$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft File: Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json) Hash identifier: +V4QUJ1ycb9lyBITjzCj6hkTlKVheyRDUC6xL/kHaVk= Subject key identifier: AE:F7:88:67:8B:1C:0E:C7:6D:B0:49:74:C4:C8:64:7F:0B:3C:8B:48 Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB Certificate issuer: /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft Manifest number: 4B Signing time: Sat 23 Nov 2024 05:14:17 +0000 Manifest this update: Sat 23 Nov 2024 05:14:16 +0000 Manifest next update: Sat 30 Nov 2024 05:14:16 +0000 Files and hashes: 1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: gyHmp2S/7L8J2pnNBXhGpInRIknvGbQC3WHg7Rzag/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Validity Not Before: Nov 23 05:14:16 2024 GMT Not After : Nov 30 05:14:16 2024 GMT Subject: CN=674164a8-c6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:29:69:f0:71:d7:7a:ae:c4:6b:d5:d7:ef: c0:cc:1f:b5:30:35:d7:9b:1a:dd:a5:7b:84:33:6a: 39:3d:bf:70:5d:59:30:0c:2d:c7:f6:01:c7:3c:a8: 0b:f3:7d:5b:92:cd:8f:d2:45:a0:39:5c:40:1e:03: 67:61:0b:56:19:3a:e3:f2:fb:cc:f7:3d:6f:08:1e: e6:10:70:34:f1:a5:20:c0:a9:9b:a0:a3:d2:e8:5d: 13:09:81:97:4a:e4:a8:16:5e:a6:21:91:3a:5c:de: 0c:04:31:63:a8:e1:e5:c1:c8:b4:0f:27:cb:3e:06: e2:13:11:a0:59:1c:a8:c8:a7:6d:b9:0c:1b:62:19: 93:ce:8c:a6:8b:16:46:7e:5e:05:cd:d7:ee:78:2a: b4:e4:74:0d:66:74:c4:32:7b:0a:78:5c:a3:2c:c9: 97:5e:0d:4c:42:59:bb:0e:84:f9:b0:25:e4:1a:c6: 49:44:8a:07:8f:74:16:7b:54:6a:aa:92:2a:12:f3: fb:a6:f1:3f:95:c6:37:0d:71:8f:b5:b4:21:e6:19: 3b:3a:7d:de:2a:f9:9c:2a:dc:cb:75:07:92:df:e3: 49:71:af:ba:b9:ea:4b:ed:ed:61:e8:8a:06:f1:27: 0f:fa:cf:a7:c6:ee:97:fd:1b:f7:a8:20:bf:8f:54: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:88:67:8B:1C:0E:C7:6D:B0:49:74:C4:C8:64:7F:0B:3C:8B:48 X509v3 Authority Key Identifier: keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c6:16:e8:b2:78:2e:b8:87:5c:06:7c:9a:fd:5b:c7:6c:4e: d9:ba:4e:e4:49:5b:c5:20:07:d2:5d:59:28:aa:f0:20:05:43: 54:9b:ed:65:ca:e8:20:ea:20:a7:b3:8e:2f:f7:25:71:72:64: 1f:b0:0e:4f:43:4c:d4:3d:d5:48:2d:f9:4f:ad:7b:0b:9e:bf: 71:9f:a5:95:76:71:db:85:c0:c3:f1:ff:04:44:d7:04:f0:43: e6:60:be:be:08:f5:63:52:05:41:bc:37:d7:00:d9:be:ff:98: 36:ba:42:4e:dc:e1:56:d2:56:bc:4b:a7:61:43:80:40:65:5f: ad:3c:a7:29:c1:28:eb:9c:9d:8e:c2:cb:86:fd:df:e2:a4:fd: 97:9b:68:6b:a5:1d:6a:fd:17:14:fd:42:ce:7e:66:3e:b5:0b: bd:00:0c:87:a5:17:34:28:9e:02:8a:35:63:22:b2:16:6e:dd: 35:f8:7a:bc:49:7a:0a:15:e7:3b:d7:f7:88:b8:e3:8f:72:f5: a8:f5:41:74:9c:1f:c9:99:31:51:fe:a9:5e:3a:c0:55:bd:53: 62:60:9e:f2:6d:5f:27:48:84:95:de:f5:9c:ad:a8:7a:ce:ea: 86:f7:00:f3:d5:c9:21:92:41:e8:55:0e:bc:8f:37:fc:ce:ff: 73:32:c0:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk1QTExMC8GA1UEBRMoMjMxQkE5OTlEOEU4ODI0RjYyMjJCODU2ODVEMDdERDQ3 QTcwNDZEQjAeFw0yNDExMjMwNTE0MTZaFw0yNDExMzAwNTE0MTZaMBgxFjAUBgNV BAMTDTY3NDE2NGE4LWM2Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwCClp8HHXeq7Ea9XX78DMH7UwNdebGt2le4Qzajk9v3BdWTAMLcf2Acc8qAvz fVuSzY/SRaA5XEAeA2dhC1YZOuPy+8z3PW8IHuYQcDTxpSDAqZugo9LoXRMJgZdK 5KgWXqYhkTpc3gwEMWOo4eXByLQPJ8s+BuITEaBZHKjIp225DBtiGZPOjKaLFkZ+ XgXN1+54KrTkdA1mdMQyewp4XKMsyZdeDUxCWbsOhPmwJeQaxklEigePdBZ7VGqq kioS8/um8T+VxjcNcY+1tCHmGTs6fd4q+Zwq3Mt1B5Lf40lxr7q56kvt7WHoigbx Jw/6z6fG7pf9G/eoIL+PVKXhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrveIZ4sc DsdtsEl0xMhkfws8i0gwHwYDVR0jBBgwFoAUIxupmdjogk9iIrhWhdB91HpwRtsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTVBLzVBMTlCRENBMzdB RTExRUY4QTQ1OEUzN0M0RjlBRTAyL0l4dXBtZGpvZ2s5aUlyaFdoZEI5MUhwd1J0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXh1cG1kam9nazlpSXJoV2hkQjkxSHB3UnRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTVBLzVBMTlCRENBMzdBRTExRUY4QTQ1OEUzN0M0RjlBRTAyL0l4dXBtZGpvZ2s5 aUlyaFdoZEI5MUhwd1J0cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKTGFuiyeC64h1wGfJr9W8dsTtm6TuRJW8UgB9JdWSiq8CAFQ1Sb7WXK 6CDqIKezji/3JXFyZB+wDk9DTNQ91Ugt+U+tewuev3GfpZV2cduFwMPx/wRE1wTw Q+Zgvr4I9WNSBUG8N9cA2b7/mDa6Qk7c4VbSVrxLp2FDgEBlX608pynBKOucnY7C y4b93+Kk/ZebaGulHWr9FxT9Qs5+Zj61C70ADIelFzQongKKNWMishZu3TX4erxJ egoV5zvX94i4449y9aj1QXScH8mZMVH+qV46wFW9U2JgnvJtXydIhJXe9ZytqHrO 6ob3APPVySGSQehVDryPN/zO/3MywEQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org