$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: 2v46k+x2xkr9C30nKxWQpuo+7BeDqwpo7FwKSpA9CXQ= Subject key identifier: 76:5E:87:59:A3:6D:62:48:33:C9:6F:70:33:76:B1:54:36:8B:09:EA Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 04D4 Signing time: Fri 22 Nov 2024 23:20:32 +0000 Manifest this update: Fri 22 Nov 2024 23:20:31 +0000 Manifest next update: Fri 29 Nov 2024 23:20:31 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: +hiOR6SEcapEKQezoC6Spfn2eYoLWru/Dz0uUnjCSYk=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: tUJpt/EI7+mUtTaZxM/GDLtgw+TCPgCTEghkC0N1Z5A=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 3HZy6lcIbmxJvukR156ukbCJwU755Be6EmYQo4zomEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Nov 22 23:20:31 2024 GMT Not After : Nov 29 23:20:31 2024 GMT Subject: CN=674111c0-65c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:7b:b9:81:0a:6b:f7:01:3f:82:d7:8d:2a: 18:6c:36:5e:1c:b2:f4:b6:60:3a:b2:3e:62:c2:fa: 46:ef:06:01:f7:8e:4a:63:f5:9b:0c:c2:3e:1a:64: 9a:d2:a2:69:9b:57:d5:8d:83:cf:69:1d:55:28:73: 2f:a9:9d:f3:06:ea:1a:92:54:41:81:24:ff:76:0d: 60:14:a9:95:63:9c:37:71:d9:57:68:fe:1e:7e:45: e2:3d:7f:1d:a4:74:6d:a7:7c:51:55:12:82:22:a2: 99:51:ea:e0:cb:e8:11:ee:40:e1:cd:b2:59:c5:45: ad:a6:38:de:73:e9:de:d5:c8:dc:14:94:c3:76:6b: ac:ad:ff:08:d2:fd:ef:81:21:96:bf:f2:7a:49:35: 9a:e4:5a:9d:c7:66:22:ed:e0:d0:c3:c3:c4:a6:de: 1a:f7:c6:de:20:d3:b7:42:a4:be:a9:47:97:72:c0: d1:f1:e0:8a:5b:6a:0b:e5:27:b4:12:fd:8e:81:68: 31:d7:06:25:99:ff:32:60:71:50:ba:11:b8:19:0c: 5e:a7:ac:0d:34:63:7b:a1:db:ee:f1:e1:86:23:3b: 90:07:57:88:60:08:6a:7d:64:88:2e:81:f3:d4:45: a8:a2:20:22:67:42:71:87:19:8f:0f:e3:1c:84:77: fb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5E:87:59:A3:6D:62:48:33:C9:6F:70:33:76:B1:54:36:8B:09:EA X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:db:e5:03:22:67:d0:e7:3c:7e:28:cd:b4:3d:80:67:b8:0a: 4c:69:aa:da:44:9c:00:d6:00:7d:02:cf:fe:49:d0:b4:f0:52: 42:07:81:c1:4c:c0:f0:f6:b9:e6:88:4e:42:36:81:19:9a:14: 1b:f5:8a:de:84:8b:78:e3:eb:39:8d:68:d9:73:a4:a1:f1:4e: e7:fb:76:9f:15:7e:5b:81:cd:b0:48:98:01:d1:6e:c7:a7:bd: 3d:8d:de:e5:3e:71:50:4c:20:5f:ae:3c:8a:c2:6b:ae:d3:a3: c6:4e:78:e9:6e:7a:5a:9c:33:6e:6d:ba:ee:ae:c1:64:ff:34: c6:31:8f:b8:d8:41:88:e2:63:2d:f0:b4:00:46:c8:f2:db:57: 65:13:7e:85:15:03:b3:a4:dc:de:71:3d:d8:bd:fe:bc:0f:69: d0:fb:d9:80:ce:e5:11:15:a1:26:29:03:81:f7:87:21:b1:84: 9f:3e:a4:37:15:f5:ca:ec:f6:89:bf:aa:31:d5:75:2c:aa:6c: 8d:35:5f:76:31:c6:30:4f:49:c1:7a:b6:4e:46:73:95:40:e7: d4:ac:fd:c3:49:08:82:83:bd:83:ce:46:a7:15:fa:73:44:dc: 40:b6:cc:4b:7a:f1:32:50:5e:97:ac:11:e8:05:57:af:4f:80: 3b:35:c8:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjQxMTIyMjMyMDMxWhcNMjQxMTI5MjMyMDMxWjAYMRYwFAYD VQQDEw02NzQxMTFjMC02NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35N7uYEKa/cBP4LXjSoYbDZeHLL0tmA6sj5iwvpG7wYB945KY/WbDMI+GmSa 0qJpm1fVjYPPaR1VKHMvqZ3zBuoaklRBgST/dg1gFKmVY5w3cdlXaP4efkXiPX8d pHRtp3xRVRKCIqKZUergy+gR7kDhzbJZxUWtpjjec+ne1cjcFJTDdmusrf8I0v3v gSGWv/J6STWa5Fqdx2Yi7eDQw8PEpt4a98beINO3QqS+qUeXcsDR8eCKW2oL5Se0 Ev2OgWgx1wYlmf8yYHFQuhG4GQxep6wNNGN7odvu8eGGIzuQB1eIYAhqfWSILoHz 1EWooiAiZ0JxhxmPD+MchHf7CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZeh1mj bWJIM8lvcDN2sVQ2iwnqMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj2+UDImfQ5zx+KM20PYBnuApMaaraRJwA1gB9As/+SdC08FJCB4HB TMDw9rnmiE5CNoEZmhQb9YrehIt44+s5jWjZc6Sh8U7n+3afFX5bgc2wSJgB0W7H p709jd7lPnFQTCBfrjyKwmuu06PGTnjpbnpanDNubbrursFk/zTGMY+42EGI4mMt 8LQARsjy21dlE36FFQOzpNzecT3Yvf68D2nQ+9mAzuURFaEmKQOB94chsYSfPqQ3 FfXK7PaJv6ox1XUsqmyNNV92McYwT0nBerZORnOVQOfUrP3DSQiCg72DzkanFfpz RNxAtsxLevEyUF6XrBHoBVevT4A7Ncgv -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org