$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft File: IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json) Hash identifier: O+2WEOqqxpJy7e7nS/XbSPkVW0Qo/OwCur+nWxjDTG0= Subject key identifier: E8:58:2A:42:D3:BB:1B:45:7F:E2:C3:52:41:D4:AF:9D:00:4F:E9:07 Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A Certificate issuer: /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft Manifest number: 0665 Signing time: Fri 22 Nov 2024 21:56:19 +0000 Manifest this update: Fri 22 Nov 2024 21:56:18 +0000 Manifest next update: Fri 29 Nov 2024 21:56:18 +0000 Files and hashes: 1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: S+3718m/JJo3fTXz0FegtpaW2R+F8YD7a+Hb69sgPko=) 2: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: 57P64bVmIRF2URitVRXKDt0UIZdjZD8e9qR1JL8e3CE=) 3: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: MvSnhG1Tw3jH9r3zlt7DFdvsRZP7y0XecmpUqHlHCS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Validity Not Before: Nov 22 21:56:18 2024 GMT Not After : Nov 29 21:56:18 2024 GMT Subject: CN=6740fe03-2f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:d3:05:a6:aa:e0:92:51:c9:4e:f9:47:19: ac:87:9a:23:9e:08:a3:5b:33:70:e5:9d:4e:be:19: d0:7e:46:4b:05:cc:aa:03:4d:4a:4a:ea:99:f3:11: ab:72:c4:88:6e:a9:e8:b7:db:22:09:97:fc:e8:81: 85:6e:3b:00:2a:f1:46:79:d7:54:75:c8:aa:ae:a6: 65:74:30:ee:75:16:ca:a9:17:e5:fb:d1:26:ef:8a: 71:fa:31:36:d6:a8:9b:4a:89:4f:62:68:7b:b5:54: cd:a6:46:76:0f:42:dc:b5:af:65:0c:5b:e3:b0:56: 1d:f0:11:7e:98:22:77:9a:23:78:b7:c6:bb:fa:d3: 6c:b2:5f:96:56:d7:7a:5a:c9:29:f1:de:78:26:a1: 1d:99:67:aa:7e:e0:f0:93:dd:9c:57:b3:0e:fd:37: 06:88:03:ac:83:94:ac:fa:b9:20:58:d3:20:f8:d3: e9:6d:04:26:ac:c0:d9:94:e9:e3:2a:07:1d:72:78: 43:6b:10:56:c2:46:8a:f0:0a:0a:28:16:4d:fa:a5: 8e:de:bb:d9:61:f1:a8:3e:48:b6:15:42:05:ef:aa: 1a:fe:9b:21:14:7d:fe:eb:3c:7a:07:30:43:cb:26: 29:14:63:f7:04:8f:b9:4b:0b:3a:d0:25:92:1c:eb: 44:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:58:2A:42:D3:BB:1B:45:7F:E2:C3:52:41:D4:AF:9D:00:4F:E9:07 X509v3 Authority Key Identifier: keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:28:49:b0:9e:87:72:42:25:25:0e:4b:f6:49:1e:f1:c9:2c: 73:f8:cd:ed:83:00:27:29:ee:11:ab:90:c8:ab:70:20:b4:2b: a0:e3:4a:cc:b3:ed:1b:2e:ce:5a:34:70:bb:db:e3:4d:b9:ab: 47:44:91:d1:fa:3f:67:7a:ed:3c:cf:41:61:28:82:40:29:e5: 3d:5f:5e:5f:e2:64:d1:cb:1b:07:76:38:9e:84:f9:2d:64:2d: 41:02:63:fe:0d:92:93:02:e2:09:dc:48:1e:32:12:51:02:c3: fa:fd:c1:ff:2c:4c:01:da:9f:c4:6e:cc:fd:d8:27:52:09:8d: 94:64:80:83:ad:d5:97:0d:5d:b0:27:de:0a:32:1d:dd:23:b6: e9:19:33:59:86:39:c1:57:48:74:e8:1e:a3:05:98:62:8f:bf: c9:ae:29:d1:a0:59:07:17:1d:7c:5c:99:ac:16:16:69:1c:52: 31:e6:ab:af:e3:e4:9f:ad:00:5d:e9:6f:b6:c6:3b:2d:e7:59: 28:67:26:33:0b:4b:9f:5b:a4:7e:07:26:8f:6e:3c:35:da:d3: 88:8b:30:20:84:95:22:6e:5c:ab:03:15:d8:41:42:87:3b:e6: 4c:a2:ea:bf:42:3c:ab:1d:13:c6:9c:b3:f8:fd:8f:85:66:43: fd:5d:6d:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4OTcxMTAvBgNVBAUTKDIwNDY1QTNBOUMwODM3RTdCNjg4MzA3MzM3MURCQTA5 MjIyRkJGNEEwHhcNMjQxMTIyMjE1NjE4WhcNMjQxMTI5MjE1NjE4WjAYMRYwFAYD VQQDEw02NzQwZmUwMy0yZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSjTBaaq4JJRyU75Rxmsh5ojngijWzNw5Z1OvhnQfkZLBcyqA01KSuqZ8xGr csSIbqnot9siCZf86IGFbjsAKvFGeddUdciqrqZldDDudRbKqRfl+9Em74px+jE2 1qibSolPYmh7tVTNpkZ2D0Lcta9lDFvjsFYd8BF+mCJ3miN4t8a7+tNssl+WVtd6 Wskp8d54JqEdmWeqfuDwk92cV7MO/TcGiAOsg5Ss+rkgWNMg+NPpbQQmrMDZlOnj KgcdcnhDaxBWwkaK8AoKKBZN+qWO3rvZYfGoPki2FUIF76oa/pshFH3+6zx6BzBD yyYpFGP3BI+5Sws60CWSHOtEbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhYKkLT uxtFf+LDUkHUr50AT+kHMB8GA1UdIwQYMBaAFCBGWjqcCDfntogwczcdugkiL79K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg5Ny8wOTc3MTE5MjVB RDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4tZTJpREJ6TngyNkNTSXZ2 MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFWmFPcHdJTi1lMmlEQnpOeDI2Q1NJdnYwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg5Ny8wOTc3MTE5MjVBRDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4t ZTJpREJ6TngyNkNTSXZ2MG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsKEmwnodyQiUlDkv2SR7xySxz+M3tgwAnKe4Rq5DIq3AgtCug40rM s+0bLs5aNHC72+NNuatHRJHR+j9neu08z0FhKIJAKeU9X15f4mTRyxsHdjiehPkt ZC1BAmP+DZKTAuIJ3EgeMhJRAsP6/cH/LEwB2p/Ebsz92CdSCY2UZICDrdWXDV2w J94KMh3dI7bpGTNZhjnBV0h06B6jBZhij7/JrinRoFkHFx18XJmsFhZpHFIx5quv 4+SfrQBd6W+2xjst51koZyYzC0ufW6R+ByaPbjw12tOIizAghJUiblyrAxXYQUKH O+ZMouq/QjyrHRPGnLP4/Y+FZkP9XW0w -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org