$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: Z1KT4Jkmb9ef+e2fIowqluaORgsRmJ2/XT1hrB6dOE0= Subject key identifier: 85:11:F6:78:C5:2D:7F:3F:A7:7B:AA:ED:32:9C:D4:62:AF:83:B7:06 Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 0681 Signing time: Fri 22 Nov 2024 21:51:42 +0000 Manifest this update: Fri 22 Nov 2024 21:51:41 +0000 Manifest next update: Fri 29 Nov 2024 21:51:41 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: SAWwM535z2A/nHQi/3xI5YjqUQTphcb0V0Q4MvzV0Xc=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: OP9+uNu+3DnTVFD36VFMmNeVnp7GwQwmYQXQim6Ljvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: Nov 22 21:51:41 2024 GMT Not After : Nov 29 21:51:41 2024 GMT Subject: CN=6740fced-9aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:31:b7:cd:83:c8:6f:88:86:61:6d:e2:d4:02: 89:bb:16:da:dd:44:6c:b0:1d:46:06:52:f9:6c:63: 12:ba:5b:d8:05:da:fc:b9:dd:2e:96:bd:b3:37:95: 42:3f:01:87:b9:e9:cb:32:c2:ae:9f:87:fb:06:2c: 91:59:54:e1:3e:ea:f2:0e:99:ac:07:71:f6:7d:51: 89:59:93:49:2a:74:3a:c2:cd:ad:23:7c:28:c8:b9: da:b9:26:d9:cb:16:ec:70:f4:fb:7a:70:23:1a:9a: 34:7b:a8:21:e4:8a:40:25:66:34:3a:4c:33:73:10: cc:6a:f9:13:be:37:b0:9e:be:df:ca:99:f4:b7:98: a6:27:5b:37:23:2d:10:98:f3:fb:10:5f:72:52:74: f2:f4:07:bd:32:2d:5e:0e:95:bc:1f:c2:fe:39:15: 2b:30:c1:d4:7b:37:8e:8d:18:f8:c8:4a:b9:86:d1: 62:d1:da:fc:bd:10:4a:d1:5b:6d:fa:aa:2b:77:6c: 0b:a3:bc:34:e4:c2:45:9a:b2:66:8c:32:01:0d:9d: ae:24:73:c9:ac:3e:0d:e9:80:d1:71:2c:fd:8d:2b: d3:e1:d5:43:3d:51:93:47:95:9c:90:d1:73:12:c7: 90:f1:2b:f9:35:c7:0a:5a:eb:c3:95:f8:b1:de:23: 5e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:11:F6:78:C5:2D:7F:3F:A7:7B:AA:ED:32:9C:D4:62:AF:83:B7:06 X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c9:aa:a2:4f:a3:51:38:a8:5c:b4:45:8d:36:f0:bf:7e:82: ff:41:24:3d:c3:cd:d5:b5:58:e3:36:4b:17:7f:6e:eb:b0:f4: 8b:5d:b6:4f:93:60:2f:09:4f:b4:21:f7:e0:d3:79:08:f4:bc: a7:45:37:00:78:36:ad:d8:1b:17:6e:dd:c3:ac:9f:ec:01:fb: ef:f8:ff:c0:c2:b6:29:6a:33:a9:55:28:74:41:03:24:15:59: 52:59:5f:4c:40:7b:8a:35:07:da:0d:71:00:29:28:52:9d:d9: fb:98:59:72:d2:dc:b9:e6:fa:ed:77:d8:21:8e:79:da:f0:47: 7b:6c:8f:92:7e:f6:b6:9a:9f:2a:c0:21:ec:e0:e7:50:94:e1: bf:77:73:34:d8:2f:89:98:34:70:5b:9b:00:26:3f:22:04:53: 08:b8:75:9b:81:63:44:a2:13:c9:95:0e:a9:76:6e:6f:e6:1a: 72:e6:fc:fa:9b:90:e6:22:dd:e5:19:1d:e6:5c:cf:44:c8:05: a5:3d:87:5b:0f:05:cd:12:36:0a:e4:79:88:50:17:ea:b4:4b: b0:19:bc:6f:40:db:e8:7b:73:73:aa:4c:bb:76:2c:b5:f6:fb: 30:38:e0:23:c5:d3:b8:4f:48:50:66:84:0f:ff:a2:99:9b:f4: 78:7c:ab:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjQxMTIyMjE1MTQxWhcNMjQxMTI5MjE1MTQxWjAYMRYwFAYD VQQDEw02NzQwZmNlZC05YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TG3zYPIb4iGYW3i1AKJuxba3URssB1GBlL5bGMSulvYBdr8ud0ulr2zN5VC PwGHuenLMsKun4f7BiyRWVThPuryDpmsB3H2fVGJWZNJKnQ6ws2tI3woyLnauSbZ yxbscPT7enAjGpo0e6gh5IpAJWY0OkwzcxDMavkTvjewnr7fypn0t5imJ1s3Iy0Q mPP7EF9yUnTy9Ae9Mi1eDpW8H8L+ORUrMMHUezeOjRj4yEq5htFi0dr8vRBK0Vtt +qord2wLo7w05MJFmrJmjDIBDZ2uJHPJrD4N6YDRcSz9jSvT4dVDPVGTR5WckNFz EseQ8Sv5NccKWuvDlfix3iNemQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUR9njF LX8/p3uq7TKc1GKvg7cGMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHyaqiT6NROKhctEWNNvC/foL/QSQ9w83VtVjjNksXf27rsPSLXbZP k2AvCU+0Iffg03kI9LynRTcAeDat2BsXbt3DrJ/sAfvv+P/AwrYpajOpVSh0QQMk FVlSWV9MQHuKNQfaDXEAKShSndn7mFly0ty55vrtd9ghjnna8Ed7bI+Sfva2mp8q wCHs4OdQlOG/d3M02C+JmDRwW5sAJj8iBFMIuHWbgWNEohPJlQ6pdm5v5hpy5vz6 m5DmIt3lGR3mXM9EyAWlPYdbDwXNEjYK5HmIUBfqtEuwGbxvQNvoe3Nzqky7diy1 9vswOOAjxdO4T0hQZoQP/6KZm/R4fKsS -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:33 2024 by rpki-client on console-fra.rpki-client.org