$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json) Hash identifier: q864xo8MbuI9q7o1b+SkSyGoYXGVdQiqMpy807zD9tk= Subject key identifier: 46:46:A7:0A:89:DE:C6:E3:1D:09:34:A0:7C:3B:FB:30:0D:28:A5:E9 Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft Manifest number: 4A Signing time: Thu 21 Nov 2024 05:21:53 +0000 Manifest this update: Thu 21 Nov 2024 05:21:53 +0000 Manifest next update: Thu 28 Nov 2024 05:21:53 +0000 Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: kj6bML/98UdqRyApTDuB+B1nZlyTs9V17+LiyD1OsNU=) 2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: m5kSGhrJRH6V+BSI/nDOijPwwgFXAlDgzZ+g7LzKVFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: Nov 21 05:21:53 2024 GMT Not After : Nov 28 05:21:53 2024 GMT Subject: CN=673ec371-edf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:2e:90:05:95:98:4b:4b:6d:69:a8:e1:51: dc:62:b6:ad:84:49:af:9e:13:74:2c:69:ea:fa:1c: 9f:e6:89:51:81:5a:31:48:ec:eb:db:08:4b:e4:81: 0c:84:ac:57:58:4d:06:5c:77:f2:10:b9:12:9f:1e: d6:48:fb:be:64:71:73:98:04:3f:72:dc:df:53:80: 19:49:59:a7:93:e4:f6:ce:af:fc:9e:a6:c0:f2:aa: c2:da:fa:8d:76:8b:f6:0d:46:ca:2e:ea:b8:57:64: aa:39:74:f2:4c:3d:01:ac:5d:38:ba:b3:72:73:b0: 64:1d:b1:18:cb:7d:b8:eb:cc:94:47:6a:a0:34:db: f8:7d:46:ce:9f:a1:64:61:e4:a4:fa:b3:cd:b8:04: 45:15:28:02:97:7b:8b:e1:f3:a6:7a:04:4b:a3:6f: d9:b0:e0:b5:6e:d7:3b:8f:4d:dc:87:49:47:b5:06: ce:0e:ef:a3:4a:f3:e8:16:4b:01:69:67:e8:89:c7: 86:21:c1:9d:98:f1:e3:94:4e:42:3a:01:97:9d:af: da:7f:3b:92:9a:56:e1:fc:d6:01:88:6f:28:23:6a: 66:29:fc:17:4f:a2:9b:24:b2:bf:e4:98:13:cd:be: 20:95:0b:c4:7c:c7:fd:e9:77:b4:58:ae:b3:c4:70: 77:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:46:A7:0A:89:DE:C6:E3:1D:09:34:A0:7C:3B:FB:30:0D:28:A5:E9 X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c3:e9:4d:cd:0b:8c:a1:ee:cb:4b:e6:54:01:ca:11:85:bb: 54:33:bc:33:86:b9:9d:5f:98:a3:ca:e7:76:bd:61:10:92:ba: 1b:ca:36:c0:3e:2e:e4:94:d8:2f:35:30:51:19:75:27:3b:e7: 39:df:b6:f1:9e:c4:66:96:a9:c6:ee:2d:68:a1:7b:7e:37:e6: ff:69:f9:f4:5b:3f:dd:52:04:91:11:4d:ed:ae:90:ec:4a:72: a5:7b:f8:79:a6:5d:e2:77:e2:55:a7:16:c1:46:ac:90:d4:fd: e3:bb:11:fc:5b:ba:64:c1:2f:dc:04:42:9d:6a:3e:fd:75:bf: ee:10:b5:ed:5c:8a:b9:50:8e:81:fd:19:b9:53:e4:e4:9e:96: e8:f7:15:24:09:63:2f:69:0f:d6:71:c2:b8:87:df:8f:10:c8: 9d:54:69:c5:f7:21:bb:c1:fa:4f:52:f9:e0:27:a0:90:35:88: 0c:a4:0d:c2:c8:36:96:7c:cc:18:45:e3:ce:b9:1f:fa:22:87: a2:01:d7:ad:99:31:9b:43:70:54:b9:41:d6:1e:a1:bb:d9:4f: 8b:1f:9c:5f:c3:b4:e6:cc:48:b5:d2:d5:92:99:64:c8:a9:5c: e9:10:65:fa:24:95:a2:4b:87:a2:1e:c2:5d:d4:32:84:c5:39: 8c:e6:13:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEVBNzExMC8GA1UEBRMoMjJBNjJDMTREMkJEMzJFM0U1OTZEOEEzRTYyQkJDMzI3 NDQ2OEY5OTAeFw0yNDExMjEwNTIxNTNaFw0yNDExMjgwNTIxNTNaMBgxFjAUBgNV BAMTDTY3M2VjMzcxLWVkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3LS6QBZWYS0ttaajhUdxitq2ESa+eE3Qsaer6HJ/miVGBWjFI7OvbCEvkgQyE rFdYTQZcd/IQuRKfHtZI+75kcXOYBD9y3N9TgBlJWaeT5PbOr/yepsDyqsLa+o12 i/YNRsou6rhXZKo5dPJMPQGsXTi6s3JzsGQdsRjLfbjrzJRHaqA02/h9Rs6foWRh 5KT6s824BEUVKAKXe4vh86Z6BEujb9mw4LVu1zuPTdyHSUe1Bs4O76NK8+gWSwFp Z+iJx4YhwZ2Y8eOUTkI6AZedr9p/O5KaVuH81gGIbygjamYp/BdPopsksr/kmBPN viCVC8R8x/3pd7RYrrPEcHfhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURkanCone xuMdCTSgfDv7MA0opekwHwYDVR0jBBgwFoAUIqYsFNK9MuPlltij5iu8MnRGj5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RUE3L0IxQjNFMkQ2Mzg2 MjExRUY5RTE3RTg2RkM0RjlBRTAyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXFZc0ZOSzlNdVBsbHRpajVpdThNblJHajVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 RUE3L0IxQjNFMkQ2Mzg2MjExRUY5RTE3RTg2RkM0RjlBRTAyL0lxWXNGTks5TXVQ bGx0aWo1aXU4TW5SR2o1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC3D6U3NC4yh7stL5lQByhGFu1QzvDOGuZ1fmKPK53a9YRCSuhvKNsA+ LuSU2C81MFEZdSc75znftvGexGaWqcbuLWihe3435v9p+fRbP91SBJERTe2ukOxK cqV7+HmmXeJ34lWnFsFGrJDU/eO7EfxbumTBL9wEQp1qPv11v+4Qte1cirlQjoH9 GblT5OSeluj3FSQJYy9pD9ZxwriH348QyJ1UacX3IbvB+k9S+eAnoJA1iAykDcLI NpZ8zBhF4865H/oih6IB162ZMZtDcFS5QdYeobvZT4sfnF/DtObMSLXS1ZKZZMip XOkQZfoklaJLh6Iewl3UMoTFOYzmEwQ= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org