$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json) Hash identifier: LUU60lFEmdax/FBm5+WM1wio5unb1djO5AHbJ79x26A= Subject key identifier: 78:CA:A3:E6:07:43:BC:DB:0C:1C:40:C6:45:98:A3:CB:99:EA:B8:65 Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft Manifest number: 0D Signing time: Thu 21 Nov 2024 06:11:58 +0000 Manifest this update: Thu 21 Nov 2024 06:11:57 +0000 Manifest next update: Thu 28 Nov 2024 06:11:57 +0000 Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: k2rZPLzNwgSNegelOl8ojO5QKVQdPoPCmriRfbWeq04=) 2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Validity Not Before: Nov 21 06:11:57 2024 GMT Not After : Nov 28 06:11:57 2024 GMT Subject: CN=673ecf2d-5b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:dd:6b:1d:6c:10:5e:23:f5:90:3e:8a:b1: 27:be:08:4f:34:35:e2:8e:d7:d2:e9:e7:57:88:d5: 62:4b:a3:dd:98:c8:b1:94:4a:65:56:c1:07:d8:ae: 0b:b5:3a:a5:f2:9c:4f:50:6f:0e:2a:03:f3:64:20: 82:51:7f:04:3e:be:e5:a5:43:9a:dd:68:00:3a:2e: e4:d9:ad:1a:aa:1c:fa:78:3e:fb:8f:00:2f:a2:57: 70:f5:08:07:98:5e:48:25:3b:90:0a:c0:e2:d5:4b: c8:22:7c:cb:8f:b7:17:4e:08:71:b0:ed:ec:2f:b5: 0d:83:ff:2f:15:4c:8d:7d:17:97:4d:ee:1b:d1:3e: f9:61:25:95:f2:59:e4:50:84:82:17:9a:c4:b4:92: 72:60:98:fb:b5:7f:25:0f:a4:8c:17:52:64:50:80: 6a:74:ea:26:ea:2f:fe:2a:0b:77:4c:b4:dd:5e:d2: 75:ad:12:f4:2b:d7:d3:e5:42:3e:49:e4:ab:c4:34: 17:4b:d7:20:1d:0a:db:30:17:34:6b:e5:ac:36:43: 4d:e4:b6:19:50:54:d5:2d:0e:ef:29:1c:d7:6b:65: 71:b2:0e:e1:a9:32:45:fb:e6:39:db:a4:21:60:a7: 4a:f2:5d:77:3a:eb:70:a2:0e:84:d4:41:c3:58:ce: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CA:A3:E6:07:43:BC:DB:0C:1C:40:C6:45:98:A3:CB:99:EA:B8:65 X509v3 Authority Key Identifier: keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e9:a0:39:03:4f:48:98:7f:90:62:77:ff:46:29:e0:81:df: 07:62:ec:8e:1c:31:4f:24:2a:a1:66:a5:24:3d:b5:78:62:98: af:3f:bd:31:66:21:dc:96:8d:79:dc:91:8f:d6:db:1c:1f:a5: ad:8c:73:d9:74:66:d8:a9:e1:fa:19:19:6a:bb:ee:99:40:a8: 8a:19:3a:3a:3e:90:c1:b6:62:cf:4e:ed:ed:ab:93:d6:5b:8b: 4b:44:f0:be:5d:58:65:2e:d4:1c:ec:67:4c:6f:85:a3:2a:36: a6:b0:ba:46:25:5f:1e:4f:61:43:9f:9b:dc:b3:ac:30:be:a4: 14:52:07:99:79:03:c5:50:6e:04:3e:76:32:8d:75:a2:5f:56: a3:5c:9b:09:fb:e0:03:83:83:b4:65:b9:6a:f8:9c:20:7d:62: 3b:3c:48:f5:33:2f:88:78:85:77:ca:a8:ce:57:ec:c8:ca:8e: 21:f8:54:32:89:57:35:ec:c2:26:fe:9d:d8:2b:06:2c:79:92: a8:3e:84:e7:75:6c:11:07:f8:31:c8:7f:81:ac:40:a7:27:a9: 4e:3a:fc:54:30:b3:68:0a:55:58:70:67:83:22:74:0e:1e:c0: fb:4b:08:92:dd:a1:ed:84:e5:a7:78:37:a1:d5:15:14:aa:ad: 93:e9:a1:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUE0NjExMC8GA1UEBRMoOEIxNTQ0MEFFMjI2Qzk5MEZDOUU1NTkxNUZFOEM5NTA5 QkNCNjY3NjAeFw0yNDExMjEwNjExNTdaFw0yNDExMjgwNjExNTdaMBgxFjAUBgNV BAMTDTY3M2VjZjJkLTViNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9TN1rHWwQXiP1kD6KsSe+CE80NeKO19Lp51eI1WJLo92YyLGUSmVWwQfYrgu1 OqXynE9Qbw4qA/NkIIJRfwQ+vuWlQ5rdaAA6LuTZrRqqHPp4PvuPAC+iV3D1CAeY XkglO5AKwOLVS8gifMuPtxdOCHGw7ewvtQ2D/y8VTI19F5dN7hvRPvlhJZXyWeRQ hIIXmsS0knJgmPu1fyUPpIwXUmRQgGp06ibqL/4qC3dMtN1e0nWtEvQr19PlQj5J 5KvENBdL1yAdCtswFzRr5aw2Q03kthlQVNUtDu8pHNdrZXGyDuGpMkX75jnbpCFg p0ryXXc663CiDoTUQcNYzrtHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeMqj5gdD vNsMHEDGRZijy5nquGUwHwYDVR0jBBgwFoAUixVECuImyZD8nlWRX+jJUJvLZnYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0Q0MzcxMTEyOUMx MTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXhWRUN1SW15WkQ4bmxXUlgtakpVSnZMWm5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTQ2L0Q0MzcxMTEyOUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlteVpE OG5sV1JYLWpKVUp2TFpuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGrpoDkDT0iYf5Bid/9GKeCB3wdi7I4cMU8kKqFmpSQ9tXhimK8/vTFm IdyWjXnckY/W2xwfpa2Mc9l0Ztip4foZGWq77plAqIoZOjo+kMG2Ys9O7e2rk9Zb i0tE8L5dWGUu1BzsZ0xvhaMqNqawukYlXx5PYUOfm9yzrDC+pBRSB5l5A8VQbgQ+ djKNdaJfVqNcmwn74AODg7RluWr4nCB9Yjs8SPUzL4h4hXfKqM5X7MjKjiH4VDKJ VzXswib+ndgrBix5kqg+hOd1bBEH+DHIf4GsQKcnqU46/FQws2gKVVhwZ4MidA4e wPtLCJLdoe2E5ad4N6HVFRSqrZPpoSw= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org