$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft File: IRxVC1PrIEdRhbq83n5w32dESLc.mft (raw, json) Hash identifier: Nyw0loRHlPGilVZhWz04plEYwvzhy7sB05Aa5cAF8SM= Subject key identifier: BE:CF:B1:AA:D6:CB:86:30:A5:E0:7D:ED:01:37:05:4E:71:6B:FC:E1 Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft Manifest number: 0C0B Signing time: Fri 22 Nov 2024 18:22:29 +0000 Manifest this update: Fri 22 Nov 2024 18:22:29 +0000 Manifest next update: Fri 29 Nov 2024 18:22:29 +0000 Files and hashes: 1: IRxVC1PrIEdRhbq83n5w32dESLc.crl (hash: W7wU56ygw88Q/10q/fQIuL/P+6qrpNYOIn2nIwG8d10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Validity Not Before: Nov 22 18:22:29 2024 GMT Not After : Nov 29 18:22:29 2024 GMT Subject: CN=6740cbe5-018e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:ef:28:57:4a:ad:b3:db:f9:9d:b6:5c:53: e6:1a:38:8e:42:57:8a:6e:8a:a6:a1:ec:69:d9:0f: 63:56:68:4b:e4:e7:e6:8a:76:ef:3b:b1:ab:05:03: f8:77:30:92:66:d0:77:3d:1d:f3:c0:a0:70:dd:8a: 72:9c:0e:df:ce:47:60:9e:fb:ee:2f:cb:e7:1e:a3: be:71:55:34:0d:03:d0:ab:86:ee:bf:9b:47:43:07: 86:a3:a4:6b:a8:25:66:cd:a4:6b:fe:cc:46:2b:84: 26:44:47:67:c2:7c:c8:72:71:54:75:3d:49:02:22: 56:0e:33:6f:8b:28:69:b4:36:b4:23:2f:7e:12:ec: 95:b4:2f:e7:7e:5d:d6:f7:a6:1c:8e:2a:69:45:25: e0:49:81:f1:ad:f8:10:54:30:ce:8b:f7:0c:ed:33: 23:a2:31:1b:7f:bc:a8:7f:77:84:7b:7c:02:01:53: 40:56:5c:61:07:b5:41:8a:92:e5:9e:cf:8e:79:51: 0f:22:1e:31:29:e2:bd:da:34:0a:3b:0b:fe:22:ba: 1c:f9:4f:6c:ba:d3:ec:7d:cb:3f:d2:3e:8e:0f:7f: 4e:3f:b5:85:97:70:ef:2b:e1:df:f9:35:b2:84:a0: 64:83:e2:f7:d4:9d:be:d3:dd:16:52:82:b3:b8:d7: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CF:B1:AA:D6:CB:86:30:A5:E0:7D:ED:01:37:05:4E:71:6B:FC:E1 X509v3 Authority Key Identifier: keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ee:33:ba:74:16:f0:52:db:16:3c:71:46:e6:1a:48:8f:43: 84:2f:42:06:ef:a9:0e:60:65:80:8f:bb:57:df:f4:80:19:b3: ed:b1:b2:8f:c6:1b:e0:7a:f2:00:af:45:37:ce:35:d8:b5:99: 34:93:68:51:6e:ea:2f:cd:69:1f:dc:f3:a8:28:6e:82:81:ef: 59:4c:5b:bc:8e:11:ac:55:92:80:01:a0:1d:a9:c2:84:d4:0c: ce:86:5f:b6:dd:7e:4f:0b:1c:88:ef:4a:e3:87:05:75:69:ad: 01:db:ff:cf:53:1e:03:4e:6f:eb:c8:00:b3:a2:d9:dd:83:7f: e4:d2:65:a5:ce:eb:40:dd:43:bc:a0:09:a2:d5:12:b9:e4:71: f8:de:84:4e:e5:5c:7b:51:28:a5:19:24:d9:3a:92:08:d7:e8: d6:24:3c:42:e7:c8:60:32:aa:e5:12:08:91:e0:15:99:f8:96: 64:dc:db:5c:c1:2e:51:7d:36:3a:bb:ff:42:2e:26:25:b8:1f: cc:a7:b6:ef:9d:3e:f5:a3:05:dd:6c:05:f3:e0:45:61:4c:11: 62:5b:c1:03:86:fc:79:16:08:bc:26:aa:ed:96:7a:6c:21:ce: cb:a5:f3:e2:2d:56:64:c0:8c:b7:d7:3b:92:d8:e1:b8:54:59: ab:0d:36:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2MDgxMTAvBgNVBAUTKDIxMUM1NTBCNTNFQjIwNDc1MTg1QkFCQ0RFN0U3MERG Njc0NDQ4QjcwHhcNMjQxMTIyMTgyMjI5WhcNMjQxMTI5MTgyMjI5WjAYMRYwFAYD VQQDEw02NzQwY2JlNS0wMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHnvKFdKrbPb+Z22XFPmGjiOQleKboqmoexp2Q9jVmhL5OfminbvO7GrBQP4 dzCSZtB3PR3zwKBw3YpynA7fzkdgnvvuL8vnHqO+cVU0DQPQq4buv5tHQweGo6Rr qCVmzaRr/sxGK4QmREdnwnzIcnFUdT1JAiJWDjNviyhptDa0Iy9+EuyVtC/nfl3W 96YcjippRSXgSYHxrfgQVDDOi/cM7TMjojEbf7yof3eEe3wCAVNAVlxhB7VBipLl ns+OeVEPIh4xKeK92jQKOwv+Iroc+U9sutPsfcs/0j6OD39OP7WFl3DvK+Hf+TWy hKBkg+L31J2+090WUoKzuNcwxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7PsarW y4YwpeB97QE3BU5xa/zhMB8GA1UdIwQYMBaAFCEcVQtT6yBHUYW6vN5+cN9nREi3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTYwOC83NDgwRkM4ODAy RTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklFZFJoYnE4M241dzMyZEVT TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSeFZDMVBySUVkUmhicTgzbjV3MzJkRVNMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTYwOC83NDgwRkM4ODAyRTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklF ZFJoYnE4M241dzMyZEVTTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh7jO6dBbwUtsWPHFG5hpIj0OEL0IG76kOYGWAj7tX3/SAGbPtsbKP xhvgevIAr0U3zjXYtZk0k2hRbuovzWkf3POoKG6Cge9ZTFu8jhGsVZKAAaAdqcKE 1AzOhl+23X5PCxyI70rjhwV1aa0B2//PUx4DTm/ryACzotndg3/k0mWlzutA3UO8 oAmi1RK55HH43oRO5Vx7USilGSTZOpII1+jWJDxC58hgMqrlEgiR4BWZ+JZk3Ntc wS5RfTY6u/9CLiYluB/Mp7bvnT71owXdbAXz4EVhTBFiW8EDhvx5Fgi8Jqrtlnps Ic7LpfPiLVZkwIy31zuS2OG4VFmrDTZL -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org