$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: mlj9iZ8JyzrRblRBsi24WIIvwg8v3X1/lkgDHg7VQG8= Subject key identifier: F9:4D:B4:37:49:BE:76:7F:14:59:54:05:D5:5D:62:62:BF:ED:2D:8B Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 345D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 3440 Signing time: Fri 22 Nov 2024 15:17:50 +0000 Manifest this update: Fri 22 Nov 2024 15:17:50 +0000 Manifest next update: Fri 29 Nov 2024 15:17:50 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: TKUjFadsGCFq14mJKlf5ysnd5/Pje3PeN37Ib5/6SQY=) 2: CCE7DB04903A11EF8FC08682C4F9AE02.roa (hash: jNBZnBA47IurwSnjIh+W1/69XSGKkL0BLnpFeCPuxnE=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13405 (0x345d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Nov 22 15:17:50 2024 GMT Not After : Nov 29 15:17:50 2024 GMT Subject: CN=6740a09e-6d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:74:1b:82:96:61:b2:34:f3:b0:22:00:cb: ec:93:4a:8b:c2:18:3b:cb:ed:ff:93:b6:4d:ec:c6: 26:33:86:88:e8:7b:df:16:f9:8e:4b:e5:7c:bf:be: 31:1c:72:04:18:d1:a1:c6:e3:29:5e:c6:d4:3b:54: 78:5a:af:0a:19:6b:e4:cd:82:32:2a:bb:f1:9a:d0: 3e:9e:25:02:89:d1:37:b9:e5:de:a3:9f:8c:ea:00: 23:0e:fc:bb:89:66:5c:84:ad:31:76:c7:fd:ec:61: ff:40:a8:8d:79:c9:3d:9f:2a:98:04:36:e6:23:a1: ad:03:f5:6b:7e:69:e8:de:b9:9a:60:31:d2:cf:35: 97:ae:9b:54:a9:41:ee:c5:9b:26:c5:9c:dc:a2:b9: 15:d1:07:93:0d:00:b8:94:a3:37:c4:7a:bf:5f:c6: dd:9b:ca:eb:04:44:a0:3e:6d:30:82:d0:9c:ff:20: 57:d0:b4:53:29:8a:48:42:dd:18:62:65:37:43:1a: 62:d3:c3:32:74:99:6e:74:30:7b:0f:15:30:ee:58: e6:8d:7f:0f:5e:fe:80:4a:b0:f9:b7:20:59:87:30: 0a:12:e4:7c:88:f8:46:33:e2:1f:05:46:8b:91:ad: 31:59:0a:27:61:5e:26:08:77:97:29:09:10:5d:fb: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4D:B4:37:49:BE:76:7F:14:59:54:05:D5:5D:62:62:BF:ED:2D:8B X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:19:3a:c8:e9:68:ee:8e:04:b7:b7:54:5c:70:e7:92:0e:91: d9:d7:81:63:6b:81:19:0e:7a:9d:12:d0:fd:cb:45:2b:14:b9: fa:ed:5a:04:64:f2:3c:b9:2c:c4:bb:ac:2b:29:3b:9e:84:ca: 90:f9:26:74:d6:b6:3c:71:81:d6:44:fa:60:2d:cc:20:43:48: ea:7d:9a:a6:85:f9:a9:d2:3f:6f:c4:06:10:7f:7b:46:8b:33: 4c:c1:12:de:b6:0b:c3:54:0c:0d:cd:dd:b7:c1:bc:43:1c:32: 98:94:86:02:39:e0:e4:d7:91:8c:bc:3b:d5:7f:22:2f:af:d6: ff:c4:c1:6e:63:cf:3e:17:77:f1:54:41:bc:d0:f4:59:cc:89: f1:58:4a:87:c0:d3:e3:6b:c7:ed:13:6b:a6:ec:9a:7b:c4:b5: 99:8a:65:e3:f1:01:99:bc:61:81:b2:c1:63:41:e1:db:2f:4a: 37:09:bc:de:46:88:41:f7:9d:7a:fc:9f:cb:89:0f:7e:7e:f4: e6:07:8f:83:22:40:d0:10:44:73:69:f2:cc:64:7b:ea:b0:f4: db:2d:bc:31:91:ac:20:c8:73:e7:74:20:d2:81:6b:a3:e2:5d: 1f:a8:5d:ac:0a:2f:5d:c3:3a:cf:5e:4c:64:59:f9:45:28:de: 13:f9:d4:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjQxMTIyMTUxNzUwWhcNMjQxMTI5MTUxNzUwWjAYMRYwFAYD VQQDEw02NzQwYTA5ZS02ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrd0G4KWYbI087AiAMvsk0qLwhg7y+3/k7ZN7MYmM4aI6HvfFvmOS+V8v74x HHIEGNGhxuMpXsbUO1R4Wq8KGWvkzYIyKrvxmtA+niUCidE3ueXeo5+M6gAjDvy7 iWZchK0xdsf97GH/QKiNeck9nyqYBDbmI6GtA/Vrfmno3rmaYDHSzzWXrptUqUHu xZsmxZzcorkV0QeTDQC4lKM3xHq/X8bdm8rrBESgPm0wgtCc/yBX0LRTKYpIQt0Y YmU3Qxpi08MydJludDB7DxUw7ljmjX8PXv6ASrD5tyBZhzAKEuR8iPhGM+IfBUaL ka0xWQonYV4mCHeXKQkQXfuIPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlNtDdJ vnZ/FFlUBdVdYmK/7S2LMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRGTrI6WjujgS3t1RccOeSDpHZ14Fja4EZDnqdEtD9y0UrFLn67VoE ZPI8uSzEu6wrKTuehMqQ+SZ01rY8cYHWRPpgLcwgQ0jqfZqmhfmp0j9vxAYQf3tG izNMwRLetgvDVAwNzd23wbxDHDKYlIYCOeDk15GMvDvVfyIvr9b/xMFuY88+F3fx VEG80PRZzInxWEqHwNPja8ftE2um7Jp7xLWZimXj8QGZvGGBssFjQeHbL0o3Cbze RohB9516/J/LiQ9+fvTmB4+DIkDQEERzafLMZHvqsPTbLbwxkawgyHPndCDSgWuj 4l0fqF2sCi9dwzrPXkxkWflFKN4T+dQN -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org