$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft File: ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json) Hash identifier: qcqhSP2vHxi2LNoLjUVXLeLY7Vk5VzJ8tu3Fi5Dqf5Q= Subject key identifier: B3:C6:76:FE:72:03:59:07:6D:A9:DE:F2:D9:9D:1C:41:16:C6:31:7E Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 Certificate issuer: /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft Manifest number: 0205 Signing time: Thu 21 Nov 2024 01:35:58 +0000 Manifest this update: Thu 21 Nov 2024 01:35:57 +0000 Manifest next update: Thu 28 Nov 2024 01:35:57 +0000 Files and hashes: 1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: 7Z6T7eSWlAvZoDWuM4JWpHLxSg3tF0IBYi9vqhEWFxw=) 2: A1FA613614AF11ED8CE9335EC4F9AE02.roa (hash: FA1bepThm+QVvw1q0u8zzYFpqsnzknERutF0jYbh+Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Validity Not Before: Nov 21 01:35:57 2024 GMT Not After : Nov 28 01:35:57 2024 GMT Subject: CN=673e8e7e-4fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:b4:e1:e8:26:0c:6c:42:ca:81:93:85:95: e7:0c:bf:69:78:d9:07:3b:37:16:9d:ea:9d:9a:89: 7d:a8:fd:aa:13:9b:f5:65:63:cc:7e:78:b2:70:d9: 0e:97:58:ca:af:e8:a4:8b:84:5d:39:91:7d:1a:0e: 08:90:3b:e4:5e:be:3d:7b:3b:c2:6a:a8:21:d2:20: bc:b9:6a:91:4c:88:39:8c:37:db:c0:33:eb:cb:b4: d9:1b:21:bc:15:22:e0:79:85:75:21:60:46:cd:aa: 91:28:f9:76:24:5c:94:16:a4:61:50:6f:e2:3d:81: f3:2b:e6:12:bc:86:31:f4:a5:44:0e:e3:9b:ef:61: eb:90:81:ff:5e:8e:2b:ea:de:fd:4a:e9:ee:5b:c2: 57:50:d9:05:be:94:4d:d8:d3:0a:5e:78:66:f1:59: 10:44:57:34:f0:c2:5c:58:3f:35:f5:44:ef:aa:60: 78:99:b0:c8:b1:02:0a:cb:11:1a:1c:99:bd:aa:c9: 30:4f:97:10:29:3c:00:a7:3d:01:81:b1:d9:2b:d5: 4a:ac:c8:1e:bf:46:07:21:24:fc:58:f8:fe:82:28: f6:57:7b:6a:b1:e6:be:35:02:61:a7:56:81:30:eb: ff:33:94:54:6e:bd:03:ba:88:7c:8c:d7:1e:74:67: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C6:76:FE:72:03:59:07:6D:A9:DE:F2:D9:9D:1C:41:16:C6:31:7E X509v3 Authority Key Identifier: keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f9:b6:a6:cb:8f:fc:e6:4c:4c:62:3c:f2:e6:00:5e:58:9b: 59:15:82:16:72:54:bd:f3:8a:8f:94:9e:b0:94:b4:f0:d4:4b: ec:de:32:a4:a9:08:6e:0a:6c:9e:2c:d3:fa:d4:98:e9:b0:66: f7:65:5d:67:20:af:7f:50:e9:dc:33:90:b9:40:13:4c:b9:6c: 79:8e:d1:3a:a2:25:3f:55:56:68:b3:de:c5:9e:5e:20:3e:b3: 27:3e:f7:a9:92:89:12:02:6a:3d:86:a2:db:b6:79:57:d1:96: 74:50:35:08:05:0b:6f:c5:1c:12:95:99:e5:31:39:c6:c8:5d: 48:0d:78:9a:36:79:7e:e5:f4:e8:ab:99:42:37:46:84:28:ab: e3:e6:2b:f8:38:5b:a9:ff:76:c4:45:46:44:77:24:92:3a:fc: 78:c0:a1:f4:7d:4f:47:1d:93:5b:b6:95:99:f0:98:e3:47:7b: e6:3d:1c:4e:c7:db:ee:c0:d6:fe:b7:f2:73:1e:08:cb:d6:4a: 99:8f:3a:b5:f3:8b:96:58:75:21:3c:58:1a:6e:86:36:cb:7d: 8e:8c:af:52:66:98:bb:b9:02:bc:a6:1b:19:12:ac:a8:ba:b5: fe:be:78:8b:b6:1c:a8:58:2b:45:27:1d:24:65:03:65:24:aa: c1:15:50:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzRDQxMTAvBgNVBAUTKDhBMzM5MTk1RTJDRTI5NzVCNUY3ODk5QTNEMDJDRTYy RUY5MUJGMzkwHhcNMjQxMTIxMDEzNTU3WhcNMjQxMTI4MDEzNTU3WjAYMRYwFAYD VQQDEw02NzNlOGU3ZS00ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoa04egmDGxCyoGThZXnDL9peNkHOzcWneqdmol9qP2qE5v1ZWPMfniycNkO l1jKr+iki4RdOZF9Gg4IkDvkXr49ezvCaqgh0iC8uWqRTIg5jDfbwDPry7TZGyG8 FSLgeYV1IWBGzaqRKPl2JFyUFqRhUG/iPYHzK+YSvIYx9KVEDuOb72HrkIH/Xo4r 6t79SunuW8JXUNkFvpRN2NMKXnhm8VkQRFc08MJcWD819UTvqmB4mbDIsQIKyxEa HJm9qskwT5cQKTwApz0BgbHZK9VKrMgev0YHIST8WPj+gij2V3tqsea+NQJhp1aB MOv/M5RUbr0Duoh8jNcedGdmZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPGdv5y A1kHbane8tmdHEEWxjF+MB8GA1UdIwQYMBaAFIozkZXizil1tfeJmj0CzmLvkb85 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODNENC9GNkJFODY5NjE0 QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tYVzE5NG1hUFFMT1l1LVJ2 emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqT1JsZUxPS1hXMTk0bWFQUUxPWXUtUnZ6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODNENC9GNkJFODY5NjE0QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tY VzE5NG1hUFFMT1l1LVJ2emsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8+bamy4/85kxMYjzy5gBeWJtZFYIWclS984qPlJ6wlLTw1Evs3jKk qQhuCmyeLNP61JjpsGb3ZV1nIK9/UOncM5C5QBNMuWx5jtE6oiU/VVZos97Fnl4g PrMnPvepkokSAmo9hqLbtnlX0ZZ0UDUIBQtvxRwSlZnlMTnGyF1IDXiaNnl+5fTo q5lCN0aEKKvj5iv4OFup/3bERUZEdySSOvx4wKH0fU9HHZNbtpWZ8JjjR3vmPRxO x9vuwNb+t/JzHgjL1kqZjzq184uWWHUhPFgaboY2y32OjK9SZpi7uQK8phsZEqyo urX+vniLthyoWCtFJx0kZQNlJKrBFVCl -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:50 2024 by rpki-client on console-fra.rpki-client.org