$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft File: iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft (raw, json) Hash identifier: 97vYphOPROwlM7z9HIMDkFQBPuh4m9BnXOgwDMP9T2c= Subject key identifier: CB:64:51:66:75:92:7D:E1:B9:4E:4B:89:D1:89:81:8D:42:D5:09:75 Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Certificate serial: 342C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft Manifest number: 3428 Signing time: Fri 22 Nov 2024 14:36:29 +0000 Manifest this update: Fri 22 Nov 2024 14:36:28 +0000 Manifest next update: Fri 29 Nov 2024 14:36:28 +0000 Files and hashes: 1: iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl (hash: mlmFnOYespXYNYqATZpc/8GbVmQCP8SZIlxmXEF1MVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13356 (0x342c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Validity Not Before: Nov 22 14:36:28 2024 GMT Not After : Nov 29 14:36:28 2024 GMT Subject: CN=674096ed-84eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3e:aa:bf:27:0f:75:72:0e:27:b8:91:29:13: ab:9b:82:74:9d:4a:22:b3:3a:c0:e7:a3:f1:2b:da: 2e:1f:49:5d:57:81:d1:fb:6a:17:86:27:a8:4b:4d: 8a:4a:eb:9f:76:90:f5:77:56:49:bb:20:da:5f:24: a7:ff:c6:02:fc:9d:97:ae:f1:a2:e9:3e:b3:60:d5: 3f:20:61:91:c5:9c:d3:7c:2c:b4:8d:f6:05:b4:0a: e3:36:de:1e:f9:a6:64:b1:65:fe:2a:11:56:e7:99: 4d:ef:85:a7:27:98:6b:23:e5:64:72:bc:d5:59:0a: 38:d8:d4:79:ad:82:9c:21:8d:e9:18:22:f6:a3:7f: d3:35:39:69:4d:82:3b:f8:ab:fb:1f:83:58:66:7f: e9:36:5e:2b:53:82:1a:37:4d:4f:49:2c:91:73:21: fd:c9:bc:da:16:1f:90:32:54:44:b7:ae:56:f6:7a: 9b:19:0f:e8:81:bb:c7:ea:66:bc:ad:d3:c1:5c:ae: 3a:2e:01:25:56:70:fe:bb:08:b0:4d:bd:ef:c6:2f: 78:e0:0d:97:cd:e2:22:c0:09:55:42:45:33:a9:4f: c7:ae:e8:1e:55:f7:bd:22:49:c4:26:11:66:9a:9e: 1a:99:38:65:f7:25:b1:3a:f3:63:44:58:4b:40:8c: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:64:51:66:75:92:7D:E1:B9:4E:4B:89:D1:89:81:8D:42:D5:09:75 X509v3 Authority Key Identifier: keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b7:51:97:5c:bc:c9:ad:70:55:61:29:ed:19:d3:f0:e3:28: 8d:58:b9:07:9f:5f:96:ae:17:fe:e7:b3:b5:19:cb:35:3a:28: c2:da:c2:9e:b6:9e:99:0b:da:74:b2:2f:35:19:73:d0:c1:9e: fb:7b:29:b8:b5:a4:54:fa:39:1c:2b:a2:e0:3f:28:2f:dc:50: 69:28:e0:0c:b7:58:92:a5:bf:62:36:73:9e:0a:dc:e6:ed:1f: 20:d1:95:0d:64:bd:c8:20:27:ef:79:e8:a5:2f:3d:ff:7c:99: b0:1e:b5:80:fd:46:07:80:de:b3:71:bb:ec:27:f5:44:9e:3b: 87:a0:7e:d0:b6:c5:e3:80:d5:f0:2c:04:48:8d:a2:43:d8:a0: 73:50:b5:f0:06:7f:ed:82:b0:e5:16:6e:42:fe:d6:1a:16:29: 63:48:5e:9a:fa:54:a5:f5:cf:77:2e:4e:b2:3a:d4:49:ba:fa: 87:db:60:24:f9:2d:20:58:4a:99:c8:95:75:92:28:ad:1f:b3: 59:bc:d5:d6:d2:dc:13:41:e8:ec:65:77:24:66:34:5e:0f:66: 8e:b9:30:46:fc:6f:ce:9e:e0:47:e6:22:06:cd:25:94:05:67: 03:af:b2:56:46:35:d7:8e:ac:27:0e:89:e3:e7:98:0e:10:cd: f0:34:b4:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQTAxMTAvBgNVBAUTKDg4ODdDRjZDRjUxMDJGMEZCNzEzRjRDNEExQkRFMzg5 NDgxRjFDNDQwHhcNMjQxMTIyMTQzNjI4WhcNMjQxMTI5MTQzNjI4WjAYMRYwFAYD VQQDEw02NzQwOTZlZC04NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkz6qvycPdXIOJ7iRKROrm4J0nUoiszrA56PxK9ouH0ldV4HR+2oXhieoS02K SuufdpD1d1ZJuyDaXySn/8YC/J2XrvGi6T6zYNU/IGGRxZzTfCy0jfYFtArjNt4e +aZksWX+KhFW55lN74WnJ5hrI+VkcrzVWQo42NR5rYKcIY3pGCL2o3/TNTlpTYI7 +Kv7H4NYZn/pNl4rU4IaN01PSSyRcyH9ybzaFh+QMlREt65W9nqbGQ/ogbvH6ma8 rdPBXK46LgElVnD+uwiwTb3vxi944A2XzeIiwAlVQkUzqU/HrugeVfe9IknEJhFm mp4amThl9yWxOvNjRFhLQIw52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtkUWZ1 kn3huU5LidGJgY1C1Ql1MB8GA1UdIwQYMBaAFIiHz2z1EC8PtxP0xKG944lIHxxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBMC8zQTBEOTMxMDFE OEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3LTNFX1RFb2IzamlVZ2ZI RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lJZlBiUFVRTHctM0VfVEVvYjNqaVVnZkhFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBMC8zQTBEOTMxMDFEOEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3 LTNFX1RFb2IzamlVZ2ZIRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHt1GXXLzJrXBVYSntGdPw4yiNWLkHn1+Wrhf+57O1Gcs1OijC2sKe tp6ZC9p0si81GXPQwZ77eym4taRU+jkcK6LgPygv3FBpKOAMt1iSpb9iNnOeCtzm 7R8g0ZUNZL3IICfveeilLz3/fJmwHrWA/UYHgN6zcbvsJ/VEnjuHoH7QtsXjgNXw LARIjaJD2KBzULXwBn/tgrDlFm5C/tYaFiljSF6a+lSl9c93Lk6yOtRJuvqH22Ak +S0gWEqZyJV1kiitH7NZvNXW0twTQejsZXckZjReD2aOuTBG/G/OnuBH5iIGzSWU BWcDr7JWRjXXjqwnDonj55gOEM3wNLRX -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:36 2024 by rpki-client on console-fra.rpki-client.org