$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: NIx4EjqZpkZKJNGhMlCYviFSHlmxACE+jl+ZrzERmXU= Subject key identifier: DF:2A:01:36:A3:32:BC:49:58:EB:A9:FC:39:DF:3C:06:52:1F:D7:16 Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: 71 Signing time: Sat 23 Nov 2024 04:49:43 +0000 Manifest this update: Sat 23 Nov 2024 04:49:43 +0000 Manifest next update: Sat 30 Nov 2024 04:49:43 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: H6/fhf7J6VbhW58hafbPFhbM+f9ZCbrqCFrkkgOlAAo=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: TkSH2eeRMqY94jagMtgrF0f2pi1KvzFN767qntLjkUk=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: AVG8UOICPIOwfxF6CejSjbDjEsfHRJtOVBJAR9mZ1BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Nov 23 04:49:43 2024 GMT Not After : Nov 30 04:49:43 2024 GMT Subject: CN=67415ee7-60e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:f5:46:50:0c:0b:d6:93:36:4b:58:c1:3a: 39:3f:d1:15:5a:8e:f1:f7:ee:2f:b9:74:b9:65:07: ba:9e:ba:c0:1b:5e:a3:50:37:c5:2d:80:ce:f1:53: d5:0f:35:6a:62:a1:a9:9f:50:78:a7:a0:57:1a:98: 22:b8:e2:c4:62:0f:bc:f4:a7:c0:a9:02:cf:68:87: 3a:9e:c9:4e:42:34:99:85:4d:ea:8c:5d:8f:e8:8f: 44:29:c0:52:b5:d7:2b:25:16:30:6d:47:12:68:33: 27:f8:0c:86:4a:86:d6:82:c1:53:e4:c9:6f:25:0e: a8:5a:b9:4b:df:e7:ee:95:af:cf:32:6d:07:af:9a: 1e:d8:49:60:38:34:a3:0a:80:38:3a:5c:ba:3e:c1: e2:d2:b1:68:f0:ac:9c:3d:43:96:59:8d:bd:ad:21: 84:6b:c1:61:1d:f1:32:99:10:0f:ec:8b:34:50:0f: e9:c0:0e:2e:d3:5b:12:93:e9:03:df:87:26:93:31: 11:80:ea:be:63:a1:f9:71:41:09:0d:64:52:21:81: 0e:c0:e0:45:fd:f4:0e:5a:11:1f:2c:47:bf:57:bc: 14:8e:86:7d:20:e9:4a:26:8f:05:40:cb:15:8a:96: 72:b7:7c:e2:4f:fc:7d:41:78:30:ac:90:3c:9a:13: e4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2A:01:36:A3:32:BC:49:58:EB:A9:FC:39:DF:3C:06:52:1F:D7:16 X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d0:ec:82:d3:03:0e:22:56:9a:dd:7e:66:47:5e:b9:f3:37: 14:81:a3:ec:47:a1:ca:ee:34:37:99:99:47:2d:51:65:d8:a0: 5d:f3:8f:1b:9e:9d:e6:fd:6f:17:9d:bb:8d:99:e1:0d:13:64: 73:dd:29:37:90:eb:1f:d4:dc:21:ce:69:4b:7a:2a:79:6e:5b: b6:0f:67:75:39:f2:aa:58:87:29:2e:6b:3c:c0:9e:9a:d5:ee: ab:32:3e:d5:2a:e1:a0:85:a6:23:7e:21:b3:23:da:30:b2:99: 00:07:17:75:e5:29:6e:84:90:bb:81:5f:8f:b2:bb:6c:f2:3e: 91:69:7d:99:e7:8f:6f:d7:aa:41:cc:0c:3d:a1:31:4c:d2:a4: e5:95:96:8f:93:36:5c:b8:e2:a5:d6:0e:39:ed:c2:e7:b5:8b: 96:58:13:0b:21:48:cd:ca:4c:d7:8e:28:e4:80:ac:2e:b4:d3: 48:65:93:b3:3c:be:d0:a2:b4:10:de:d8:66:0e:ab:f8:0c:5f: 5a:a8:b8:31:b6:51:0b:4d:29:2f:c2:19:28:97:cf:60:bf:4d: 62:be:12:98:92:15:cd:cc:d4:66:b9:b6:1a:d6:61:2e:91:a6: 17:43:f9:62:d3:8f:c3:d8:e6:06:7d:60:5b:57:ee:ed:78:ff: 6b:23:39:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3NTExMC8GA1UEBRMoRUM1RUYzMzU0RTRDRDUzNEFCODYyNUI5OUI3MzEyRDZG NEU0OEIxNTAeFw0yNDExMjMwNDQ5NDNaFw0yNDExMzAwNDQ5NDNaMBgxFjAUBgNV BAMTDTY3NDE1ZWU3LTYwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+YvVGUAwL1pM2S1jBOjk/0RVajvH37i+5dLllB7qeusAbXqNQN8UtgM7xU9UP NWpioamfUHinoFcamCK44sRiD7z0p8CpAs9ohzqeyU5CNJmFTeqMXY/oj0QpwFK1 1yslFjBtRxJoMyf4DIZKhtaCwVPkyW8lDqhauUvf5+6Vr88ybQevmh7YSWA4NKMK gDg6XLo+weLSsWjwrJw9Q5ZZjb2tIYRrwWEd8TKZEA/sizRQD+nADi7TWxKT6QPf hyaTMRGA6r5joflxQQkNZFIhgQ7A4EX99A5aER8sR79XvBSOhn0g6UomjwVAyxWK lnK3fOJP/H1BeDCskDyaE+T5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3yoBNqMy vElY66n8Od88BlIf1xYwHwYDVR0jBBgwFoAU7F7zNU5M1TSrhiW5m3MS1vTkixUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTc1LzA0NjBBQTE4RkJG QjExRUVBMUVFQUYxRkM0RjlBRTAyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0Y3ek5VNU0xVFNyaGlXNW0zTVMxdlRraXhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG MTc1LzA0NjBBQTE4RkJGQjExRUVBMUVFQUYxRkM0RjlBRTAyLzdGN3pOVTVNMVRT cmhpVzVtM01TMXZUa2l4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvQ7ILTAw4iVprdfmZHXrnzNxSBo+xHocruNDeZmUctUWXYoF3zjxue neb9bxedu42Z4Q0TZHPdKTeQ6x/U3CHOaUt6KnluW7YPZ3U58qpYhykuazzAnprV 7qsyPtUq4aCFpiN+IbMj2jCymQAHF3XlKW6EkLuBX4+yu2zyPpFpfZnnj2/XqkHM DD2hMUzSpOWVlo+TNly44qXWDjntwue1i5ZYEwshSM3KTNeOKOSArC6000hlk7M8 vtCitBDe2GYOq/gMX1qouDG2UQtNKS/CGSiXz2C/TWK+EpiSFc3M1Ga5thrWYS6R phdD+WLTj8PY5gZ9YFtX7u14/2sjOfQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org