$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: OrHWQ7J6ltwgvaBkxHwEbFkqZHtBizKco64wk8+0R2Q= Subject key identifier: 44:67:7E:61:DC:2D:75:0D:85:A7:CF:DA:F2:CD:63:E9:57:0B:A6:CC Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 0346 Signing time: Sat 23 Nov 2024 00:36:11 +0000 Manifest this update: Sat 23 Nov 2024 00:36:11 +0000 Manifest next update: Sat 30 Nov 2024 00:36:11 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: pX9RV/KLGIHvtiZjka95Km4H1mCL+tx0oJm2bbXhkTo=) 2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: 0Kz75Ec+aiyaTgQW5w9kydRmf1vsulhgyrIgS2fmNao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Validity Not Before: Nov 23 00:36:11 2024 GMT Not After : Nov 30 00:36:11 2024 GMT Subject: CN=6741237b-071d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:55:1a:c2:e5:74:5a:d7:f5:9b:88:01:17: 36:83:78:47:ce:4e:67:62:76:29:71:21:2c:85:d7: 1e:d9:f3:b8:da:93:40:68:c2:23:37:06:e6:9e:ed: 49:df:6c:fb:f1:b7:70:d0:95:ea:e2:9e:f3:f7:66: 5e:14:09:a9:1e:2b:4f:14:95:6e:ed:3a:8e:d0:cc: 1e:d2:bf:8f:b3:e0:63:96:84:bd:f0:ff:49:a9:21: 79:a5:a0:85:4a:03:cc:4f:d6:bc:4a:89:82:c5:47: bd:0f:4a:3e:3b:35:ed:b2:c0:21:9b:b5:af:bd:0a: 8b:eb:0d:9a:b3:41:d8:e5:81:e8:11:1e:e8:22:e0: 9c:ed:90:43:60:b2:32:47:62:5a:6b:d3:d1:47:b2: 10:ce:a9:26:84:d1:ef:16:40:2f:3f:e6:a8:13:1e: 13:fb:73:aa:fe:c6:78:53:8e:89:ae:a0:a7:d0:af: ec:8f:77:14:ce:e0:c1:52:81:b0:ed:a0:03:00:34: d1:f9:6c:a3:ee:5f:bc:23:f7:fc:2d:df:49:b1:bc: 07:65:02:05:e2:ff:48:44:62:0b:e4:cb:85:61:e5: 26:4b:a7:fa:7a:8a:08:0b:07:64:83:2f:c6:52:e8: a2:d9:47:38:d9:30:d7:13:43:f0:0a:34:c6:31:61: 7b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:67:7E:61:DC:2D:75:0D:85:A7:CF:DA:F2:CD:63:E9:57:0B:A6:CC X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:91:5c:62:8a:94:fc:db:1f:2b:74:49:8d:a1:85:22:d0:89: 9e:6f:0f:87:e7:4b:3d:01:31:e9:2f:79:4c:42:09:96:21:36: 6a:0c:86:58:ef:bf:50:ff:5b:f9:f7:84:5d:50:c9:ff:0b:20: 5c:d1:c9:55:44:a1:6c:de:43:fa:ea:f0:e5:7f:2d:35:17:67: 81:0c:cb:0a:ae:88:c3:cd:03:7e:1e:1f:f8:a9:a7:26:e2:e0: 96:90:ae:22:f5:22:0b:53:3a:16:9f:9d:78:0e:22:88:a8:15: c6:fc:a5:75:1b:c0:c6:f6:81:fb:f2:0a:29:9a:82:1c:1e:7e: ba:b7:89:ae:6f:f2:31:bc:c7:c8:e1:8f:3e:f1:b5:0d:c1:c6: cf:87:8c:d6:62:09:8d:8a:97:9c:d7:eb:6d:f7:1a:20:31:88: 76:6a:db:65:12:a7:31:7f:27:01:0d:11:d2:d0:fa:6a:3b:ee: c4:dd:57:a3:17:dc:51:05:99:05:a8:96:05:61:72:7e:43:4d: 21:d2:1d:fc:1a:b8:a6:37:bc:78:0b:11:37:c6:6f:72:08:f8: 1a:98:ef:7b:43:b3:71:d3:ec:8e:07:c0:c2:7c:2e:a2:26:95: 10:6f:d5:fe:69:c3:dd:46:3c:fb:9e:c9:c3:a5:35:b9:c7:93: 23:5d:fd:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjQxMTIzMDAzNjExWhcNMjQxMTMwMDAzNjExWjAYMRYwFAYD VQQDEw02NzQxMjM3Yi0wNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjtVGsLldFrX9ZuIARc2g3hHzk5nYnYpcSEshdce2fO42pNAaMIjNwbmnu1J 32z78bdw0JXq4p7z92ZeFAmpHitPFJVu7TqO0Mwe0r+Ps+BjloS98P9JqSF5paCF SgPMT9a8SomCxUe9D0o+OzXtssAhm7WvvQqL6w2as0HY5YHoER7oIuCc7ZBDYLIy R2Jaa9PRR7IQzqkmhNHvFkAvP+aoEx4T+3Oq/sZ4U46JrqCn0K/sj3cUzuDBUoGw 7aADADTR+Wyj7l+8I/f8Ld9JsbwHZQIF4v9IRGIL5MuFYeUmS6f6eooICwdkgy/G Uuii2Uc42TDXE0PwCjTGMWF71QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERnfmHc LXUNhafP2vLNY+lXC6bMMB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpkVxiipT82x8rdEmNoYUi0Imebw+H50s9ATHpL3lMQgmWITZqDIZY 779Q/1v594RdUMn/CyBc0clVRKFs3kP66vDlfy01F2eBDMsKrojDzQN+Hh/4qacm 4uCWkK4i9SILUzoWn514DiKIqBXG/KV1G8DG9oH78gopmoIcHn66t4mub/IxvMfI 4Y8+8bUNwcbPh4zWYgmNipec1+tt9xogMYh2attlEqcxfycBDRHS0PpqO+7E3Vej F9xRBZkFqJYFYXJ+Q00h0h38GrimN7x4CxE3xm9yCPgamO97Q7Nx0+yOB8DCfC6i JpUQb9X+acPdRjz7nsnDpTW5x5MjXf1F -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org