$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft File: iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json) Hash identifier: HqYam2k1WA4aoQI3riS5AGfTWTlsl/XACUga8odEZXs= Subject key identifier: C8:C6:53:C7:97:08:89:6F:4F:3A:52:7C:78:52:42:04:F0:85:AE:74 Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 Certificate issuer: /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Certificate serial: 05E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft Manifest number: 05DB Signing time: Wed 20 Nov 2024 22:30:23 +0000 Manifest this update: Wed 20 Nov 2024 22:30:22 +0000 Manifest next update: Wed 27 Nov 2024 22:30:22 +0000 Files and hashes: 1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: IqqouiEZgOk35FVep/+FoPJpsl6tszQiswpuu0HW7o4=) 2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: PxaaK39Y5xEd7lxiNReKmMyjJOrete3xtkbzR6qIJuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1504 (0x5e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Validity Not Before: Nov 20 22:30:22 2024 GMT Not After : Nov 27 22:30:22 2024 GMT Subject: CN=673e62fe-fdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:06:ee:e8:35:81:80:01:b5:46:48:99:88: fa:f4:76:5d:1e:b2:04:df:e0:d6:79:b2:33:62:3f: 19:35:49:86:c5:75:98:ac:ed:75:1e:cd:cb:01:f2: b0:62:9a:e4:66:53:3e:5c:61:1a:5c:fd:41:27:b5: 44:9f:80:ed:ab:82:96:8b:83:76:75:96:a6:c4:b0: ae:d8:00:e3:17:2b:3e:2b:18:99:29:36:e4:29:ee: 5f:5e:02:c3:4f:55:3b:3b:81:f4:49:f8:38:ea:39: 6a:ef:58:ff:f8:37:ed:5e:0f:23:ca:3b:76:aa:83: b6:b4:bc:7e:b8:ad:2e:d1:9e:d1:3b:12:4e:bb:9f: ad:0f:a7:69:05:0f:4e:9f:19:94:9a:f9:56:50:8f: da:59:15:df:79:4c:4a:af:02:8e:22:7a:c3:cc:f4: 06:a7:96:ce:12:45:b4:6d:4e:f7:92:d9:7b:3f:15: 2f:7b:80:3c:b7:90:f8:d3:fd:d0:a6:25:f3:52:4b: 97:1b:6a:ac:d4:a1:b1:42:e3:7f:60:1e:e3:c5:7a: 22:af:e3:36:cd:e6:e4:50:0b:c3:a9:de:b6:4a:7d: 8d:d7:4b:fa:5b:94:81:e9:4b:04:01:56:d2:9b:5a: 97:c1:aa:c6:15:18:34:eb:5a:91:8b:8a:40:7e:ce: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:53:C7:97:08:89:6F:4F:3A:52:7C:78:52:42:04:F0:85:AE:74 X509v3 Authority Key Identifier: keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b3:11:a3:96:f6:48:20:49:83:ed:94:7d:4b:b5:d5:22:eb: 8d:95:5b:4d:03:ef:ef:c9:70:f2:2d:ed:b1:72:21:44:67:37: b8:60:9a:27:5d:15:cd:f1:48:53:99:09:7f:3e:56:f5:fe:5a: 15:d2:01:c5:c7:35:48:5a:a4:e2:f4:e9:03:9c:cb:ae:60:bd: 83:c5:01:a4:bb:a8:b2:cf:c6:1e:9c:57:76:4a:9f:9c:d6:64: 12:93:49:fc:88:77:dc:2c:c5:56:36:86:ca:bb:4e:09:92:97: c0:cf:33:0a:0e:1b:7f:2a:0b:60:1b:24:ba:aa:18:86:e8:0b: 7a:0c:a0:f9:a9:aa:cc:be:16:65:99:03:bb:ca:10:72:69:69: 83:eb:7b:d5:d3:0c:7c:91:75:a6:4e:03:66:55:d8:6d:f6:eb: 4d:cf:80:d2:11:67:b7:96:4e:bc:fe:0c:10:f0:4f:5a:44:8f: db:4e:4d:1b:47:ad:5b:8f:66:64:f6:fd:61:91:45:8c:10:8d: 21:40:41:73:d8:76:88:53:37:09:eb:4d:ba:2e:4a:5f:1b:3d: b5:1d:5f:23:39:67:b9:3b:ec:7d:6d:0d:6c:bf:bb:d7:7c:ca: fb:ce:bd:e6:26:04:2b:7f:8b:f7:8a:cf:9f:2d:5b:fe:68:0f: c6:15:9b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDNTIxMTAvBgNVBAUTKDhBQkI5OTI2QzMxMkExNDE0OUM1MjMwQkE1NUZBOENG NUI4OUFBRTEwHhcNMjQxMTIwMjIzMDIyWhcNMjQxMTI3MjIzMDIyWjAYMRYwFAYD VQQDEw02NzNlNjJmZS1mZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlgG7ug1gYABtUZImYj69HZdHrIE3+DWebIzYj8ZNUmGxXWYrO11Hs3LAfKw YprkZlM+XGEaXP1BJ7VEn4Dtq4KWi4N2dZamxLCu2ADjFys+KxiZKTbkKe5fXgLD T1U7O4H0Sfg46jlq71j/+DftXg8jyjt2qoO2tLx+uK0u0Z7ROxJOu5+tD6dpBQ9O nxmUmvlWUI/aWRXfeUxKrwKOInrDzPQGp5bOEkW0bU73ktl7PxUve4A8t5D40/3Q piXzUkuXG2qs1KGxQuN/YB7jxXoir+M2zebkUAvDqd62Sn2N10v6W5SB6UsEAVbS m1qXwarGFRg061qRi4pAfs5R1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjGU8eX CIlvTzpSfHhSQgTwha50MB8GA1UdIwQYMBaAFIq7mSbDEqFBScUjC6VfqM9biarh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM1Mi9CNDZDRDc3RTkx QjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29VRkp4U01McFYtb3oxdUpx dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lydVpKc01Tb1VGSnhTTUxwVi1vejF1SnF1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEM1Mi9CNDZDRDc3RTkxQjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29V Rkp4U01McFYtb3oxdUpxdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxsxGjlvZIIEmD7ZR9S7XVIuuNlVtNA+/vyXDyLe2xciFEZze4YJon XRXN8UhTmQl/Plb1/loV0gHFxzVIWqTi9OkDnMuuYL2DxQGku6iyz8YenFd2Sp+c 1mQSk0n8iHfcLMVWNobKu04JkpfAzzMKDht/KgtgGyS6qhiG6At6DKD5qarMvhZl mQO7yhByaWmD63vV0wx8kXWmTgNmVdht9utNz4DSEWe3lk68/gwQ8E9aRI/bTk0b R61bj2Zk9v1hkUWMEI0hQEFz2HaIUzcJ6026LkpfGz21HV8jOWe5O+x9bQ1sv7vX fMr7zr3mJgQrf4v3is+fLVv+aA/GFZtT -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:02 2024 by rpki-client on console-ams.rpki-client.org