$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: qezHJ4Yy1jCM1J36/oqtDcxOEwEEkzw1c3rkn3DL61Y= Subject key identifier: 54:40:28:51:DB:2B:81:23:97:2D:83:1E:9F:9F:B2:FE:A2:A0:D7:16 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 0797 Signing time: Fri 22 Nov 2024 20:49:53 +0000 Manifest this update: Fri 22 Nov 2024 20:49:52 +0000 Manifest next update: Fri 29 Nov 2024 20:49:52 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: jQchcGW6mqoCXdaGsTM2EzaNtAzPB8c76RgLU3wQiXA=) 2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: zahf38WJUaJrn85EVjhYTZf4G0B8Ut3ofdI2dvU3v80=) 3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: xK6g/9ZrCrAbUvohYXyIWOCZe254sdAZJJD2NWP+2ec=) 4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: y/ajgkav4Bv35KJL44OM9tnNn/ywJ62e1EkzLdBTa9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Nov 22 20:49:52 2024 GMT Not After : Nov 29 20:49:52 2024 GMT Subject: CN=6740ee70-041e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:4d:b5:ce:86:9b:4b:1d:d1:cc:31:7e:a0: 9e:6b:af:c3:6f:9d:91:76:30:fe:3f:29:5d:1f:70: 69:b2:d6:b9:91:83:0f:35:db:33:92:a1:a7:8d:72: 70:17:b9:73:fc:a9:87:7b:e2:07:47:ab:a5:9b:a5: 82:22:07:e5:1d:0e:73:bc:0d:25:4d:5a:ad:bf:38: 51:ff:c7:a9:7a:9e:7d:7c:e6:5c:7c:6f:fe:bc:9f: f0:10:48:d5:20:ff:1e:68:d5:43:28:8f:fe:47:29: fa:80:72:de:38:3c:c1:92:29:c4:43:88:4f:a6:9b: 61:20:06:f8:73:aa:d3:2d:8a:00:eb:4c:f5:a6:e3: b5:d8:bf:08:95:fd:7b:ed:65:31:42:a6:ca:c9:f1: 3f:5f:e5:4f:47:d2:b3:e4:76:2f:88:90:aa:2b:61: cc:48:3d:2f:9e:c5:f8:86:e7:1c:a1:bc:2b:fa:5c: 11:0e:37:b9:41:8b:35:b1:e6:3a:87:4c:3d:1b:3f: 81:03:3d:56:e6:16:3c:56:7b:1f:3d:9f:e8:80:93: e8:24:80:7c:e6:43:af:d1:d9:8e:87:be:8e:1f:5e: fa:76:af:5f:59:42:e6:ea:19:77:82:05:90:90:50: 12:ed:0b:26:42:e5:df:5f:12:95:97:83:00:93:8f: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:40:28:51:DB:2B:81:23:97:2D:83:1E:9F:9F:B2:FE:A2:A0:D7:16 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:40:9a:5b:12:66:e1:31:84:69:ac:ff:bc:55:29:64:82:73: c1:22:97:b1:20:0e:bf:7b:13:8d:43:7c:3d:50:ca:82:47:0b: 68:54:c3:1d:e8:8b:e4:2c:7f:fd:da:27:4a:9b:6a:cd:ed:ef: a6:c6:29:30:e7:fa:0d:b7:d3:8a:2b:98:32:c8:b7:24:0b:86: 5e:09:08:b7:6d:6f:b0:ec:a8:93:a6:f6:1f:a0:98:1e:75:37: a3:66:c6:0f:90:44:04:bb:31:e7:df:16:d6:d8:37:b2:c0:46: dd:d9:44:25:5f:d1:69:6b:08:ee:5b:a5:01:49:0e:f1:c6:86: 91:42:30:33:2d:c4:6d:96:b8:c2:c1:b0:c3:b9:b4:96:7b:65: 09:d3:72:1d:cb:da:03:4c:6b:af:e5:75:5f:3e:26:6b:09:7a: fa:af:4a:36:35:57:db:c2:a7:90:6a:3b:5a:5f:69:32:5d:20: bd:a7:9d:65:bf:34:0d:d0:7d:08:94:bb:d7:70:9e:ce:db:73: f1:66:ce:79:b8:98:93:44:66:0c:f1:cf:5b:25:7f:76:89:70: 0f:0f:07:77:28:f8:98:2c:77:e8:ee:5e:61:cc:90:02:b6:f9: d9:ba:14:90:35:58:48:2c:a2:28:cc:5c:85:a3:a9:58:a6:cf: 5e:86:92:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjQxMTIyMjA0OTUyWhcNMjQxMTI5MjA0OTUyWjAYMRYwFAYD VQQDEw02NzQwZWU3MC0wNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuRNtc6Gm0sd0cwxfqCea6/Db52RdjD+PyldH3Bpsta5kYMPNdszkqGnjXJw F7lz/KmHe+IHR6ulm6WCIgflHQ5zvA0lTVqtvzhR/8epep59fOZcfG/+vJ/wEEjV IP8eaNVDKI/+Ryn6gHLeODzBkinEQ4hPppthIAb4c6rTLYoA60z1puO12L8Ilf17 7WUxQqbKyfE/X+VPR9Kz5HYviJCqK2HMSD0vnsX4huccobwr+lwRDje5QYs1seY6 h0w9Gz+BAz1W5hY8VnsfPZ/ogJPoJIB85kOv0dmOh76OH176dq9fWULm6hl3ggWQ kFAS7QsmQuXfXxKVl4MAk48kuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRAKFHb K4Ejly2DHp+fsv6ioNcWMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnQJpbEmbhMYRprP+8VSlkgnPBIpexIA6/exONQ3w9UMqCRwtoVMMd 6IvkLH/92idKm2rN7e+mxikw5/oNt9OKK5gyyLckC4ZeCQi3bW+w7KiTpvYfoJge dTejZsYPkEQEuzHn3xbW2DeywEbd2UQlX9FpawjuW6UBSQ7xxoaRQjAzLcRtlrjC wbDDubSWe2UJ03Idy9oDTGuv5XVfPiZrCXr6r0o2NVfbwqeQajtaX2kyXSC9p51l vzQN0H0IlLvXcJ7O23PxZs55uJiTRGYM8c9bJX92iXAPDwd3KPiYLHfo7l5hzJAC tvnZuhSQNVhILKIozFyFo6lYps9ehpLm -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org