$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: YL9l87/hnzvQ8/xW1buRLvd9J9q+YczG9/OvFCRCSVY= Subject key identifier: 2C:99:E8:44:45:E0:6E:AD:B9:2B:2A:96:7F:34:F2:27:18:43:1F:D1 Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0CC2 Signing time: Fri 22 Nov 2024 18:07:07 +0000 Manifest this update: Fri 22 Nov 2024 18:07:06 +0000 Manifest next update: Fri 29 Nov 2024 18:07:06 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: hEwJeSqdNPbuAQHbHdrtlYjl6fBbdINUm71CC6XitEE=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: Cr+VsfXDJWByT9UOe+f+PXNb8ByHkADYnx2wCkM5d5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: Nov 22 18:07:06 2024 GMT Not After : Nov 29 18:07:06 2024 GMT Subject: CN=6740c84b-9525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:3a:84:63:af:d5:35:d7:06:39:8c:ab:9b: a5:b4:23:a2:76:7c:31:83:2e:2d:35:1a:1e:0c:cd: 13:e5:5e:a1:9f:55:39:73:52:a2:9d:4a:5d:51:29: f7:dc:8d:0c:79:26:2f:70:bd:db:b9:98:d4:90:98: 2a:1e:87:c4:74:60:83:10:66:9d:9a:73:01:04:a0: cc:2f:82:f6:c4:b2:f7:48:7b:a0:49:05:de:f3:2b: b1:97:f4:71:f0:90:84:3d:bd:88:44:50:cf:df:3d: 7f:87:9e:ec:29:e8:42:c6:d8:0a:eb:e0:8b:30:bc: 3e:c4:bc:16:89:d7:4d:f5:6f:c5:6a:25:db:11:8a: 82:0e:0d:b7:1c:1d:dc:05:c3:ca:0f:3c:b5:06:38: 84:fb:c6:91:d6:cb:d2:eb:40:7c:82:9f:42:5c:54: 59:bf:36:27:ee:91:5e:04:21:0f:cf:7b:9e:18:6e: 10:e6:31:6f:65:14:94:96:b5:58:f7:fc:00:4d:31: 46:55:3b:28:37:fd:2f:70:81:83:38:ee:3a:84:32: b1:b8:11:04:8f:f8:99:ed:9c:19:d9:6b:47:ae:6d: f7:cb:dc:da:8d:e6:bf:93:e9:27:90:61:cc:42:04: dd:d9:83:9c:d6:75:27:4a:18:e8:33:49:11:87:69: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:99:E8:44:45:E0:6E:AD:B9:2B:2A:96:7F:34:F2:27:18:43:1F:D1 X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:42:c3:33:09:99:1e:ea:13:0d:dc:4a:56:b0:0d:10:b6:b7: b3:a0:69:d4:13:34:1c:14:76:60:a9:88:e2:16:6d:ee:1b:68: 7c:a1:08:23:6e:f5:5b:a8:7c:0e:5a:87:5e:e9:fc:b8:10:c3: d8:40:05:5e:63:f3:f0:2d:31:46:ad:d4:62:8a:f9:1f:cc:4b: 73:61:2a:31:fc:95:64:62:c1:45:e9:bf:6c:bf:35:0d:96:4b: 50:1f:13:a6:7e:9b:3c:06:da:5d:35:1e:43:1e:70:1c:ca:83: 30:fe:81:41:98:7c:fd:5b:f3:be:b8:89:01:36:4c:ba:1f:39: 36:a3:e7:82:71:57:00:02:b6:2a:00:57:4a:dc:eb:b4:41:10: 99:f5:3c:e9:f4:80:8c:fb:14:40:59:15:ff:35:19:56:65:2c: 2a:af:fa:3c:46:dc:93:83:c4:a1:8d:f9:2f:56:4f:40:12:51: 1a:8e:0d:59:15:de:00:be:1f:03:94:4b:4f:99:79:36:6a:5f: 7f:fb:e4:11:7e:bb:53:d6:8c:b2:92:81:23:b4:58:ee:42:4f: 4f:dc:66:7f:f6:03:65:3e:44:5d:6e:4d:25:5b:16:da:bd:9b: bd:be:b6:d3:32:4d:54:fb:7e:74:94:87:ad:36:d9:05:66:ce: 7f:e0:dd:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjQxMTIyMTgwNzA2WhcNMjQxMTI5MTgwNzA2WjAYMRYwFAYD VQQDEw02NzQwYzg0Yi05NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZQ6hGOv1TXXBjmMq5ultCOidnwxgy4tNRoeDM0T5V6hn1U5c1KinUpdUSn3 3I0MeSYvcL3buZjUkJgqHofEdGCDEGadmnMBBKDML4L2xLL3SHugSQXe8yuxl/Rx 8JCEPb2IRFDP3z1/h57sKehCxtgK6+CLMLw+xLwWiddN9W/FaiXbEYqCDg23HB3c BcPKDzy1BjiE+8aR1svS60B8gp9CXFRZvzYn7pFeBCEPz3ueGG4Q5jFvZRSUlrVY 9/wATTFGVTsoN/0vcIGDOO46hDKxuBEEj/iZ7ZwZ2WtHrm33y9zajea/k+knkGHM QgTd2YOc1nUnShjoM0kRh2k80wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyZ6ERF 4G6tuSsqln808icYQx/RMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQsMzCZke6hMN3EpWsA0QtrezoGnUEzQcFHZgqYjiFm3uG2h8oQgj bvVbqHwOWode6fy4EMPYQAVeY/PwLTFGrdRiivkfzEtzYSox/JVkYsFF6b9svzUN lktQHxOmfps8BtpdNR5DHnAcyoMw/oFBmHz9W/O+uIkBNky6Hzk2o+eCcVcAArYq AFdK3Ou0QRCZ9Tzp9ICM+xRAWRX/NRlWZSwqr/o8RtyTg8ShjfkvVk9AElEajg1Z Fd4Avh8DlEtPmXk2al9/++QRfrtT1oyykoEjtFjuQk9P3GZ/9gNlPkRdbk0lWxba vZu9vrbTMk1U+350lIetNtkFZs5/4N3K -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org