$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json) Hash identifier: ZKXg9fg/5G85Oq6FwXBHZo8xCErxVI7OQ1R4dkgkoWs= Subject key identifier: 39:BE:BD:A7:FE:8E:72:15:D3:CB:47:DD:11:BB:47:D4:48:5A:D1:C4 Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Certificate serial: 3421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft Manifest number: 3421 Signing time: Sun 24 Nov 2024 14:48:55 +0000 Manifest this update: Sun 24 Nov 2024 14:48:55 +0000 Manifest next update: Sun 01 Dec 2024 14:48:55 +0000 Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: FYd6K3CLWE2meqiRqwHsiY2c2mtTRMD9ZNvLFQRaczc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13345 (0x3421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Validity Not Before: Nov 24 14:48:55 2024 GMT Not After : Dec 1 14:48:55 2024 GMT Subject: CN=67433cd7-4545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:99:7c:cd:53:3c:8e:12:8e:83:6c:0c:fa:ca: 90:ce:b9:4a:54:5f:b3:c8:5f:00:39:b4:2f:dc:32: 4b:9a:4f:57:63:33:1a:dc:b2:a1:b6:a9:28:7c:62: a5:09:03:5a:2d:e5:82:6b:bd:99:c2:58:7a:82:27: ba:ea:da:93:19:c1:a9:61:dd:9d:fa:ab:42:4d:a1: 3d:78:3b:76:f4:db:bb:37:7f:ce:94:5f:13:ac:a9: 0e:85:d3:67:78:99:93:5c:73:77:aa:57:01:65:12: 7c:75:e7:25:1a:4d:24:1e:52:f1:e7:b0:90:c2:65: 7b:51:d0:0a:81:91:77:af:cb:a1:c8:be:f7:de:81: 64:f6:f4:5b:86:96:67:cb:90:5c:8c:72:00:0b:4b: a8:bf:25:a3:65:1d:ad:7c:5e:14:bd:e1:52:2a:8c: 07:b2:73:3e:d6:48:fe:59:81:55:23:aa:5b:d7:2e: 48:c8:f7:23:74:37:31:28:c6:91:dc:dc:50:6f:89: f1:e9:e4:47:bc:81:8b:a9:af:dd:d3:9c:5f:1f:1f: 3c:97:da:eb:87:93:50:32:e0:44:5c:11:c0:5e:46: b4:64:df:ff:ff:20:87:77:bf:92:a9:bf:34:18:e6: 48:25:26:7b:b9:2f:29:10:38:c4:33:1f:35:ed:25: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BE:BD:A7:FE:8E:72:15:D3:CB:47:DD:11:BB:47:D4:48:5A:D1:C4 X509v3 Authority Key Identifier: keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f6:33:5c:87:0e:b1:56:8e:02:04:67:6b:2d:b1:3f:cf:fd: 6c:62:bb:dd:47:32:cc:da:43:cb:90:18:0e:3d:a3:99:16:e4: 3c:d9:aa:0c:ad:17:89:c2:3a:e4:59:dc:04:cf:a5:00:5d:d2: fb:69:cd:72:be:99:46:49:07:cf:3c:02:77:53:f6:4d:04:2f: c4:91:7a:fd:7c:a1:a3:84:20:2d:30:c4:c3:b0:c5:92:e5:cb: 9d:13:95:e5:2e:f9:b5:e3:59:e7:3f:66:59:d0:54:f1:6c:75: eb:8e:92:54:86:bc:be:5b:76:39:12:04:1b:2b:8a:ee:f1:07: 8f:58:bb:54:25:7e:03:1d:4d:bf:14:f4:43:78:e9:de:ad:cc: ed:cb:5d:75:2e:5e:65:7b:fb:5d:5a:71:9a:38:f2:6b:08:39: ef:41:b5:4c:91:21:bf:34:4c:70:58:f8:f1:a0:8e:88:df:28: 1b:bf:04:1a:df:5a:66:fd:13:3e:77:2d:83:e9:47:e2:a4:ee: ab:2e:6f:19:c1:d1:c2:1f:2d:8c:31:d3:ca:38:ee:7c:b8:23: 5f:91:8e:62:d5:86:c9:04:27:d8:c6:dc:d0:2a:54:99:c7:d5: 05:37:98:69:c0:44:7c:8e:b4:c1:c9:2d:4e:8f:f5:51:5a:ac: 1c:5e:26:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyMzQxMTAvBgNVBAUTKDg5MEExRTVDQ0MxRUM2QzdDRTFFQTcxRjQ5MTI5MTFG NTk5Mjg2QjIwHhcNMjQxMTI0MTQ0ODU1WhcNMjQxMjAxMTQ0ODU1WjAYMRYwFAYD VQQDEw02NzQzM2NkNy00NTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15l8zVM8jhKOg2wM+sqQzrlKVF+zyF8AObQv3DJLmk9XYzMa3LKhtqkofGKl CQNaLeWCa72Zwlh6gie66tqTGcGpYd2d+qtCTaE9eDt29Nu7N3/OlF8TrKkOhdNn eJmTXHN3qlcBZRJ8declGk0kHlLx57CQwmV7UdAKgZF3r8uhyL733oFk9vRbhpZn y5BcjHIAC0uovyWjZR2tfF4UveFSKowHsnM+1kj+WYFVI6pb1y5IyPcjdDcxKMaR 3NxQb4nx6eRHvIGLqa/d05xfHx88l9rrh5NQMuBEXBHAXka0ZN///yCHd7+Sqb80 GOZIJSZ7uS8pEDjEMx817SVHZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm+vaf+ jnIV08tH3RG7R9RIWtHEMB8GA1UdIwQYMBaAFIkKHlzMHsbHzh6nH0kSkR9Zkoay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjIzNC81MjI1NjkxNDFE OTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhzZk9IcWNmU1JLUkgxbVNo ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRb2VYTXdleHNmT0hxY2ZTUktSSDFtU2hySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjIzNC81MjI1NjkxNDFEOTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhz Zk9IcWNmU1JLUkgxbVNockkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX9jNchw6xVo4CBGdrLbE/z/1sYrvdRzLM2kPLkBgOPaOZFuQ82aoM rReJwjrkWdwEz6UAXdL7ac1yvplGSQfPPAJ3U/ZNBC/EkXr9fKGjhCAtMMTDsMWS 5cudE5XlLvm141nnP2ZZ0FTxbHXrjpJUhry+W3Y5EgQbK4ru8QePWLtUJX4DHU2/ FPRDeOnerczty111Ll5le/tdWnGaOPJrCDnvQbVMkSG/NExwWPjxoI6I3ygbvwQa 31pm/RM+dy2D6UfipO6rLm8ZwdHCHy2MMdPKOO58uCNfkY5i1YbJBCfYxtzQKlSZ x9UFN5hpwER8jrTByS1Oj/VRWqwcXiYM -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:58 2024 by rpki-client on console-ams.rpki-client.org