$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: kbg85folrNjVdrRy2NLfgeXGckbs+4P6Xy5ac6yTwTw= Subject key identifier: 60:3F:EC:A6:00:79:3F:09:05:FB:A5:51:9C:C6:B4:69:F2:7B:A6:51 Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 1842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 183A Signing time: Fri 22 Nov 2024 16:31:17 +0000 Manifest this update: Fri 22 Nov 2024 16:31:16 +0000 Manifest next update: Fri 29 Nov 2024 16:31:16 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: qFuM85kwfhi1rZehJm5A7pp7WFnH8Iovxu85/wLovn8=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: 7d3vUmf2cWau9IPd6HfmaD3peDm+FJkYl4xBhieCAd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6210 (0x1842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: Nov 22 16:31:16 2024 GMT Not After : Nov 29 16:31:16 2024 GMT Subject: CN=6740b1d5-b50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:59:a8:02:16:4e:ca:29:d7:b3:e0:83:b0: 5e:ab:68:46:8a:13:a2:ca:74:20:cd:e8:4a:65:e4: 2a:83:55:49:ff:ee:44:57:f8:bf:16:d3:87:09:92: 63:e5:2c:6a:ea:2d:69:7c:68:75:79:df:40:38:97: e2:4a:1b:96:99:75:a8:f4:7c:be:69:5b:1d:64:e9: 39:ea:b7:6c:9c:4b:ef:ba:8a:95:70:d8:7f:a6:a6: 6e:a8:51:fe:77:56:80:f2:f0:ba:6a:b2:6b:dd:56: a3:6a:0e:7a:c4:c9:61:79:0e:07:8b:8c:69:ed:3c: 12:6f:4b:8f:fa:73:89:9c:ac:8b:68:92:b8:8a:1b: 1e:89:72:ef:40:d1:2a:c2:47:d1:cd:2c:22:da:42: 3d:46:7e:26:9e:7b:c4:f4:bc:02:1c:d9:21:e7:3f: 09:77:c4:2e:a3:0f:2c:10:05:76:6e:73:71:23:a2: 01:7b:bb:db:33:d4:7c:95:86:7d:05:fe:ff:7c:0f: a7:d2:d0:f6:df:01:3d:d6:ae:b5:f8:88:0b:e5:01: ee:c3:86:08:51:f8:ca:b4:05:1f:7f:e8:4b:c4:97: 51:d3:63:02:09:ce:23:b9:ae:59:30:51:38:17:c5: b9:d3:3b:ac:73:fd:12:a4:e5:a9:fd:04:56:5b:d9: f4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:EC:A6:00:79:3F:09:05:FB:A5:51:9C:C6:B4:69:F2:7B:A6:51 X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:52:81:d6:19:17:86:ab:35:f6:5b:c2:5e:9c:2a:cd:32:27: e8:8d:87:a0:cf:b3:ab:91:f4:1c:0f:1d:5a:b8:5c:0c:5b:25: c8:0f:54:d4:12:4e:0b:46:72:04:7b:1a:c1:01:12:56:28:d5: d0:8b:10:95:88:87:91:00:ed:95:8b:19:17:0f:17:6b:7d:be: 93:c4:c7:82:c1:e6:5f:5f:8d:60:8d:af:74:26:98:17:74:40: f3:85:6b:c2:92:4e:c6:c1:1b:d8:39:c7:5f:21:47:34:bd:88: 09:8f:b5:5b:9a:74:50:a5:35:b4:a9:06:33:c9:85:86:30:28: 73:c0:1b:fe:be:a8:1c:b8:a9:4c:30:ea:88:4e:e4:e0:d8:4f: 44:35:2b:ed:b7:5e:96:5c:9c:14:77:94:1d:16:c8:0a:c6:81: 83:36:85:5b:18:4e:1b:56:6a:4b:89:b9:a6:a8:ba:a7:0c:f0: d2:0b:c0:38:58:4b:6f:5b:ee:06:15:4c:19:2d:9d:5a:c7:a3: 59:8a:96:6d:14:c9:26:13:e3:5e:7e:61:31:c0:38:20:ea:19: 4d:2e:30:89:8a:f4:ea:bd:99:06:18:9f:a7:7c:56:62:8f:6d: da:87:b9:23:80:2a:ab:1e:ea:33:5b:8d:1f:6c:fd:f5:39:30: 28:d0:fa:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjQxMTIyMTYzMTE2WhcNMjQxMTI5MTYzMTE2WjAYMRYwFAYD VQQDEw02NzQwYjFkNS1iNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wBZqAIWTsop17Pgg7Beq2hGihOiynQgzehKZeQqg1VJ/+5EV/i/FtOHCZJj 5Sxq6i1pfGh1ed9AOJfiShuWmXWo9Hy+aVsdZOk56rdsnEvvuoqVcNh/pqZuqFH+ d1aA8vC6arJr3Vajag56xMlheQ4Hi4xp7TwSb0uP+nOJnKyLaJK4ihseiXLvQNEq wkfRzSwi2kI9Rn4mnnvE9LwCHNkh5z8Jd8Quow8sEAV2bnNxI6IBe7vbM9R8lYZ9 Bf7/fA+n0tD23wE91q61+IgL5QHuw4YIUfjKtAUff+hLxJdR02MCCc4jua5ZMFE4 F8W50zusc/0SpOWp/QRWW9n0RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA/7KYA eT8JBfulUZzGtGnye6ZRMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKUoHWGReGqzX2W8JenCrNMifojYegz7OrkfQcDx1auFwMWyXID1TU Ek4LRnIEexrBARJWKNXQixCViIeRAO2VixkXDxdrfb6TxMeCweZfX41gja90JpgX dEDzhWvCkk7GwRvYOcdfIUc0vYgJj7VbmnRQpTW0qQYzyYWGMChzwBv+vqgcuKlM MOqITuTg2E9ENSvtt16WXJwUd5QdFsgKxoGDNoVbGE4bVmpLibmmqLqnDPDSC8A4 WEtvW+4GFUwZLZ1ax6NZipZtFMkmE+NefmExwDgg6hlNLjCJivTqvZkGGJ+nfFZi j23ah7kjgCqrHuozW40fbP31OTAo0PpI -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:39 2024 by rpki-client on console-fra.rpki-client.org