$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: CAnvhX5BEaOZ9UJDn6fn7DsodVEdrSX8UVnnekois4c= Subject key identifier: FC:1B:2E:1D:EF:37:9F:CB:7E:B4:9E:EF:BD:08:41:86:BB:5A:F2:A4 Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: C3 Signing time: Sat 23 Nov 2024 04:02:51 +0000 Manifest this update: Sat 23 Nov 2024 04:02:51 +0000 Manifest next update: Sat 30 Nov 2024 04:02:51 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: 6mpwUvO85nfVqQB94QwP66br5HH6uL2rumosbPUb1aQ=) 2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: 7q6dRt1PRPumvLOcxheCYVDUESOcIxgJ43UkEKxKC5g=) 3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: LoteQE9hwDWU4JcumH6+97El0QEil7v7bq1+3FC/iBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: Nov 23 04:02:51 2024 GMT Not After : Nov 30 04:02:51 2024 GMT Subject: CN=674153eb-a27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:27:e8:c8:14:ad:7b:2a:26:57:b2:e9:92: d9:f8:6f:9d:ff:a8:aa:71:0c:08:40:d2:63:b9:38: 48:c2:e6:97:d2:a0:b3:5a:ab:bd:5d:c1:ed:04:62: 53:0e:de:bd:2f:ff:b5:21:7f:81:98:b5:7a:0f:89: fd:12:fd:6d:f3:2c:48:4f:af:7a:27:c9:ed:8b:32: 46:60:36:1b:45:79:75:a3:b8:d4:60:9b:7e:bd:2c: bb:73:bc:34:ee:2a:87:38:9f:4d:17:3c:79:e0:7e: a2:fe:d7:eb:e9:99:c3:2c:fb:99:58:f1:4e:15:7e: 40:f5:33:de:15:fd:5f:ff:3b:59:40:86:8d:40:09: dd:63:10:24:8b:83:11:22:fb:af:75:47:cb:72:d4: e1:61:00:26:01:2e:12:c0:7e:a9:2b:47:42:a9:37: 5a:2d:82:06:f5:91:7b:2d:91:42:24:f7:fa:12:77: 9c:62:1d:5f:b1:6a:db:a4:2d:a5:80:44:33:91:3e: 5f:b5:61:74:90:2f:26:27:a1:38:cb:2f:dd:9f:ea: 70:93:8e:a4:ed:df:f6:c1:46:5f:92:8f:4d:ff:20: 5e:d3:d5:b6:8c:2b:f1:c9:af:d3:50:ce:dd:ca:6a: d4:f0:bb:34:26:af:c1:60:c6:35:ee:79:c2:7a:c3: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1B:2E:1D:EF:37:9F:CB:7E:B4:9E:EF:BD:08:41:86:BB:5A:F2:A4 X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:de:84:de:19:b0:39:38:4c:f2:bc:c6:09:46:a3:21:9f:f4: 18:b1:2d:8f:92:9d:ad:f2:4c:1a:c3:52:e7:12:99:52:21:c9: d2:91:46:aa:47:47:2b:13:8e:12:39:f9:4f:d8:67:cb:67:d1: dc:90:8b:f2:ab:99:92:48:39:71:78:db:3b:d1:50:bb:19:3c: dc:cc:10:b5:66:c2:e3:ba:82:a8:c4:17:6f:95:06:2e:14:6a: e3:02:0b:23:0c:bf:34:1c:fd:35:42:fe:a9:1a:a1:09:dc:a8: 54:b6:42:2e:84:ae:0f:de:33:a5:7c:f7:b8:ac:1e:e5:d6:65: 96:4e:7e:bc:32:65:75:2f:09:8b:f9:af:05:96:d6:ca:e3:2c: f0:2a:89:a9:8b:cb:54:28:33:86:e6:5a:55:ae:5c:a4:15:09: 6c:ce:51:1f:bc:86:d9:c8:2f:22:0b:ae:48:c0:6c:0e:f4:ef: 47:46:d5:1c:49:5c:a6:b4:9a:73:77:20:be:89:c2:63:1c:75: eb:42:48:51:88:ac:9e:ee:65:46:1e:4f:0f:55:31:91:77:9d: 62:b6:68:0b:a7:d2:c9:b7:55:f8:60:4b:5a:25:b8:05:46:6d: 7d:00:89:bd:05:32:c4:90:37:da:5d:1c:c6:09:bf:b7:43:40: e9:ac:8f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjQxMTIzMDQwMjUxWhcNMjQxMTMwMDQwMjUxWjAYMRYwFAYD VQQDEw02NzQxNTNlYi1hMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuksn6MgUrXsqJley6ZLZ+G+d/6iqcQwIQNJjuThIwuaX0qCzWqu9XcHtBGJT Dt69L/+1IX+BmLV6D4n9Ev1t8yxIT696J8ntizJGYDYbRXl1o7jUYJt+vSy7c7w0 7iqHOJ9NFzx54H6i/tfr6ZnDLPuZWPFOFX5A9TPeFf1f/ztZQIaNQAndYxAki4MR IvuvdUfLctThYQAmAS4SwH6pK0dCqTdaLYIG9ZF7LZFCJPf6EnecYh1fsWrbpC2l gEQzkT5ftWF0kC8mJ6E4yy/dn+pwk46k7d/2wUZfko9N/yBe09W2jCvxya/TUM7d ymrU8Ls0Jq/BYMY17nnCesNQIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwbLh3v N5/LfrSe770IQYa7WvKkMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB RmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq3oTeGbA5OEzyvMYJRqMhn/QYsS2Pkp2t8kwaw1LnEplSIcnSkUaq R0crE44SOflP2GfLZ9HckIvyq5mSSDlxeNs70VC7GTzczBC1ZsLjuoKoxBdvlQYu FGrjAgsjDL80HP01Qv6pGqEJ3KhUtkIuhK4P3jOlfPe4rB7l1mWWTn68MmV1LwmL +a8FltbK4yzwKompi8tUKDOG5lpVrlykFQlszlEfvIbZyC8iC65IwGwO9O9HRtUc SVymtJpzdyC+icJjHHXrQkhRiKye7mVGHk8PVTGRd51itmgLp9LJt1X4YEtaJbgF Rm19AIm9BTLEkDfaXRzGCb+3Q0DprI8T -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org