$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json) Hash identifier: 40LQ2ymrPLcZ9vmgKy7NXLlR/QNpnzMLrYin7TC4HCI= Subject key identifier: 17:CB:9A:35:5B:8F:CC:1F:28:29:42:2F:2E:B0:50:14:0A:B6:96:3A Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft Manifest number: 71 Signing time: Thu 21 Nov 2024 04:57:15 +0000 Manifest this update: Thu 21 Nov 2024 04:57:14 +0000 Manifest next update: Thu 28 Nov 2024 04:57:14 +0000 Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: nzB0DeS34wz7sa3pgW3dUXVHwjyK+T1hmFvrAxy1saA=) 2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: eWHgPofXBpaqUsdaPrMnYH8r6v4MNKIwylvK1ZXMYaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Validity Not Before: Nov 21 04:57:14 2024 GMT Not After : Nov 28 04:57:14 2024 GMT Subject: CN=673ebdab-b3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:92:87:c7:80:c2:27:e8:87:72:ce:f1:42: 2b:ac:54:82:d0:e3:5b:bb:2b:b9:e1:aa:c6:79:12: 81:42:c4:05:1f:ac:3e:ba:73:bb:3a:91:36:f3:ce: 0d:0f:b0:9e:3f:46:5c:2b:91:4f:5b:65:4a:8c:53: ff:fd:1b:54:d3:f9:a0:3a:22:14:37:98:4c:35:11: 7d:28:86:88:54:ad:da:d2:81:5d:43:b8:8f:a8:65: bf:69:96:54:91:5b:c9:79:8c:cb:00:b1:ae:ca:d2: 23:77:e5:57:84:96:e9:0c:91:29:aa:89:39:66:ba: 47:72:5a:32:3d:a2:1a:46:6a:77:af:79:60:5d:3e: 2b:52:86:49:cf:1b:03:69:2c:8d:dd:f0:5b:73:3b: b5:8e:c1:f9:77:6c:38:43:f6:72:da:8e:98:8e:27: ab:d8:a0:11:15:b7:80:c2:0f:b1:c1:91:a1:88:b3: f0:4f:3c:5f:e9:bf:97:9b:18:c7:d9:71:80:45:58: 39:83:28:92:8d:9f:c8:ee:a8:ee:d7:e4:0e:1d:b9: d5:e3:fb:16:f4:99:4e:83:86:11:10:8a:ee:01:b3: 30:f0:46:f6:87:bd:98:69:85:28:0e:6f:3c:3c:50: 64:5d:16:9d:70:da:80:0c:7e:9e:f5:ad:be:34:85: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CB:9A:35:5B:8F:CC:1F:28:29:42:2F:2E:B0:50:14:0A:B6:96:3A X509v3 Authority Key Identifier: keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:75:9f:40:5f:49:f3:ac:e9:ac:b3:b8:05:f4:7c:7c:2d:a9: b1:36:92:c0:79:bd:09:03:14:cf:90:e7:9d:e4:59:08:2a:59: b3:53:ce:ef:53:10:6e:f5:3d:84:d3:74:bb:4a:c9:07:b8:18: 75:fc:b9:79:e4:c6:3b:46:b2:b4:9e:af:52:5c:e4:d7:2b:7f: ec:33:ae:52:ba:2b:f5:a9:89:35:8d:a1:af:d8:61:d6:d7:66: 4a:b6:7c:e3:1a:aa:8d:b2:2d:d7:a1:30:04:48:b5:14:39:29: 77:de:8e:bb:cc:20:9f:75:74:06:93:d7:d0:2d:1e:04:f7:d5: 1a:0c:f8:e4:59:cc:1c:28:f6:d3:9f:9e:74:54:f8:d1:ff:4b: b8:86:e7:4b:98:2d:4c:24:8b:db:7c:17:ee:9e:c1:dd:c8:5e: a4:ea:b8:f2:84:8e:cc:0c:3f:d1:56:75:c2:d6:c1:4d:d3:40: 24:7a:81:9a:7e:57:fc:e9:48:68:1c:b8:c5:01:d0:58:bd:16: 80:5f:0b:3b:18:e3:22:30:a5:d7:72:03:d0:15:01:a9:6c:b7: d4:eb:b4:79:ac:1e:07:c9:34:b2:4d:1a:03:60:b1:34:27:50: f1:a3:0b:ec:0e:7c:ab:66:bd:21:af:d6:a5:bf:c7:e8:2d:48: 63:91:c0:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkRBNzExMC8GA1UEBRMoOEEyODJEMUM4RjkwQzMwRDY1OUU2RDhDMEI5QkU0MjIx QzI1MzE5QzAeFw0yNDExMjEwNDU3MTRaFw0yNDExMjgwNDU3MTRaMBgxFjAUBgNV BAMTDTY3M2ViZGFiLWIzYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6SpKHx4DCJ+iHcs7xQiusVILQ41u7K7nhqsZ5EoFCxAUfrD66c7s6kTbzzg0P sJ4/RlwrkU9bZUqMU//9G1TT+aA6IhQ3mEw1EX0ohohUrdrSgV1DuI+oZb9pllSR W8l5jMsAsa7K0iN35VeElukMkSmqiTlmukdyWjI9ohpGaneveWBdPitShknPGwNp LI3d8FtzO7WOwfl3bDhD9nLajpiOJ6vYoBEVt4DCD7HBkaGIs/BPPF/pv5ebGMfZ cYBFWDmDKJKNn8juqO7X5A4dudXj+xb0mU6DhhEQiu4BszDwRvaHvZhphSgObzw8 UGRdFp1w2oAMfp71rb40hY0vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF8uaNVuP zB8oKUIvLrBQFAq2ljowHwYDVR0jBBgwFoAUiigtHI+Qww1lnm2MC5vkIhwlMZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREE3LzQ1QkNGQzMwRkQy OTExRUVBNjI5QUU2MkM0RjlBRTAyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1a dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWlndEhJLVF3dzFsbm0yTUM1dmtJaHdsTVp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REE3LzQ1QkNGQzMwRkQyOTExRUVBNjI5QUU2MkM0RjlBRTAyL2lpZ3RISS1Rd3cx bG5tMk1DNXZrSWh3bE1ady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJV1n0BfSfOs6ayzuAX0fHwtqbE2ksB5vQkDFM+Q553kWQgqWbNTzu9T EG71PYTTdLtKyQe4GHX8uXnkxjtGsrSer1Jc5Ncrf+wzrlK6K/WpiTWNoa/YYdbX Zkq2fOMaqo2yLdehMARItRQ5KXfejrvMIJ91dAaT19AtHgT31RoM+ORZzBwo9tOf nnRU+NH/S7iG50uYLUwki9t8F+6ewd3IXqTquPKEjswMP9FWdcLWwU3TQCR6gZp+ V/zpSGgcuMUB0Fi9FoBfCzsY4yIwpddyA9AVAalst9TrtHmsHgfJNLJNGgNgsTQn UPGjC+wOfKtmvSGv1qW/x+gtSGORwN4= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org