$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json) Hash identifier: eRMt/0/bQUbo7i3My6jVwLDeEM4qZwZHg0yXxuPCzfQ= Subject key identifier: 9C:B6:45:10:63:89:C9:C9:1F:3D:7C:E2:C6:10:B2:0D:DF:A6:D5:4A Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Certificate serial: 03FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft Manifest number: 03F6 Signing time: Sat 23 Nov 2024 00:03:35 +0000 Manifest this update: Sat 23 Nov 2024 00:03:35 +0000 Manifest next update: Sat 30 Nov 2024 00:03:35 +0000 Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: LXrF27b842ZneQd+YnzHebfBC7PpK5AAJkp7FtLuRxo=) 2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: hlCTKg4Zix5z0OwaiI9AlaxDrKpzUIAdq7aE9CMR9vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1018 (0x3fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Validity Not Before: Nov 23 00:03:35 2024 GMT Not After : Nov 30 00:03:35 2024 GMT Subject: CN=67411bd7-b548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:f6:e4:e5:99:ba:32:0f:bb:9e:9e:4e:a0: f6:2b:7a:89:95:16:a3:f2:0c:c4:0f:1e:26:b9:0d: 16:e8:7d:0b:e3:4e:a6:e8:4f:56:75:b0:bf:b3:06: 29:2a:93:5d:4b:6c:cb:ca:63:f1:79:66:b0:d1:bf: 97:6b:b9:a8:e5:b3:a1:cf:2b:f6:69:b0:47:99:96: 72:f9:80:94:50:10:7b:96:75:bc:44:dd:c6:5f:dc: b5:4e:1e:42:7a:b0:45:d7:e8:ca:9a:3b:a8:a4:02: f6:71:19:bc:ef:3f:3e:50:ab:6b:e6:70:4a:90:67: f5:ed:e8:64:e4:88:73:6f:5f:63:20:c0:98:11:8f: 09:5e:1e:2d:60:41:3e:3f:66:1e:0b:fe:8f:53:dd: 3a:bb:38:e1:bc:b3:0e:4c:66:bb:6c:11:48:81:a1: c9:81:0b:dd:e3:fa:ab:8a:5f:ab:af:e8:c2:ca:c2: 01:41:b9:44:3a:c6:1b:b2:24:de:0c:12:0e:cd:aa: 97:d4:b9:54:27:a4:72:e0:3f:ae:3f:44:ff:41:f7: 47:bc:78:1d:f6:25:0a:c6:7c:c7:0c:06:0d:af:cf: 6e:a7:57:ab:49:30:70:ee:2b:49:a8:5e:76:01:96: 6d:86:04:5c:8a:5c:bc:a5:9e:88:c8:36:ec:57:2a: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B6:45:10:63:89:C9:C9:1F:3D:7C:E2:C6:10:B2:0D:DF:A6:D5:4A X509v3 Authority Key Identifier: keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e5:cd:df:b1:ab:61:76:3f:5a:58:3c:08:44:f3:58:db:f0: 82:4d:61:50:b5:b1:2e:8f:5b:18:c2:81:a3:b2:f2:8e:36:9b: ed:86:4a:94:69:f4:3a:8e:4f:72:c4:c4:26:1b:12:ad:a6:fb: 28:10:2a:c9:f0:7b:95:91:f8:1c:cf:b6:55:ac:66:9e:c2:d9: 35:5e:a4:bf:2e:2d:87:e2:70:34:f5:ba:79:d1:36:80:d0:d8: 01:de:9a:c7:4b:da:e4:d4:db:a3:1b:b4:c7:b7:68:5d:7c:38: ee:42:1b:1a:e3:20:14:1a:b2:64:be:b8:4b:e6:27:03:91:00: 20:03:45:02:1d:50:c3:f7:f5:6d:17:a5:fa:f9:8d:1d:6c:5b: 8e:48:49:c0:63:d4:81:fa:71:4a:e3:f2:5a:d2:48:93:7d:55: 02:a1:45:73:03:d3:19:c4:33:70:bb:42:bd:e8:dc:fa:72:44: c6:a4:b8:0e:31:8a:e0:d2:0a:e7:a2:d4:90:a6:1f:bb:cd:6f: 2b:19:2b:a9:68:7a:dc:71:9c:45:7e:04:4b:b1:e5:0a:f9:92: a4:7e:57:bd:c6:c7:67:c4:5e:39:98:bf:63:08:fd:f7:ce:82: 14:a0:f5:eb:cc:a4:14:62:83:f0:df:d9:2e:4d:84:09:bc:b8: 5c:25:08:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5 RjA5NjczRjkwHhcNMjQxMTIzMDAwMzM1WhcNMjQxMTMwMDAwMzM1WjAYMRYwFAYD VQQDEw02NzQxMWJkNy1iNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00D25OWZujIPu56eTqD2K3qJlRaj8gzEDx4muQ0W6H0L406m6E9WdbC/swYp KpNdS2zLymPxeWaw0b+Xa7mo5bOhzyv2abBHmZZy+YCUUBB7lnW8RN3GX9y1Th5C erBF1+jKmjuopAL2cRm87z8+UKtr5nBKkGf17ehk5Ihzb19jIMCYEY8JXh4tYEE+ P2YeC/6PU906uzjhvLMOTGa7bBFIgaHJgQvd4/qril+rr+jCysIBQblEOsYbsiTe DBIOzaqX1LlUJ6Ry4D+uP0T/QfdHvHgd9iUKxnzHDAYNr89up1erSTBw7itJqF52 AZZthgRcily8pZ6IyDbsVyo6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy2RRBj icnJHz184sYQsg3fptVKMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzAzNS8xOEM2MjkxMjUyOUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNk Yk9qX2Vfc3lzUzZmQ1djX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ5c3fsathdj9aWDwIRPNY2/CCTWFQtbEuj1sYwoGjsvKONpvthkqU afQ6jk9yxMQmGxKtpvsoECrJ8HuVkfgcz7ZVrGaewtk1XqS/Li2H4nA09bp50TaA 0NgB3prHS9rk1NujG7THt2hdfDjuQhsa4yAUGrJkvrhL5icDkQAgA0UCHVDD9/Vt F6X6+Y0dbFuOSEnAY9SB+nFK4/Ja0kiTfVUCoUVzA9MZxDNwu0K96Nz6ckTGpLgO MYrg0grnotSQph+7zW8rGSupaHrccZxFfgRLseUK+ZKkfle9xsdnxF45mL9jCP33 zoIUoPXrzKQUYoPw39kuTYQJvLhcJQgh -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org