$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: Jr21OnnFl1oBgEc6KfHDrWc4n1j/07GZ12X5N7lj5D0= Subject key identifier: 8A:B0:F1:13:CB:5D:F5:B5:C6:B3:8E:61:53:90:24:4A:65:56:7C:79 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 098B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 0981 Signing time: Fri 22 Nov 2024 19:51:45 +0000 Manifest this update: Fri 22 Nov 2024 19:51:45 +0000 Manifest next update: Fri 29 Nov 2024 19:51:45 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: Fia0F5BIVyeBANXSjIhyiu1g6Yzz9yhbw4OAgxJqjwE=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: p9kCZDh5UAqZ2BMmqpg1+O7Ke6v3jmI1iGjmFDJZpjY=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: K7z8kKU5BqzIOHwB0jfNZHDe2Ivnb5VNPYxOnFpEPT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Nov 22 19:51:45 2024 GMT Not After : Nov 29 19:51:45 2024 GMT Subject: CN=6740e0d1-a418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:cb:25:5e:04:b5:37:19:45:21:93:8f:7a: 68:87:2a:5b:85:7b:96:96:47:99:19:b8:9d:d8:6f: d9:f4:c3:ea:1e:8c:6e:7c:6c:1e:c1:42:48:c1:be: 76:69:6f:94:df:e0:45:53:82:ad:4e:2d:ed:eb:cf: 22:63:7a:59:cc:1f:ee:15:d5:99:f7:02:cd:3d:37: 17:aa:be:48:cf:23:a7:ad:16:e1:fb:35:00:be:dd: db:69:09:23:0a:4e:c5:ea:ea:85:b1:95:8d:0b:ff: 84:60:05:5f:44:39:82:87:bd:8f:a5:9b:3e:0c:bc: 9e:e3:b7:ad:2d:00:59:4a:af:9f:7e:82:5c:d9:e7: 1c:46:f8:9e:5b:a4:a1:ac:6d:82:03:29:86:41:77: db:3a:6b:b3:1c:4c:ff:ba:3f:23:55:38:33:c3:0d: 95:19:ad:8d:fb:da:c6:96:16:94:fe:65:92:f0:72: 89:04:52:d8:cc:d7:e3:c0:3e:49:c9:3b:c2:aa:bb: 06:58:9a:fc:a1:e8:1c:a3:ab:8b:88:21:c9:3f:12: ee:e7:f5:bb:f6:77:93:e2:33:ae:3d:25:47:1c:c3: 41:dd:e9:f4:45:f3:d7:40:60:d4:eb:a6:eb:55:f2: 3c:f9:f6:15:4c:ea:0d:d3:52:ce:99:d9:06:06:0d: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B0:F1:13:CB:5D:F5:B5:C6:B3:8E:61:53:90:24:4A:65:56:7C:79 X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:1a:65:34:1e:aa:6b:ad:c8:17:17:c2:55:45:79:e4:44:83: da:44:25:74:e3:ba:1c:4e:1a:1d:82:a3:bb:0a:6d:85:2a:96: b9:32:cc:32:77:e3:b6:02:27:ad:70:e4:c6:a9:7e:6a:bd:3a: c4:81:33:06:71:06:5e:c8:23:09:94:1c:83:00:bc:06:af:f4: 70:d7:d9:e1:1f:7d:9a:10:5f:96:fd:37:32:f1:dc:d4:a3:cb: e2:73:b4:85:3f:e1:f2:bc:cc:fc:a3:9b:be:b1:b2:e1:1c:00: 1e:2a:6e:fb:0d:ba:78:6d:fc:90:7d:1b:0f:48:d0:0f:88:d5: 6c:7e:26:f8:ef:a0:e3:79:9f:2a:fc:4a:5e:f9:f5:95:e2:1d: 6e:1a:1b:63:8d:a9:51:77:2f:9c:d6:d8:87:c3:96:57:1b:a6: db:1b:bf:42:b3:1f:e7:dc:c2:c1:e2:2c:af:8c:f1:f9:56:26: 19:4b:6a:64:83:bb:01:6f:ee:12:4d:3c:dd:ad:84:1b:0a:23: ce:a5:e1:e1:d7:89:74:42:c4:ff:be:80:8f:02:e5:af:8b:6c: cd:b1:36:5d:cf:fe:b9:14:f4:43:05:8e:d3:ee:ed:be:de:83: 40:6c:79:a2:ae:e9:c0:71:a9:8b:91:51:00:ca:bc:d5:e2:1b: d5:9a:e7:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjQxMTIyMTk1MTQ1WhcNMjQxMTI5MTk1MTQ1WjAYMRYwFAYD VQQDEw02NzQwZTBkMS1hNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA7LJV4EtTcZRSGTj3pohypbhXuWlkeZGbid2G/Z9MPqHoxufGwewUJIwb52 aW+U3+BFU4KtTi3t688iY3pZzB/uFdWZ9wLNPTcXqr5IzyOnrRbh+zUAvt3baQkj Ck7F6uqFsZWNC/+EYAVfRDmCh72PpZs+DLye47etLQBZSq+ffoJc2eccRvieW6Sh rG2CAymGQXfbOmuzHEz/uj8jVTgzww2VGa2N+9rGlhaU/mWS8HKJBFLYzNfjwD5J yTvCqrsGWJr8oegco6uLiCHJPxLu5/W79neT4jOuPSVHHMNB3en0RfPXQGDU66br VfI8+fYVTOoN01LOmdkGBg0NuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqw8RPL XfW1xrOOYVOQJEplVnx5MB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDGmU0HqprrcgXF8JVRXnkRIPaRCV047ocThodgqO7Cm2FKpa5Mswy d+O2AietcOTGqX5qvTrEgTMGcQZeyCMJlByDALwGr/Rw19nhH32aEF+W/Tcy8dzU o8vic7SFP+HyvMz8o5u+sbLhHAAeKm77Dbp4bfyQfRsPSNAPiNVsfib476DjeZ8q /Epe+fWV4h1uGhtjjalRdy+c1tiHw5ZXG6bbG79Csx/n3MLB4iyvjPH5ViYZS2pk g7sBb+4STTzdrYQbCiPOpeHh14l0QsT/voCPAuWvi2zNsTZdz/65FPRDBY7T7u2+ 3oNAbHmirunAcamLkVEAyrzV4hvVmue6 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org