$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: Cj1YijpYTSO/o2gHNn5xYiE8QvobiXNPVg9PJaWtr+k= Subject key identifier: 17:FB:8F:30:4C:01:92:CF:FF:4D:AE:1D:B6:9E:C5:E3:3F:46:68:D8 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 07EE Signing time: Fri 22 Nov 2024 21:00:14 +0000 Manifest this update: Fri 22 Nov 2024 21:00:14 +0000 Manifest next update: Fri 29 Nov 2024 21:00:14 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: XGApGQmpl4AeotBot6f26v0J3Jc1yNLqYsMgJBKTlB4=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: VVpW/pviRyz80BHjMGuGUVnJYj1do1IYYkebXFfoEu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Nov 22 21:00:14 2024 GMT Not After : Nov 29 21:00:14 2024 GMT Subject: CN=6740f0de-cc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:f1:c6:70:45:ca:fb:64:46:f1:0f:40:4d: d8:2c:95:f4:51:2c:31:7b:7c:36:93:7e:ba:e3:60: c8:c3:ab:3c:93:47:93:4c:e3:f6:c2:09:25:af:fe: 80:3c:2e:77:c2:9a:8e:a5:db:a4:ce:4e:52:60:ec: 06:5b:19:db:b7:40:d8:f4:ee:1c:4a:ca:23:56:0e: b2:70:65:f2:47:ed:e3:c9:57:64:de:be:ad:9c:39: a1:54:a8:e3:2c:3a:04:e6:4a:fc:da:32:d5:f1:42: 68:cc:ca:3a:89:dd:9b:90:4d:67:0d:48:de:0d:a9: 2c:f5:8c:35:f3:6b:2b:5c:a0:8a:67:68:86:cb:df: 09:92:e2:5d:0d:04:85:8a:78:68:8c:18:77:35:e1: 09:e8:66:4b:71:9b:25:25:94:f1:af:47:d2:51:8e: 92:a3:80:94:99:42:2c:12:03:4e:6d:8b:05:03:0d: 91:70:fa:a7:88:dd:2e:32:e4:cd:f5:ef:ef:4a:43: 86:a0:1d:02:78:d3:6c:0b:f2:c3:cc:b3:08:06:94: f6:1c:79:1b:02:3f:ca:f4:f5:eb:fa:3d:e1:b6:50: 49:bc:0d:f1:c0:96:15:cc:d6:f4:c0:bf:74:00:0d: 42:17:a6:51:f9:de:54:84:d4:d1:30:e6:74:55:c9: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:8F:30:4C:01:92:CF:FF:4D:AE:1D:B6:9E:C5:E3:3F:46:68:D8 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:2c:e9:e4:01:db:1c:2d:62:6c:36:14:e3:88:af:d9:24:c7: 88:57:cb:35:b4:54:10:1c:ff:44:8e:9e:e2:c0:75:db:7d:5b: 7c:27:50:2a:41:56:dd:cb:9a:b3:a6:19:cb:c2:4c:f2:4d:00: 10:a1:4d:f0:bb:41:0d:ac:34:6e:7b:6a:8b:2d:33:9d:fb:a4: 0a:2f:50:f0:c6:72:ef:3b:cf:93:b4:22:b4:28:f5:91:bc:c4: 1b:e2:a2:10:e0:e9:ef:85:a6:c3:b5:b6:70:06:df:03:e4:68: 5f:a7:ca:04:8c:55:57:9c:e3:9a:0f:87:e1:80:78:c7:6f:0c: 8b:cd:31:e7:79:25:fc:27:18:0d:ae:48:93:ae:be:60:a7:74: 88:16:f4:99:03:84:c4:9f:e4:79:14:a6:d7:f8:63:89:7c:28: b6:eb:94:f4:3c:5c:c9:3a:49:bc:5d:3b:a0:f8:0d:11:b9:49: f5:7a:46:26:80:c7:8d:71:c0:1e:e9:f7:c1:b4:77:5c:96:2e: c0:84:59:1d:15:3e:c8:12:7c:09:cc:0f:ed:fa:8e:32:4a:6d: 35:78:ea:4c:e2:0d:4f:d5:4f:be:c6:61:03:1a:1b:3e:72:c3: 06:af:a6:9f:16:9a:57:37:0a:98:7c:99:54:6c:86:94:f9:9b: 73:5b:d2:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjQxMTIyMjEwMDE0WhcNMjQxMTI5MjEwMDE0WjAYMRYwFAYD VQQDEw02NzQwZjBkZS1jYzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3zxxnBFyvtkRvEPQE3YLJX0USwxe3w2k36642DIw6s8k0eTTOP2wgklr/6A PC53wpqOpdukzk5SYOwGWxnbt0DY9O4cSsojVg6ycGXyR+3jyVdk3r6tnDmhVKjj LDoE5kr82jLV8UJozMo6id2bkE1nDUjeDaks9Yw182srXKCKZ2iGy98JkuJdDQSF inhojBh3NeEJ6GZLcZslJZTxr0fSUY6So4CUmUIsEgNObYsFAw2RcPqniN0uMuTN 9e/vSkOGoB0CeNNsC/LDzLMIBpT2HHkbAj/K9PXr+j3htlBJvA3xwJYVzNb0wL90 AA1CF6ZR+d5UhNTRMOZ0VcmO6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf7jzBM AZLP/02uHbaexeM/RmjYMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxLOnkAdscLWJsNhTjiK/ZJMeIV8s1tFQQHP9Ejp7iwHXbfVt8J1Aq QVbdy5qzphnLwkzyTQAQoU3wu0ENrDRue2qLLTOd+6QKL1DwxnLvO8+TtCK0KPWR vMQb4qIQ4OnvhabDtbZwBt8D5Ghfp8oEjFVXnOOaD4fhgHjHbwyLzTHneSX8JxgN rkiTrr5gp3SIFvSZA4TEn+R5FKbX+GOJfCi265T0PFzJOkm8XTug+A0RuUn1ekYm gMeNccAe6ffBtHdcli7AhFkdFT7IEnwJzA/t+o4ySm01eOpM4g1P1U++xmEDGhs+ csMGr6afFppXNwqYfJlUbIaU+ZtzW9KD -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org