$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: Ayg6ajLjo/6bWd7J2HWEuhU5EYrjN8ZUjYib+IpwSzM= Subject key identifier: AD:A7:D2:0B:22:12:CB:16:99:72:25:1C:36:E9:D2:23:19:A0:72:42 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 0111 Signing time: Sat 23 Nov 2024 03:04:30 +0000 Manifest this update: Sat 23 Nov 2024 03:04:29 +0000 Manifest next update: Sat 30 Nov 2024 03:04:29 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: RjEej1k4cBUtyxJHX4od2KcAuO7KSDBfsv5FvZCkqhM=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 5G3UaqvRN/OiyPJztyDHavW6CqyUdsMIsiidpfCXP7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Nov 23 03:04:29 2024 GMT Not After : Nov 30 03:04:29 2024 GMT Subject: CN=6741463d-d5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:35:43:b6:9c:7c:c6:ba:87:a3:be:bf:db: bc:d2:f4:cb:13:cb:45:ab:5e:5e:47:42:2b:a9:7e: f1:ec:58:ab:f3:b9:24:dd:88:66:d6:59:bf:cc:f1: 41:8c:0b:55:aa:db:90:13:2e:df:95:e6:2b:6a:b6: e8:e8:db:8a:2c:c7:3d:41:0c:3f:0c:2a:05:76:71: 33:ca:7c:7b:f3:cc:bb:44:ff:f5:b4:ee:14:72:ad: 30:c0:c7:1d:a7:52:2d:51:b2:c8:81:57:cc:69:85: 04:3b:c0:94:72:71:e5:36:66:0c:21:6e:ab:c2:46: 29:7e:c9:89:a7:57:1e:81:54:39:ad:c6:fb:e5:bc: 43:03:d0:8b:41:a1:83:79:45:c0:6e:f1:82:01:59: 0f:ee:4a:63:c8:d8:a9:ca:60:de:98:fa:f5:03:6d: 26:76:9b:0b:f0:3f:06:1b:31:93:a1:48:03:40:e4: c1:cf:26:38:76:fe:b0:3a:27:2a:3f:34:6e:7a:7e: af:cc:95:73:f1:ca:42:47:ac:cc:25:91:aa:d7:bd: a9:1e:45:64:06:bc:68:56:2e:a8:b4:78:4b:6c:e8: 30:0c:19:98:0b:3a:66:8a:f7:88:26:c2:d5:68:28: f4:13:27:7c:c6:c7:35:c6:29:19:6b:53:55:f1:07: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A7:D2:0B:22:12:CB:16:99:72:25:1C:36:E9:D2:23:19:A0:72:42 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:81:66:27:3a:17:84:04:4b:39:30:ca:2b:11:5d:ca:79:f3: ae:c6:f8:40:94:08:9d:5e:85:11:98:a5:0e:0e:28:d7:07:9c: c7:10:16:5e:cc:53:88:c3:28:a2:a1:44:69:9f:7b:a0:11:26: ae:47:6f:99:12:86:d9:36:e9:3c:97:50:c5:51:5e:d9:bc:38: 8d:bc:5f:65:55:0a:1e:53:c3:89:fc:61:76:8b:f0:15:c5:e0: 8f:ef:6e:0e:f6:95:23:e1:d8:23:47:b0:6f:58:e4:75:af:e4: a4:dd:72:58:7e:dc:70:cc:2b:61:0e:83:04:bd:bd:e7:89:c5: 13:be:5e:da:c5:2e:ef:12:e6:6c:37:9a:b0:3d:09:0a:3e:de: e2:e3:11:1f:16:5d:82:03:b4:c7:c7:9a:69:4e:00:89:ba:ed: 7d:73:c6:02:f1:ec:91:d8:ec:f7:cb:9f:ac:8d:17:c3:ef:06: ee:a5:28:40:19:11:aa:64:4a:d2:9f:b8:b2:46:ab:8d:6f:46: 6b:73:58:57:d1:78:9a:12:2c:ad:2a:92:7f:d6:0d:58:8c:74: f6:02:70:46:44:c4:40:39:01:7d:b4:b1:e7:f6:88:b2:eb:d9: 3b:6a:7a:cc:2d:93:8b:89:54:1c:b1:17:6a:d1:40:f3:47:db: c8:fa:b6:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjQxMTIzMDMwNDI5WhcNMjQxMTMwMDMwNDI5WjAYMRYwFAYD VQQDEw02NzQxNDYzZC1kNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4g1Q7acfMa6h6O+v9u80vTLE8tFq15eR0IrqX7x7Fir87kk3Yhm1lm/zPFB jAtVqtuQEy7fleYrarbo6NuKLMc9QQw/DCoFdnEzynx788y7RP/1tO4Ucq0wwMcd p1ItUbLIgVfMaYUEO8CUcnHlNmYMIW6rwkYpfsmJp1cegVQ5rcb75bxDA9CLQaGD eUXAbvGCAVkP7kpjyNipymDemPr1A20mdpsL8D8GGzGToUgDQOTBzyY4dv6wOicq PzRuen6vzJVz8cpCR6zMJZGq172pHkVkBrxoVi6otHhLbOgwDBmYCzpmiveIJsLV aCj0Eyd8xsc1xikZa1NV8QffOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2n0gsi EssWmXIlHDbp0iMZoHJCMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpgWYnOheEBEs5MMorEV3KefOuxvhAlAidXoURmKUODijXB5zHEBZe zFOIwyiioURpn3ugESauR2+ZEobZNuk8l1DFUV7ZvDiNvF9lVQoeU8OJ/GF2i/AV xeCP724O9pUj4dgjR7BvWOR1r+Sk3XJYftxwzCthDoMEvb3nicUTvl7axS7vEuZs N5qwPQkKPt7i4xEfFl2CA7THx5ppTgCJuu19c8YC8eyR2Oz3y5+sjRfD7wbupShA GRGqZErSn7iyRquNb0Zrc1hX0XiaEiytKpJ/1g1YjHT2AnBGRMRAOQF9tLHn9oiy 69k7anrMLZOLiVQcsRdq0UDzR9vI+rYB -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org