$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: ypjH7qHxLAFO2Tjry/lt0aeWPlQIw8ocloLbY6Nzf2o= Subject key identifier: 62:49:47:5C:3D:A1:A5:49:31:58:45:A7:ED:EB:DB:0D:94:60:CF:B2 Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2CBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2CA4 Signing time: Fri 22 Nov 2024 15:33:15 +0000 Manifest this update: Fri 22 Nov 2024 15:33:14 +0000 Manifest next update: Fri 29 Nov 2024 15:33:14 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: 9A48TNdCe/7aJCF6/6dStQKx5PXNajC0uT+O1sRTrsc=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: yiBFuvz0wowXTsPwdEFLgJjJDBfixilogFNMg4CpnLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11455 (0x2cbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Nov 22 15:33:14 2024 GMT Not After : Nov 29 15:33:14 2024 GMT Subject: CN=6740a43b-4c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:27:58:35:87:b7:46:6e:cb:a1:37:ff:a5: 1a:82:f2:36:5b:4d:11:6a:ec:ea:ff:92:31:6e:0a: c2:e9:71:e3:2a:df:05:b1:3e:3d:4d:61:24:5c:c9: 97:a1:2c:65:a7:cc:ca:61:08:a5:15:cc:6d:dc:d6: 3d:e8:00:b7:f1:25:49:9a:02:cf:84:f1:4f:1a:68: f5:9c:e4:dc:bc:77:71:e2:27:ed:5d:25:3f:61:65: 6d:51:70:db:64:c5:61:f0:04:eb:e1:42:9e:95:c1: 6d:a8:9a:22:85:1a:c2:60:c5:b2:44:1b:11:00:e8: ba:b7:6e:dd:95:91:50:4e:4c:1c:79:24:a0:b5:7f: b5:38:16:f9:06:68:9e:83:51:a0:fa:17:51:94:01: 0f:16:ef:ea:e2:1d:f1:10:f6:58:9e:30:3e:7d:9d: bb:9d:1b:d8:f3:f4:0b:a9:d3:6e:6a:bc:8c:4d:9c: 32:e0:e3:37:d9:39:d0:ea:2b:d4:a5:a6:a0:83:9d: e5:ed:8c:86:95:72:f7:dd:4a:5b:e0:5f:44:11:b4: 7e:74:80:66:d2:e3:36:0d:01:b6:51:69:d4:c1:78: b7:79:59:6a:ba:74:00:6d:68:49:ef:e0:b9:e9:66: 07:1f:1a:25:5e:6a:ea:7d:30:5c:c6:a9:99:b4:71: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:49:47:5C:3D:A1:A5:49:31:58:45:A7:ED:EB:DB:0D:94:60:CF:B2 X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:58:a0:14:83:b4:57:0a:98:c6:49:cc:09:9e:fd:3b:cd:88: a0:06:1f:f7:dc:62:ba:c3:63:a8:e0:91:31:dd:f7:8c:5f:76: 34:87:7e:7c:99:70:1d:66:71:93:1c:5a:b3:0e:0f:11:6f:47: eb:77:7a:f3:af:fd:be:c1:6e:97:8e:53:19:06:6e:86:82:80: 32:75:b6:dc:77:ad:43:ea:5b:44:13:21:6e:df:81:df:10:1c: 01:26:1d:92:57:fc:f9:a9:61:5e:37:8c:62:7b:81:f3:81:8b: 7c:9c:95:22:0c:9d:77:69:8e:e1:4c:31:6c:85:10:f5:70:71: 9e:2f:13:a0:45:d5:c6:0e:08:d4:0e:be:44:a2:1c:4c:99:ce: 4e:34:61:47:5e:99:f3:32:97:aa:83:1c:63:e0:6a:34:3b:b9: 15:dd:6f:0b:71:bf:f9:3f:07:ce:fa:7b:80:26:ab:da:68:35: 87:d4:54:60:71:6c:54:18:a4:ce:39:45:7b:8a:4c:96:e4:c1: 7e:e2:e2:3c:7e:fe:46:e0:e8:da:a9:3a:dc:66:dc:50:9a:03: 1b:b2:1f:42:59:ff:94:4d:fa:e3:fe:72:ef:b7:e8:4f:f2:52: 1b:f6:2c:45:22:b7:ca:5c:be:28:33:44:f3:61:45:bb:47:81: 70:5f:98:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjQxMTIyMTUzMzE0WhcNMjQxMTI5MTUzMzE0WjAYMRYwFAYD VQQDEw02NzQwYTQzYi00YzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UAnWDWHt0Zuy6E3/6UagvI2W00Rauzq/5IxbgrC6XHjKt8FsT49TWEkXMmX oSxlp8zKYQilFcxt3NY96AC38SVJmgLPhPFPGmj1nOTcvHdx4iftXSU/YWVtUXDb ZMVh8ATr4UKelcFtqJoihRrCYMWyRBsRAOi6t27dlZFQTkwceSSgtX+1OBb5Bmie g1Gg+hdRlAEPFu/q4h3xEPZYnjA+fZ27nRvY8/QLqdNuaryMTZwy4OM32TnQ6ivU paagg53l7YyGlXL33Upb4F9EEbR+dIBm0uM2DQG2UWnUwXi3eVlqunQAbWhJ7+C5 6WYHHxolXmrqfTBcxqmZtHGJYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJJR1w9 oaVJMVhFp+3r2w2UYM+yMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHWKAUg7RXCpjGScwJnv07zYigBh/33GK6w2Oo4JEx3feMX3Y0h358 mXAdZnGTHFqzDg8Rb0frd3rzr/2+wW6XjlMZBm6GgoAydbbcd61D6ltEEyFu34Hf EBwBJh2SV/z5qWFeN4xie4HzgYt8nJUiDJ13aY7hTDFshRD1cHGeLxOgRdXGDgjU Dr5EohxMmc5ONGFHXpnzMpeqgxxj4Go0O7kV3W8Lcb/5PwfO+nuAJqvaaDWH1FRg cWxUGKTOOUV7ikyW5MF+4uI8fv5G4OjaqTrcZtxQmgMbsh9CWf+UTfrj/nLvt+hP 8lIb9ixFIrfKXL4oM0TzYUW7R4FwX5gN -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:06 2024 by rpki-client on console-ams.rpki-client.org