$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: fMtAzcbkJBagdU9Wg8JEtAPmtuq4tDcgAQuWBeDcdXw= Subject key identifier: A8:AC:29:7C:C5:B2:9F:1D:46:86:92:30:BB:2A:5B:EE:09:77:9A:D2 Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: 06 Signing time: Thu 21 Nov 2024 06:16:28 +0000 Manifest this update: Thu 21 Nov 2024 06:16:28 +0000 Manifest next update: Thu 28 Nov 2024 06:16:28 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: CnGQRA6fhGFbxFg2qkVO6NHX9oMoHezzu1WBHyFFjMk=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: Nov 21 06:16:28 2024 GMT Not After : Nov 28 06:16:28 2024 GMT Subject: CN=673ed03c-980e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:2d:80:aa:6e:a7:7b:d5:f5:ef:a1:5f:81: e3:ea:3d:3c:d3:3e:ba:d4:44:80:7c:0c:a6:f8:56: 29:d0:4a:a8:b1:c9:70:12:f1:4a:0f:92:c6:68:50: cf:c8:5d:3f:a6:8d:5b:6c:82:69:36:9a:de:81:26: d0:ba:39:af:8e:3c:fd:44:9c:3b:a5:3d:1b:f4:65: 22:f6:d0:c9:a6:c2:ac:49:02:df:e7:c7:fe:eb:20: 1d:d5:75:0b:8e:93:33:04:53:b1:6a:84:61:29:42: 7e:fc:30:53:89:b8:4e:ca:98:68:c6:b0:81:0f:03: 6b:db:6d:e6:e2:d8:af:dd:40:f5:76:9d:c2:3f:57: e5:61:72:bd:ba:f5:ed:2e:97:cf:06:6c:81:c9:e1: f6:ba:4b:d2:02:0e:9a:84:d8:cb:31:7e:f5:7a:0e: d0:ff:54:8e:25:89:d9:2c:a2:d7:a3:0a:cc:5d:f7: ec:68:25:35:17:99:0c:79:15:9a:d6:4e:e7:f1:b3: 1a:0e:1a:74:c9:54:0e:ea:f4:96:0e:76:04:7c:cd: 84:58:93:ff:5b:36:6a:0c:ae:db:da:14:ec:f3:9c: 0e:17:50:67:17:50:97:52:95:fd:d4:6d:ac:55:f1: 28:7a:1a:b4:fe:87:15:6a:97:b1:29:71:f5:35:70: d2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:29:7C:C5:B2:9F:1D:46:86:92:30:BB:2A:5B:EE:09:77:9A:D2 X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4b:a3:c2:ab:f5:da:5b:1b:8e:17:d3:b2:0c:d3:f8:66:fe: 9b:7e:9e:6e:c2:fb:28:da:b9:11:68:89:0e:72:4d:a1:dc:e1: 6f:ed:28:2b:6a:b9:76:e5:cb:1c:74:c6:11:16:95:93:d4:ab: e2:c0:68:dc:16:d4:3f:a5:a4:e1:45:6f:a1:a4:3f:98:54:79: ed:1a:45:f0:22:8b:75:b9:1a:59:1e:b6:de:cd:69:85:d7:96: d9:96:e3:d0:8b:2f:e4:50:3e:cf:73:4f:22:b4:5e:05:c5:19: 4b:cb:38:de:c8:40:9d:a3:66:07:a1:50:e4:70:ab:5d:2e:38: a2:af:7c:92:ff:ff:e8:74:c3:46:9e:80:d1:bb:fa:47:42:44: ac:82:de:a7:fe:e3:29:cb:6c:ee:d0:2d:d5:d9:d1:ad:94:ef: 05:69:34:3a:90:1e:f2:b1:ae:4f:a9:c4:d9:cb:f3:73:e8:ab: d0:fd:10:67:39:bd:ef:e7:6b:0f:0a:aa:85:07:11:dc:ca:da: 9a:10:a9:9b:84:de:c1:85:2c:ab:54:3c:b4:62:70:f5:df:d5: 68:7d:7b:0a:e1:d6:e3:6c:ae:45:df:96:5b:e5:ca:31:28:26: 01:19:8a:a3:23:2d:57:5f:15:f9:7d:4d:49:ac:56:fa:0d:f2: 07:a3:86:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoMjEwOTQ2Q0RBOURFNzVERUY5NjA5ODk1RkJGMjFFRDg0 QzcyRjRFNzAeFw0yNDExMjEwNjE2MjhaFw0yNDExMjgwNjE2MjhaMBgxFjAUBgNV BAMTDTY3M2VkMDNjLTk4MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnqi2Aqm6ne9X176FfgePqPTzTPrrURIB8DKb4VinQSqixyXAS8UoPksZoUM/I XT+mjVtsgmk2mt6BJtC6Oa+OPP1EnDulPRv0ZSL20MmmwqxJAt/nx/7rIB3VdQuO kzMEU7FqhGEpQn78MFOJuE7KmGjGsIEPA2vbbebi2K/dQPV2ncI/V+Vhcr269e0u l88GbIHJ4fa6S9ICDpqE2MsxfvV6DtD/VI4lidksotejCsxd9+xoJTUXmQx5FZrW TufxsxoOGnTJVA7q9JYOdgR8zYRYk/9bNmoMrtvaFOzznA4XUGcXUJdSlf3UbaxV 8Sh6GrT+hxVql7EpcfU1cNLHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqKwpfMWy nx1GhpIwuypb7gl3mtIwHwYDVR0jBBgwFoAUIQlGzanedd75YJiV+/Ie2Exy9Ocw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3Lzg3REQ1NDhDQTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlP Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVFsR3phbmVkZDc1WUppVi1fSWUyRXh5OU9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTM3Lzg3REQ1NDhDQTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyL0lRbEd6YW5lZGQ3 NVlKaVYtX0llMkV4eTlPYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEpLo8Kr9dpbG44X07IM0/hm/pt+nm7C+yjauRFoiQ5yTaHc4W/tKCtq uXblyxx0xhEWlZPUq+LAaNwW1D+lpOFFb6GkP5hUee0aRfAii3W5Glkett7NaYXX ltmW49CLL+RQPs9zTyK0XgXFGUvLON7IQJ2jZgehUORwq10uOKKvfJL//+h0w0ae gNG7+kdCRKyC3qf+4ynLbO7QLdXZ0a2U7wVpNDqQHvKxrk+pxNnL83Poq9D9EGc5 ve/naw8KqoUHEdzK2poQqZuE3sGFLKtUPLRicPXf1Wh9ewrh1uNsrkXfllvlyjEo JgEZiqMjLVdfFfl9TUmsVvoN8gejhiA= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:40 2024 by rpki-client on console-ams.rpki-client.org