$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft File: iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json) Hash identifier: csRvLLj8Jh4kODYYR5qoE4aLt1K/pqhEm+FF0IGz42o= Subject key identifier: B7:DD:DF:D2:22:BB:D1:86:32:01:EB:15:9A:62:5E:B2:B8:41:D0:72 Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6 Certificate issuer: /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft Manifest number: 03D8 Signing time: Sat 23 Nov 2024 00:10:02 +0000 Manifest this update: Sat 23 Nov 2024 00:10:01 +0000 Manifest next update: Sat 30 Nov 2024 00:10:01 +0000 Files and hashes: 1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: w5fcCprqBZUi+9oQXkTeXFY8yzBXINqFFhGyVEy6LdQ=) 2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: Zv2OqRWOOIraCVGgHs0pDMOMrHeeVent3h8K/ky95JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6 Validity Not Before: Nov 23 00:10:01 2024 GMT Not After : Nov 30 00:10:01 2024 GMT Subject: CN=67411d5a-a920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:b0:60:d5:ff:db:43:26:b8:29:a6:59:cc: 5a:51:c5:5a:50:fc:6f:01:46:b2:79:06:aa:08:9f: f0:24:47:cd:85:e0:9f:d3:fe:e9:be:dd:47:db:61: 53:b1:bf:c4:36:7f:1b:12:45:b4:1c:c8:af:35:3a: 9f:c1:cf:55:a7:0e:84:ad:0b:dc:a0:a9:08:d8:1b: 88:b1:18:b6:39:75:0a:b8:36:38:c4:37:9d:26:b8: c9:5a:27:4e:c9:01:b7:ea:6a:56:76:fa:a4:a2:b7: 67:cb:7b:d1:0a:d7:53:d6:26:22:72:3f:f8:87:cf: b5:28:3c:21:6c:8d:c5:c8:5a:36:52:2c:74:b6:cd: ac:24:b6:0e:2b:81:5a:96:e4:21:45:9b:eb:4e:31: 8d:b2:8a:57:19:df:b0:29:2b:69:50:3c:6c:16:4f: 41:98:03:3e:32:8f:79:8e:12:0a:46:58:df:83:77: f3:6b:57:a0:8b:e3:44:b4:a9:c0:e9:c0:60:dc:d1: 3f:27:fd:71:88:bb:2e:f0:1f:16:02:0d:4e:0c:54: cc:0d:b4:68:c5:49:2c:61:18:b3:e3:4f:b9:18:0a: 8c:94:32:c6:cd:86:fb:4d:a8:3a:2e:dc:44:3a:f6: b2:95:d4:83:79:5b:90:3f:0b:8f:40:f0:bf:e1:29: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DD:DF:D2:22:BB:D1:86:32:01:EB:15:9A:62:5E:B2:B8:41:D0:72 X509v3 Authority Key Identifier: keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:92:42:9b:b8:3f:4a:2f:db:ab:d9:23:92:9b:83:69:b2:61: 16:ae:18:6d:51:4c:fd:41:b8:32:74:36:e9:52:e7:24:db:10: ee:fc:a4:a3:85:c0:ce:20:06:5e:e7:c7:8a:8d:a8:b8:35:41: 61:86:01:be:a6:db:fd:86:ed:ae:f8:bf:95:55:d6:fc:a0:d3: 3a:19:a6:a9:85:02:df:22:d3:fc:19:69:5e:e6:76:db:cf:19: 4a:ef:89:b6:1f:89:39:91:70:9b:62:fb:ab:4f:ff:80:ad:d9: bb:f4:ef:f5:84:de:4c:46:54:aa:b6:10:58:35:a2:3c:86:7e: 6d:24:23:8a:06:91:38:9b:e4:ac:d1:3c:ca:68:6b:e0:c6:2d: bb:97:11:6e:9d:3c:23:90:1c:92:91:ff:c9:bb:6a:7c:73:31: da:86:d9:68:4d:79:e1:db:6a:5e:b0:ca:dd:bc:1b:c5:c5:e4: dc:e0:5f:34:80:6b:a7:2a:6e:ba:b9:c4:69:83:13:02:5c:7d: 8d:bf:58:be:7b:ab:9b:6b:e3:a8:5e:28:41:85:30:cf:f4:0c: 1b:76:18:28:57:6a:39:e6:53:c5:68:4c:e7:07:a5:c3:e1:90: ab:2b:57:ee:f5:92:ba:d6:25:c3:bc:9e:15:b7:d0:d9:2d:6a: 1b:3a:c1:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0 NTlEQkMxRjYwHhcNMjQxMTIzMDAxMDAxWhcNMjQxMTMwMDAxMDAxWjAYMRYwFAYD VQQDEw02NzQxMWQ1YS1hOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW+wYNX/20MmuCmmWcxaUcVaUPxvAUayeQaqCJ/wJEfNheCf0/7pvt1H22FT sb/ENn8bEkW0HMivNTqfwc9Vpw6ErQvcoKkI2BuIsRi2OXUKuDY4xDedJrjJWidO yQG36mpWdvqkordny3vRCtdT1iYicj/4h8+1KDwhbI3FyFo2Uix0ts2sJLYOK4Fa luQhRZvrTjGNsopXGd+wKStpUDxsFk9BmAM+Mo95jhIKRljfg3fza1egi+NEtKnA 6cBg3NE/J/1xiLsu8B8WAg1ODFTMDbRoxUksYRiz40+5GAqMlDLGzYb7Tag6LtxE OvayldSDeVuQPwuPQPC/4SllwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfd39Ii u9GGMgHrFZpiXrK4QdByMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3 ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1MC8xMTdDMjZFQTVENkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1K QW5STllhWW1oTGxGbmJ3ZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJkkKbuD9KL9ur2SOSm4NpsmEWrhhtUUz9QbgydDbpUuck2xDu/KSj hcDOIAZe58eKjai4NUFhhgG+ptv9hu2u+L+VVdb8oNM6GaaphQLfItP8GWle5nbb zxlK74m2H4k5kXCbYvurT/+Ardm79O/1hN5MRlSqthBYNaI8hn5tJCOKBpE4m+Ss 0TzKaGvgxi27lxFunTwjkBySkf/Ju2p8czHahtloTXnh22pesMrdvBvFxeTc4F80 gGunKm66ucRpgxMCXH2Nv1i+e6uba+OoXihBhTDP9AwbdhgoV2o55lPFaEznB6XD 4ZCrK1fu9ZK61iXDvJ4Vt9DZLWobOsF8 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org