$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: k/6gTBGsF8XITvnvEmZwjMDPiFKo7HjYa5maVzBFWxg= Subject key identifier: F3:2A:7D:A0:E3:3D:8C:E3:08:0D:40:34:EF:4F:95:4B:B3:B5:14:CC Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: 34 Signing time: Thu 21 Nov 2024 05:39:36 +0000 Manifest this update: Thu 21 Nov 2024 05:39:35 +0000 Manifest next update: Thu 28 Nov 2024 05:39:35 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: k2YkDtKPs2hOflsvZPs/514OfzSvHEsdXq87EfATeP0=) 2: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (hash: /YYAM/ja0JhV/6iA5BWq6W3oPILiMBn35Hx66aO0FaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Nov 21 05:39:35 2024 GMT Not After : Nov 28 05:39:35 2024 GMT Subject: CN=673ec798-03d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:d5:35:27:9a:3b:17:20:22:d1:ea:0c:09: 3f:a6:a6:a4:a7:bc:0d:7d:19:22:9f:5e:6d:76:45: 3d:f3:63:a0:85:5e:27:4c:35:35:12:84:ef:90:ed: f3:71:3b:41:ea:34:a6:e1:f4:bf:e0:ed:0b:13:80: be:f4:4c:60:31:38:24:38:a7:c3:ee:09:64:53:51: 48:d8:30:dc:af:d1:62:cd:68:c7:6e:f0:6c:ac:ee: b7:c3:58:a7:30:91:1c:c9:ef:72:58:a1:88:67:4c: 0c:d2:32:f9:df:2e:6e:9e:c4:5a:9b:53:57:d7:2a: dc:10:18:35:d8:a6:88:7f:e6:6c:45:f3:d0:61:38: 03:40:f7:68:d3:80:85:8c:22:4e:70:73:59:a1:d6: 69:ac:ef:92:3b:2f:db:5f:89:b5:74:d5:32:d5:e7: 14:9f:ae:e9:97:f7:2e:a5:0c:03:bd:3c:90:e1:b3: a9:09:e7:4d:79:7d:b6:4a:68:3e:fd:86:7e:18:27: 9b:e8:93:30:8f:46:f1:3e:6c:69:42:27:4e:dc:a9: 57:92:5d:d1:2f:b3:bd:da:5f:cf:68:fc:2c:94:a6: bd:35:6a:e5:68:19:86:c9:f1:7c:20:5c:93:80:c8: e0:54:db:28:83:b5:b8:40:fd:9c:6e:fe:55:38:49: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2A:7D:A0:E3:3D:8C:E3:08:0D:40:34:EF:4F:95:4B:B3:B5:14:CC X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:38:86:20:c5:63:51:cc:40:8d:0e:c8:ce:c5:12:d0:b7:e0: 33:a8:22:83:0e:9d:07:69:a1:38:c4:7f:82:f1:c1:78:21:f3: 0f:3c:f4:25:45:57:dd:41:cf:24:f0:20:0c:be:2b:07:8c:e9: 8c:de:c5:ef:61:db:7b:42:9c:b9:cd:50:34:2b:4c:3c:9b:91: 02:ca:30:8b:45:79:6d:19:f2:53:b3:00:c4:3f:b0:97:47:78: 8b:43:f4:1a:69:a4:ee:49:a7:38:64:19:d3:8b:7a:4b:44:1a: 34:74:72:06:45:8b:8c:50:b7:ec:2f:5a:25:c7:46:0f:dc:c3: fd:a0:45:0d:17:cf:68:ef:8e:9c:01:8b:ba:ac:97:9b:43:3b: 9a:20:bf:43:64:ee:d5:29:22:58:86:01:69:7c:e0:00:93:96: e9:99:3a:e7:7a:1b:1c:35:7f:98:92:b0:c8:37:20:b6:c5:12: ee:3e:9a:df:53:4a:2b:65:a8:46:3e:5a:b7:33:76:c9:1b:9e: 41:ed:cd:e2:ec:ae:2d:a9:ac:40:35:88:c4:8a:4c:07:bf:11: ad:1f:d9:11:75:f7:b3:ee:3f:b1:36:b6:20:c9:af:f8:20:41: 42:32:d7:8c:42:e1:51:5e:54:ed:db:90:7e:02:e7:7c:ae:cb: 1f:66:64:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MjJCMzExMC8GA1UEBRMoMjNDMEIyRDdBQ0UxMDlEM0RGRTgzQUVCRUYyRUEzMTQ5 QzVDQUMxNzAeFw0yNDExMjEwNTM5MzVaFw0yNDExMjgwNTM5MzVaMBgxFjAUBgNV BAMTDTY3M2VjNzk4LTAzZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuxtU1J5o7FyAi0eoMCT+mpqSnvA19GSKfXm12RT3zY6CFXidMNTUShO+Q7fNx O0HqNKbh9L/g7QsTgL70TGAxOCQ4p8PuCWRTUUjYMNyv0WLNaMdu8Gys7rfDWKcw kRzJ73JYoYhnTAzSMvnfLm6exFqbU1fXKtwQGDXYpoh/5mxF89BhOANA92jTgIWM Ik5wc1mh1mms75I7L9tfibV01TLV5xSfrumX9y6lDAO9PJDhs6kJ5015fbZKaD79 hn4YJ5vokzCPRvE+bGlCJ07cqVeSXdEvs73aX89o/CyUpr01auVoGYbJ8XwgXJOA yOBU2yiDtbhA/Zxu/lU4SRqvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8yp9oOM9 jOMIDUA070+VS7O1FMwwHwYDVR0jBBgwFoAUI8Cy16zhCdPf6Drr7y6jFJxcrBcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyMkIzLzVFNEQ0NzYyNUI5 RjExRUZBMTRCQkI1Q0M0RjlBRTAyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JC Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSThDeTE2emhDZFBmNkRycjd5NmpGSnhjckJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy MkIzLzVFNEQ0NzYyNUI5RjExRUZBMTRCQkI1Q0M0RjlBRTAyL0k4Q3kxNnpoQ2RQ ZjZEcnI3eTZqRkp4Y3JCYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABE4hiDFY1HMQI0OyM7FEtC34DOoIoMOnQdpoTjEf4LxwXgh8w889CVF V91BzyTwIAy+KweM6Yzexe9h23tCnLnNUDQrTDybkQLKMItFeW0Z8lOzAMQ/sJdH eItD9BpppO5JpzhkGdOLektEGjR0cgZFi4xQt+wvWiXHRg/cw/2gRQ0Xz2jvjpwB i7qsl5tDO5ogv0Nk7tUpIliGAWl84ACTlumZOud6Gxw1f5iSsMg3ILbFEu4+mt9T SitlqEY+WrczdskbnkHtzeLsri2prEA1iMSKTAe/Ea0f2RF197PuP7E2tiDJr/gg QUIy14xC4VFeVO3bkH4C53yuyx9mZCI= -----END CERTIFICATE-----Generated at Thu Nov 21 07:39:59 2024 by rpki-client on console-ams.rpki-client.org