$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json) Hash identifier: rBrJeITOO5eW+J+bFLnO78kjBS8d0YH4afuxx7onhUE= Subject key identifier: 5E:77:18:1A:DD:14:1C:28:23:AC:C3:FA:07:94:20:AA:5C:61:F6:17 Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft Manifest number: 0BA2 Signing time: Fri 22 Nov 2024 18:44:22 +0000 Manifest this update: Fri 22 Nov 2024 18:44:22 +0000 Manifest next update: Fri 29 Nov 2024 18:44:22 +0000 Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: 1b4mr4vijoo7eHqgLvC5MRSyxqnKAknZTnchC04reCw=) 2: FA7A1C3AAEE911EA8DB3E03CC4F9AE02.roa (hash: QE5ecgdG5fYcUSCX+MxTdkEzDIB0KG6YE5GZCloiYJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: Nov 22 18:44:22 2024 GMT Not After : Nov 29 18:44:22 2024 GMT Subject: CN=6740d106-1459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:10:d4:41:7b:e0:44:d7:e2:9f:99:23:ab: 3d:55:ff:3c:cd:87:fc:ca:63:1a:89:e4:c8:51:85: 15:c6:a1:62:80:38:d0:5a:8f:ab:72:b4:78:0b:50: 1b:4f:26:8b:57:2a:1a:ce:d2:f2:a5:0e:a5:c0:e8: 48:16:b0:91:e5:3f:a8:1c:f5:b1:b9:df:37:62:c3: db:7a:54:d2:79:e5:fb:21:f5:6b:49:72:8e:94:64: d5:2a:b7:8e:20:bc:8d:9e:6f:0a:0f:bc:84:85:25: d6:fc:38:45:20:19:f2:a6:7d:dd:99:37:df:ab:ef: ce:3d:e8:62:84:ed:28:2e:87:af:bc:4d:63:a7:9c: a9:3b:4c:17:8f:4d:24:f5:37:33:a0:2e:ff:0c:1d: e6:79:d2:15:5b:57:da:a5:f5:00:d1:8c:4c:92:d6: 13:6f:80:fa:34:f0:59:19:b0:55:dd:89:dd:c3:f2: b4:03:40:ea:3c:91:ac:74:b2:95:26:66:64:c7:7f: af:59:08:6d:bc:23:6c:05:b9:47:d7:f3:37:d9:f0: de:d5:b2:72:64:65:d3:56:71:3e:2d:cd:1b:34:c7: 53:e4:31:cc:2c:78:f9:79:10:4e:c0:52:00:0a:ae: 9d:6b:2c:5e:d7:24:ed:d1:1a:83:22:9e:59:30:08: 62:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:77:18:1A:DD:14:1C:28:23:AC:C3:FA:07:94:20:AA:5C:61:F6:17 X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7c:50:b2:30:07:da:d0:8c:eb:7d:7f:4e:46:61:27:ba:d1: e8:15:0c:de:89:20:5c:85:cd:60:50:ba:0d:1e:2b:c7:d3:5f: 98:5a:59:c5:11:a7:5b:df:01:b8:5d:5c:15:22:18:bc:44:e6: 48:a1:fa:82:a2:38:d8:d3:38:3f:6e:e9:94:43:20:b1:a3:90: 8c:d4:71:eb:d3:23:83:b8:d5:2b:c8:af:42:bc:3e:bd:e3:c5: 8b:f8:a0:51:af:20:f9:94:b1:88:a6:11:ac:87:f8:fc:49:74: ae:66:dc:f3:44:b9:a3:01:03:ab:56:88:02:09:f1:da:3e:86: 8f:e4:4f:8d:a0:69:b0:f3:fa:46:94:9f:20:51:01:12:57:f0: 9c:6d:c5:0c:d5:29:a0:48:31:ae:df:f9:9c:bd:4c:d9:78:49: 21:be:33:c6:e4:fe:b6:2d:54:a6:ab:8c:a9:d8:b2:49:2b:6e: f0:41:27:4b:8c:5c:1c:70:78:af:7c:f4:33:d7:68:af:6b:8c: 09:96:8e:a4:5c:0e:d9:c9:51:18:5c:19:89:00:82:0d:4a:44: 69:ad:32:01:d9:c0:35:25:85:e9:21:be:b3:10:5b:73:7c:48: ff:d6:39:5f:82:31:58:11:d7:e5:9d:a5:e5:f5:7c:84:c8:2c: 88:9c:5f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjQxMTIyMTg0NDIyWhcNMjQxMTI5MTg0NDIyWjAYMRYwFAYD VQQDEw02NzQwZDEwNi0xNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJUQ1EF74ETX4p+ZI6s9Vf88zYf8ymMaieTIUYUVxqFigDjQWo+rcrR4C1Ab TyaLVyoaztLypQ6lwOhIFrCR5T+oHPWxud83YsPbelTSeeX7IfVrSXKOlGTVKreO ILyNnm8KD7yEhSXW/DhFIBnypn3dmTffq+/OPehihO0oLoevvE1jp5ypO0wXj00k 9TczoC7/DB3medIVW1fapfUA0YxMktYTb4D6NPBZGbBV3Yndw/K0A0DqPJGsdLKV JmZkx3+vWQhtvCNsBblH1/M32fDe1bJyZGXTVnE+Lc0bNMdT5DHMLHj5eRBOwFIA Cq6dayxe1yTt0RqDIp5ZMAhigQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF53GBrd FBwoI6zD+geUIKpcYfYXMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlfFCyMAfa0IzrfX9ORmEnutHoFQzeiSBchc1gULoNHivH01+YWlnF Eadb3wG4XVwVIhi8ROZIofqCojjY0zg/bumUQyCxo5CM1HHr0yODuNUryK9CvD69 48WL+KBRryD5lLGIphGsh/j8SXSuZtzzRLmjAQOrVogCCfHaPoaP5E+NoGmw8/pG lJ8gUQESV/CcbcUM1SmgSDGu3/mcvUzZeEkhvjPG5P62LVSmq4yp2LJJK27wQSdL jFwccHivfPQz12iva4wJlo6kXA7ZyVEYXBmJAIINSkRprTIB2cA1JYXpIb6zEFtz fEj/1jlfgjFYEdflnaXl9XyEyCyInF9Y -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org