$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: CRom6pdPlDDg6NL9Kz4aSzmJ2xr1aWVOf0BuZO76JqI= Subject key identifier: 37:A8:63:BB:45:7E:34:0E:31:0B:78:19:53:81:BC:87:DD:AA:4B:D1 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 07C2 Signing time: Sun 24 Nov 2024 20:39:30 +0000 Manifest this update: Sun 24 Nov 2024 20:39:30 +0000 Manifest next update: Sun 01 Dec 2024 20:39:30 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: 4fywcg3uA/5is0o+RHVyQchWFh/DJL0pf4X6c1e+Ppc=) 2: EF40C4AC404611EFA2014651C4F9AE02.roa (hash: czaYuAZrmltxjeFq6mD06OZKMChDyKz2TsFDBFMIxYw=) 3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: IR0gL9HuGQPasCSDeDXOONGQSnX5FqddD0h9jerJFTk=) 4: 35D16082404911EFBC4C610EC4F9AE02.roa (hash: CZyYnpg8fZRv7/01XkAyfUiNYVCaEIGt11t+Ww7CLyk=) 5: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: RgPF5melWGZf5AFZ9hv+NJPKC/EOsjcNRxGMLnUAhvk=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: 5tsj3TAsFxb8qTqVXGn9He+Eq077vpR4YIaSiSHaTqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Nov 24 20:39:30 2024 GMT Not After : Dec 1 20:39:30 2024 GMT Subject: CN=67438f02-7470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:9a:9e:33:86:b9:cd:92:99:7b:ac:80:c2: 6c:56:ed:cd:e0:bd:7a:6f:5c:69:5b:c1:87:32:7b: 09:d7:fd:56:3f:ae:a1:f0:95:61:a8:85:d6:bd:82: 0a:e7:ca:c8:06:28:a0:9f:ad:7a:38:50:09:ba:46: c3:2f:d0:86:9b:38:7d:6d:83:a9:78:fa:93:3a:50: 49:70:43:fd:51:ed:d4:86:a4:af:15:b9:47:16:77: ad:9b:80:04:3c:ca:65:1b:7d:b9:b5:7b:d8:7f:df: b6:dd:96:7a:f5:03:14:82:c5:96:14:57:30:96:ad: 2c:62:45:38:38:29:8f:f3:0c:3c:c7:15:86:26:d3: c1:5d:ba:26:45:e2:0a:38:d0:11:5b:bf:f5:4d:25: 31:54:c7:c2:e8:44:51:1d:6d:75:a7:1e:4d:e7:86: da:fa:a9:7a:d5:21:d0:39:57:4b:48:c4:ea:2c:da: 9e:ff:74:f9:60:66:2f:d6:23:36:a0:94:ff:a2:c3: e7:c4:05:d9:10:8d:5b:8d:81:1c:3a:58:f2:6c:3c: ff:83:ed:74:f3:4b:90:4e:28:24:78:3d:79:e0:81: ea:a2:73:66:53:49:e6:88:15:fd:7b:00:eb:1e:8d: f7:f7:9b:1b:37:3b:04:51:97:7b:30:67:43:44:74: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A8:63:BB:45:7E:34:0E:31:0B:78:19:53:81:BC:87:DD:AA:4B:D1 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a6:82:3c:3e:45:ff:62:f4:d5:72:d7:a9:0f:47:c4:35:63: 6c:7e:fc:45:1a:d2:7f:8e:aa:93:a0:f3:c3:a9:bd:e0:d9:19: ed:53:c0:16:d6:6a:db:62:f1:0e:9a:1d:4e:70:e2:af:34:06: 74:3e:63:f1:36:dc:8f:1e:5b:e4:90:f4:80:95:4e:f5:49:9e: c5:c7:fe:6b:92:7d:78:05:8d:42:f7:c6:11:29:a5:89:a3:3a: 47:e2:fd:5e:7d:27:75:91:47:56:f8:96:03:55:9c:d1:0e:d5: 2d:c9:0e:bf:6b:7f:99:37:9b:b4:d6:58:b9:ff:80:4e:6b:4e: 39:a8:93:8d:bc:59:79:0c:a5:ca:8d:38:33:5b:28:bd:68:f0: da:c2:fa:9b:53:43:bb:93:ac:df:41:ff:4b:9a:92:f6:c0:21: b3:5b:28:ed:4b:91:72:47:11:50:63:43:c7:d1:46:50:6b:97: 99:90:08:f1:05:7a:95:74:7a:07:77:0d:0f:6c:fe:45:7c:74: 4d:a2:76:fe:39:91:a6:19:2a:89:1d:ea:29:5e:b5:ed:7c:54: 67:42:97:c5:15:dd:fc:77:ff:84:84:45:0f:94:18:84:b9:25: 23:27:7e:97:5f:eb:1b:52:52:4e:29:18:e5:3a:55:5c:31:dc: 96:ee:5a:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjQxMTI0MjAzOTMwWhcNMjQxMjAxMjAzOTMwWjAYMRYwFAYD VQQDEw02NzQzOGYwMi03NDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf6anjOGuc2SmXusgMJsVu3N4L16b1xpW8GHMnsJ1/1WP66h8JVhqIXWvYIK 58rIBiign616OFAJukbDL9CGmzh9bYOpePqTOlBJcEP9Ue3UhqSvFblHFnetm4AE PMplG325tXvYf9+23ZZ69QMUgsWWFFcwlq0sYkU4OCmP8ww8xxWGJtPBXbomReIK ONARW7/1TSUxVMfC6ERRHW11px5N54ba+ql61SHQOVdLSMTqLNqe/3T5YGYv1iM2 oJT/osPnxAXZEI1bjYEcOljybDz/g+1080uQTigkeD154IHqonNmU0nmiBX9ewDr Ho3395sbNzsEUZd7MGdDRHQIUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeoY7tF fjQOMQt4GVOBvIfdqkvRMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6poI8PkX/YvTVctepD0fENWNsfvxFGtJ/jqqToPPDqb3g2RntU8AW 1mrbYvEOmh1OcOKvNAZ0PmPxNtyPHlvkkPSAlU71SZ7Fx/5rkn14BY1C98YRKaWJ ozpH4v1efSd1kUdW+JYDVZzRDtUtyQ6/a3+ZN5u01li5/4BOa045qJONvFl5DKXK jTgzWyi9aPDawvqbU0O7k6zfQf9LmpL2wCGzWyjtS5FyRxFQY0PH0UZQa5eZkAjx BXqVdHoHdw0PbP5FfHRNonb+OZGmGSqJHeopXrXtfFRnQpfFFd38d/+EhEUPlBiE uSUjJ36XX+sbUlJOKRjlOlVcMdyW7lpv -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:02 2024 by rpki-client on console-fra.rpki-client.org