$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: Tkojg9FCtjHhmCBo2veBrFD7ZeH7CfS9RJNeM2YCsGs= Subject key identifier: DC:EE:67:7C:90:F2:A9:81:63:91:2C:0E:21:07:3C:79:51:02:9C:33 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: DB Signing time: Thu 21 Nov 2024 03:42:21 +0000 Manifest this update: Thu 21 Nov 2024 03:42:21 +0000 Manifest next update: Thu 28 Nov 2024 03:42:21 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: OwPTUsdM77yBdTwMVN149em9fg86kCi5AOTjhoQjkSs=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: K64KDPi5IA1n4NsggDwjziZoO8m7GMY/mXI66wYP0r0=) 3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: NwxdRlAk907NKJkhCsTkOJalcdDOfSPPue8UDy8L6vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Nov 21 03:42:21 2024 GMT Not After : Nov 28 03:42:21 2024 GMT Subject: CN=673eac1d-b1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:5b:5f:17:92:79:c5:5e:9a:51:dc:4b:79: b3:c9:1f:fd:c6:94:09:4e:0c:67:0e:3f:86:fe:8d: ec:f4:42:d9:b5:71:05:d6:76:22:d3:9f:52:e1:c2: 39:f4:41:d9:29:7a:64:cc:72:93:c3:2e:19:a4:66: ce:aa:b3:55:d9:6d:7b:f6:38:92:ba:ea:f1:1f:6d: bd:51:74:23:b9:0f:f2:e8:8c:b4:df:49:d4:b1:8c: 32:0d:8d:55:cf:b9:0f:a9:fa:4c:c9:be:02:66:29: 36:90:0f:97:22:33:9f:a5:2c:85:03:c1:1f:55:a6: 9b:6a:ad:1c:3a:1a:d9:ff:9c:c1:34:a9:be:91:15: c8:c0:f1:a8:87:ba:aa:d5:f9:3f:36:96:c2:ce:76: 65:24:04:7f:4e:0c:79:3a:41:fb:6f:6c:0b:f6:32: 80:c9:82:8a:e6:49:0c:50:68:b9:12:9f:a0:68:25: 2a:74:63:32:47:5d:b2:d3:e1:7b:25:86:23:fb:2e: 13:63:6b:93:80:2a:d0:9e:4f:2f:7e:1e:51:1c:71: df:13:e3:c3:2a:a6:19:96:78:1a:5c:47:ca:19:4f: d3:2a:44:76:ec:f3:21:9a:f3:ed:0d:df:e7:86:f8: e3:8a:a1:c5:96:30:b7:e8:c7:05:71:9e:15:cd:4d: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EE:67:7C:90:F2:A9:81:63:91:2C:0E:21:07:3C:79:51:02:9C:33 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5e:f5:91:5f:0a:1c:0b:d6:45:bf:6a:b2:f4:54:cb:44:77: 81:ea:88:e1:b2:83:bf:89:33:51:8b:de:e7:84:15:72:f0:46: 47:85:ef:e8:b9:a7:fd:25:05:54:ee:52:95:95:c5:52:54:ca: 63:76:c0:50:2d:20:fb:9c:c7:eb:8f:1c:b6:0b:d0:c6:c8:9e: f4:a7:ea:da:97:7f:9e:12:85:82:41:c1:7f:39:e7:55:01:d7: 03:b4:48:08:54:fb:e5:3d:db:f0:49:06:e1:56:53:40:bb:ff: 9f:ac:da:55:2e:5b:d1:52:eb:22:f2:3f:74:a6:9a:2c:4c:82: 91:4b:d2:24:2a:8a:00:4e:c2:5f:53:06:91:ab:38:b6:a5:31: 8e:d9:08:ff:21:95:a5:d4:26:fa:60:fd:a2:35:9f:ff:69:2d: 4d:16:7f:84:17:84:6a:3f:a5:f4:ba:29:b3:cb:d7:92:1d:4d: f8:76:d4:c9:0c:eb:b9:93:78:42:a0:28:9e:3f:78:1d:d0:4f: eb:78:f1:fc:e7:9e:10:0f:9e:31:17:1d:57:9b:34:50:c5:e3: de:6b:cf:d4:42:a0:f9:85:59:a5:1b:f0:8f:b3:20:6c:1f:6d: 2f:0e:ea:2b:de:64:11:04:05:96:fc:8a:79:60:fc:ad:a2:81: fa:0a:cf:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjQxMTIxMDM0MjIxWhcNMjQxMTI4MDM0MjIxWjAYMRYwFAYD VQQDEw02NzNlYWMxZC1iMWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfpbXxeSecVemlHcS3mzyR/9xpQJTgxnDj+G/o3s9ELZtXEF1nYi059S4cI5 9EHZKXpkzHKTwy4ZpGbOqrNV2W179jiSuurxH229UXQjuQ/y6Iy030nUsYwyDY1V z7kPqfpMyb4CZik2kA+XIjOfpSyFA8EfVaabaq0cOhrZ/5zBNKm+kRXIwPGoh7qq 1fk/NpbCznZlJAR/Tgx5OkH7b2wL9jKAyYKK5kkMUGi5Ep+gaCUqdGMyR12y0+F7 JYYj+y4TY2uTgCrQnk8vfh5RHHHfE+PDKqYZlngaXEfKGU/TKkR27PMhmvPtDd/n hvjjiqHFljC36McFcZ4VzU3bTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzuZ3yQ 8qmBY5EsDiEHPHlRApwzMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhXvWRXwocC9ZFv2qy9FTLRHeB6ojhsoO/iTNRi97nhBVy8EZHhe/o uaf9JQVU7lKVlcVSVMpjdsBQLSD7nMfrjxy2C9DGyJ70p+ral3+eEoWCQcF/OedV AdcDtEgIVPvlPdvwSQbhVlNAu/+frNpVLlvRUusi8j90pposTIKRS9IkKooATsJf UwaRqzi2pTGO2Qj/IZWl1Cb6YP2iNZ//aS1NFn+EF4RqP6X0uimzy9eSHU34dtTJ DOu5k3hCoCieP3gd0E/rePH8554QD54xFx1XmzRQxePea8/UQqD5hVmlG/CPsyBs H20vDuor3mQRBAWW/Ip5YPytooH6Cs9c -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org