$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: 9OE0FwNMXDW8Ga+DY1DkFuf27Lmw6hK8dbhEstSF3a8= Subject key identifier: 5A:8C:2D:6E:79:A1:BF:2D:4A:C4:B8:E2:58:C5:45:00:2F:A6:66:E5 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0AD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0ACD Signing time: Fri 22 Nov 2024 19:09:07 +0000 Manifest this update: Fri 22 Nov 2024 19:09:07 +0000 Manifest next update: Fri 29 Nov 2024 19:09:07 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: rJbFn7rk+ZjTS9AmxBwoSNkQ6RYN8mq4jDMmHEOs7hE=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: 6Ds3NGu2wYLJMMD3M602IBKNI5PFzIBlSYGM/Hpizc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2772 (0xad4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Nov 22 19:09:07 2024 GMT Not After : Nov 29 19:09:07 2024 GMT Subject: CN=6740d6d3-223c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:4b:f2:f3:00:a0:f2:3c:3d:f5:fa:2c:54: 52:3f:7b:81:4c:49:87:0c:52:7b:bb:dd:55:cc:98: 8b:ea:b0:0e:f9:21:a2:7c:17:1d:8e:38:8f:fa:c2: 4d:65:b5:03:d1:a0:19:37:7e:67:f5:80:a5:77:e1: 18:57:67:84:8a:a0:b6:b4:5f:04:9b:49:3e:d0:d5: 41:ef:1c:ae:6d:69:38:80:76:85:87:96:e5:36:0a: de:68:4d:48:83:26:61:be:9d:0a:db:13:c8:b6:a5: d9:39:9b:f6:3e:d7:ec:66:4d:5f:4a:5f:f3:af:f3: 87:35:4e:11:4b:55:d8:e8:ab:c1:79:d3:df:1e:91: 93:02:c4:a5:15:07:dc:47:70:e8:b6:87:d1:0c:58: 1a:22:f9:7d:cc:61:dd:f8:4e:c4:2b:d1:50:f0:79: d1:1a:7f:60:c2:2f:82:bf:bc:ec:e9:9d:33:d0:8f: 16:e6:7b:42:c1:21:de:48:85:3c:e7:75:16:45:99: c8:92:d4:27:e4:44:29:00:f8:92:12:37:0c:3d:d9: 60:9e:b5:51:fa:15:6e:22:5b:9b:38:5d:df:cb:11: ef:92:47:85:6a:a4:a9:13:0d:46:06:47:38:49:59: 66:f6:f2:d3:1c:dd:e1:f9:6b:c3:14:33:6c:cf:3b: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8C:2D:6E:79:A1:BF:2D:4A:C4:B8:E2:58:C5:45:00:2F:A6:66:E5 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ed:50:6b:f9:c8:b3:c7:3a:47:46:02:cc:8b:6a:a8:63:4b: 95:95:c6:2f:72:6e:8d:d7:e0:ca:67:ac:e6:c4:b6:e0:f6:de: 51:7b:bf:dc:04:6e:44:71:8a:11:76:6a:88:bc:a0:08:39:ff: 00:59:bd:fe:37:a6:86:00:70:c6:0a:1a:5b:41:07:bf:a1:c8: f0:28:46:18:82:fa:98:3c:38:1e:0d:d2:14:f2:7b:d9:65:8c: 1b:fe:be:3c:f8:28:d9:41:25:f3:88:36:1a:e7:c2:65:18:b7: 77:44:1c:7a:a3:ce:5e:8f:0b:67:64:1e:2d:6e:6b:24:e9:01: 16:dd:e6:97:31:d9:14:d2:32:7e:44:19:2d:3a:1c:a4:22:a4: e0:ae:6c:1d:da:48:7e:fb:0a:64:4a:63:17:da:6f:a9:15:88: 7f:bc:58:09:cb:05:5d:50:92:78:95:f1:52:d7:38:03:77:d5: 14:dc:0d:df:7f:37:eb:cc:94:3c:b2:15:82:29:de:b0:5e:15: 44:54:4a:e5:a0:7f:d4:db:f0:92:a5:8b:e5:76:34:ff:21:ee: bf:98:0b:e2:3e:98:f0:e0:c9:db:6a:bd:54:d5:9d:2a:de:1e: d4:3e:3c:35:3b:d7:68:c8:53:58:ae:78:67:17:03:76:13:7e: 37:be:4d:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjQxMTIyMTkwOTA3WhcNMjQxMTI5MTkwOTA3WjAYMRYwFAYD VQQDEw02NzQwZDZkMy0yMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLNL8vMAoPI8PfX6LFRSP3uBTEmHDFJ7u91VzJiL6rAO+SGifBcdjjiP+sJN ZbUD0aAZN35n9YCld+EYV2eEiqC2tF8Em0k+0NVB7xyubWk4gHaFh5blNgreaE1I gyZhvp0K2xPItqXZOZv2PtfsZk1fSl/zr/OHNU4RS1XY6KvBedPfHpGTAsSlFQfc R3DotofRDFgaIvl9zGHd+E7EK9FQ8HnRGn9gwi+Cv7zs6Z0z0I8W5ntCwSHeSIU8 53UWRZnIktQn5EQpAPiSEjcMPdlgnrVR+hVuIlubOF3fyxHvkkeFaqSpEw1GBkc4 SVlm9vLTHN3h+WvDFDNszzuMEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqMLW55 ob8tSsS44ljFRQAvpmblMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr7VBr+cizxzpHRgLMi2qoY0uVlcYvcm6N1+DKZ6zmxLbg9t5Re7/c BG5EcYoRdmqIvKAIOf8AWb3+N6aGAHDGChpbQQe/ocjwKEYYgvqYPDgeDdIU8nvZ ZYwb/r48+CjZQSXziDYa58JlGLd3RBx6o85ejwtnZB4tbmsk6QEW3eaXMdkU0jJ+ RBktOhykIqTgrmwd2kh++wpkSmMX2m+pFYh/vFgJywVdUJJ4lfFS1zgDd9UU3A3f fzfrzJQ8shWCKd6wXhVEVErloH/U2/CSpYvldjT/Ie6/mAviPpjw4Mnbar1U1Z0q 3h7UPjw1O9doyFNYrnhnFwN2E343vk3b -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org