$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: 0iIZRfsmJ1rkZxHoUCTDVY1buLupioJS8qbhkj8hIxg= Subject key identifier: D6:BA:67:1E:F4:49:8F:A0:7B:68:CB:E0:F5:BB:A5:4C:B1:D4:60:0E Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: 2B Signing time: Thu 21 Nov 2024 05:48:48 +0000 Manifest this update: Thu 21 Nov 2024 05:48:48 +0000 Manifest next update: Thu 28 Nov 2024 05:48:47 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: nCHszNIK+9VTHq0YvmAC+eU5ayb/TJavAoqUVngr4Uk=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Nov 21 05:48:48 2024 GMT Not After : Nov 28 05:48:47 2024 GMT Subject: CN=673ec9c0-5ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:d0:2c:fb:c9:69:5a:d9:b0:2b:66:ba:b7: ca:93:eb:21:d6:8a:b5:27:c0:74:c2:d5:fa:23:e8: f2:d0:4c:25:8e:f2:6b:4e:1a:e4:69:ac:f7:83:a3: 58:3a:51:4e:b5:fc:64:46:60:75:e6:0a:36:59:e6: 00:b6:34:5f:a5:b4:59:c9:48:3b:3b:61:51:eb:53: 5f:70:5a:7d:b7:b7:6b:8c:33:8d:65:6b:b4:d8:54: 36:fe:73:04:3d:e9:20:b3:0a:7e:94:e7:51:13:ef: c4:2c:d9:36:53:56:28:a5:76:ac:f9:47:7f:05:55: 6a:0b:fe:08:f0:4a:83:5b:41:4b:86:d2:f9:bd:12: 25:28:b0:ac:a1:fc:64:c3:19:c8:27:81:c0:e4:e9: 10:fc:11:ed:99:e6:8f:04:25:6f:68:5b:c3:d2:30: 60:f3:b2:8a:23:db:6b:f0:92:34:0a:d3:69:cc:a1: 8c:49:2e:8f:ea:5a:6d:72:a5:fc:c3:04:0b:ab:c7: 45:91:46:c8:7b:e9:88:c0:70:3e:9e:4f:62:e4:87: 78:e3:2a:bd:b0:85:28:41:09:ae:11:cf:54:63:cb: 6d:b4:0e:8c:9f:6c:55:85:96:ba:0b:9c:02:ee:93: 42:55:17:0b:dd:45:e5:35:51:7b:ce:de:b3:e0:36: 03:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BA:67:1E:F4:49:8F:A0:7B:68:CB:E0:F5:BB:A5:4C:B1:D4:60:0E X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b6:00:b4:67:60:c1:83:9a:f7:96:8c:72:9a:2e:29:8d:3a: 28:96:55:2f:e7:0c:41:8c:11:68:a4:fe:a5:24:10:b7:3b:39: ef:86:da:48:b9:e9:a3:b0:69:d3:52:77:e6:b3:9d:16:fb:3a: 0a:76:05:c4:59:a2:c8:44:51:7a:c7:92:27:44:dd:b7:9b:27: 63:e6:d2:01:df:f0:a9:46:27:ed:d7:23:3c:dd:ba:ad:1d:66: 62:9b:99:47:a8:ad:81:31:4b:de:41:2f:82:9b:4c:f8:ca:9b: fa:dd:a6:d4:e2:da:8f:bb:3d:ad:2f:ae:40:3e:1b:f3:86:f4: 4a:03:e3:1a:0a:2e:cb:ea:3c:b1:bf:4f:ae:2e:62:e4:a9:f3: 5c:c8:af:b2:2d:ab:c7:cd:2e:b9:70:aa:a0:ba:d8:e3:bb:b6: cf:9c:59:21:3c:cc:72:d8:b2:a4:93:87:22:33:f2:75:90:82: b7:a9:1a:f5:6e:48:42:76:1a:bf:f0:39:41:0a:4c:c2:39:3d: 42:89:75:56:52:c4:36:ff:d2:d6:ea:c1:17:19:91:cd:29:0a: 10:7d:48:76:27:d9:7b:24:40:3e:70:07:6b:f0:20:63:46:f0: e9:1a:ed:6e:a1:76:fc:41:90:36:da:05:7e:c4:3f:f2:5f:6b: 51:cd:e9:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUI4OTExMC8GA1UEBRMoMjI1OUY4NzA5NkU0MEFEQjNDODQxODBFMjhCNTZDM0U4 ODIyRjY1MTAeFw0yNDExMjEwNTQ4NDhaFw0yNDExMjgwNTQ4NDdaMBgxFjAUBgNV BAMTDTY3M2VjOWMwLTVhZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/hNAs+8lpWtmwK2a6t8qT6yHWirUnwHTC1foj6PLQTCWO8mtOGuRprPeDo1g6 UU61/GRGYHXmCjZZ5gC2NF+ltFnJSDs7YVHrU19wWn23t2uMM41la7TYVDb+cwQ9 6SCzCn6U51ET78Qs2TZTViildqz5R38FVWoL/gjwSoNbQUuG0vm9EiUosKyh/GTD GcgngcDk6RD8Ee2Z5o8EJW9oW8PSMGDzsooj22vwkjQK02nMoYxJLo/qWm1ypfzD BAurx0WRRsh76YjAcD6eT2Lkh3jjKr2whShBCa4Rz1Rjy220DoyfbFWFlroLnALu k0JVFwvdReU1UXvO3rPgNgMbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1rpnHvRJ j6B7aMvg9bulTLHUYA4wHwYDVR0jBBgwFoAUIln4cJbkCts8hBgOKLVsPogi9lEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Qjg5LzNBOUM4QTU2NkMx ODExRUZBQjZCNjkwQ0M0RjlBRTAyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTls RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWxuNGNKYmtDdHM4aEJnT0tMVnNQb2dpOWxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Qjg5LzNBOUM4QTU2NkMxODExRUZBQjZCNjkwQ0M0RjlBRTAyL0lsbjRjSmJrQ3Rz OGhCZ09LTFZzUG9naTlsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIy2ALRnYMGDmveWjHKaLimNOiiWVS/nDEGMEWik/qUkELc7Oe+G2ki5 6aOwadNSd+aznRb7Ogp2BcRZoshEUXrHkidE3bebJ2Pm0gHf8KlGJ+3XIzzduq0d ZmKbmUeorYExS95BL4KbTPjKm/rdptTi2o+7Pa0vrkA+G/OG9EoD4xoKLsvqPLG/ T64uYuSp81zIr7Itq8fNLrlwqqC62OO7ts+cWSE8zHLYsqSThyIz8nWQgrepGvVu SEJ2Gr/wOUEKTMI5PUKJdVZSxDb/0tbqwRcZkc0pChB9SHYn2XskQD5wB2vwIGNG 8Oka7W6hdvxBkDbaBX7EP/Jfa1HN6ag= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:39 2024 by rpki-client on console-ams.rpki-client.org