$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: GgWUdVTpaVAxUOH+002oqDO2PJRzQZ1Y680rbdjIDEw= Subject key identifier: 6B:2E:24:1F:51:9D:79:2B:57:50:BC:55:A5:AF:55:86:B6:FC:20:F2 Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: 1C Signing time: Wed 23 Oct 2024 06:36:52 +0000 Manifest this update: Wed 23 Oct 2024 06:36:52 +0000 Manifest next update: Wed 30 Oct 2024 06:36:52 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: drBeSx8gX2t0ybJcLbkN5dF8P2/j8BcuJZ9wCCvqP4k=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Oct 23 06:36:52 2024 GMT Not After : Oct 30 06:36:52 2024 GMT Subject: CN=67189984-4a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0d:5d:ea:32:ac:2a:f9:13:38:1e:16:42:05: 06:50:d3:84:ad:8c:0d:5e:df:c6:1a:45:81:38:d6: 3a:a3:4b:71:f3:a9:ee:24:dc:fa:1c:fb:fd:3e:1c: 63:e8:34:8b:bf:31:48:6d:06:e9:00:d5:6a:5c:9d: d2:b0:c8:72:0a:48:35:8f:bb:1d:01:84:01:2a:a7: b9:ea:02:38:e8:94:ee:c9:c8:2b:41:c7:4a:4c:65: 1f:e5:70:59:04:06:bc:9d:87:d6:dc:9f:76:ff:4f: 55:e8:d0:52:42:02:13:3d:85:05:c3:39:70:37:12: d3:16:f2:98:36:7d:72:e1:fd:22:24:d4:1d:b7:f2: 35:01:9a:dc:33:e7:b7:4f:35:e6:d4:08:16:33:f6: 28:6a:dc:7e:97:24:ea:8a:ca:c5:ce:7b:cd:d1:fc: b6:2b:be:0f:91:39:6c:8d:6e:92:4f:2a:38:f8:7f: 60:a4:a2:78:da:a7:99:81:ad:3e:82:19:5c:3e:30: 10:36:28:0c:b1:b0:00:1c:f3:7a:6e:ba:21:be:ab: ab:de:e1:48:fc:f9:96:75:1c:db:4a:29:c8:fe:41: 00:9c:8d:13:9f:4f:3c:4a:56:81:35:7e:7d:e7:db: d9:de:f2:3b:53:41:32:a8:8d:fc:fd:fe:c9:0e:49: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2E:24:1F:51:9D:79:2B:57:50:BC:55:A5:AF:55:86:B6:FC:20:F2 X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:26:30:5e:d6:6f:a3:b4:aa:ce:a5:cb:a0:5e:15:d8:6e:85: f8:b6:2b:0e:64:3b:72:f6:44:61:9d:b5:24:09:5c:ab:5f:bb: 20:3e:cf:6f:12:29:82:82:e1:6d:a2:26:62:c6:89:bd:27:b0: 3a:5f:2b:71:0d:46:a3:31:23:c0:41:73:c5:c8:03:91:be:40: f8:92:7e:34:fc:d9:d7:21:bf:f7:e6:fa:bf:79:d6:c6:9d:4b: bf:8d:b2:64:e2:b1:d9:a0:c8:4e:38:4b:4f:c2:79:46:6b:31: ee:3b:e2:aa:bf:b7:9d:54:72:fa:99:5e:9d:7e:03:66:59:9f: 3c:fa:5a:0f:03:0b:c9:1c:51:7c:0c:bd:f6:49:e9:d5:8c:92: aa:0a:3b:63:f8:38:08:13:55:7a:0f:3c:ab:50:21:e8:f9:50: 7f:04:74:70:b6:c6:4e:d1:76:87:2b:50:d9:38:20:de:0f:9c: 8c:14:f6:15:3f:5d:c9:63:8e:fd:e9:12:87:b3:cb:af:4f:4a: 74:91:35:f5:bd:3b:1e:1f:5b:44:42:af:7b:12:39:f0:ec:4a: 01:15:e6:d1:90:29:66:ed:20:c8:b9:32:0f:1e:a4:7a:fb:af: 63:f4:8a:d0:ab:22:da:d2:b9:94:4f:87:04:0b:4e:57:58:2e: 55:4e:6c:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUI4OTExMC8GA1UEBRMoMjI1OUY4NzA5NkU0MEFEQjNDODQxODBFMjhCNTZDM0U4 ODIyRjY1MTAeFw0yNDEwMjMwNjM2NTJaFw0yNDEwMzAwNjM2NTJaMBgxFjAUBgNV BAMTDTY3MTg5OTg0LTRhNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVDV3qMqwq+RM4HhZCBQZQ04StjA1e38YaRYE41jqjS3Hzqe4k3Poc+/0+HGPo NIu/MUhtBukA1WpcndKwyHIKSDWPux0BhAEqp7nqAjjolO7JyCtBx0pMZR/lcFkE Brydh9bcn3b/T1Xo0FJCAhM9hQXDOXA3EtMW8pg2fXLh/SIk1B238jUBmtwz57dP NebUCBYz9ihq3H6XJOqKysXOe83R/LYrvg+ROWyNbpJPKjj4f2Ckonjap5mBrT6C GVw+MBA2KAyxsAAc83puuiG+q6ve4Uj8+ZZ1HNtKKcj+QQCcjROfTzxKVoE1fn3n 29ne8jtTQTKojfz9/skOSTd7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUay4kH1Gd eStXULxVpa9Vhrb8IPIwHwYDVR0jBBgwFoAUIln4cJbkCts8hBgOKLVsPogi9lEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Qjg5LzNBOUM4QTU2NkMx ODExRUZBQjZCNjkwQ0M0RjlBRTAyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTls RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWxuNGNKYmtDdHM4aEJnT0tMVnNQb2dpOWxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Qjg5LzNBOUM4QTU2NkMxODExRUZBQjZCNjkwQ0M0RjlBRTAyL0lsbjRjSmJrQ3Rz OGhCZ09LTFZzUG9naTlsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADomMF7Wb6O0qs6ly6BeFdhuhfi2Kw5kO3L2RGGdtSQJXKtfuyA+z28S KYKC4W2iJmLGib0nsDpfK3ENRqMxI8BBc8XIA5G+QPiSfjT82dchv/fm+r951sad S7+NsmTisdmgyE44S0/CeUZrMe474qq/t51UcvqZXp1+A2ZZnzz6Wg8DC8kcUXwM vfZJ6dWMkqoKO2P4OAgTVXoPPKtQIej5UH8EdHC2xk7RdocrUNk4IN4PnIwU9hU/ Xcljjv3pEoezy69PSnSRNfW9Ox4fW0RCr3sSOfDsSgEV5tGQKWbtIMi5Mg8epHr7 r2P0itCrItrSuZRPhwQLTldYLlVObEM= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:27 2024 by rpki-client on console-fra.rpki-client.org