$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: z5NvajKC6bmHFSq9iX/d9W04XIJUGaSbfok07DYEp+4= Subject key identifier: 39:CD:15:67:0A:2F:2E:11:24:B6:AA:31:7F:B5:C2:D5:41:52:AD:95 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 59 Signing time: Sat 23 Nov 2024 05:05:36 +0000 Manifest this update: Sat 23 Nov 2024 05:05:35 +0000 Manifest next update: Sat 30 Nov 2024 05:05:35 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: GexJJaHAsN9R26aebzU7jimRjHiAZ9NSw49+op8qOXk=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: UxAygpfGpi/7LbfgcrDHteILaaTojTUKGBKpExRn4ds=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: tT0U7je/lStzl+Gd03/CVrFPBnBeNuZUlfzB9Ibn9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Nov 23 05:05:35 2024 GMT Not After : Nov 30 05:05:35 2024 GMT Subject: CN=674162a0-d1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a5:52:f4:7d:5b:5e:d7:f3:9b:0c:a2:26:db: 41:36:5f:03:a6:63:ba:48:0c:28:f6:7c:93:b9:a3: 95:79:1f:ed:3c:09:5f:4e:94:4e:54:c9:f9:6a:be: 34:72:93:3d:55:b4:52:f5:33:52:60:26:e8:f5:d0: 95:d6:81:a0:fa:3f:70:20:61:a3:d5:fd:49:6d:8e: c7:6e:18:9f:e2:f4:c8:65:0b:8f:70:48:81:c4:f9: 9b:cc:81:5a:49:90:e9:52:ae:a7:ad:17:6c:42:20: 50:a9:f0:57:be:98:87:b7:0b:cb:9c:04:c2:8b:1a: 65:59:45:64:31:81:80:67:80:07:3e:e8:be:af:50: b2:03:b2:3e:4e:b6:17:81:93:7d:c9:8f:d4:ef:d4: 4a:c8:d5:c6:2a:72:73:c8:e2:00:9e:fd:71:3d:de: a1:50:13:4f:7d:da:50:99:be:9f:c8:6b:bd:27:2f: 94:76:5f:72:43:df:a0:df:62:72:67:ba:91:f8:e1: 97:85:54:de:93:44:80:b4:88:9e:32:2e:46:28:e1: 90:21:49:57:e0:14:00:a7:73:9c:12:0f:0c:80:d6: 99:84:71:d4:e5:b2:13:8e:37:c7:da:f8:4a:75:ae: c8:7e:83:7b:c2:d4:67:0e:97:ed:a3:30:0b:aa:c7: a9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:15:67:0A:2F:2E:11:24:B6:AA:31:7F:B5:C2:D5:41:52:AD:95 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a0:42:ee:df:31:b3:d1:7e:29:de:6f:66:c8:a8:a0:28:80: a6:23:ef:44:b1:6a:03:bf:0f:14:d1:93:23:59:5c:ac:00:46: a2:ea:a3:cf:6b:eb:5f:6f:28:b8:d7:56:60:a0:9c:cb:98:67: fa:8a:51:8a:96:2d:09:07:67:f1:39:2e:c7:30:08:15:6c:fe: d1:b8:8a:40:59:78:fc:fd:61:39:34:b0:54:3a:e9:71:85:be: bb:03:c7:c9:df:63:0f:e4:02:a7:c8:37:98:35:a9:a2:9e:6e: 6c:1a:76:96:2d:de:f2:5e:bf:9f:9c:e8:dd:ce:fc:26:6f:e2: d8:44:06:6b:c6:be:32:28:eb:df:72:05:d1:9d:3e:f3:ee:72: 5f:ad:1a:42:ab:13:31:a4:cc:2e:cd:e3:ef:8a:78:92:00:13: 5c:bc:0c:b2:6a:fe:b6:34:7d:c9:48:2e:29:3e:fc:e4:49:e3: cf:24:6a:24:22:f4:7c:61:ba:a4:83:93:b5:2b:ce:45:5c:d4: 9b:9e:b4:b7:b4:6a:d4:c8:e2:07:78:27:d9:4c:04:bd:26:ea: dd:46:7e:8b:1d:33:08:4b:40:c3:43:00:0a:fe:e1:19:fa:80: 63:b8:40:78:c8:6f:2e:1e:7b:14:93:dd:fe:b1:4b:74:98:19: 15:ee:9d:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoMjJBRkQ0Q0REOUM0RjRDMzgzNzYyQjNFOTNFRUNGMUFF NkZGOUQxNjAeFw0yNDExMjMwNTA1MzVaFw0yNDExMzAwNTA1MzVaMBgxFjAUBgNV BAMTDTY3NDE2MmEwLWQxYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDipVL0fVte1/ObDKIm20E2XwOmY7pIDCj2fJO5o5V5H+08CV9OlE5UyflqvjRy kz1VtFL1M1JgJuj10JXWgaD6P3AgYaPV/UltjsduGJ/i9MhlC49wSIHE+ZvMgVpJ kOlSrqetF2xCIFCp8Fe+mIe3C8ucBMKLGmVZRWQxgYBngAc+6L6vULIDsj5OtheB k33Jj9Tv1ErI1cYqcnPI4gCe/XE93qFQE0992lCZvp/Ia70nL5R2X3JD36DfYnJn upH44ZeFVN6TRIC0iJ4yLkYo4ZAhSVfgFACnc5wSDwyA1pmEcdTlshOON8fa+Ep1 rsh+g3vC1GcOl+2jMAuqx6kvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOc0VZwov LhEktqoxf7XC1UFSrZUwHwYDVR0jBBgwFoAUIq/UzdnE9MODdis+k+7PGub/nRYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBL0FGMkQ1MEU2MjMw MDExRUY5NDVERTM4MkM0RjlBRTAyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25S WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXFfVXpkbkU5TU9EZGlzLWstN1BHdWJfblJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBL0FGMkQ1MEU2MjMwMDExRUY5NDVERTM4MkM0RjlBRTAyL0lxX1V6ZG5FOU1P RGRpcy1rLTdQR3ViX25SWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEGgQu7fMbPRfineb2bIqKAogKYj70SxagO/DxTRkyNZXKwARqLqo89r 619vKLjXVmCgnMuYZ/qKUYqWLQkHZ/E5LscwCBVs/tG4ikBZePz9YTk0sFQ66XGF vrsDx8nfYw/kAqfIN5g1qaKebmwadpYt3vJev5+c6N3O/CZv4thEBmvGvjIo699y BdGdPvPucl+tGkKrEzGkzC7N4++KeJIAE1y8DLJq/rY0fclILik+/ORJ488kaiQi 9HxhuqSDk7UrzkVc1JuetLe0atTI4gd4J9lMBL0m6t1GfosdMwhLQMNDAAr+4Rn6 gGO4QHjIby4eexST3f6xS3SYGRXunRI= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org