$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: RQ83uUeJ17ri/58TWSdrT+hsUyb69NG+SWYAdC4Tgo8= Subject key identifier: 43:DB:B0:72:3A:97:0B:D5:0D:F7:2C:8D:87:14:4B:9B:7D:F0:1A:2B Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: 0129 Signing time: Sat 23 Nov 2024 02:51:28 +0000 Manifest this update: Sat 23 Nov 2024 02:51:28 +0000 Manifest next update: Sat 30 Nov 2024 02:51:28 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: hhSUFNW0NaE4v4yI8HOh4CVRk7iuOL1a26bRk3oTwFU=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: jk8Sbeajd8SP8xYcpO63DjvkE7irofgCOLMPl17DXJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: Nov 23 02:51:28 2024 GMT Not After : Nov 30 02:51:28 2024 GMT Subject: CN=67414330-ca52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:1f:d6:47:9e:e8:a3:d0:19:41:ec:69:72: f2:51:90:a4:07:20:28:6d:eb:d5:84:0d:9a:53:50: 7a:bd:b0:3d:57:1d:35:b1:46:90:20:bc:e4:e6:22: 23:8c:76:f3:86:ae:73:b0:31:fe:3a:77:89:df:21: b7:bd:09:06:7f:e2:03:cb:da:7d:25:5c:72:27:23: 21:ee:b4:38:49:0e:f9:80:ee:24:36:0d:c7:6b:2d: e5:19:1d:e2:16:55:f6:37:9d:25:e8:4a:06:2a:66: b7:77:49:5c:0f:78:82:53:77:80:96:21:0b:3e:72: 7c:49:3e:0e:79:62:ea:2f:79:f8:53:83:d4:b1:32: 1a:f9:50:7c:31:8b:c8:26:0e:5e:b8:02:bc:c3:01: c8:58:cc:d8:7e:81:f5:84:83:fc:50:05:23:e6:99: c0:56:27:21:1c:3b:6f:7c:0a:24:ca:ee:ae:e7:24: 2a:ab:39:e7:fa:1a:c5:3f:2e:af:81:6b:53:e4:31: 4b:78:7a:94:6d:4d:49:de:8b:85:1e:6e:d3:1f:b1: aa:eb:bb:61:b6:34:e2:a0:46:f0:36:f8:b4:9d:a7: e5:d9:27:35:08:8d:5b:d8:cd:77:9c:f9:a3:88:25: 02:d4:a8:3b:7e:76:44:b1:25:05:d5:a6:7b:10:1a: e2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:B0:72:3A:97:0B:D5:0D:F7:2C:8D:87:14:4B:9B:7D:F0:1A:2B X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:be:a5:cd:1f:3c:47:92:ea:32:df:85:05:9d:3b:76:4d:18: 12:2e:94:99:5c:92:88:a7:b7:29:a8:b6:0b:f2:0b:09:5c:9d: ff:ee:e7:d9:5c:b9:5a:3c:ee:3f:88:0e:6c:76:c0:18:9a:f3: f1:d6:86:79:33:72:a8:80:78:6f:02:32:61:ca:4a:67:50:54: 44:53:12:1b:3c:d4:ec:39:17:e1:d0:5f:34:fa:73:9d:c2:bf: a3:67:76:54:3c:f5:ab:aa:f6:9a:05:60:dc:aa:83:8d:8f:f1: 45:a3:f4:99:69:fe:3d:11:77:37:56:83:5f:47:39:56:14:53: e9:52:d4:9b:11:7f:7f:59:9c:7b:6b:0b:fa:fd:04:93:0d:38: 0b:40:5b:15:10:a9:0e:c3:fa:dd:45:67:b0:34:00:0a:8d:eb: ed:df:55:ad:8c:77:40:c9:f8:33:2c:54:c4:e4:45:dd:73:89: 2f:ef:84:3b:c0:c7:de:a0:ca:3e:f9:c6:9c:6b:f2:98:62:ff: c1:57:38:7a:59:c8:cb:87:2c:e1:c0:7f:7f:70:30:39:ed:45: ad:a7:44:a9:13:52:d0:8e:23:75:5c:a6:4e:3d:1f:10:5f:b8: e6:11:88:54:a1:09:51:c8:dd:41:89:79:55:c2:1a:18:ca:f8: 00:f1:3f:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjQxMTIzMDI1MTI4WhcNMjQxMTMwMDI1MTI4WjAYMRYwFAYD VQQDEw02NzQxNDMzMC1jYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0sf1kee6KPQGUHsaXLyUZCkByAobevVhA2aU1B6vbA9Vx01sUaQILzk5iIj jHbzhq5zsDH+OneJ3yG3vQkGf+IDy9p9JVxyJyMh7rQ4SQ75gO4kNg3Hay3lGR3i FlX2N50l6EoGKma3d0lcD3iCU3eAliELPnJ8ST4OeWLqL3n4U4PUsTIa+VB8MYvI Jg5euAK8wwHIWMzYfoH1hIP8UAUj5pnAVichHDtvfAokyu6u5yQqqznn+hrFPy6v gWtT5DFLeHqUbU1J3ouFHm7TH7Gq67thtjTioEbwNvi0nafl2Sc1CI1b2M13nPmj iCUC1Kg7fnZEsSUF1aZ7EBriQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPbsHI6 lwvVDfcsjYcUS5t98BorMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDvqXNHzxHkuoy34UFnTt2TRgSLpSZXJKIp7cpqLYL8gsJXJ3/7ufZ XLlaPO4/iA5sdsAYmvPx1oZ5M3KogHhvAjJhykpnUFREUxIbPNTsORfh0F80+nOd wr+jZ3ZUPPWrqvaaBWDcqoONj/FFo/SZaf49EXc3VoNfRzlWFFPpUtSbEX9/WZx7 awv6/QSTDTgLQFsVEKkOw/rdRWewNAAKjevt31WtjHdAyfgzLFTE5EXdc4kv74Q7 wMfeoMo++caca/KYYv/BVzh6WcjLhyzhwH9/cDA57UWtp0SpE1LQjiN1XKZOPR8Q X7jmEYhUoQlRyN1BiXlVwhoYyvgA8T88 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org