$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json) Hash identifier: QMqMD2Nm2RXvBxKKWcsAmdS554so9SRY/aL45+SCNgY= Subject key identifier: 5A:ED:4D:04:B1:1B:8B:63:14:C8:B8:F1:3C:AF:2B:A7:80:3A:4D:47 Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft Manifest number: 0152 Signing time: Sat 23 Nov 2024 02:30:39 +0000 Manifest this update: Sat 23 Nov 2024 02:30:38 +0000 Manifest next update: Sat 30 Nov 2024 02:30:38 +0000 Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: 8t4ow8uOy4u9P5RPrplagrgxS+o0DIWrOaQaAh0M3Dk=) 2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: c8qsy6Ai7aK2W2nI3RvEEZhRhyIrZcGTRTKb5B3tQmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: Nov 23 02:30:38 2024 GMT Not After : Nov 30 02:30:38 2024 GMT Subject: CN=67413e4e-0e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:1d:a0:7a:22:1f:d1:35:5f:4f:1b:4d:d5: 65:63:ca:e0:f3:a7:de:b6:7c:bb:ce:57:70:58:dd: 3f:7a:4b:58:17:0a:39:68:21:da:15:a0:13:ed:68: e5:2f:40:4e:42:f1:02:0c:69:b5:5c:e5:6f:69:35: 19:ad:80:01:e8:ed:c1:d1:7d:3f:15:58:08:d2:44: 07:79:a2:9c:d1:30:bf:6a:a3:46:76:5d:9a:a3:3f: b7:f0:e6:8e:05:ad:52:bb:7a:fa:0c:61:ae:0a:20: c1:d4:ed:6f:5d:8e:4a:f8:01:84:22:e1:87:cc:1a: 53:95:79:4e:e7:f7:b9:d0:25:92:05:85:02:81:f8: 57:40:f3:a4:8c:4e:fe:a2:c6:19:3d:f9:14:2d:ff: 4c:5e:4d:58:a9:4b:4a:1a:57:6d:4b:38:cb:8f:8d: 01:3f:05:89:b7:81:81:78:51:81:95:fe:f5:21:c7: 96:03:50:ae:94:63:3b:d1:66:01:33:e3:48:74:4f: 9f:83:5a:9f:ed:0c:a9:5f:8a:82:b5:b3:d4:8a:cb: df:ff:fa:90:3f:34:5c:10:4d:2c:f0:06:65:9d:43: 6e:06:59:ec:9c:36:ab:fd:7c:f2:07:03:fa:a1:ce: 87:80:d4:f9:83:24:54:88:5b:f4:86:29:13:49:16: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:4D:04:B1:1B:8B:63:14:C8:B8:F1:3C:AF:2B:A7:80:3A:4D:47 X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:28:4b:22:fb:0c:d1:b0:98:2f:2c:bc:9b:ad:e9:71:46:c9: 4b:f7:e9:c5:e3:69:a1:1e:c3:45:ab:3b:85:0f:0f:e5:09:c9: f2:65:88:34:f3:af:3a:42:78:25:51:28:50:9e:83:02:7f:72: 48:87:ce:1b:27:b9:08:23:84:82:54:e0:c5:f3:3a:f1:17:c5: 75:f8:b4:fe:6c:fc:74:80:c1:c2:f1:77:3f:68:41:85:53:0e: f8:f7:db:b6:81:11:0f:98:ca:04:1d:7d:0c:df:a8:ef:08:04: 70:ea:e6:ca:ad:82:4b:82:51:52:e3:fb:89:ae:5d:53:35:76: e7:5d:4b:bd:fd:07:e4:51:87:fc:da:71:2b:1f:57:5a:b6:50: 6a:94:da:39:8f:5b:c0:97:d4:af:a8:e8:d8:1a:38:de:c6:23: e2:77:2f:8a:91:12:db:27:7c:f6:ef:9b:fc:5a:29:a4:4c:41: 61:f7:37:ac:9a:0a:76:6c:28:7c:08:fb:3d:3b:1f:35:45:bc: dd:81:a4:c2:80:63:09:85:d3:b3:9e:1f:9b:4c:b3:e5:ca:21: e6:ad:1a:8a:57:a5:b6:db:01:82:2b:77:29:a4:19:5c:8b:e7: 7b:1c:55:c9:82:fe:01:e5:50:8d:66:b2:49:52:3e:88:ef:28: 26:98:97:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjQxMTIzMDIzMDM4WhcNMjQxMTMwMDIzMDM4WjAYMRYwFAYD VQQDEw02NzQxM2U0ZS0wZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1YdoHoiH9E1X08bTdVlY8rg86fetny7zldwWN0/ektYFwo5aCHaFaAT7Wjl L0BOQvECDGm1XOVvaTUZrYAB6O3B0X0/FVgI0kQHeaKc0TC/aqNGdl2aoz+38OaO Ba1Su3r6DGGuCiDB1O1vXY5K+AGEIuGHzBpTlXlO5/e50CWSBYUCgfhXQPOkjE7+ osYZPfkULf9MXk1YqUtKGldtSzjLj40BPwWJt4GBeFGBlf71IceWA1CulGM70WYB M+NIdE+fg1qf7QypX4qCtbPUisvf//qQPzRcEE0s8AZlnUNuBlnsnDar/XzyBwP6 oc6HgNT5gyRUiFv0hikTSRY5RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrtTQSx G4tjFMi48TyvK6eAOk1HMB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhC U0pTM25NbjlkekVieDhveGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJKEsi+wzRsJgvLLybrelxRslL9+nF42mhHsNFqzuFDw/lCcnyZYg0 8686QnglUShQnoMCf3JIh84bJ7kII4SCVODF8zrxF8V1+LT+bPx0gMHC8Xc/aEGF Uw7499u2gREPmMoEHX0M36jvCARw6ubKrYJLglFS4/uJrl1TNXbnXUu9/QfkUYf8 2nErH1datlBqlNo5j1vAl9SvqOjYGjjexiPidy+KkRLbJ3z275v8WimkTEFh9zes mgp2bCh8CPs9Ox81RbzdgaTCgGMJhdOznh+bTLPlyiHmrRqKV6W22wGCK3cppBlc i+d7HFXJgv4B5VCNZrJJUj6I7ygmmJfa -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org