$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: j87idzKyDy+wi+LxNLmj8NHgbuWrgFJ/U3N74lBoucU= Subject key identifier: 31:41:7C:A0:AB:01:72:61:21:F6:E0:13:E6:15:A2:51:0F:FD:75:9A Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0AD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0AD1 Signing time: Fri 22 Nov 2024 19:08:59 +0000 Manifest this update: Fri 22 Nov 2024 19:08:58 +0000 Manifest next update: Fri 29 Nov 2024 19:08:58 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: e9i0xxvAlPJ4ktEY4crU4KCPqjcZAVpM/q4bEQ+p8dc=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: as/dc/eVE0KE5cApiltGew64DOfzaL1TNpjwCt5VZmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2776 (0xad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Nov 22 19:08:58 2024 GMT Not After : Nov 29 19:08:58 2024 GMT Subject: CN=6740d6ca-e83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b3:2c:e0:22:d2:53:b2:57:b5:58:12:9e:9a: d5:7e:85:70:62:ac:cf:8b:fd:5e:d4:ae:b6:e7:e0: 10:a6:b7:91:31:40:f9:8b:9f:9d:6c:11:17:31:b7: ce:f4:1f:c1:83:5a:d8:72:2b:b5:18:6d:9a:fa:53: cc:19:2a:7f:86:ed:36:44:49:14:23:93:4e:57:c3: 56:cb:77:81:ae:50:98:16:ea:99:1c:1a:a0:93:ac: 33:e9:8a:fd:0e:70:bd:58:22:72:1b:ae:63:e2:3a: dc:61:7d:72:73:bd:65:e0:f1:b2:be:1c:cf:cb:ff: ca:34:37:bd:df:25:b5:9d:84:a9:ba:0c:fe:25:86: 68:f0:ef:5b:c0:6b:28:43:71:53:fe:ba:6b:67:57: 18:97:0f:11:5e:03:a4:8f:f1:11:f4:18:f3:e6:5d: 7b:81:c3:f7:2b:cb:d8:fb:cf:f8:21:93:2f:66:59: e6:74:3c:34:70:7a:c8:61:29:1a:ef:34:b9:85:03: da:09:1d:24:69:b8:5d:e4:96:3f:67:b8:29:80:f0: c2:bc:17:2d:cd:4a:62:11:04:a7:77:63:2b:b9:5b: 52:fc:27:70:7a:e6:ea:b9:f7:21:00:f4:9e:03:0d: a1:80:be:18:dc:dc:b2:f2:ce:38:90:8b:78:77:b2: d6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:41:7C:A0:AB:01:72:61:21:F6:E0:13:E6:15:A2:51:0F:FD:75:9A X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:bb:64:c5:f5:0a:6c:69:0f:aa:91:ff:e4:6b:e0:24:01:4a: 51:f0:8b:c0:d3:54:7b:3d:a3:1e:e9:e7:0f:b4:29:f3:f1:c7: 4e:c0:cd:a5:de:59:3e:ab:46:76:ae:36:22:a3:b7:3c:88:bb: 89:62:27:f6:38:40:f2:88:e1:be:e2:ca:3e:2e:62:d3:03:9a: be:7e:7f:4b:04:b6:ee:d2:eb:bd:1d:51:d5:34:d0:39:b2:8c: 21:f6:54:4f:76:eb:8c:b2:eb:fd:97:37:c1:8d:04:15:6f:f4: ea:66:70:c8:57:0f:b5:66:4e:a5:c4:e7:84:7d:73:e9:68:32: 15:1e:9c:69:1e:50:da:3e:29:8a:9e:54:59:f0:ab:d1:8f:88: 38:f2:cc:2a:ef:76:dd:b3:be:2f:f1:36:7b:59:29:cf:6b:21: 69:b6:00:e7:fd:1f:68:af:1c:07:ec:68:f4:b4:0d:c7:fe:2e: 44:9b:23:6d:b1:13:7c:22:6a:ef:6c:f0:80:32:4b:11:15:14: 72:8e:c7:b6:aa:e4:45:3e:95:78:5c:c1:f7:26:5f:ca:70:54: 12:06:7c:5b:ed:b9:af:dc:fa:18:d5:ff:7a:2d:c2:9d:cf:f2: 8b:15:17:da:fb:ec:89:c9:8b:9a:19:92:3c:a8:39:56:56:3d: 4a:70:3a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjQxMTIyMTkwODU4WhcNMjQxMTI5MTkwODU4WjAYMRYwFAYD VQQDEw02NzQwZDZjYS1lODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8bMs4CLSU7JXtVgSnprVfoVwYqzPi/1e1K625+AQpreRMUD5i5+dbBEXMbfO 9B/Bg1rYciu1GG2a+lPMGSp/hu02REkUI5NOV8NWy3eBrlCYFuqZHBqgk6wz6Yr9 DnC9WCJyG65j4jrcYX1yc71l4PGyvhzPy//KNDe93yW1nYSpugz+JYZo8O9bwGso Q3FT/rprZ1cYlw8RXgOkj/ER9Bjz5l17gcP3K8vY+8/4IZMvZlnmdDw0cHrIYSka 7zS5hQPaCR0kabhd5JY/Z7gpgPDCvBctzUpiEQSnd2MruVtS/CdweubqufchAPSe Aw2hgL4Y3Nyy8s44kIt4d7LW6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFBfKCr AXJhIfbgE+YVolEP/XWaMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDou2TF9QpsaQ+qkf/ka+AkAUpR8IvA01R7PaMe6ecPtCnz8cdOwM2l 3lk+q0Z2rjYio7c8iLuJYif2OEDyiOG+4so+LmLTA5q+fn9LBLbu0uu9HVHVNNA5 sowh9lRPduuMsuv9lzfBjQQVb/TqZnDIVw+1Zk6lxOeEfXPpaDIVHpxpHlDaPimK nlRZ8KvRj4g48swq73bds74v8TZ7WSnPayFptgDn/R9orxwH7Gj0tA3H/i5EmyNt sRN8ImrvbPCAMksRFRRyjse2quRFPpV4XMH3Jl/KcFQSBnxb7bmv3PoY1f96LcKd z/KLFRfa++yJyYuaGZI8qDlWVj1KcDrq -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org