$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: 01EkBDYpxY7Ghs8E9JVXu4TK47VENEjydJ2cmqCcgL0= Subject key identifier: E5:44:E1:D5:92:40:09:F0:C5:DA:7A:4A:E0:47:73:E2:48:79:86:0A Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1C75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1C64 Signing time: Fri 22 Nov 2024 16:11:49 +0000 Manifest this update: Fri 22 Nov 2024 16:11:48 +0000 Manifest next update: Fri 29 Nov 2024 16:11:48 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: 70IMRPMD46eVmVj8Az5DyxIOhMax0QdHaavMbANijos=) 2: EB7012446FDE11E9AF945067C4F9AE02.roa (hash: vQD4PYQAa5MZI60m/m75p1m8bjgTwcTg+2u9kN05meI=) 3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: DxvDXpmcdz1MzgXK4Tqja4O0aeUes4QTXJJibehUHAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7285 (0x1c75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Nov 22 16:11:48 2024 GMT Not After : Nov 29 16:11:48 2024 GMT Subject: CN=6740ad45-f1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:94:2b:41:aa:00:e4:6e:f4:c2:00:76:6d: 50:88:2e:0f:df:30:e6:1d:50:99:ab:7a:91:b2:95: bb:94:99:f3:d6:2d:0b:09:e1:9d:3c:4e:d8:df:d6: 59:41:22:3a:64:78:59:5c:dd:01:9b:1b:da:7d:c5: cc:de:a8:59:fa:22:60:33:c7:e4:14:b4:e6:c8:c6: fd:fd:7e:73:3b:f3:61:86:ae:2f:16:d7:dc:0c:61: 55:82:33:da:cf:ab:96:10:c9:4f:bb:a5:60:ad:fd: b7:95:a2:4d:ae:c3:fe:ac:f5:b1:99:50:13:97:80: f6:16:df:56:d8:b8:0c:3c:45:12:d8:8f:52:42:1d: 71:96:66:f3:2b:5e:85:aa:a3:14:94:f9:3d:90:3d: 56:91:4b:ad:9a:87:73:41:4c:d6:7d:55:89:20:da: f2:be:96:1a:17:65:b8:77:52:fe:73:26:78:f4:d2: d5:d8:e7:ec:40:17:0e:bb:c5:d7:c4:65:97:44:18: 7a:29:96:c5:7a:e8:c3:70:f2:99:f1:55:d2:ef:d3: e2:89:68:73:16:6f:67:ac:54:b9:f0:df:9a:ec:ee: 8d:40:18:76:e3:b6:aa:95:01:c8:00:0f:86:67:31: 72:67:c2:83:c9:5a:e3:59:7d:de:42:76:5d:e7:17: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:44:E1:D5:92:40:09:F0:C5:DA:7A:4A:E0:47:73:E2:48:79:86:0A X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:90:63:58:55:e6:76:6d:1f:8c:fe:b0:ec:e9:12:32:42:f6: bc:1d:01:8d:c3:78:de:39:2f:0d:71:bf:b8:32:fa:92:cb:49: b9:14:b0:85:f5:aa:4e:fd:01:5e:6c:9c:bb:9b:89:14:00:33: 4a:60:7c:86:9e:b3:63:e8:a7:a7:af:64:11:15:c1:82:68:9c: 1d:10:25:0b:14:89:d7:ef:a9:3d:7f:28:26:35:6f:01:0b:bc: 40:d6:ed:e1:ed:d1:ae:aa:0a:61:90:b8:3e:2c:65:fd:26:37: 9d:1a:98:f1:d4:97:07:82:1c:75:8c:34:ce:82:37:26:e4:1a: c4:b0:57:df:9d:f4:f4:73:71:2d:51:07:18:34:f3:c3:1e:e2: 42:29:76:c0:d0:39:c5:c1:a6:b4:bb:d0:ba:7d:e8:c4:fc:c8: b4:10:41:61:e9:22:27:6d:e1:7b:7a:04:3b:ed:17:a4:f0:c8: ac:3e:4e:c5:8e:b2:6b:26:01:02:fc:3d:49:d6:9e:d9:78:89: b8:23:78:51:a3:d0:9d:ee:da:cb:dc:87:4d:0b:b6:83:79:ee: cc:96:31:5d:e5:99:ae:3d:ca:cb:02:34:ff:0b:60:5c:e0:f1: 43:31:c6:3d:8c:f5:c8:b5:eb:07:80:3f:c3:52:c5:61:cd:22: 9a:9a:b1:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjQxMTIyMTYxMTQ4WhcNMjQxMTI5MTYxMTQ4WjAYMRYwFAYD VQQDEw02NzQwYWQ0NS1mMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVOUK0GqAORu9MIAdm1QiC4P3zDmHVCZq3qRspW7lJnz1i0LCeGdPE7Y39ZZ QSI6ZHhZXN0BmxvafcXM3qhZ+iJgM8fkFLTmyMb9/X5zO/Nhhq4vFtfcDGFVgjPa z6uWEMlPu6Vgrf23laJNrsP+rPWxmVATl4D2Ft9W2LgMPEUS2I9SQh1xlmbzK16F qqMUlPk9kD1WkUutmodzQUzWfVWJINryvpYaF2W4d1L+cyZ49NLV2OfsQBcOu8XX xGWXRBh6KZbFeujDcPKZ8VXS79PiiWhzFm9nrFS58N+a7O6NQBh247aqlQHIAA+G ZzFyZ8KDyVrjWX3eQnZd5xdAXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVE4dWS QAnwxdp6SuBHc+JIeYYKMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEkGNYVeZ2bR+M/rDs6RIyQva8HQGNw3jeOS8Ncb+4MvqSy0m5FLCF 9apO/QFebJy7m4kUADNKYHyGnrNj6Kenr2QRFcGCaJwdECULFInX76k9fygmNW8B C7xA1u3h7dGuqgphkLg+LGX9JjedGpjx1JcHghx1jDTOgjcm5BrEsFffnfT0c3Et UQcYNPPDHuJCKXbA0DnFwaa0u9C6fejE/Mi0EEFh6SInbeF7egQ77Rek8MisPk7F jrJrJgEC/D1J1p7ZeIm4I3hRo9Cd7trL3IdNC7aDee7MljFd5ZmuPcrLAjT/C2Bc 4PFDMcY9jPXItesHgD/DUsVhzSKamrH4 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:23 2024 by rpki-client on console-ams.rpki-client.org