$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: xtjD6rUPFISAaDgpVO+idqxQblneG8cClQpHOaI05LQ= Subject key identifier: 0B:E1:B6:E2:9E:8B:89:55:97:56:73:68:18:75:17:A1:63:72:B8:E9 Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 047C Signing time: Wed 20 Nov 2024 23:36:38 +0000 Manifest this update: Wed 20 Nov 2024 23:36:38 +0000 Manifest next update: Wed 27 Nov 2024 23:36:38 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: 8+mTarK5VHk1SdYeJEimGZ7W5T3mJplmm+v+uzcHSIY=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: U/+wPqrKrJC011IcABNzpIvFcS1/P1nom9ZdkuvcUss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Nov 20 23:36:38 2024 GMT Not After : Nov 27 23:36:38 2024 GMT Subject: CN=673e7286-1cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:20:1d:b3:03:77:4d:e8:3c:6c:ec:2b:a5: a1:da:c7:51:9f:d8:2e:fc:81:27:fb:2e:1e:4c:af: 90:dd:02:1e:0f:49:ca:62:a5:02:5c:8e:50:d8:b2: a5:c1:9e:81:31:78:51:0c:de:85:f3:b9:51:27:db: 30:98:ca:59:37:ed:50:11:2d:fe:7b:33:5d:55:58: 75:d3:ce:06:ef:4d:30:56:4a:3e:16:3c:ad:32:9c: 40:cc:89:ca:cb:27:6b:ae:80:bc:f1:df:07:85:f8: 3f:0c:a6:14:84:14:5a:66:ca:e9:79:e5:bf:c4:9a: a1:27:63:65:5f:5a:b8:64:c9:d1:56:bc:64:33:41: b7:d3:8f:e1:52:2f:df:05:3f:47:52:ca:10:25:fc: af:ca:20:48:6d:c0:8e:ac:dd:07:07:6a:e8:3e:f8: c0:7e:a3:0c:8d:79:ee:69:22:0b:e7:25:95:f2:ef: 9e:09:e6:49:12:d2:22:1d:95:7f:b6:d6:fe:39:6d: 48:80:8d:4f:83:77:b4:3e:62:25:e9:11:3e:c2:d9: 13:66:a2:43:fc:b0:72:7a:79:2c:c7:d0:df:a7:a4: 78:13:9b:fe:b9:ff:3d:51:6c:73:28:50:83:28:74: 7e:8c:b3:1e:6f:2c:d5:14:1c:1d:29:50:78:d0:42: 02:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E1:B6:E2:9E:8B:89:55:97:56:73:68:18:75:17:A1:63:72:B8:E9 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4e:fb:28:45:20:cf:e0:1c:05:df:5e:25:f3:88:6d:f7:14: 2b:26:4a:95:6e:63:87:98:90:8d:26:81:b2:ef:d3:0f:d4:d3: e1:77:ca:26:c7:02:0d:cf:76:a8:a1:06:a2:47:9b:59:fe:b6: 41:f8:45:e7:06:cf:7b:c0:be:66:d8:be:13:d0:ac:d8:76:e8: 28:55:66:76:f0:c9:08:18:aa:cb:f4:6a:42:41:2b:fe:9a:28: 42:81:fd:d5:8e:91:e6:0d:ae:7b:03:8d:9f:39:4e:e6:ca:87: 7c:98:2a:67:be:02:c4:a6:05:7f:0f:d7:75:c5:6c:38:cd:09: 68:7b:42:45:9c:09:99:27:f2:62:05:02:20:7c:d9:f4:dd:60: 24:03:21:39:87:b2:ec:ac:42:dc:03:44:a6:f5:67:02:b1:52: e8:57:fd:9c:de:f1:dc:ac:f8:82:11:05:b2:cc:e9:b4:04:cf: 55:8d:b4:ab:37:dd:31:bc:19:dc:d9:82:b0:9e:55:2a:eb:57: e1:7b:4b:ef:65:80:e0:b8:ef:f4:ef:5b:19:27:17:15:18:95: 29:73:85:58:fe:43:3b:83:39:90:85:02:dc:bf:bd:e2:9f:51: b2:a3:69:6c:e9:33:2e:25:d0:84:1c:a2:15:4c:35:6c:f1:30: 4f:ab:7f:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjQxMTIwMjMzNjM4WhcNMjQxMTI3MjMzNjM4WjAYMRYwFAYD VQQDEw02NzNlNzI4Ni0xY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1MgHbMDd03oPGzsK6Wh2sdRn9gu/IEn+y4eTK+Q3QIeD0nKYqUCXI5Q2LKl wZ6BMXhRDN6F87lRJ9swmMpZN+1QES3+ezNdVVh1084G700wVko+FjytMpxAzInK yydrroC88d8Hhfg/DKYUhBRaZsrpeeW/xJqhJ2NlX1q4ZMnRVrxkM0G304/hUi/f BT9HUsoQJfyvyiBIbcCOrN0HB2roPvjAfqMMjXnuaSIL5yWV8u+eCeZJEtIiHZV/ ttb+OW1IgI1Pg3e0PmIl6RE+wtkTZqJD/LByenksx9Dfp6R4E5v+uf89UWxzKFCD KHR+jLMebyzVFBwdKVB40EICfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvhtuKe i4lVl1ZzaBh1F6FjcrjpMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtTvsoRSDP4BwF314l84ht9xQrJkqVbmOHmJCNJoGy79MP1NPhd8om xwINz3aooQaiR5tZ/rZB+EXnBs97wL5m2L4T0KzYdugoVWZ28MkIGKrL9GpCQSv+ mihCgf3VjpHmDa57A42fOU7myod8mCpnvgLEpgV/D9d1xWw4zQloe0JFnAmZJ/Ji BQIgfNn03WAkAyE5h7LsrELcA0Sm9WcCsVLoV/2c3vHcrPiCEQWyzOm0BM9VjbSr N90xvBnc2YKwnlUq61fhe0vvZYDguO/071sZJxcVGJUpc4VY/kM7gzmQhQLcv73i n1Gyo2ls6TMuJdCEHKIVTDVs8TBPq390 -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:59 2024 by rpki-client on console-ams.rpki-client.org