$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: ZsavIpu18xO2nMrzwiIfGHFEimNdBUatQPS8Zzq2IOE= Subject key identifier: 6B:B5:80:01:8C:E2:D9:E5:DB:DF:95:78:43:6B:D1:E0:79:60:57:10 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: A0 Signing time: Sat 23 Nov 2024 04:23:37 +0000 Manifest this update: Sat 23 Nov 2024 04:23:36 +0000 Manifest next update: Sat 30 Nov 2024 04:23:36 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: wgVAhHsL0ALXHF2kBZ/vc0GHVUP/4xh1YLewWBNyZY0=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: R6HAfsFQJCAwt/SBaezXmyue3jhCEJ5CX2/BB8RcTXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Nov 23 04:23:36 2024 GMT Not After : Nov 30 04:23:36 2024 GMT Subject: CN=674158c9-75d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:df:21:c3:5c:42:36:2d:c5:94:9f:80:ed: 0e:9b:31:b3:e9:85:7f:06:06:22:bc:c8:86:c1:e7: 48:e7:32:d8:78:51:49:97:13:3f:10:b9:3f:d6:f0: 4c:95:2c:8c:97:bb:dd:7d:dd:8b:78:38:a3:2f:c3: 14:f5:03:e1:e7:51:74:a8:eb:00:04:23:41:d5:9c: 8a:b3:da:77:4a:61:f5:95:42:68:85:99:77:ed:83: 0f:c6:a8:28:fe:16:32:ca:b3:37:c0:e9:4b:e3:3e: 0d:3f:00:b6:1f:6d:2f:c7:a1:fe:e5:79:58:32:8d: 5d:59:0f:f4:ea:94:c7:28:b7:28:92:f5:d1:c6:94: 14:94:e1:db:06:53:2d:10:6c:9b:6a:70:26:ba:13: a2:be:20:fa:65:8e:c8:0a:7d:cb:88:a0:a6:88:5a: ad:bc:2a:5e:38:87:07:d9:17:d0:00:eb:15:19:c8: 3e:2d:10:d0:28:76:6e:3d:f3:d9:02:17:68:6b:d7: 85:f0:2b:96:0c:e4:94:ff:10:84:64:59:dc:d5:b4: 25:2b:9f:d0:55:bd:b5:86:24:68:49:a6:1d:f9:fe: 8a:35:f9:54:d5:40:c3:cd:29:9f:e9:eb:3a:d7:4c: 80:4b:a4:d2:90:66:73:9b:df:31:c5:b5:e7:c3:fd: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B5:80:01:8C:E2:D9:E5:DB:DF:95:78:43:6B:D1:E0:79:60:57:10 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:70:54:51:55:5a:27:15:83:6b:bd:77:fe:7b:af:95:3c:1d: e9:03:78:f9:67:05:02:79:ec:84:61:c2:d0:64:1d:85:4e:c9: 59:0d:f4:6c:df:1e:cb:00:3e:7c:74:d3:57:44:1d:da:24:bc: 8b:09:f4:bc:61:66:34:df:62:9e:f4:39:19:cf:53:6b:5b:ba: 99:49:b5:0e:29:75:3b:60:f3:fe:3d:e5:fb:41:0a:29:bc:07: 84:bf:04:70:60:8a:b3:ff:dd:75:61:9e:d3:14:d2:41:7d:75: dc:d7:76:5c:21:6e:17:f1:b6:f3:1a:7d:f4:55:93:2e:56:60: 08:47:25:b8:97:85:59:90:b2:9f:58:9c:3a:f0:64:61:a6:7d: b4:21:45:70:60:41:fc:6b:23:f0:8d:05:38:80:63:23:74:03: 16:94:14:9a:7b:97:13:a9:ce:99:9c:9b:cf:eb:e1:fc:ca:d0: f4:3e:c2:64:cc:c1:54:d8:ed:03:0a:6a:e7:95:ca:53:0c:b7: b9:e4:a1:9d:5d:0b:08:f1:20:b5:bc:75:bf:66:70:8e:16:5e: 5e:82:23:1e:53:b7:cc:2b:7b:47:fa:2a:99:0f:42:8b:ca:2c: cb:c6:20:73:00:8d:27:8e:39:2b:3c:3c:c9:70:cf:78:af:6c: d0:d2:6a:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjQxMTIzMDQyMzM2WhcNMjQxMTMwMDQyMzM2WjAYMRYwFAYD VQQDEw02NzQxNThjOS03NWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv63fIcNcQjYtxZSfgO0OmzGz6YV/BgYivMiGwedI5zLYeFFJlxM/ELk/1vBM lSyMl7vdfd2LeDijL8MU9QPh51F0qOsABCNB1ZyKs9p3SmH1lUJohZl37YMPxqgo /hYyyrM3wOlL4z4NPwC2H20vx6H+5XlYMo1dWQ/06pTHKLcokvXRxpQUlOHbBlMt EGybanAmuhOiviD6ZY7ICn3LiKCmiFqtvCpeOIcH2RfQAOsVGcg+LRDQKHZuPfPZ Ahdoa9eF8CuWDOSU/xCEZFnc1bQlK5/QVb21hiRoSaYd+f6KNflU1UDDzSmf6es6 10yAS6TSkGZzm98xxbXnw/1r/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGu1gAGM 4tnl29+VeENr0eB5YFcQMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgcFRRVVonFYNrvXf+e6+VPB3pA3j5ZwUCeeyEYcLQZB2FTslZDfRs 3x7LAD58dNNXRB3aJLyLCfS8YWY032Ke9DkZz1NrW7qZSbUOKXU7YPP+PeX7QQop vAeEvwRwYIqz/911YZ7TFNJBfXXc13ZcIW4X8bbzGn30VZMuVmAIRyW4l4VZkLKf WJw68GRhpn20IUVwYEH8ayPwjQU4gGMjdAMWlBSae5cTqc6ZnJvP6+H8ytD0PsJk zMFU2O0DCmrnlcpTDLe55KGdXQsI8SC1vHW/ZnCOFl5egiMeU7fMK3tH+iqZD0KL yizLxiBzAI0njjkrPDzJcM94r2zQ0mr2 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org