$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: MZI4ykhvu9QjfHEtaZlHgd8U6kfcDfLK4SMAhXWKPcg= Subject key identifier: BD:C1:0F:B1:9B:83:24:E3:E7:8D:7F:AF:05:6C:9E:41:01:56:8A:B3 Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 06F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 06E7 Signing time: Fri 22 Nov 2024 21:32:53 +0000 Manifest this update: Fri 22 Nov 2024 21:32:53 +0000 Manifest next update: Fri 29 Nov 2024 21:32:53 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: /B9OaiGC82RtTy7fVg2go+luKCYziDc/qEOi0CzmoqM=) 2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: VX7tWpkB3IpeXdKnDIMHBHz09wmck5Wxazs1on6cWAs=) 3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: UtE0iQnooYxxq8F81zrRGsRO6qH6B3IIfoj4HCuUdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1776 (0x6f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: Nov 22 21:32:53 2024 GMT Not After : Nov 29 21:32:53 2024 GMT Subject: CN=6740f885-fad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:2e:00:3a:98:8c:5e:5f:ab:23:15:af:24: a1:f4:29:a0:53:66:f6:e7:5b:e1:9c:3c:21:2f:e5: a0:85:f6:6b:a3:f0:fc:80:e7:fa:57:dd:70:4f:6d: 3e:f5:e9:c8:dd:eb:a7:cb:15:dc:38:b7:8a:a9:5d: f2:4d:21:e9:c7:ba:be:f9:17:9e:08:40:10:cf:d1: 9c:82:84:7d:30:95:0a:80:5b:5c:c8:b9:21:02:97: 34:53:5f:9b:3b:91:f4:16:2a:93:f5:e1:c5:3d:94: 8f:ae:96:f6:55:f0:d7:b4:d6:cf:13:f4:ec:c2:26: 4a:27:f2:0c:20:3e:cd:2a:73:69:20:af:b8:92:e1: 84:1d:ed:09:45:94:1c:02:60:e1:7e:ec:d3:79:99: 25:dc:4e:cd:14:66:d6:e6:fe:43:ad:73:06:14:60: 05:df:ee:62:2e:29:0b:24:8b:5a:31:66:64:12:4d: 6e:12:67:d8:f9:19:14:f2:ef:8d:80:f7:04:fb:84: 8e:1f:a0:74:56:ce:4f:fe:87:3e:4e:22:52:b1:79: cd:14:62:8e:9e:81:a7:75:30:70:94:8f:1f:df:02: 14:53:f3:45:84:2f:45:4f:34:73:a2:f3:ab:9d:14: 3f:b2:1a:24:e8:f7:93:c4:5e:ce:fa:0b:bf:50:c7: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C1:0F:B1:9B:83:24:E3:E7:8D:7F:AF:05:6C:9E:41:01:56:8A:B3 X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f1:46:3f:e2:0d:09:f8:47:b4:14:a2:65:f0:59:e5:aa:df: 52:fd:a1:25:9b:30:05:9f:fa:e1:5b:be:42:fd:09:48:33:93: a7:8a:0f:09:59:b8:79:1f:f2:38:a2:e8:45:c8:a0:ba:eb:db: 62:01:66:53:30:71:01:d6:9f:a0:38:3f:27:1d:04:e9:83:f9: 2b:3a:7a:69:4f:a8:04:8b:26:4f:d7:46:85:7e:81:19:96:fc: d3:c8:17:b3:fd:01:d2:d9:de:a6:91:eb:e7:62:db:a7:ed:22: af:03:33:d4:ab:93:50:a8:7d:d3:c0:e3:a2:11:a1:16:27:3d: 77:10:dd:ec:4a:f8:a6:9e:df:5e:67:f5:f6:ba:fc:f1:ec:87: 9d:d5:dd:89:97:b7:01:af:a4:75:b2:ff:ea:d1:db:d4:66:42: 99:41:98:63:2c:81:23:45:24:6f:82:82:09:b8:a5:3b:2a:d4: 2d:f0:34:fc:9f:24:0d:93:b7:3f:e4:ea:2e:09:7e:c4:cd:51: 85:ce:89:9c:1c:ed:0f:83:8c:44:1d:2c:c4:da:1f:cf:00:d7: fb:19:f8:95:e2:80:45:87:1b:dd:a1:d4:c6:9b:95:54:0c:58: f2:13:f5:1f:4f:a6:0b:d6:65:a4:c6:a4:18:18:7b:25:fc:2a: 30:a1:13:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjQxMTIyMjEzMjUzWhcNMjQxMTI5MjEzMjUzWjAYMRYwFAYD VQQDEw02NzQwZjg4NS1mYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5c4uADqYjF5fqyMVrySh9CmgU2b251vhnDwhL+WghfZro/D8gOf6V91wT20+ 9enI3eunyxXcOLeKqV3yTSHpx7q++ReeCEAQz9GcgoR9MJUKgFtcyLkhApc0U1+b O5H0FiqT9eHFPZSPrpb2VfDXtNbPE/TswiZKJ/IMID7NKnNpIK+4kuGEHe0JRZQc AmDhfuzTeZkl3E7NFGbW5v5DrXMGFGAF3+5iLikLJItaMWZkEk1uEmfY+RkU8u+N gPcE+4SOH6B0Vs5P/oc+TiJSsXnNFGKOnoGndTBwlI8f3wIUU/NFhC9FTzRzovOr nRQ/shok6PeTxF7O+gu/UMfP5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3BD7Gb gyTj541/rwVsnkEBVoqzMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA38UY/4g0J+Ee0FKJl8Fnlqt9S/aElmzAFn/rhW75C/QlIM5Onig8J Wbh5H/I4ouhFyKC669tiAWZTMHEB1p+gOD8nHQTpg/krOnppT6gEiyZP10aFfoEZ lvzTyBez/QHS2d6mkevnYtun7SKvAzPUq5NQqH3TwOOiEaEWJz13EN3sSvimnt9e Z/X2uvzx7Ied1d2Jl7cBr6R1sv/q0dvUZkKZQZhjLIEjRSRvgoIJuKU7KtQt8DT8 nyQNk7c/5OouCX7EzVGFzomcHO0Pg4xEHSzE2h/PANf7GfiV4oBFhxvdodTGm5VU DFjyE/UfT6YL1mWkxqQYGHsl/CowoRPC -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org