$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: RfWaIOFf1l342pEKcSppdeCefmz3Iwi8J/pSkwJ2JwM= Subject key identifier: D7:56:8B:71:35:92:02:19:DD:2B:C1:8D:07:44:DF:9E:22:89:0B:BF Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 188C Signing time: Fri 22 Nov 2024 16:29:22 +0000 Manifest this update: Fri 22 Nov 2024 16:29:21 +0000 Manifest next update: Fri 29 Nov 2024 16:29:21 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: gTER+zyJ3HeIo4KVsiHcJsr4NqnAsIxZkmvbYabuu4s=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: CS+09tEdeSx7uIOBkaLSiPeVYQX/xw7ybPJk0cnYVHY=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: mbcYtTY7pzkjLAPzzBYkqLR1semAFFI9aiFhIVq/OQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6294 (0x1896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Nov 22 16:29:21 2024 GMT Not After : Nov 29 16:29:21 2024 GMT Subject: CN=6740b161-b754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:26:1e:59:93:46:ba:e7:16:0e:7b:9f:31: 2e:47:61:82:13:3b:b8:17:5f:32:19:73:02:44:16: b2:c7:d6:52:e9:05:f4:0e:5b:85:a9:02:c8:d7:99: fa:a3:5f:a1:17:74:62:0b:7b:f5:9a:83:be:a0:8e: b9:7f:9a:3d:de:3d:f3:38:1c:eb:39:55:eb:3a:68: 77:fd:06:de:64:5d:fa:ff:fa:ae:d5:db:e9:39:e8: ec:5c:c4:da:ca:2b:38:a8:e7:45:e7:b0:65:d1:00: 8d:de:11:e9:b3:c3:52:aa:08:eb:59:dd:c1:50:37: fa:de:2e:4e:a3:21:bf:8b:d3:66:d6:b4:8f:df:79: 79:b4:f9:f9:45:ba:25:ef:44:69:c2:74:5a:8a:e0: 57:b9:55:fe:41:b1:81:33:c6:9a:69:4e:d4:33:3f: b2:ad:ba:ba:f2:3f:de:b2:6b:34:59:4a:5d:ad:b7: 29:83:5e:df:97:49:11:61:3c:83:41:99:f8:01:37: f5:53:bb:a7:f6:9d:1f:5f:6f:9c:f0:6d:98:b7:cd: 74:cd:ca:cd:23:ab:80:81:2c:22:86:dd:c5:7b:0a: 94:22:e0:21:bd:0e:c1:10:ba:ff:82:28:34:01:14: b5:36:9f:38:4e:da:32:84:7f:e3:51:46:df:b8:f7: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:56:8B:71:35:92:02:19:DD:2B:C1:8D:07:44:DF:9E:22:89:0B:BF X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:af:74:a9:ba:64:25:01:d0:87:c9:42:e6:e2:23:9a:81:4e: 31:9e:51:19:16:c3:08:42:5e:d4:56:ae:64:be:4c:a1:50:72: f6:36:d5:a4:b7:86:f1:81:f7:e7:05:b8:10:2d:55:98:79:f1: d4:45:0d:63:3a:6b:3e:b5:39:e0:c2:b1:c0:31:f1:93:e1:6e: 8d:50:23:39:e9:53:5f:2e:b5:2a:59:11:ee:39:ae:50:3d:49: b0:44:b1:0f:4d:db:6d:46:6c:cf:7b:1e:0a:1d:17:26:78:59: 9d:ab:9e:88:4c:e5:9a:ff:be:11:69:4b:3e:d9:d6:0e:a6:6c: 5b:73:0f:01:41:15:72:49:52:20:7a:36:3a:14:69:cd:8d:43: 0e:b1:7b:78:af:76:e8:b3:79:3a:38:81:8b:71:cd:db:d6:81: b1:d7:39:39:83:6b:ce:5e:79:0a:ab:a2:7a:c4:b5:88:82:68: 58:d4:3a:a3:f6:b4:1b:dc:ac:84:54:ea:8b:e6:3f:e0:3a:6d: 68:33:d8:a4:20:8b:b8:26:cc:5c:cd:52:fb:14:af:72:8c:d5: c3:ef:f6:a7:41:89:22:2c:c9:4e:b9:9d:3d:b0:ad:30:66:10: 15:fa:f6:4c:8f:09:05:14:61:9d:7e:7f:95:13:b5:cc:6d:30: 9f:0c:f4:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjQxMTIyMTYyOTIxWhcNMjQxMTI5MTYyOTIxWjAYMRYwFAYD VQQDEw02NzQwYjE2MS1iNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxQmHlmTRrrnFg57nzEuR2GCEzu4F18yGXMCRBayx9ZS6QX0DluFqQLI15n6 o1+hF3RiC3v1moO+oI65f5o93j3zOBzrOVXrOmh3/QbeZF36//qu1dvpOejsXMTa yis4qOdF57Bl0QCN3hHps8NSqgjrWd3BUDf63i5OoyG/i9Nm1rSP33l5tPn5Rbol 70RpwnRaiuBXuVX+QbGBM8aaaU7UMz+yrbq68j/esms0WUpdrbcpg17fl0kRYTyD QZn4ATf1U7un9p0fX2+c8G2Yt810zcrNI6uAgSwiht3FewqUIuAhvQ7BELr/gig0 ARS1Np84TtoyhH/jUUbfuPdEXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdWi3E1 kgIZ3SvBjQdE354iiQu/MB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFr3SpumQlAdCHyULm4iOagU4xnlEZFsMIQl7UVq5kvkyhUHL2NtWk t4bxgffnBbgQLVWYefHURQ1jOms+tTngwrHAMfGT4W6NUCM56VNfLrUqWRHuOa5Q PUmwRLEPTdttRmzPex4KHRcmeFmdq56ITOWa/74RaUs+2dYOpmxbcw8BQRVySVIg ejY6FGnNjUMOsXt4r3bos3k6OIGLcc3b1oGx1zk5g2vOXnkKq6J6xLWIgmhY1Dqj 9rQb3KyEVOqL5j/gOm1oM9ikIIu4JsxczVL7FK9yjNXD7/anQYkiLMlOuZ09sK0w ZhAV+vZMjwkFFGGdfn+VE7XMbTCfDPRY -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org