$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft File: -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json) Hash identifier: OtL+hZ0b62vrsYyegrSUrM+bw6zNXd3SbaX/p6WSljQ= Subject key identifier: ED:5C:09:FC:4B:F0:A4:31:4E:47:4F:5A:69:EA:5D:8E:56:7E:F9:D9 Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft Manifest number: 21 Signing time: Thu 21 Nov 2024 05:59:05 +0000 Manifest this update: Thu 21 Nov 2024 05:59:05 +0000 Manifest next update: Thu 28 Nov 2024 05:59:05 +0000 Files and hashes: 1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: TcEeImF8RLfl/QAPhZs6pand+2z+P1MTBrg8vkiQbBc=) 2: C276060084F011EF9D52F573C4F9AE02.roa (hash: hxIYLbruoqfDi/xrn9CXp1sbfMBKSVxgZzJC+/gZxDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Validity Not Before: Nov 21 05:59:05 2024 GMT Not After : Nov 28 05:59:05 2024 GMT Subject: CN=673ecc29-9483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8e:00:43:71:cf:26:b1:f7:cf:06:2d:f0:9e: dc:17:eb:fa:e9:fb:2c:0b:05:7b:91:7f:30:36:32: c9:bf:74:79:bf:d6:76:83:70:87:55:e0:e9:ea:9f: 34:f9:f3:3f:e8:16:62:bb:e7:00:fb:70:15:e9:6a: 7d:cc:ad:65:b0:22:2b:2b:cb:a4:b3:60:f4:0e:45: 27:5d:7e:c5:16:57:ab:56:7d:7d:bf:31:ce:45:da: 92:b5:ad:5b:16:0b:11:d7:60:0c:70:17:00:4e:d7: 2b:8a:0d:bd:94:11:95:d9:86:a9:3b:6f:7b:b8:06: 43:bf:d4:7e:be:87:c2:4c:bf:09:1f:fb:4c:0b:37: 1f:f6:6f:bd:ee:29:7a:4f:cc:e5:95:74:20:6e:df: 37:01:c7:6a:68:b2:75:84:bf:0c:b4:b0:01:06:47: bd:8e:5f:71:36:15:bd:e2:1a:a7:e9:ef:d7:d8:27: 98:22:18:fe:30:54:e5:86:4b:70:ae:ac:e8:60:6b: f9:7c:3f:b3:de:5a:fd:1f:56:97:cd:05:9b:27:a8: 69:6f:f7:20:c2:f3:77:a9:74:a1:b7:7c:90:c8:44: 05:8a:c4:63:0d:f2:c2:ba:78:92:3d:57:3e:50:c0: f2:e3:d9:32:99:a8:7d:e9:6b:ab:cb:6a:c7:ab:3a: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5C:09:FC:4B:F0:A4:31:4E:47:4F:5A:69:EA:5D:8E:56:7E:F9:D9 X509v3 Authority Key Identifier: keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:60:8f:53:4b:a3:01:55:6f:06:e9:2e:05:c3:56:e9:9b:71: 35:88:c3:fc:3a:6b:4e:1c:bf:1e:3f:66:f3:2b:f9:6a:55:a2: 96:23:82:c0:e8:a4:ca:ee:86:c9:cc:25:bb:27:df:4c:4c:19: e5:8a:8d:f0:ae:93:b1:c2:14:9f:d1:25:bc:0a:b5:c0:21:ce: 05:73:f5:9e:51:e5:b0:41:e7:f6:4a:8d:c5:7a:69:1f:5a:c0: 26:26:a5:46:61:a9:9a:bb:0f:54:0c:c9:8c:5f:e9:ef:22:cd: 6c:d4:63:67:5e:e9:84:ec:eb:a8:e7:6c:b9:af:ba:f6:e4:e1: a5:09:0d:1c:e5:56:69:0e:75:53:24:e7:85:e9:b4:89:df:bd: 45:64:fd:fc:29:d9:63:71:fa:d0:12:17:89:cc:ab:59:4f:54: 25:a8:b7:99:61:bb:09:7c:d9:5f:1e:bb:6f:4f:14:12:11:37: 8f:40:7b:b5:43:07:dc:5b:db:5a:12:9e:fa:9a:2c:f9:7b:94: 3a:d7:2b:bc:67:e1:45:a2:bb:c7:cc:ce:42:0e:c3:50:f5:c8: 27:1a:fd:ff:aa:8b:8a:14:a0:ff:46:3c:5f:4a:d7:cf:ab:75: d7:15:61:00:17:1e:fc:c5:74:dd:a4:6d:55:ef:d0:64:ce:23: 79:92:ec:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjUyNTExMC8GA1UEBRMoRkJGRjg4QURFOTkzNjY4OUIzMjQxNDVCRkU2M0I3NEQ1 N0FBQUMwQjAeFw0yNDExMjEwNTU5MDVaFw0yNDExMjgwNTU5MDVaMBgxFjAUBgNV BAMTDTY3M2VjYzI5LTk0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzjgBDcc8msffPBi3wntwX6/rp+ywLBXuRfzA2Msm/dHm/1naDcIdV4OnqnzT5 8z/oFmK75wD7cBXpan3MrWWwIisry6SzYPQORSddfsUWV6tWfX2/Mc5F2pK1rVsW CxHXYAxwFwBO1yuKDb2UEZXZhqk7b3u4BkO/1H6+h8JMvwkf+0wLNx/2b73uKXpP zOWVdCBu3zcBx2posnWEvwy0sAEGR72OX3E2Fb3iGqfp79fYJ5giGP4wVOWGS3Cu rOhga/l8P7PeWv0fVpfNBZsnqGlv9yDC83epdKG3fJDIRAWKxGMN8sK6eJI9Vz5Q wPLj2TKZqH3pa6vLaserOma5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7VwJ/Evw pDFOR09aaepdjlZ++dkwHwYDVR0jBBgwFoAU+/+IremTZomzJBRb/mO3TVeqrAsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNTI1L0VBMDIzNDFDODRF RDExRUZCOUZGMkQ1QUM0RjlBRTAyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJB cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLV8tSXJlbVRab216SkJSYl9tTzNUVmVxckFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NTI1L0VBMDIzNDFDODRFRDExRUZCOUZGMkQ1QUM0RjlBRTAyLy1fLUlyZW1UWm9t ekpCUmJfbU8zVFZlcXJBcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlgj1NLowFVbwbpLgXDVumbcTWIw/w6a04cvx4/ZvMr+WpVopYjgsDo pMruhsnMJbsn30xMGeWKjfCuk7HCFJ/RJbwKtcAhzgVz9Z5R5bBB5/ZKjcV6aR9a wCYmpUZhqZq7D1QMyYxf6e8izWzUY2de6YTs66jnbLmvuvbk4aUJDRzlVmkOdVMk 54XptInfvUVk/fwp2WNx+tASF4nMq1lPVCWot5lhuwl82V8eu29PFBIRN49Ae7VD B9xb21oSnvqaLPl7lDrXK7xn4UWiu8fMzkIOw1D1yCca/f+qi4oUoP9GPF9K18+r ddcVYQAXHvzFdN2kbVXv0GTOI3mS7Nw= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:35 2024 by rpki-client on console-ams.rpki-client.org