$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json) Hash identifier: PSLAhgddlhrzwpynv/EUkNFEpVTerg74yj8viED1v34= Subject key identifier: C6:C8:BA:FD:42:2D:1B:98:9D:21:5A:C4:7D:8B:8E:26:7B:14:B2:EC Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft Manifest number: 38 Signing time: Thu 17 Oct 2024 05:54:49 +0000 Manifest this update: Thu 17 Oct 2024 05:54:48 +0000 Manifest next update: Thu 24 Oct 2024 05:54:48 +0000 Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: IvO5WcaDiFx50b3nJL3jpPVPN8cqNAJcuObEKLR13vo=) 2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: m5kSGhrJRH6V+BSI/nDOijPwwgFXAlDgzZ+g7LzKVFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 05:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: Oct 17 05:54:48 2024 GMT Not After : Oct 24 05:54:48 2024 GMT Subject: CN=6710a6a9-28dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:b0:a8:c1:6e:ac:4a:a1:c2:a5:cd:e9:30: 8b:dd:e2:7d:d3:9f:98:8a:d9:f0:58:51:cc:60:44: 8b:93:4f:23:99:83:d5:e1:02:4e:11:2b:aa:67:b7: 5b:f5:8a:0c:7d:95:2d:7f:03:41:58:72:99:6e:69: 10:87:65:a7:2a:33:a4:92:47:a1:1e:66:42:e1:34: 58:f4:b3:1d:d7:07:1e:ae:3c:d8:0d:15:f0:44:32: df:01:94:f8:1f:df:d3:22:e2:1e:0c:cf:b6:67:8a: cc:5c:c7:79:4e:43:77:01:79:b4:0c:53:dc:76:df: 0b:90:80:f2:40:03:f6:4e:5e:a9:da:2a:22:40:c3: f7:8b:6a:87:83:ec:77:e3:93:6a:7c:cc:9c:02:6d: 47:0b:4e:a0:59:57:5e:91:32:ba:74:a4:aa:be:18: 80:36:d3:67:48:64:1c:b1:d9:79:2c:c9:d5:ba:3d: 67:3a:4f:37:69:a9:da:c9:2c:04:d5:d5:fc:cb:24: a9:b5:0d:9c:75:50:04:51:3f:b9:ff:33:17:bc:63: 4b:9d:64:1d:b0:ba:82:34:ef:a8:21:09:d5:d9:8d: 1d:ba:59:49:38:a2:be:86:20:6e:b4:cf:a4:96:9d: 9f:68:d6:9e:a3:49:52:b6:b7:36:ae:2a:22:30:8d: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:BA:FD:42:2D:1B:98:9D:21:5A:C4:7D:8B:8E:26:7B:14:B2:EC X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6e:17:f3:c5:ce:4b:6b:b6:c3:c1:8e:68:4f:c4:94:99:19: f6:c1:bb:65:5e:83:a3:36:bf:37:5c:94:47:c5:f2:8e:b1:06: 18:ff:48:79:5c:d2:06:95:4d:2a:e5:be:4e:35:30:a9:2e:de: 8f:86:3c:9a:27:71:fe:11:a2:62:54:50:48:5c:61:21:a5:fa: f3:0b:ea:4b:ba:7c:03:2d:c7:e3:1d:df:14:06:8b:48:e6:7a: a5:81:d7:52:82:d0:61:d7:b9:a1:f2:d4:93:5d:57:25:17:50: 73:98:1f:a4:6c:fe:1c:e1:4b:37:5b:3f:aa:8a:f9:81:31:67: 72:ab:66:c6:e2:c2:cc:36:20:6c:72:8d:d4:e3:b2:92:a2:53: 7d:56:17:65:00:60:b1:c4:a0:a8:2c:c0:af:d1:d6:5c:d4:ea: 3f:02:cc:c7:f0:3d:95:b8:bf:62:b1:d0:ae:ce:b5:85:9b:f0: 56:00:76:3b:80:df:dc:e6:53:85:20:96:77:da:b0:e8:d6:99: 13:c5:78:e1:ae:3c:ea:08:12:69:34:cc:46:92:31:9a:bf:d9: d3:14:26:4a:24:86:f9:90:e4:61:60:87:cb:97:6e:61:9c:2f: f8:6e:76:9b:ae:64:64:fb:c3:f9:cd:7a:7c:e3:0a:f4:13:ee: c7:02:64:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEVBNzExMC8GA1UEBRMoMjJBNjJDMTREMkJEMzJFM0U1OTZEOEEzRTYyQkJDMzI3 NDQ2OEY5OTAeFw0yNDEwMTcwNTU0NDhaFw0yNDEwMjQwNTU0NDhaMBgxFjAUBgNV BAMTDTY3MTBhNmE5LTI4ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDahLCowW6sSqHCpc3pMIvd4n3Tn5iK2fBYUcxgRIuTTyOZg9XhAk4RK6pnt1v1 igx9lS1/A0FYcpluaRCHZacqM6SSR6EeZkLhNFj0sx3XBx6uPNgNFfBEMt8BlPgf 39Mi4h4Mz7Znisxcx3lOQ3cBebQMU9x23wuQgPJAA/ZOXqnaKiJAw/eLaoeD7Hfj k2p8zJwCbUcLTqBZV16RMrp0pKq+GIA202dIZByx2XksydW6PWc6TzdpqdrJLATV 1fzLJKm1DZx1UARRP7n/Mxe8Y0udZB2wuoI076ghCdXZjR26WUk4or6GIG60z6SW nZ9o1p6jSVK2tzauKiIwjYZRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxsi6/UIt G5idIVrEfYuOJnsUsuwwHwYDVR0jBBgwFoAUIqYsFNK9MuPlltij5iu8MnRGj5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RUE3L0IxQjNFMkQ2Mzg2 MjExRUY5RTE3RTg2RkM0RjlBRTAyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXFZc0ZOSzlNdVBsbHRpajVpdThNblJHajVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 RUE3L0IxQjNFMkQ2Mzg2MjExRUY5RTE3RTg2RkM0RjlBRTAyL0lxWXNGTks5TXVQ bGx0aWo1aXU4TW5SR2o1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxuF/PFzktrtsPBjmhPxJSZGfbBu2Veg6M2vzdclEfF8o6xBhj/SHlc 0gaVTSrlvk41MKku3o+GPJoncf4RomJUUEhcYSGl+vML6ku6fAMtx+Md3xQGi0jm eqWB11KC0GHXuaHy1JNdVyUXUHOYH6Rs/hzhSzdbP6qK+YExZ3KrZsbiwsw2IGxy jdTjspKiU31WF2UAYLHEoKgswK/R1lzU6j8CzMfwPZW4v2Kx0K7OtYWb8FYAdjuA 39zmU4UglnfasOjWmRPFeOGuPOoIEmk0zEaSMZq/2dMUJkokhvmQ5GFgh8uXbmGc L/hudpuuZGT7w/nNenzjCvQT7scCZHk= -----END CERTIFICATE-----Generated at Thu Oct 17 08:05:48 2024 by rpki-client on console-ams.rpki-client.org