$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft File: iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json) Hash identifier: G8wa4L4AXmHtukeG1sr2yJ+672j97Fmc+V0YkIHVtng= Subject key identifier: 0D:CD:BF:FF:73:A4:F7:18:BF:73:CE:F8:69:C0:C6:C7:26:59:49:8B Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E Certificate issuer: /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft Manifest number: 3E Signing time: Sun 15 Sep 2024 09:53:10 +0000 Manifest this update: Sun 15 Sep 2024 09:53:09 +0000 Manifest next update: Sun 22 Sep 2024 09:53:09 +0000 Files and hashes: 1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: uNG9ciyx7WrI0x/Mdmw/UWdg/1E+lp77GSjFYkjQLfw=) 2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: A08tXG6MBFf3Rb9oSP5OxY5ld6uWXfT6PhOoxgfD4Yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Validity Not Before: Sep 15 09:53:09 2024 GMT Not After : Sep 22 09:53:09 2024 GMT Subject: CN=66e6ae86-de5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:64:c3:ce:1c:4f:38:bb:60:6b:3e:f1:e9: 68:58:15:dd:b8:f4:04:48:e5:42:da:6f:eb:13:24: cf:f7:19:e6:6e:29:ba:2d:bb:85:02:c0:82:ff:62: 22:28:7c:6c:16:e4:20:6f:cf:29:55:84:bd:5c:02: d5:34:b4:66:f7:4b:70:e0:bc:f0:49:6b:14:f4:08: 1d:53:b0:70:86:b9:ac:a4:0f:28:24:2b:e9:14:c2: 25:aa:19:1f:c2:7a:44:ba:62:e9:a9:82:74:bb:06: 6b:f7:57:09:d9:c0:12:c1:76:93:b9:21:69:a4:ad: ce:80:52:5a:77:86:5b:8b:3c:9d:37:41:6f:88:82: 6e:eb:f9:6d:68:08:8a:1c:61:fc:20:ce:3c:3d:ac: 4a:bb:cd:78:d0:d4:d1:4c:2d:8e:48:c8:f5:6f:6c: 70:47:b7:5e:6c:43:6b:9f:2a:75:75:8b:60:60:48: 79:7d:c8:b3:85:df:4b:64:76:ff:89:e9:85:f4:66: 06:8b:92:fd:a9:2c:ff:88:75:55:4d:c6:f5:dc:f9: 05:39:99:58:34:f4:b8:e8:48:ab:93:a5:18:96:92: 9b:70:95:d0:39:6c:49:d5:49:d7:f8:a2:6a:08:b2: 54:4a:c5:71:19:a4:cd:09:b4:52:1d:b6:a5:da:4c: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CD:BF:FF:73:A4:F7:18:BF:73:CE:F8:69:C0:C6:C7:26:59:49:8B X509v3 Authority Key Identifier: keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ef:50:73:16:74:db:a0:e1:62:a4:db:2b:cb:ed:9e:24:fc: a2:19:01:90:0d:0c:b7:ff:0e:89:f9:94:26:56:72:6f:20:97: 17:fe:70:c6:67:60:89:1e:af:17:ba:f8:a2:84:84:9d:50:db: 53:a1:ac:36:ea:91:50:c4:4a:09:18:9a:1e:d5:35:14:b3:7b: 89:41:c8:ef:da:81:5c:a3:14:4f:d9:2a:4c:0b:08:ea:1f:dc: 23:cf:33:3b:da:00:49:c6:ac:c3:e6:bd:c0:23:53:d3:ba:bb: 87:c5:66:5d:ed:96:00:28:42:80:f5:c7:e0:2d:24:07:e0:3d: 13:75:1e:00:89:6f:82:10:10:9c:93:59:27:de:6e:09:57:63: 25:73:cf:2a:f6:f9:94:8c:e1:d5:be:28:16:73:dc:67:90:89: 9e:a3:b4:0d:c2:d3:33:65:fc:f9:cb:71:d0:fe:63:ff:95:55: 6f:29:b1:32:e2:5b:e7:bb:19:c5:af:e1:ac:16:19:58:56:96: c4:05:c8:a8:63:58:c6:18:63:da:22:86:3a:98:0e:e0:a3:5d: 3c:ab:59:08:1d:e5:cb:5c:fe:0c:81:a9:bc:48:51:f6:30:a1: d4:ac:ec:62:62:94:5c:b8:c0:22:d1:ea:2e:22:a9:c4:35:bf: f1:e1:65:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUFDRDExMC8GA1UEBRMoOEEyN0YxQjUxNDU5RkQzNkNCMkM4MDYwODcxQzU1MzhG OUQyM0Q3RTAeFw0yNDA5MTUwOTUzMDlaFw0yNDA5MjIwOTUzMDlaMBgxFjAUBgNV BAMTDTY2ZTZhZTg2LWRlNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPEGTDzhxPOLtgaz7x6WhYFd249ARI5ULab+sTJM/3GeZuKbotu4UCwIL/YiIo fGwW5CBvzylVhL1cAtU0tGb3S3DgvPBJaxT0CB1TsHCGuaykDygkK+kUwiWqGR/C ekS6YumpgnS7Bmv3VwnZwBLBdpO5IWmkrc6AUlp3hluLPJ03QW+Igm7r+W1oCIoc Yfwgzjw9rEq7zXjQ1NFMLY5IyPVvbHBHt15sQ2ufKnV1i2BgSHl9yLOF30tkdv+J 6YX0ZgaLkv2pLP+IdVVNxvXc+QU5mVg09LjoSKuTpRiWkptwldA5bEnVSdf4omoI slRKxXEZpM0JtFIdtqXaTPMDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDc2//3Ok 9xi/c874acDGxyZZSYswHwYDVR0jBBgwFoAUiifxtRRZ/TbLLIBghxxVOPnSPX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQUNELzhFQTE5QUEyMTk5 QzExRUY5Njk3MzQ3RkM0RjlBRTAyL2lpZnh0UlJaX1RiTExJQmdoeHhWT1BuU1BY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWlmeHRSUlpfVGJMTElCZ2h4eFZPUG5TUFg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QUNELzhFQTE5QUEyMTk5QzExRUY5Njk3MzQ3RkM0RjlBRTAyL2lpZnh0UlJaX1Ri TExJQmdoeHhWT1BuU1BYNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA7vUHMWdNug4WKk2yvL7Z4k/KIZAZANDLf/Don5lCZWcm8glxf+cMZn YIkerxe6+KKEhJ1Q21OhrDbqkVDESgkYmh7VNRSze4lByO/agVyjFE/ZKkwLCOof 3CPPMzvaAEnGrMPmvcAjU9O6u4fFZl3tlgAoQoD1x+AtJAfgPRN1HgCJb4IQEJyT WSfebglXYyVzzyr2+ZSM4dW+KBZz3GeQiZ6jtA3C0zNl/PnLcdD+Y/+VVW8psTLi W+e7GcWv4awWGVhWlsQFyKhjWMYYY9oihjqYDuCjXTyrWQgd5ctc/gyBqbxIUfYw odSs7GJilFy4wCLR6i4iqcQ1v/HhZQg= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:21 2024 by rpki-client on console-ams.rpki-client.org