$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: wGE/5pBwX92jlfRAnvuaRXrNg9dnqIce3HqsjY+zUtM= Subject key identifier: 08:0C:EF:99:EA:83:22:56:16:65:10:F6:3D:2F:20:EC:67:D7:CE:1E Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: 22 Signing time: Wed 23 Oct 2024 06:30:35 +0000 Manifest this update: Wed 23 Oct 2024 06:30:35 +0000 Manifest next update: Wed 30 Oct 2024 06:30:35 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: Q1aC8NchcPT32n9UJRdvdYbxodfOtfyaKvleuBIpVjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Oct 23 06:30:35 2024 GMT Not After : Oct 30 06:30:35 2024 GMT Subject: CN=6718980b-0b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fc:43:91:d9:d5:25:d3:8a:00:21:84:f7:41: 00:91:0c:0b:a9:88:66:30:df:39:11:30:a6:be:2f: 0b:73:e3:b5:64:fc:26:10:db:e7:22:2c:d4:40:e9: 6b:5b:47:53:73:0a:65:de:1f:15:6b:58:5a:18:fc: 55:e4:11:08:db:08:2d:95:af:5a:26:0c:09:4e:59: 89:e3:7e:75:74:ee:07:6c:4b:5f:6a:07:fd:68:22: 91:ec:a6:60:14:96:f8:e0:10:60:76:a2:44:bf:5d: a3:9b:ab:eb:6c:ef:fc:ad:83:d1:15:88:66:f9:33: 62:d9:19:3c:15:6f:ed:e0:2d:9a:ab:84:53:4b:ee: a4:ee:b6:e6:8f:07:9c:a7:7b:2d:12:e6:5b:f6:2f: 65:22:d2:3f:05:3f:41:4b:8a:91:3b:68:b2:c3:42: 11:d5:42:ec:d1:f2:cc:03:53:7d:96:73:5f:d7:1f: 19:d4:3d:51:3c:56:c0:02:58:4e:a6:46:2e:d9:66: 19:fe:51:2c:38:75:79:67:3a:53:f9:94:86:cf:94: ca:dc:ee:6d:12:6f:8a:95:b9:6c:b1:0d:e3:d4:0c: e5:ed:96:d9:8a:36:62:e9:c0:3c:b4:b4:d1:49:73: a6:e1:9e:b5:69:09:de:99:cf:8d:f9:53:1e:5b:4c: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:EF:99:EA:83:22:56:16:65:10:F6:3D:2F:20:EC:67:D7:CE:1E X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:50:bc:67:d9:ee:c0:62:2f:f0:6a:86:f5:fe:c2:72:7d:e1: b9:01:58:a9:22:98:09:a6:38:ac:cd:c3:4d:b7:bd:67:61:90: 84:f8:7e:2f:e1:87:99:00:51:b2:ba:3b:77:77:2b:71:c8:a5: 7e:5f:99:c8:8d:79:fa:d2:d2:80:0c:25:31:60:90:02:68:71: 2f:db:1c:2a:a6:8b:61:f3:20:d7:aa:a6:55:54:80:09:32:bb: 2a:2e:62:d6:c9:ae:73:19:de:07:4b:ac:1c:ca:17:b3:66:d7: 51:0f:92:a1:08:14:79:db:6a:42:57:f3:ce:7d:80:8f:9d:9e: 44:9e:fc:63:76:cb:b8:3e:f1:b7:56:1c:9b:4f:c8:04:7a:a7: 53:92:ec:f5:41:72:a2:82:e7:89:9f:c7:72:17:b2:09:a4:6e: 48:0a:c1:78:02:31:ae:6a:3e:d1:c2:53:5c:82:9d:b6:df:b8: 3b:0f:a2:82:cf:e7:40:5e:94:4b:e9:d3:5e:b1:c3:77:74:c4: ce:a1:58:5f:b1:9e:95:d4:bf:97:b7:2b:24:9e:0f:3d:50:c9: 2e:f4:d6:1b:3c:cb:0f:ed:7f:77:9d:9e:d7:37:95:2c:5e:f1: 14:8a:7e:7b:3d:74:fd:e9:18:26:aa:bf:1f:4f:31:b5:68:31: e3:55:0b:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUI0MTExMC8GA1UEBRMoMjJERTkzNzE1OEFFOThERUEyMjExRjlCQkM5QTc1RDBF RDBENDQzNjAeFw0yNDEwMjMwNjMwMzVaFw0yNDEwMzAwNjMwMzVaMBgxFjAUBgNV BAMTDTY3MTg5ODBiLTBiNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDt/EOR2dUl04oAIYT3QQCRDAupiGYw3zkRMKa+Lwtz47Vk/CYQ2+ciLNRA6Wtb R1NzCmXeHxVrWFoY/FXkEQjbCC2Vr1omDAlOWYnjfnV07gdsS19qB/1oIpHspmAU lvjgEGB2okS/XaObq+ts7/ytg9EViGb5M2LZGTwVb+3gLZqrhFNL7qTutuaPB5yn ey0S5lv2L2Ui0j8FP0FLipE7aLLDQhHVQuzR8swDU32Wc1/XHxnUPVE8VsACWE6m Ri7ZZhn+USw4dXlnOlP5lIbPlMrc7m0Sb4qVuWyxDePUDOXtltmKNmLpwDy0tNFJ c6bhnrVpCd6Zz435Ux5bTJhvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCAzvmeqD IlYWZRD2PS8g7GfXzh4wHwYDVR0jBBgwFoAUIt6TcViumN6iIR+bvJp10O0NRDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QjQxLzcyNkUzQUQwNjA1 OTExRUY5QzIyMzc2MEM0RjlBRTAyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXQ2VGNWaXVtTjZpSVItYnZKcDEwTzBOUkRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 QjQxLzcyNkUzQUQwNjA1OTExRUY5QzIyMzc2MEM0RjlBRTAyL0l0NlRjVml1bU42 aUlSLWJ2SnAxME8wTlJEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADpQvGfZ7sBiL/BqhvX+wnJ94bkBWKkimAmmOKzNw023vWdhkIT4fi/h h5kAUbK6O3d3K3HIpX5fmciNefrS0oAMJTFgkAJocS/bHCqmi2HzINeqplVUgAky uyouYtbJrnMZ3gdLrBzKF7Nm11EPkqEIFHnbakJX8859gI+dnkSe/GN2y7g+8bdW HJtPyAR6p1OS7PVBcqKC54mfx3IXsgmkbkgKwXgCMa5qPtHCU1yCnbbfuDsPooLP 50BelEvp016xw3d0xM6hWF+xnpXUv5e3KySeDz1QyS701hs8yw/tf3edntc3lSxe 8RSKfns9dP3pGCaqvx9PMbVoMeNVC1o= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org