$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: wk/BkBza4dw7Za7+x3wKEaDNzeZg/8+o/2Y/yWdAV6Q= Subject key identifier: 2C:77:9C:62:5F:1B:F3:09:E5:7C:CD:43:EA:BC:68:EC:7E:0B:62:E2 Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 072A Signing time: Wed 20 Nov 2024 21:15:31 +0000 Manifest this update: Wed 20 Nov 2024 21:15:31 +0000 Manifest next update: Wed 27 Nov 2024 21:15:31 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: knlhqoGrRG89IZfWlvpEodkd/fQcM1Wz9WL+/G/ygm8=) 2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: TZy3mzqffsTM4n4Rbmohmuv3VCPWE9WJRvRzq53CbvQ=) 3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: IPmClsdSMbassfXddv44p/mv8kyQ7PdScutwrTiO+q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Nov 20 21:15:31 2024 GMT Not After : Nov 27 21:15:31 2024 GMT Subject: CN=673e5173-69b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:30:14:ed:c8:46:48:e0:b4:d7:ba:f9:9f: 2e:ed:43:69:91:b9:ad:07:fe:ba:ee:c7:13:8c:8b: 2c:bb:a6:a4:bc:c1:97:ef:aa:79:b3:e9:18:ad:df: 08:d8:b1:00:51:6b:94:40:a5:74:5c:20:85:35:e3: 63:d4:65:4e:0a:40:3c:60:d3:16:36:b5:4a:eb:63: 22:1f:2b:11:0e:14:66:1b:15:12:65:a7:c2:08:55: 3c:15:68:0a:79:9e:02:99:bb:35:7a:6a:3d:54:82: 2e:f8:67:80:59:54:92:41:02:7e:da:e2:26:dc:77: 2e:18:15:91:31:f4:aa:4a:ec:ed:12:6e:6d:10:23: 0a:28:bc:b1:4f:85:84:97:82:e7:7f:16:9d:68:2e: 0a:bf:80:30:42:af:40:56:c4:70:ef:c9:4b:3d:1d: 0a:6b:49:d3:9f:1e:c2:0b:e6:8d:fd:ff:43:6f:e0: 81:17:47:5d:0a:24:4d:ae:10:54:cf:ef:43:a8:ae: 9c:4b:3e:cc:19:5c:ed:90:e5:6f:ce:fa:92:c6:8f: 17:1c:b6:19:a3:6c:61:82:00:9b:7a:78:63:b5:a3: c4:3b:9c:22:cb:c1:23:59:11:41:55:50:50:c0:e2: 55:01:ba:9c:24:35:e6:49:db:93:a7:eb:f2:b9:33: bf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:77:9C:62:5F:1B:F3:09:E5:7C:CD:43:EA:BC:68:EC:7E:0B:62:E2 X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:fe:71:e0:e2:0d:d8:ff:2b:57:a0:55:b7:3c:09:79:04:05: d8:0c:39:10:f8:08:27:c7:80:ee:14:aa:80:77:71:b0:f2:ea: 9e:76:18:5e:66:75:26:ae:b7:16:cc:21:48:a1:fe:4e:d2:0f: be:b2:e5:7a:11:ab:91:78:13:13:09:fc:2d:a6:ce:ef:17:84: 67:d7:63:4e:a7:35:cc:df:16:bd:93:61:36:a8:06:59:79:85: cc:f6:6f:83:82:15:6c:39:3b:67:94:bd:0a:96:79:a3:69:cf: 69:45:e9:29:e7:92:fc:71:8c:4e:bd:de:3d:cb:fb:7e:2c:35: 2e:55:c4:34:b1:87:e2:81:91:40:87:5b:7c:6c:4e:ef:ac:5d: 7f:d5:a1:e8:50:ee:4f:07:77:e2:95:55:de:09:61:71:25:63: c7:2b:8e:61:07:0c:50:42:91:f1:7d:58:a6:90:15:2b:87:47: 5c:e9:e5:b4:55:20:7c:02:2a:aa:a0:2a:0c:48:e4:c4:61:51: f5:0b:8d:15:5f:da:71:08:cf:16:5c:39:fb:10:a2:45:82:73: 2c:fc:42:ae:62:79:77:0c:5c:64:8a:7c:27:28:b4:2e:ab:be: b7:a9:da:ba:af:5d:28:a2:b2:ec:e1:94:79:75:77:02:1e:bd: e6:be:f9:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjQxMTIwMjExNTMxWhcNMjQxMTI3MjExNTMxWjAYMRYwFAYD VQQDEw02NzNlNTE3My02OWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZwwFO3IRkjgtNe6+Z8u7UNpkbmtB/667scTjIssu6akvMGX76p5s+kYrd8I 2LEAUWuUQKV0XCCFNeNj1GVOCkA8YNMWNrVK62MiHysRDhRmGxUSZafCCFU8FWgK eZ4Cmbs1emo9VIIu+GeAWVSSQQJ+2uIm3HcuGBWRMfSqSuztEm5tECMKKLyxT4WE l4LnfxadaC4Kv4AwQq9AVsRw78lLPR0Ka0nTnx7CC+aN/f9Db+CBF0ddCiRNrhBU z+9DqK6cSz7MGVztkOVvzvqSxo8XHLYZo2xhggCbenhjtaPEO5wiy8EjWRFBVVBQ wOJVAbqcJDXmSduTp+vyuTO/QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx3nGJf G/MJ5XzNQ+q8aOx+C2LiMB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC/nHg4g3Y/ytXoFW3PAl5BAXYDDkQ+Agnx4DuFKqAd3Gw8uqedhhe ZnUmrrcWzCFIof5O0g++suV6EauReBMTCfwtps7vF4Rn12NOpzXM3xa9k2E2qAZZ eYXM9m+DghVsOTtnlL0Klnmjac9pRekp55L8cYxOvd49y/t+LDUuVcQ0sYfigZFA h1t8bE7vrF1/1aHoUO5PB3filVXeCWFxJWPHK45hBwxQQpHxfVimkBUrh0dc6eW0 VSB8AiqqoCoMSOTEYVH1C40VX9pxCM8WXDn7EKJFgnMs/EKuYnl3DFxkinwnKLQu q763qdq6r10oorLs4ZR5dXcCHr3mvvla -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:44 2024 by rpki-client on console-ams.rpki-client.org