$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json) Hash identifier: qImiApFBYSP3kixI6ZfJ+Bn3R+2Gm8BuBJBPSXoQGAk= Subject key identifier: E9:1D:66:62:4F:97:1E:18:F0:B4:17:33:5F:AE:4A:49:38:E9:37:82 Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft Manifest number: 0479 Signing time: Sat 23 Nov 2024 00:31:50 +0000 Manifest this update: Sat 23 Nov 2024 00:31:49 +0000 Manifest next update: Sat 30 Nov 2024 00:31:49 +0000 Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: IShDvvs23czfC+b7En8DVhOzepPbFl5Fubg/5avixHw=) 2: AB292A3C96B011EF8A9EC651C4F9AE02.roa (hash: eUzKOnzodRDzVFKWz6xcp7yYmMqJ1ARfEQqiiBmISOA=) 3: CD56EE84A1B711EFB6A2A32DC4F9AE02.roa (hash: e0DDB57Y7SGC8rWc3Ozg+WzxMnyr3TW/EsNdoBakZnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Validity Not Before: Nov 23 00:31:49 2024 GMT Not After : Nov 30 00:31:49 2024 GMT Subject: CN=67412275-a36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:53:4e:ed:cd:32:5a:17:36:6e:d5:7c:76: d0:3c:70:29:ba:41:ab:ce:43:ee:5b:0d:b9:80:03: 38:30:ce:07:83:01:cf:ac:1b:e8:a3:45:e2:80:a4: bd:01:7e:ba:00:32:af:29:4a:d5:69:e6:b0:43:89: 0a:93:79:ed:07:ff:65:cc:19:09:93:ab:d7:6c:74: c6:b5:5d:87:f1:6e:13:68:39:ac:d8:37:33:00:06: 99:45:34:c2:11:3c:2e:e2:ab:d0:7c:b2:d2:cf:01: 29:10:26:bf:60:25:f8:51:cb:8c:63:1f:34:d9:4b: 31:c1:ad:78:65:f1:32:23:98:63:e1:62:e1:c8:23: 01:c2:bf:20:04:00:cb:e0:14:c2:a5:ff:c0:b0:71: 95:ce:62:0c:97:f1:5a:4d:be:33:3d:32:08:b3:26: 66:5d:43:97:e6:ba:4c:cb:7a:08:ad:5a:fb:2b:17: af:2e:15:3a:3c:73:a3:0d:d5:bf:8e:b3:11:b5:ef: 0e:ae:1f:86:86:67:e6:3b:6b:ad:3e:7a:79:96:de: 76:31:f7:72:d8:be:f1:84:a0:c1:46:95:75:6d:d5: 74:e2:c2:1a:99:3c:ea:b3:0c:6e:b3:ba:b2:1e:1e: b3:bb:04:f0:6a:e6:3c:1a:9d:30:4f:01:2f:6c:3d: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:66:62:4F:97:1E:18:F0:B4:17:33:5F:AE:4A:49:38:E9:37:82 X509v3 Authority Key Identifier: keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b1:3a:d9:35:98:da:49:21:ca:a8:5b:1f:72:9b:d9:8f:72: 20:fa:24:bc:13:d7:68:4f:ba:2b:cd:55:96:05:4f:58:1e:a5: e0:0f:f1:7c:60:79:bc:c1:d1:15:1a:23:6e:fd:d7:b3:81:06: b9:b5:81:74:ff:4e:e6:93:df:3c:ff:a9:fc:a4:17:2a:8c:82: 8e:00:40:f2:21:ce:84:86:f0:2b:e0:71:e6:5e:4d:0c:f2:29: 61:d4:8a:ca:79:bb:5a:f9:52:b0:dc:c1:7c:ab:d2:76:91:12: e3:05:04:8c:80:d6:78:28:05:3a:34:4a:e6:30:ef:9e:0a:14: 1e:ac:ff:b1:c5:e3:85:5c:5a:1d:46:4f:df:d8:ba:5b:72:43: cf:f3:73:52:db:46:a1:f3:1f:31:3b:c3:d9:32:9d:6f:0b:fc: 9a:bd:79:42:34:7a:cc:0a:1b:a2:d6:a2:25:ef:05:88:70:32: c2:d6:d1:d0:47:b3:93:e8:ff:07:b2:ef:9b:af:6d:b9:7d:48: ec:d6:ac:2a:b3:0f:09:77:ad:ff:be:45:66:3e:a6:39:e3:a1: e3:c5:9a:67:42:3d:f4:c5:eb:86:84:83:c6:82:1c:70:0e:21: ca:20:97:92:e2:d8:e6:d3:25:7e:63:94:69:4b:49:1a:ca:aa: f7:66:90:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKDIwRUQwQUFCMjA3NTBCOEIyN0E4NkRGOTg5QTc1NEJG NTcyNkREN0UwHhcNMjQxMTIzMDAzMTQ5WhcNMjQxMTMwMDAzMTQ5WjAYMRYwFAYD VQQDEw02NzQxMjI3NS1hMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL1TTu3NMloXNm7VfHbQPHApukGrzkPuWw25gAM4MM4HgwHPrBvoo0XigKS9 AX66ADKvKUrVaeawQ4kKk3ntB/9lzBkJk6vXbHTGtV2H8W4TaDms2DczAAaZRTTC ETwu4qvQfLLSzwEpECa/YCX4UcuMYx802Usxwa14ZfEyI5hj4WLhyCMBwr8gBADL 4BTCpf/AsHGVzmIMl/FaTb4zPTIIsyZmXUOX5rpMy3oIrVr7KxevLhU6PHOjDdW/ jrMRte8Orh+GhmfmO2utPnp5lt52Mfdy2L7xhKDBRpV1bdV04sIamTzqswxus7qy Hh6zuwTwauY8Gp0wTwEvbD1PbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkdZmJP lx4Y8LQXM1+uSkk46TeCMB8GA1UdIwQYMBaAFCDtCqsgdQuLJ6ht+YmnVL9XJt1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0c25xRzM1aWFkVXYxY20z WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lPMEtxeUIxQzRzbnFHMzVpYWRVdjFjbTNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0 c25xRzM1aWFkVXYxY20zWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTsTrZNZjaSSHKqFsfcpvZj3Ig+iS8E9doT7orzVWWBU9YHqXgD/F8 YHm8wdEVGiNu/dezgQa5tYF0/07mk988/6n8pBcqjIKOAEDyIc6EhvAr4HHmXk0M 8ilh1IrKebta+VKw3MF8q9J2kRLjBQSMgNZ4KAU6NErmMO+eChQerP+xxeOFXFod Rk/f2LpbckPP83NS20ah8x8xO8PZMp1vC/yavXlCNHrMChui1qIl7wWIcDLC1tHQ R7OT6P8Hsu+br225fUjs1qwqsw8Jd63/vkVmPqY546HjxZpnQj30xeuGhIPGghxw DiHKIJeS4tjm0yV+Y5RpS0kayqr3ZpAS -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org