$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: wgvFnw51ByJPmU6X3428HBw8Ex8Ksazr9A5TWVMTbDs= Subject key identifier: 1C:A8:DF:AA:DD:ED:E0:62:EA:AE:81:6C:72:D7:8B:FC:63:B3:12:F8 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 36 Signing time: Sun 15 Sep 2024 09:58:57 +0000 Manifest this update: Sun 15 Sep 2024 09:58:56 +0000 Manifest next update: Sun 22 Sep 2024 09:58:56 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: g+LVuL+mWAQNsD4KAIl8SFc20zJQyUkQMvFJQoRO1bI=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: UxAygpfGpi/7LbfgcrDHteILaaTojTUKGBKpExRn4ds=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: tT0U7je/lStzl+Gd03/CVrFPBnBeNuZUlfzB9Ibn9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Sep 15 09:58:56 2024 GMT Not After : Sep 22 09:58:56 2024 GMT Subject: CN=66e6afe1-6639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:dc:f6:ff:ab:6b:02:44:5a:35:ce:86:23: 44:2a:20:65:14:4d:fa:b4:2a:e4:07:d1:9a:e4:aa: 44:3a:e9:e1:29:e2:a9:3a:ce:0c:f4:d8:ca:0d:e5: 15:ad:fe:24:a8:c5:b0:8c:41:99:45:fa:ed:a7:95: c8:12:d3:8f:13:33:69:6e:9b:54:5d:83:83:a2:ef: f6:f9:ed:ce:dd:42:33:74:26:94:85:4a:f2:04:e8: cf:db:58:0b:51:d4:3c:5c:de:2c:35:09:44:62:49: 98:e4:9c:cc:74:11:37:f9:70:4c:e2:19:5c:bf:57: 53:29:ee:22:8f:c1:28:27:4a:62:58:66:37:41:cc: cd:04:8e:6f:e2:06:4a:f9:2e:d7:36:df:67:e9:8a: a8:af:43:e5:45:88:f3:c5:f0:2c:65:ed:41:4c:75: aa:bb:e4:10:38:9b:b8:66:c1:6c:6b:fb:cc:4d:dc: 43:ff:c8:7e:0a:78:cd:38:f8:ab:a4:b5:fc:c0:d6: c9:d5:d1:34:29:8c:75:d8:1d:27:4f:68:1b:df:73: ce:eb:47:c4:a0:56:d2:85:8b:76:a8:b7:e9:f8:98: bb:66:e9:a8:64:97:fc:83:b1:fe:d8:6b:c6:e4:d3: af:7c:66:33:1a:fc:dc:0a:df:2a:eb:c7:04:1f:ee: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A8:DF:AA:DD:ED:E0:62:EA:AE:81:6C:72:D7:8B:FC:63:B3:12:F8 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:34:2e:0a:5d:41:9d:61:3c:f7:f0:28:27:28:45:44:fd:db: e6:a4:cd:88:35:f3:ea:d7:8f:2f:5b:83:17:86:96:de:93:21: 75:26:62:76:4c:88:3f:9f:d3:4a:e5:19:01:8e:fd:9e:85:4b: d5:b1:db:26:dd:6a:dd:fc:ff:76:40:54:de:01:55:64:ce:9e: ef:15:83:1f:eb:6a:0b:42:1d:6e:5d:72:e0:48:dc:dc:f1:be: 66:cf:7b:3e:01:0e:d7:77:d3:ce:95:db:79:97:23:9a:cf:b6: 1e:66:b9:d3:2f:23:fc:e6:d4:84:18:09:a1:15:b4:f4:56:17: 00:4d:6c:8b:a4:51:c3:f2:cb:8f:05:8f:bf:ec:2d:45:4d:3c: b6:18:9b:91:99:e5:7a:4c:02:a5:e0:04:92:c9:e9:33:ac:cb: 02:3c:95:43:b2:ef:62:52:a9:75:8a:20:31:dd:1a:21:e9:8b: 3a:51:03:14:de:4f:b9:1b:aa:55:37:c5:71:bd:29:18:b9:55: 87:5c:6f:ce:50:15:97:a0:3a:81:4c:34:a1:17:2b:26:0f:26: 42:f7:57:1d:05:38:94:78:b0:5e:cf:d8:4b:48:8d:97:bf:27: b7:dd:a9:34:65:4a:12:b3:d0:50:6d:af:6e:36:fa:ea:7a:0f: d0:95:2d:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoMjJBRkQ0Q0REOUM0RjRDMzgzNzYyQjNFOTNFRUNGMUFF NkZGOUQxNjAeFw0yNDA5MTUwOTU4NTZaFw0yNDA5MjIwOTU4NTZaMBgxFjAUBgNV BAMTDTY2ZTZhZmUxLTY2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Itz2/6trAkRaNc6GI0QqIGUUTfq0KuQH0ZrkqkQ66eEp4qk6zgz02MoN5RWt /iSoxbCMQZlF+u2nlcgS048TM2lum1Rdg4Oi7/b57c7dQjN0JpSFSvIE6M/bWAtR 1Dxc3iw1CURiSZjknMx0ETf5cEziGVy/V1Mp7iKPwSgnSmJYZjdBzM0Ejm/iBkr5 Ltc232fpiqivQ+VFiPPF8Cxl7UFMdaq75BA4m7hmwWxr+8xN3EP/yH4KeM04+Kuk tfzA1snV0TQpjHXYHSdPaBvfc87rR8SgVtKFi3aot+n4mLtm6ahkl/yDsf7Ya8bk 0698ZjMa/NwK3yrrxwQf7tX9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHKjfqt3t 4GLqroFscteL/GOzEvgwHwYDVR0jBBgwFoAUIq/UzdnE9MODdis+k+7PGub/nRYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBL0FGMkQ1MEU2MjMw MDExRUY5NDVERTM4MkM0RjlBRTAyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25S WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXFfVXpkbkU5TU9EZGlzLWstN1BHdWJfblJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBL0FGMkQ1MEU2MjMwMDExRUY5NDVERTM4MkM0RjlBRTAyL0lxX1V6ZG5FOU1P RGRpcy1rLTdQR3ViX25SWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABo0LgpdQZ1hPPfwKCcoRUT92+akzYg18+rXjy9bgxeGlt6TIXUmYnZM iD+f00rlGQGO/Z6FS9Wx2ybdat38/3ZAVN4BVWTOnu8Vgx/ragtCHW5dcuBI3Nzx vmbPez4BDtd3086V23mXI5rPth5mudMvI/zm1IQYCaEVtPRWFwBNbIukUcPyy48F j7/sLUVNPLYYm5GZ5XpMAqXgBJLJ6TOsywI8lUOy72JSqXWKIDHdGiHpizpRAxTe T7kbqlU3xXG9KRi5VYdcb85QFZegOoFMNKEXKyYPJkL3Vx0FOJR4sF7P2EtIjZe/ J7fdqTRlShKz0FBtr242+up6D9CVLbA= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:35 2024 by rpki-client on console-ams.rpki-client.org