEWOJ1dvhb/aLb29dZfOUb vGbIuy8TM8Uv1pL1w+wlQ/7r6SDvU3XkdaKoj3CFRnF37SkgNYTCR6izanmWAvlD rGkt1MGjAQoUGK6D3ZeHcTksKGSIIMO/ -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org