$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: MDwtJp4NgBJDxoCPDWWl4k/4bXpB8HooPGbbwC9hSbw= Subject key identifier: CD:11:FE:49:52:FB:68:5E:0B:54:F2:EB:8E:D6:18:16:CC:C2:4B:8E Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 1265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 1253 Signing time: Fri 22 Nov 2024 17:06:57 +0000 Manifest this update: Fri 22 Nov 2024 17:06:57 +0000 Manifest next update: Fri 29 Nov 2024 17:06:57 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: ty7mmf5bULKBXBkO9tQFJ6ibnB3CsJkaEawtajZdNIs=) 2: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: fNoRTJRcUq+MisSf8jbpZwfIe00iU+V6oUD6yiNy/5Y=) 3: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: 9kzHJ+mrOXjrh7/imCy9YTTgW8CKx7edCdpIZZ1nyQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4709 (0x1265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Nov 22 17:06:57 2024 GMT Not After : Nov 29 17:06:57 2024 GMT Subject: CN=6740ba31-b522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:83:41:d3:42:19:7f:dd:52:bf:12:54:26: 47:f1:98:60:3b:2f:2f:de:23:58:b2:87:d1:d3:58: fb:76:ad:65:e8:24:8b:90:f7:f0:3d:a8:ab:44:e4: 44:99:33:25:79:48:bc:20:6a:df:a4:fb:67:b3:04: 4f:f2:2f:01:e9:18:54:8e:df:5a:06:ea:66:74:82: b9:25:b4:76:3b:88:d8:39:42:46:f7:be:5a:53:13: 65:6c:40:0b:7a:1e:85:da:32:a2:85:b5:53:45:42: 87:b5:6e:4d:89:5a:1e:db:1e:30:d7:8e:77:3f:0e: 4a:72:96:a3:11:d1:5b:bf:7c:c2:7a:4d:58:75:5d: b7:a8:d9:f9:9d:b5:f2:ca:ec:08:33:35:2d:95:5e: 14:36:fb:63:06:fb:8c:3a:29:34:41:1d:53:25:fd: d7:31:83:63:ad:1c:4c:2a:24:e6:0d:2f:91:b7:a3: 10:35:03:11:64:c2:32:2c:15:c9:30:75:78:5e:4a: ea:8f:b6:b7:f1:ea:12:a6:ed:05:9f:26:fd:78:73: ed:b9:34:2f:e2:17:a7:e2:97:91:02:07:d6:e6:58: 15:e2:3b:71:ff:74:54:be:88:bb:7b:a6:46:f0:77: 74:de:5e:c6:75:83:22:f4:1c:fa:6b:7e:67:88:db: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:11:FE:49:52:FB:68:5E:0B:54:F2:EB:8E:D6:18:16:CC:C2:4B:8E X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e6:e5:59:f4:f2:47:6e:a3:7a:5d:00:6a:ba:24:9c:52:c5: 15:72:bc:b1:dc:ad:b6:02:57:aa:ec:ee:5b:0a:65:12:6f:af: 2d:ea:da:70:bc:c5:2a:22:94:26:79:72:e1:0c:db:1c:ac:a9: d0:60:c8:9c:e7:45:ff:bc:9e:9d:65:1b:60:2e:07:bd:98:97: 1b:95:2d:84:6c:6c:25:3f:4e:19:af:fb:fa:01:ed:e2:7b:43: 7f:77:3d:9d:59:d4:3d:ae:d1:64:ab:23:d4:81:a4:f9:9c:b5: c8:80:3b:76:71:32:e9:2c:3d:ba:d4:09:70:5a:99:78:8c:1a: 80:6a:81:7e:96:83:14:9e:48:be:cb:cb:7f:79:78:de:33:a9: 4d:ca:21:0c:55:41:b1:23:ab:ee:ec:32:d0:c9:3f:b2:40:c0: 8b:c5:88:30:1e:5b:2a:c3:09:08:ed:2b:41:46:1c:40:66:3a: 3e:a6:17:31:cf:c5:a3:c9:19:de:29:8f:dd:fc:2a:9c:37:18: 6d:85:d4:7d:d6:8c:a5:8e:fb:fc:a6:c6:13:20:e7:a5:66:88: af:ac:ab:01:ee:ca:21:ea:58:84:88:fd:16:54:ad:81:ab:1a: 6e:3a:0b:10:91:42:3d:cb:80:2e:b1:88:07:e5:f3:0d:09:1e: ff:8b:b2:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjQxMTIyMTcwNjU3WhcNMjQxMTI5MTcwNjU3WjAYMRYwFAYD VQQDEw02NzQwYmEzMS1iNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQGDQdNCGX/dUr8SVCZH8ZhgOy8v3iNYsofR01j7dq1l6CSLkPfwPairRORE mTMleUi8IGrfpPtnswRP8i8B6RhUjt9aBupmdIK5JbR2O4jYOUJG975aUxNlbEAL eh6F2jKihbVTRUKHtW5NiVoe2x4w1453Pw5KcpajEdFbv3zCek1YdV23qNn5nbXy yuwIMzUtlV4UNvtjBvuMOik0QR1TJf3XMYNjrRxMKiTmDS+Rt6MQNQMRZMIyLBXJ MHV4Xkrqj7a38eoSpu0Fnyb9eHPtuTQv4hen4peRAgfW5lgV4jtx/3RUvoi7e6ZG 8Hd03l7GdYMi9Bz6a35niNsojQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0R/klS +2heC1Ty647WGBbMwkuOMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh5uVZ9PJHbqN6XQBquiScUsUVcryx3K22Aleq7O5bCmUSb68t6tpw vMUqIpQmeXLhDNscrKnQYMic50X/vJ6dZRtgLge9mJcblS2EbGwlP04Zr/v6Ae3i e0N/dz2dWdQ9rtFkqyPUgaT5nLXIgDt2cTLpLD261AlwWpl4jBqAaoF+loMUnki+ y8t/eXjeM6lNyiEMVUGxI6vu7DLQyT+yQMCLxYgwHlsqwwkI7StBRhxAZjo+phcx z8WjyRneKY/d/CqcNxhthdR91oyljvv8psYTIOelZoivrKsB7soh6liEiP0WVK2B qxpuOgsQkUI9y4AusYgH5fMNCR7/i7JX -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:39 2024 by rpki-client on console-fra.rpki-client.org