$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: LZa5Lbsyb7Cod9lFnADc5NFedtLHOmdTDpJ+zLkYdxs= Subject key identifier: C5:B7:BC:C5:86:96:21:16:DE:92:8C:A1:1B:48:42:3B:EE:9D:CB:E4 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: CC Signing time: Sat 23 Nov 2024 04:01:46 +0000 Manifest this update: Sat 23 Nov 2024 04:01:46 +0000 Manifest next update: Sat 30 Nov 2024 04:01:46 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: XEFLNSgjZR8AEQlDCBx00I8SCHNkuxlbjlqMrszW6z4=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: PQD258TcGdjz5AmI6aacrqHcQHd0HimnmVUM2EF0jo8=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: jRBgJs6DI4i4pasvCnzJ41rbhiID46DLi5eJcSDKXRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Nov 23 04:01:46 2024 GMT Not After : Nov 30 04:01:46 2024 GMT Subject: CN=674153aa-eb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:b1:5b:49:9f:7c:0a:3b:13:54:ce:11:e8: 79:91:96:c6:40:a3:d7:ad:a9:7a:8d:4a:7e:59:f2: b8:e0:f6:b0:41:4b:f8:63:b2:c2:7b:35:b5:8a:39: ce:fd:b0:a0:65:81:49:1e:f0:dd:db:e0:36:af:5b: 0a:67:76:9f:fa:3f:e4:f6:d0:8b:4d:85:d9:69:fb: b2:5e:46:09:5d:19:03:b9:7c:f8:9c:cb:85:6c:94: 11:62:f4:d7:0f:8f:6b:56:cf:6f:cf:f6:0a:00:66: 9f:e9:1e:99:e7:d7:82:33:9e:a6:2b:9c:18:91:c3: 51:37:2c:0b:27:7f:eb:e0:cd:0b:90:45:39:1f:12: 5a:a2:bb:8a:7f:b0:8e:35:6a:b6:f9:48:47:91:9e: eb:0d:63:45:7f:15:54:42:b7:88:99:27:3e:4c:41: 7a:53:0b:39:af:0f:e7:5d:75:b2:13:b0:6d:70:1e: e6:68:04:d2:42:d8:7b:6a:2b:e6:d7:99:e1:d1:88: 1a:2f:4c:1c:d4:f1:04:2e:ed:ad:fc:c8:9c:48:24: 9c:aa:8c:44:b3:79:d5:c8:7f:fa:55:ea:b4:38:b0: 17:2a:14:c9:68:bd:15:0d:da:ed:7c:22:98:9a:37: 12:b4:c4:e0:5f:04:71:9d:1f:8c:2a:05:7e:68:dc: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B7:BC:C5:86:96:21:16:DE:92:8C:A1:1B:48:42:3B:EE:9D:CB:E4 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:06:58:56:07:7b:bd:81:91:f2:c3:2c:9a:61:7c:34:3a:95: 70:e1:b3:37:ae:dd:bf:97:ec:fe:a6:7d:e0:36:f8:b2:cb:04: 53:24:b2:b0:cd:3c:b3:5c:49:e5:b2:db:40:ee:00:8a:1c:93: 03:5e:c2:02:88:18:51:1c:bf:8d:56:25:cf:11:07:7f:ad:b6: 11:35:a2:67:3f:72:de:fb:09:ec:45:95:4e:96:31:b5:b3:c9: cd:76:05:7b:32:56:cd:09:f0:c4:da:5a:ff:1c:a0:e8:92:0a: fe:f2:5d:14:d7:bf:e8:a1:cd:5b:66:fe:d7:ee:d9:55:27:76: c3:5f:7f:6c:5e:c7:2a:f9:cb:3f:3c:e0:1d:0d:ec:a9:94:4a: 98:34:2c:ac:05:ba:1a:9e:5e:21:3c:8d:75:f2:0c:6a:9a:60: ca:21:93:4a:7c:4b:0d:96:d1:db:23:be:52:22:a6:ae:91:18: fa:ae:63:be:83:5f:70:93:03:33:d7:c8:5c:09:b3:61:a5:07: 1a:64:d3:eb:80:91:d0:fc:98:02:96:4d:bd:14:8d:05:82:c0: 65:d4:73:53:74:2f:b1:e1:84:a9:b2:13:60:25:3f:fe:c5:5a: d5:10:69:5b:da:86:73:86:32:64:2f:92:84:b0:7e:8c:d8:22: ca:1a:2d:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjQxMTIzMDQwMTQ2WhcNMjQxMTMwMDQwMTQ2WjAYMRYwFAYD VQQDEw02NzQxNTNhYS1lYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0KxW0mffAo7E1TOEeh5kZbGQKPXral6jUp+WfK44PawQUv4Y7LCezW1ijnO /bCgZYFJHvDd2+A2r1sKZ3af+j/k9tCLTYXZafuyXkYJXRkDuXz4nMuFbJQRYvTX D49rVs9vz/YKAGaf6R6Z59eCM56mK5wYkcNRNywLJ3/r4M0LkEU5HxJaoruKf7CO NWq2+UhHkZ7rDWNFfxVUQreImSc+TEF6Uws5rw/nXXWyE7BtcB7maATSQth7aivm 15nh0YgaL0wc1PEELu2t/MicSCScqoxEs3nVyH/6Veq0OLAXKhTJaL0VDdrtfCKY mjcStMTgXwRxnR+MKgV+aNyN8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW3vMWG liEW3pKMoRtIQjvuncvkMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUBlhWB3u9gZHywyyaYXw0OpVw4bM3rt2/l+z+pn3gNviyywRTJLKw zTyzXEnlsttA7gCKHJMDXsICiBhRHL+NViXPEQd/rbYRNaJnP3Le+wnsRZVOljG1 s8nNdgV7MlbNCfDE2lr/HKDokgr+8l0U17/ooc1bZv7X7tlVJ3bDX39sXscq+cs/ POAdDeyplEqYNCysBboanl4hPI118gxqmmDKIZNKfEsNltHbI75SIqaukRj6rmO+ g19wkwMz18hcCbNhpQcaZNPrgJHQ/JgClk29FI0FgsBl1HNTdC+x4YSpshNgJT/+ xVrVEGlb2oZzhjJkL5KEsH6M2CLKGi3+ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:15 2024 by rpki-client on console-ams.rpki-client.org