$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: FOAj99Yw9GJ61HuMh+dkgugYG8tvRe6n7MWEo9QNzcw= Subject key identifier: 77:43:D7:1D:9B:BE:84:57:26:FB:B1:94:C3:6C:74:7D:6A:BD:FA:60 Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0A5A Signing time: Fri 22 Nov 2024 19:26:09 +0000 Manifest this update: Fri 22 Nov 2024 19:26:09 +0000 Manifest next update: Fri 29 Nov 2024 19:26:09 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: UU+FjdCe64ujqY4x1huqYI8GDjhe8Pe8J5OOZ/LpvP0=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: YPiU3wlpM31h+KzYfsNIDINjvGb3OqjaNT5uao3X1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Nov 22 19:26:09 2024 GMT Not After : Nov 29 19:26:09 2024 GMT Subject: CN=6740dad1-05a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:44:e6:0d:c9:00:ff:8c:dc:7b:4d:89:48: 9a:cc:43:b1:be:b3:a3:4d:9b:b1:cb:d5:32:e8:88: e0:ec:49:2a:38:c3:4b:44:01:2a:b2:e7:4d:18:40: f0:01:34:ac:5a:eb:3c:16:b2:b9:f6:f7:99:a5:f7: 8f:97:79:6c:b9:91:5b:f0:c8:32:0a:a1:9b:f1:cb: e3:76:b5:fb:7f:e2:d1:71:cc:b5:c8:9f:59:84:d3: 06:36:07:d4:5b:df:97:16:7f:ac:7a:59:a7:69:af: 84:2e:c4:60:ba:ce:52:8b:7f:d9:e1:18:79:b4:ce: de:17:44:81:61:ae:7c:21:22:69:05:26:f6:68:bc: 77:be:33:1f:7e:81:38:15:2b:5a:33:14:22:62:54: 1b:e8:78:1a:0b:65:23:8c:a3:8c:ff:4a:40:a9:f6: 91:12:1f:0d:b9:a2:b8:8b:4a:6a:bd:60:79:86:38: 8b:29:6a:cd:62:ba:94:47:91:f4:40:24:3e:2a:0b: 60:fa:23:e0:6e:e4:70:26:0b:bc:bd:1b:ef:e7:3b: 2a:87:41:da:a2:a7:01:20:01:f4:94:3b:00:73:7a: 68:52:e3:61:c8:06:ee:de:ed:94:a8:b1:22:64:15: 11:43:0c:03:ad:c3:79:7b:a6:aa:ac:58:2b:f5:e2: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:43:D7:1D:9B:BE:84:57:26:FB:B1:94:C3:6C:74:7D:6A:BD:FA:60 X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:bd:6c:13:21:9f:30:ff:42:36:a0:55:ee:de:1d:b5:c2:69: e5:4c:d7:43:a3:9f:b0:ac:1c:98:50:b3:cf:9b:e2:21:e2:e8: f7:ff:91:00:e5:ac:98:f0:65:3a:a5:05:a6:c0:f6:3f:43:94: d9:8b:c5:4f:17:ce:d0:72:17:59:ef:84:72:4e:73:7e:d5:7f: 2f:04:73:37:5d:ce:62:e3:73:e2:0c:e6:ed:f3:85:8b:8b:b3: f3:3b:78:fe:ba:80:1e:18:3f:77:b8:16:e2:35:6f:71:7d:27: 37:5a:93:d1:32:2c:26:3b:9e:b9:e3:e9:42:9a:1d:b8:e5:04: 01:8c:62:5e:b8:82:56:a8:8d:e9:27:a3:48:12:bb:42:f2:95: a1:aa:32:32:ef:26:ee:af:fe:c9:48:3e:0e:ca:32:4e:67:6c: 01:14:73:d6:69:0f:95:35:0c:ab:b3:4f:f0:0f:93:36:ef:76: 93:80:c7:59:a9:e9:56:fc:55:53:9e:ed:ae:3c:fd:92:c8:4c: 3c:88:fd:95:39:18:64:e3:94:fd:79:eb:fd:66:e6:35:62:ae: 1e:98:d8:fb:d6:a7:44:bd:e1:a7:ea:e5:8c:ee:29:0e:8f:c6: 5d:4c:c8:98:c3:59:75:8c:8d:ee:7b:1b:ae:ef:10:c2:f1:56: 8f:84:fa:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjQxMTIyMTkyNjA5WhcNMjQxMTI5MTkyNjA5WjAYMRYwFAYD VQQDEw02NzQwZGFkMS0wNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYlE5g3JAP+M3HtNiUiazEOxvrOjTZuxy9Uy6Ijg7EkqOMNLRAEqsudNGEDw ATSsWus8FrK59veZpfePl3lsuZFb8MgyCqGb8cvjdrX7f+LRccy1yJ9ZhNMGNgfU W9+XFn+selmnaa+ELsRgus5Si3/Z4Rh5tM7eF0SBYa58ISJpBSb2aLx3vjMffoE4 FStaMxQiYlQb6HgaC2UjjKOM/0pAqfaREh8NuaK4i0pqvWB5hjiLKWrNYrqUR5H0 QCQ+Kgtg+iPgbuRwJgu8vRvv5zsqh0HaoqcBIAH0lDsAc3poUuNhyAbu3u2UqLEi ZBURQwwDrcN5e6aqrFgr9eKqxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdD1x2b voRXJvuxlMNsdH1qvfpgMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAivWwTIZ8w/0I2oFXu3h21wmnlTNdDo5+wrByYULPPm+Ih4uj3/5EA 5ayY8GU6pQWmwPY/Q5TZi8VPF87QchdZ74RyTnN+1X8vBHM3Xc5i43PiDObt84WL i7PzO3j+uoAeGD93uBbiNW9xfSc3WpPRMiwmO5654+lCmh245QQBjGJeuIJWqI3p J6NIErtC8pWhqjIy7ybur/7JSD4OyjJOZ2wBFHPWaQ+VNQyrs0/wD5M273aTgMdZ qelW/FVTnu2uPP2SyEw8iP2VORhk45T9eev9ZuY1Yq4emNj71qdEveGn6uWM7ikO j8ZdTMiYw1l1jI3uexuu7xDC8VaPhPqx -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org