$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: mliTDHbPDoxiKo2Sj2J4T1hHxSQlJaVeFf00QdtLc28= Subject key identifier: EA:64:D5:E3:7A:A7:AD:5A:3A:3F:F7:60:81:08:9D:A5:C9:A5:B9:ED Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: 32 Signing time: Sat 23 Nov 2024 05:35:17 +0000 Manifest this update: Sat 23 Nov 2024 05:35:16 +0000 Manifest next update: Sat 30 Nov 2024 05:35:16 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: zJ/3YwT4729AnAUMIywLId+Q4ISuYB7dWpjID/MIBNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Nov 23 05:35:16 2024 GMT Not After : Nov 30 05:35:16 2024 GMT Subject: CN=67416994-4627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:fe:18:2c:e5:1a:4b:f9:41:1c:d6:48:87: 5b:3b:40:97:a3:02:6e:24:34:0b:1b:7e:b7:f1:2a: 8f:99:82:3b:bb:46:49:56:3d:f2:85:80:5b:79:5a: a5:5a:fc:23:68:28:be:32:2e:8c:c2:b4:c4:81:cc: 5f:f2:65:7a:b1:78:4d:da:3a:c7:b2:01:06:cf:61: 46:f7:7d:4b:da:94:7e:5b:44:1d:e0:a6:d2:e2:91: 06:fd:59:f9:bf:53:d5:58:a6:72:10:a4:42:dc:91: ed:73:30:4c:18:fb:44:1f:10:f4:98:28:8e:c3:89: 0b:a5:8c:4b:e3:37:af:81:27:6c:1a:7b:d3:7f:da: 34:50:15:41:42:de:2e:0c:d2:84:cd:6c:f5:41:b4: 40:fb:26:1a:e4:69:62:c4:6f:3b:f9:5c:c3:e7:23: 5a:58:cd:f4:24:e9:34:d9:33:94:e1:43:f8:de:7a: 3f:11:50:35:ea:07:31:2a:18:74:1c:a6:d8:ce:e0: 4c:d2:13:93:95:ac:ea:21:58:93:11:28:95:b3:aa: 29:8f:f6:d9:a6:41:15:72:82:4b:71:f7:d9:d1:c1: 6e:37:a9:99:e4:10:22:2d:3a:f1:52:15:cf:e8:39: 00:d5:4c:65:f2:e7:6a:82:09:b0:fb:2e:f6:c5:1d: 33:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:64:D5:E3:7A:A7:AD:5A:3A:3F:F7:60:81:08:9D:A5:C9:A5:B9:ED X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:19:27:4f:e4:d5:19:4a:de:56:24:cc:d5:68:ad:33:49:9d: 17:d3:03:17:96:bb:ca:28:81:90:94:8e:18:bc:79:f2:a6:a3: b0:3a:0b:94:e2:35:7e:6d:51:02:e6:7d:9d:52:23:d3:82:1e: d0:57:aa:14:b6:68:a5:14:de:68:8a:77:fb:94:ec:fe:ca:b5: cd:f0:40:90:14:66:19:f2:fe:e6:fd:fc:df:b5:ac:93:ab:01: 81:78:fc:08:e8:39:e7:20:46:47:79:8b:2a:52:32:d6:7f:83: ae:af:db:49:55:cc:97:a8:b5:a6:c4:67:34:e8:aa:c9:70:bc: 75:91:8f:38:12:c1:9d:07:f6:6e:0a:94:48:ec:a9:ef:11:8c: 38:bf:ef:c7:6a:e9:f9:8d:87:97:02:dc:b0:db:1a:86:53:a9: f6:c3:92:22:9d:f4:02:64:b0:89:4d:bd:59:f3:ec:35:3f:10: d0:a0:c0:9d:35:ad:c0:ea:1c:b4:0f:55:38:c2:ba:43:bc:7e: 93:e0:b6:6b:a6:ba:3e:83:78:0e:df:55:81:96:56:48:a7:4b: e0:3f:06:f8:52:2e:32:86:02:84:3e:53:ad:f9:e9:8f:4b:e0: 16:af:45:84:57:7f:9e:57:1b:aa:31:7c:24:3b:ae:82:53:35: 0e:58:a2:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUI0MTExMC8GA1UEBRMoMjJERTkzNzE1OEFFOThERUEyMjExRjlCQkM5QTc1RDBF RDBENDQzNjAeFw0yNDExMjMwNTM1MTZaFw0yNDExMzAwNTM1MTZaMBgxFjAUBgNV BAMTDTY3NDE2OTk0LTQ2MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZTf4YLOUaS/lBHNZIh1s7QJejAm4kNAsbfrfxKo+Zgju7RklWPfKFgFt5WqVa /CNoKL4yLozCtMSBzF/yZXqxeE3aOseyAQbPYUb3fUvalH5bRB3gptLikQb9Wfm/ U9VYpnIQpELcke1zMEwY+0QfEPSYKI7DiQuljEvjN6+BJ2wae9N/2jRQFUFC3i4M 0oTNbPVBtED7JhrkaWLEbzv5XMPnI1pYzfQk6TTZM5ThQ/jeej8RUDXqBzEqGHQc ptjO4EzSE5OVrOohWJMRKJWzqimP9tmmQRVygktx99nRwW43qZnkECItOvFSFc/o OQDVTGXy52qCCbD7LvbFHTMnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6mTV43qn rVo6P/dggQidpcmlue0wHwYDVR0jBBgwFoAUIt6TcViumN6iIR+bvJp10O0NRDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QjQxLzcyNkUzQUQwNjA1 OTExRUY5QzIyMzc2MEM0RjlBRTAyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXQ2VGNWaXVtTjZpSVItYnZKcDEwTzBOUkRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 QjQxLzcyNkUzQUQwNjA1OTExRUY5QzIyMzc2MEM0RjlBRTAyL0l0NlRjVml1bU42 aUlSLWJ2SnAxME8wTlJEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJcZJ0/k1RlK3lYkzNVorTNJnRfTAxeWu8oogZCUjhi8efKmo7A6C5Ti NX5tUQLmfZ1SI9OCHtBXqhS2aKUU3miKd/uU7P7Ktc3wQJAUZhny/ub9/N+1rJOr AYF4/AjoOecgRkd5iypSMtZ/g66v20lVzJeotabEZzToqslwvHWRjzgSwZ0H9m4K lEjsqe8RjDi/78dq6fmNh5cC3LDbGoZTqfbDkiKd9AJksIlNvVnz7DU/ENCgwJ01 rcDqHLQPVTjCukO8fpPgtmumuj6DeA7fVYGWVkinS+A/BvhSLjKGAoQ+U6356Y9L 4BavRYRXf55XG6oxfCQ7roJTNQ5Yols= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org