$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: pTIfOJqqHilU0c5Fy1CiY9p6NWzxvWoaheqjGZztEXk= Subject key identifier: 31:20:5C:D7:DD:89:8F:FB:D2:31:D0:5E:11:90:70:9E:67:82:AC:36 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0BCC Signing time: Fri 22 Nov 2024 18:32:24 +0000 Manifest this update: Fri 22 Nov 2024 18:32:23 +0000 Manifest next update: Fri 29 Nov 2024 18:32:23 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: q46c9v1kFywAeC5T34JTl+dd8STywrzv0SquP7Sj/7o=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: VI23YCDXjIBJjEO8GafeMzlZaX/Tvi6JTYc9mJtHlpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Nov 22 18:32:23 2024 GMT Not After : Nov 29 18:32:23 2024 GMT Subject: CN=6740ce37-fd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:79:39:5e:2d:a8:09:a5:5f:42:9e:94:eb: 45:e0:6f:c0:d7:94:98:c8:b3:2d:c9:f6:45:f5:4d: 6f:90:83:8e:0b:43:e5:5d:5e:84:84:44:94:d0:82: 0b:2a:b8:c3:b4:d4:21:eb:b4:ee:d3:03:aa:8d:ed: fe:b7:a4:8f:31:15:86:97:30:92:22:47:ab:8a:22: 27:b0:03:81:e1:be:28:03:7b:86:83:5e:e7:23:48: 63:09:c2:cd:fc:ae:b8:15:b6:40:d1:20:70:b9:94: 68:4f:91:e2:12:f2:9a:61:3c:20:91:a6:00:94:d1: 91:4e:20:ef:16:a9:00:bf:77:e3:bb:0a:ae:ab:3e: 1e:40:6e:2f:cc:91:0b:e1:fa:b6:2b:8c:36:c6:7c: fe:2c:68:63:c6:b2:40:5b:2a:f7:9c:c7:9f:80:f3: 44:09:20:e5:e2:12:c1:69:18:3c:05:01:d5:f9:77: 04:41:a7:7c:0f:e0:80:e8:b8:ee:00:10:09:c0:71: 87:9c:a3:0f:8c:19:d8:c7:dd:92:13:ca:cb:a8:e5: 64:0f:3e:49:a3:c9:29:d7:76:5a:d4:cc:e8:02:20: 95:ac:4f:19:41:15:4a:dc:d2:4b:f9:48:a5:07:4d: 8a:6f:e8:82:61:f8:92:0a:50:01:20:65:88:b9:87: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:20:5C:D7:DD:89:8F:FB:D2:31:D0:5E:11:90:70:9E:67:82:AC:36 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:06:b1:c0:be:de:1e:ec:1f:1d:d2:ec:70:be:d9:4b:09:e0: 15:75:24:1d:75:5d:93:e9:d3:a3:ae:00:7d:c0:fc:e3:40:42: 6f:e4:60:ab:27:cf:9a:93:c5:2d:e8:d3:aa:e8:68:01:29:8e: a0:e3:b2:0b:01:67:19:f6:bb:26:11:d7:4d:a2:4a:cf:76:59: ea:95:56:18:8e:21:01:a8:4d:57:94:dd:9c:e9:89:34:4c:fc: 82:77:52:83:31:16:a1:f3:36:74:ad:ed:f0:2b:ef:95:8d:ac: 9c:ac:b9:4f:1a:0e:25:17:cb:8a:f2:be:37:40:e1:fb:dc:0a: 5b:3e:df:ee:0a:27:5d:75:2d:c0:f8:2a:ed:e6:24:9b:44:f2: 3e:03:8c:84:6d:d3:a7:31:b4:4f:61:89:3f:a3:f9:c6:e7:0a: 11:cd:be:c6:81:d2:71:8e:78:ce:95:3b:e4:6d:2e:d2:79:f2: 16:a4:67:95:94:40:64:91:c4:42:86:64:16:d7:4e:91:44:9d: 85:f1:53:1e:e8:90:5d:5e:9e:ae:2c:b4:0e:78:20:e4:6d:47: e1:07:b7:7f:2f:85:c0:c7:b7:99:5c:81:f5:f6:7d:22:fc:73: 0c:0c:45:d3:54:0b:ac:17:27:f9:63:a1:04:86:1f:ce:70:f6: 08:5c:e8:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjQxMTIyMTgzMjIzWhcNMjQxMTI5MTgzMjIzWjAYMRYwFAYD VQQDEw02NzQwY2UzNy1mZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg95OV4tqAmlX0KelOtF4G/A15SYyLMtyfZF9U1vkIOOC0PlXV6EhESU0IIL KrjDtNQh67Tu0wOqje3+t6SPMRWGlzCSIkeriiInsAOB4b4oA3uGg17nI0hjCcLN /K64FbZA0SBwuZRoT5HiEvKaYTwgkaYAlNGRTiDvFqkAv3fjuwquqz4eQG4vzJEL 4fq2K4w2xnz+LGhjxrJAWyr3nMefgPNECSDl4hLBaRg8BQHV+XcEQad8D+CA6Lju ABAJwHGHnKMPjBnYx92SE8rLqOVkDz5Jo8kp13Za1MzoAiCVrE8ZQRVK3NJL+Uil B02Kb+iCYfiSClABIGWIuYczQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEgXNfd iY/70jHQXhGQcJ5ngqw2MB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7BrHAvt4e7B8d0uxwvtlLCeAVdSQddV2T6dOjrgB9wPzjQEJv5GCr J8+ak8Ut6NOq6GgBKY6g47ILAWcZ9rsmEddNokrPdlnqlVYYjiEBqE1XlN2c6Yk0 TPyCd1KDMRah8zZ0re3wK++VjaycrLlPGg4lF8uK8r43QOH73ApbPt/uCidddS3A +Crt5iSbRPI+A4yEbdOnMbRPYYk/o/nG5woRzb7GgdJxjnjOlTvkbS7SefIWpGeV lEBkkcRChmQW106RRJ2F8VMe6JBdXp6uLLQOeCDkbUfhB7d/L4XAx7eZXIH19n0i /HMMDEXTVAusFyf5Y6EEhh/OcPYIXOhX -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org