$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json) Hash identifier: MNdtVob/v2DSLUL2UG665El+HPX8Z/6X/8Yi/ReoO78= Subject key identifier: 98:23:19:4B:66:A1:82:BF:0A:10:CE:BB:58:3F:CD:81:F4:9B:7B:9B Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft Manifest number: CB Signing time: Sat 23 Nov 2024 03:50:57 +0000 Manifest this update: Sat 23 Nov 2024 03:50:57 +0000 Manifest next update: Sat 30 Nov 2024 03:50:57 +0000 Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: 8R2igaIilpxmDlIaHo2vpHGUGibx8NCMnvvhCqJ4zOE=) 2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Validity Not Before: Nov 23 03:50:57 2024 GMT Not After : Nov 30 03:50:57 2024 GMT Subject: CN=67415121-4297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:78:84:45:ee:18:d1:f0:cf:39:8e:2c:bf: 13:44:71:29:14:89:f8:a4:88:4c:a5:cd:ea:eb:fe: 77:e7:b9:46:09:f1:8d:3a:43:4c:47:85:39:1c:2a: c1:2b:9d:3f:9e:18:9c:ae:e9:a7:aa:71:2a:18:30: 76:50:2b:f9:76:0e:6d:18:5b:fe:3e:c4:af:f0:a6: e5:56:4e:80:a8:db:38:2e:ff:d9:af:1c:23:4a:0c: d8:db:1e:64:66:c4:7a:1f:a8:25:c5:5e:60:6d:db: 0d:be:f0:29:d9:b2:9b:74:ae:5e:99:b7:cb:3d:02: 75:cd:63:26:f2:90:a2:b5:a5:a2:ba:78:75:7c:91: 69:60:83:f1:07:2f:19:f3:7b:34:07:42:46:af:4f: c1:27:be:09:9c:d2:85:47:d9:43:28:11:36:d1:3c: c3:16:f3:e1:d9:53:32:dd:67:ed:e2:59:ab:e4:7f: 1f:83:04:3c:8b:9d:16:62:56:20:32:bd:75:9a:85: 2c:7e:27:c9:ec:0c:fa:76:f2:0e:48:f0:7b:9b:ff: 27:b8:c1:df:06:eb:2a:e0:ae:0e:5c:5d:00:74:5c: b5:ce:2a:37:93:21:4f:fc:fa:4a:cb:b7:a2:71:8b: 7c:6a:a9:bd:9d:3a:b7:24:55:e4:bf:72:89:01:97: 24:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:23:19:4B:66:A1:82:BF:0A:10:CE:BB:58:3F:CD:81:F4:9B:7B:9B X509v3 Authority Key Identifier: keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:84:20:4d:aa:fd:78:55:4b:52:ad:2d:ec:5f:d4:b1:85:16: 82:ba:48:8b:3d:b5:a2:c5:c0:c5:c0:29:19:fd:d7:02:3d:3f: fe:d9:17:6e:3b:23:4a:1e:dd:ff:77:5a:df:9e:eb:8d:18:3c: 67:61:ba:ad:6c:ba:30:f6:05:7b:78:eb:53:ed:39:39:11:4d: 9d:5c:b4:8c:46:ea:03:0b:60:1f:a4:0d:3b:03:ac:fc:7d:3f: ea:e9:01:73:a4:51:b2:1e:06:fe:de:f8:35:7c:57:20:6f:4f: 05:cd:b3:6a:c6:79:19:98:51:19:9f:3a:e5:bc:69:3a:61:b2: 91:de:10:8f:94:78:13:17:14:fd:30:c2:f1:ae:b6:0d:b9:ea: 78:c8:35:4e:74:74:b9:dc:ad:8a:75:a4:77:2b:41:2f:fc:87: 8d:b0:03:21:fa:ca:8d:ed:11:43:50:79:83:62:a4:74:f1:bb: 7d:40:05:5a:f7:7b:5e:c7:a5:e8:b7:05:28:09:23:36:08:80: c1:39:10:69:db:34:dd:c7:37:9f:09:7a:80:28:4c:db:34:1d: 05:92:59:bc:b1:9e:43:00:ad:87:48:d0:af:82:93:89:52:50: 04:1f:e5:42:08:d9:3f:71:7f:d1:12:c7:c2:fc:3a:0d:66:54: 72:38:25:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2MjlERDBDMTg4 RUM3RERBRTAwHhcNMjQxMTIzMDM1MDU3WhcNMjQxMTMwMDM1MDU3WjAYMRYwFAYD VQQDEw02NzQxNTEyMS00Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNR4hEXuGNHwzzmOLL8TRHEpFIn4pIhMpc3q6/5357lGCfGNOkNMR4U5HCrB K50/nhicrumnqnEqGDB2UCv5dg5tGFv+PsSv8KblVk6AqNs4Lv/ZrxwjSgzY2x5k ZsR6H6glxV5gbdsNvvAp2bKbdK5embfLPQJ1zWMm8pCitaWiunh1fJFpYIPxBy8Z 83s0B0JGr0/BJ74JnNKFR9lDKBE20TzDFvPh2VMy3Wft4lmr5H8fgwQ8i50WYlYg Mr11moUsfifJ7Az6dvIOSPB7m/8nuMHfBusq4K4OXF0AdFy1zio3kyFP/PpKy7ei cYt8aqm9nTq3JFXkv3KJAZck0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgjGUtm oYK/ChDOu1g/zYH0m3ubMB8GA1UdIwQYMBaAFCC9P3+ZjtQ9X8T4Yp3QwYjsfdrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTlBNC8wRDVEQzUyNDcz MDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFEMWZ4UGhpbmREQmlPeDky dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFE MWZ4UGhpbmREQmlPeDkydUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCshCBNqv14VUtSrS3sX9SxhRaCukiLPbWixcDFwCkZ/dcCPT/+2Rdu OyNKHt3/d1rfnuuNGDxnYbqtbLow9gV7eOtT7Tk5EU2dXLSMRuoDC2AfpA07A6z8 fT/q6QFzpFGyHgb+3vg1fFcgb08FzbNqxnkZmFEZnzrlvGk6YbKR3hCPlHgTFxT9 MMLxrrYNuep4yDVOdHS53K2KdaR3K0Ev/IeNsAMh+sqN7RFDUHmDYqR08bt9QAVa 93tex6XotwUoCSM2CIDBORBp2zTdxzefCXqAKEzbNB0Fklm8sZ5DAK2HSNCvgpOJ UlAEH+VCCNk/cX/REsfC/DoNZlRyOCXp -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org