$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: Pyu36rrUc/MLsIKOxH8TlpH5xuXwBE5QoEJC2o23dG4= Subject key identifier: 53:BE:1F:CB:71:A7:A4:82:F2:08:1E:CB:30:6D:60:2D:E6:FF:BE:66 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 09A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 097F Signing time: Sun 24 Nov 2024 19:45:20 +0000 Manifest this update: Sun 24 Nov 2024 19:45:19 +0000 Manifest next update: Sun 01 Dec 2024 19:45:19 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: vnX1ZP5+v6/5rvzQPBuyjkgWEtLghicfQVzfDzpgkmw=) 2: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 3: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 4: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 5: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2469 (0x9a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 24 19:45:19 2024 GMT Not After : Dec 1 19:45:19 2024 GMT Subject: CN=6743824f-c439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:06:38:94:30:b0:1b:88:25:44:ff:f4:5b:6b: 87:d1:94:22:3e:ca:a2:27:0f:e3:1d:79:4a:72:78: bb:e9:10:e3:19:1d:aa:9b:dd:91:36:3c:4f:d0:1f: 78:20:ad:cf:cd:2a:ae:22:84:87:57:74:8c:4b:7d: e4:d2:cb:7a:73:a4:e9:ce:f0:f0:08:d6:9e:74:59: c0:60:4d:b4:7f:3e:a8:64:9b:f7:0c:67:f7:58:c5: 8f:66:06:ab:82:97:56:fd:e7:1b:98:7b:34:7f:66: 52:b9:bf:81:31:2b:76:f1:25:90:f1:9e:4f:cf:ac: 63:9a:c2:93:c3:a4:8b:0f:f8:cd:9f:50:2a:54:1d: 99:8c:02:bd:dd:3a:a7:6d:58:7a:b6:6d:86:a2:b9: d3:4c:1b:62:bf:35:85:9e:f1:7a:c4:da:b2:ad:df: 00:f7:88:e6:e2:0d:1d:7c:62:56:a3:96:d6:63:df: e2:02:3e:73:a0:31:2a:78:41:6b:ec:85:03:c4:39: da:5a:db:26:90:b6:29:13:a4:9f:fe:3e:b1:ec:f1: 17:d5:a2:45:4f:ec:6f:31:2b:1b:13:d4:00:dc:96: dc:0f:c8:67:73:99:05:64:42:7c:09:ad:ad:ff:8d: f9:72:3a:fa:8d:8f:f5:f1:1f:5c:30:e4:14:53:63: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BE:1F:CB:71:A7:A4:82:F2:08:1E:CB:30:6D:60:2D:E6:FF:BE:66 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b4:cc:c7:a1:ee:aa:b0:52:35:04:1e:fd:a0:3c:80:33:b7: 26:f9:43:13:fa:40:36:8e:91:e0:0f:58:ff:cd:b9:85:2b:14: 03:fc:fa:90:57:7b:34:10:d0:3a:77:a1:ef:27:eb:cc:c0:5d: 0f:84:1b:0a:43:5d:5c:66:0a:ad:53:bf:9c:aa:3f:49:c0:df: f6:c4:0b:da:ba:b9:3f:b2:14:d5:9e:20:68:84:99:dc:e5:c6: 3c:f1:56:5d:2a:ac:60:f3:f7:76:31:2b:c2:29:d4:db:42:24: ef:ba:d1:ec:05:60:5a:6b:0c:0f:8e:d1:c8:c8:96:38:2c:98: f8:8d:0f:1a:d7:97:4b:97:da:19:c8:f3:26:87:c5:3f:54:bf: 06:51:0b:ae:a3:aa:a7:ef:f3:67:55:49:87:6b:86:1b:04:de: 2b:f9:46:05:38:22:41:b4:d2:90:07:e8:7f:6f:6b:31:8e:e2: 0d:1f:10:e5:d9:36:92:c0:96:14:52:16:12:9f:e1:2b:8b:dd: d0:c3:cf:2e:13:6e:71:85:71:5b:56:83:cc:c9:ba:7e:43:f6: 72:8e:cd:bc:6f:85:56:0f:b8:b3:d1:68:d9:51:7a:d0:0d:a8: 86:93:1a:d0:73:78:c0:cb:a3:5f:6d:22:43:4b:0e:11:71:52: 04:76:1f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjQxMTI0MTk0NTE5WhcNMjQxMjAxMTk0NTE5WjAYMRYwFAYD VQQDEw02NzQzODI0Zi1jNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gY4lDCwG4glRP/0W2uH0ZQiPsqiJw/jHXlKcni76RDjGR2qm92RNjxP0B94 IK3PzSquIoSHV3SMS33k0st6c6TpzvDwCNaedFnAYE20fz6oZJv3DGf3WMWPZgar gpdW/ecbmHs0f2ZSub+BMSt28SWQ8Z5Pz6xjmsKTw6SLD/jNn1AqVB2ZjAK93Tqn bVh6tm2GornTTBtivzWFnvF6xNqyrd8A94jm4g0dfGJWo5bWY9/iAj5zoDEqeEFr 7IUDxDnaWtsmkLYpE6Sf/j6x7PEX1aJFT+xvMSsbE9QA3JbcD8hnc5kFZEJ8Ca2t /435cjr6jY/18R9cMOQUU2N8rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFO+H8tx p6SC8ggeyzBtYC3m/75mMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2tMzHoe6qsFI1BB79oDyAM7cm+UMT+kA2jpHgD1j/zbmFKxQD/PqQ V3s0ENA6d6HvJ+vMwF0PhBsKQ11cZgqtU7+cqj9JwN/2xAvaurk/shTVniBohJnc 5cY88VZdKqxg8/d2MSvCKdTbQiTvutHsBWBaawwPjtHIyJY4LJj4jQ8a15dLl9oZ yPMmh8U/VL8GUQuuo6qn7/NnVUmHa4YbBN4r+UYFOCJBtNKQB+h/b2sxjuINHxDl 2TaSwJYUUhYSn+Eri93Qw88uE25xhXFbVoPMybp+Q/Zyjs28b4VWD7iz0WjZUXrQ DaiGkxrQc3jAy6NfbSJDSw4RcVIEdh/r -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:05 2024 by rpki-client on console-ams.rpki-client.org