$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft File: iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json) Hash identifier: BYpuQ/qmw49azQ5VoGATy0XcxuxsQSxaBbdvBI0Nvf0= Subject key identifier: 75:FC:A9:ED:BF:58:70:7B:89:47:BC:50:42:75:26:89:E8:69:37:AE Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E Certificate issuer: /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft Manifest number: 61 Signing time: Sat 23 Nov 2024 05:01:14 +0000 Manifest this update: Sat 23 Nov 2024 05:01:13 +0000 Manifest next update: Sat 30 Nov 2024 05:01:13 +0000 Files and hashes: 1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: CSwtUDlJ02wjPsbgovSraV8gvsQTI1DzstVztBcbAHc=) 2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: A08tXG6MBFf3Rb9oSP5OxY5ld6uWXfT6PhOoxgfD4Yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Validity Not Before: Nov 23 05:01:13 2024 GMT Not After : Nov 30 05:01:13 2024 GMT Subject: CN=67416199-833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:d0:81:4e:a4:0c:24:8b:ad:54:f8:dd:16: 22:93:ec:71:05:8b:4d:8e:fd:8e:03:45:5b:1f:dd: 13:5a:7b:9d:72:d0:20:a7:a2:97:0b:c8:13:cd:25: e1:18:76:96:22:1f:58:c1:ad:71:c8:91:ff:94:86: 23:62:19:31:8c:a0:81:fb:8f:54:ac:fa:70:f6:1c: 6a:bc:42:d3:d2:30:ab:f1:0c:35:65:50:2b:bf:6a: 9a:9d:4f:6f:32:8c:94:ac:b0:1a:09:f0:60:1b:b5: a1:8b:1e:8b:5f:c1:a9:c5:1f:d0:08:18:19:42:81: 4c:77:97:fa:3b:19:03:7d:bc:24:48:1a:39:01:23: 74:2f:0b:ef:03:ac:14:ef:e3:6b:11:36:15:68:d4: a4:a7:6a:33:8c:89:9f:42:d7:0d:20:b4:29:f4:f1: e4:b2:33:c3:4b:16:bd:a7:4a:fd:ad:b7:c1:18:7e: 87:5e:d6:e1:98:41:1c:0a:06:57:7f:cd:75:b0:8f: 97:8d:3b:28:55:4b:e4:15:1b:4a:c5:16:62:bf:ea: 9f:4a:36:fc:8e:d6:3d:d7:5c:dc:78:52:da:d4:9a: 01:57:f4:12:ef:39:a9:7d:28:24:19:0a:41:bd:98: f3:7d:58:5b:52:5a:28:3a:9a:92:96:51:c2:d6:c2: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FC:A9:ED:BF:58:70:7B:89:47:BC:50:42:75:26:89:E8:69:37:AE X509v3 Authority Key Identifier: keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:af:08:57:b2:bd:6d:70:0b:36:df:90:05:ac:a2:95:89:a8: ff:79:97:c0:70:1a:f9:79:e0:bb:6f:89:13:91:7d:32:a2:2b: 3a:ea:84:dd:a5:a8:87:eb:fd:17:34:7f:75:0a:d8:a5:46:36: a9:05:09:94:28:5e:c9:70:cf:91:a2:18:b3:40:98:ed:a8:eb: 79:3c:e3:fb:6e:54:35:fd:7f:47:ce:d4:c0:e2:97:03:94:25: a7:46:d2:82:b9:98:54:6d:79:35:5e:7f:cd:8d:c1:ed:a0:9d: f2:a7:30:97:1a:30:9b:73:ce:6f:67:13:ec:e0:7e:86:f3:27: 81:77:7e:a2:5a:94:ed:2c:35:39:94:40:3e:12:56:70:e6:b1: df:68:45:51:9d:ac:02:89:96:0d:39:a5:8e:39:0c:63:99:ef: 58:03:41:2a:7f:22:90:3e:e5:62:a5:3f:2e:cb:8d:f6:7e:f7: da:28:ba:58:ac:8e:98:5b:31:d7:ae:3c:aa:8a:57:7f:26:56: ce:db:89:c9:01:ec:97:60:f8:46:52:76:d7:2c:95:13:fd:da: bc:07:66:b3:d4:a7:7e:6b:a2:a5:20:7b:6e:5f:ee:46:48:71: 0c:5e:8d:87:b7:1d:f3:c1:4d:ac:18:0f:d5:bb:d7:86:f0:18: 7e:c3:fb:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUFDRDExMC8GA1UEBRMoOEEyN0YxQjUxNDU5RkQzNkNCMkM4MDYwODcxQzU1MzhG OUQyM0Q3RTAeFw0yNDExMjMwNTAxMTNaFw0yNDExMzAwNTAxMTNaMBgxFjAUBgNV BAMTDTY3NDE2MTk5LTgzM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC24NCBTqQMJIutVPjdFiKT7HEFi02O/Y4DRVsf3RNae51y0CCnopcLyBPNJeEY dpYiH1jBrXHIkf+UhiNiGTGMoIH7j1Ss+nD2HGq8QtPSMKvxDDVlUCu/apqdT28y jJSssBoJ8GAbtaGLHotfwanFH9AIGBlCgUx3l/o7GQN9vCRIGjkBI3QvC+8DrBTv 42sRNhVo1KSnajOMiZ9C1w0gtCn08eSyM8NLFr2nSv2tt8EYfode1uGYQRwKBld/ zXWwj5eNOyhVS+QVG0rFFmK/6p9KNvyO1j3XXNx4UtrUmgFX9BLvOal9KCQZCkG9 mPN9WFtSWig6mpKWUcLWwtg9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdfyp7b9Y cHuJR7xQQnUmiehpN64wHwYDVR0jBBgwFoAUiifxtRRZ/TbLLIBghxxVOPnSPX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQUNELzhFQTE5QUEyMTk5 QzExRUY5Njk3MzQ3RkM0RjlBRTAyL2lpZnh0UlJaX1RiTExJQmdoeHhWT1BuU1BY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWlmeHRSUlpfVGJMTElCZ2h4eFZPUG5TUFg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QUNELzhFQTE5QUEyMTk5QzExRUY5Njk3MzQ3RkM0RjlBRTAyL2lpZnh0UlJaX1Ri TExJQmdoeHhWT1BuU1BYNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIevCFeyvW1wCzbfkAWsopWJqP95l8BwGvl54LtviRORfTKiKzrqhN2l qIfr/Rc0f3UK2KVGNqkFCZQoXslwz5GiGLNAmO2o63k84/tuVDX9f0fO1MDilwOU JadG0oK5mFRteTVef82Nwe2gnfKnMJcaMJtzzm9nE+zgfobzJ4F3fqJalO0sNTmU QD4SVnDmsd9oRVGdrAKJlg05pY45DGOZ71gDQSp/IpA+5WKlPy7LjfZ+99ooulis jphbMdeuPKqKV38mVs7bickB7Jdg+EZSdtcslRP92rwHZrPUp35roqUge25f7kZI cQxejYe3HfPBTawYD9W714bwGH7D+wQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:13 2024 by rpki-client on console-ams.rpki-client.org