$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json) Hash identifier: mt6ifAuPzTW4N9h3R/+3O7z5dSm6CHDf9mOyOgdeeF0= Subject key identifier: 71:07:2B:59:F2:ED:DC:04:CA:E4:70:6C:28:0E:F9:85:06:4E:FE:A0 Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft Manifest number: 0642 Signing time: Sat 18 May 2024 23:41:27 +0000 Manifest this update: Sat 18 May 2024 23:41:27 +0000 Manifest next update: Sat 25 May 2024 23:41:27 +0000 Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: qaY7izqSRxVQpK9lCnVPixs8EUlKDvx7I6V0ATtnLLQ=) 2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: 3kD8w6kxSxV6XYWFlWj1NaSUIuuzPrI6iUcel7na0eY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Validity Not Before: May 18 23:41:27 2024 GMT Not After : May 25 23:41:27 2024 GMT Subject: CN=66493ca7-069b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:30:bf:21:84:1d:3e:01:b0:b1:e1:0b:89: be:cf:80:50:ed:76:aa:29:ca:f0:d6:1f:70:0e:e1: e2:b7:6a:8b:e9:cd:bf:de:cb:3e:86:6c:39:83:67: 2c:24:da:01:8d:3d:12:64:e1:1c:7e:9d:eb:34:1d: 26:a7:bf:d4:52:35:f6:a8:30:25:bc:10:06:73:6f: 4d:aa:0e:d1:10:73:73:3b:b9:3b:00:7a:ac:c0:13: fc:42:85:80:fe:ce:bb:df:d3:d1:35:ec:46:7f:2a: 63:d5:cb:9d:00:eb:c7:04:da:48:9a:12:a4:c8:c8: 84:6f:d7:2e:62:97:5c:1e:e0:d6:bb:de:06:55:a2: dc:55:34:e4:01:ca:66:bc:46:45:8f:90:8e:7f:6e: 12:b8:a7:b0:1d:38:fb:f9:54:fb:61:7e:f6:a1:49: 6c:17:8f:db:0a:cb:88:ed:52:d2:8d:ac:91:12:6c: 94:a4:02:0a:e6:4a:87:ef:ad:99:94:b6:e2:c1:53: c9:a7:37:5c:a8:d0:cc:8d:f0:88:38:9c:e5:f1:42: 7d:d1:b7:c7:5e:d6:c7:31:11:31:17:91:1c:48:0d: 04:14:9a:4c:d3:94:38:d3:af:c3:c9:3a:30:09:b8: b4:f7:aa:61:25:ff:85:24:79:ec:b0:98:fa:3c:86: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:07:2B:59:F2:ED:DC:04:CA:E4:70:6C:28:0E:F9:85:06:4E:FE:A0 X509v3 Authority Key Identifier: keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:93:2c:3a:15:48:ec:73:8c:96:44:4f:62:3b:87:23:23:cd: 99:df:6e:0f:1f:14:e5:4d:6f:87:06:e0:6f:c5:ca:08:45:d6: 5d:b3:15:56:ca:f7:7a:eb:75:c0:fc:4a:7a:d9:64:f1:07:6a: ee:ca:11:6d:b2:d5:1e:f3:7e:18:22:de:5c:c5:f5:8d:c5:45: 6e:e5:48:6b:dd:5b:14:39:d1:1f:48:46:4c:fa:2f:08:ca:ec: 79:8d:f1:eb:25:17:fa:82:bf:98:70:4a:5b:6a:3a:9a:d3:fd: cd:29:3c:6c:6d:10:8b:ee:62:d2:19:e8:f4:12:43:29:94:88: 21:25:45:c8:cc:a6:bb:57:55:2f:da:bf:5e:44:ba:99:21:ec: 78:d5:62:d6:9b:77:09:4d:62:ab:40:b6:a4:be:ff:37:8d:93: 7c:cf:27:95:29:59:13:22:7d:b9:fa:bd:3b:84:1d:d8:1b:07: 13:11:06:1c:6a:d7:34:4c:fe:8c:dd:dc:6a:63:40:79:d7:8a: 11:8f:a2:16:b0:47:f5:99:0b:31:b2:3b:39:90:f3:e4:a1:7d: 3d:5a:7d:4a:7d:17:7e:e7:73:d9:4a:46:ae:10:94:5f:84:53: de:23:e2:bb:3a:1a:37:55:3a:11:66:df:d6:42:47:f7:17:0b: 48:b0:d6:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD OEJDMDkxOUUwHhcNMjQwNTE4MjM0MTI3WhcNMjQwNTI1MjM0MTI3WjAYMRYwFAYD VQQDEw02NjQ5M2NhNy0wNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EswvyGEHT4BsLHhC4m+z4BQ7XaqKcrw1h9wDuHit2qL6c2/3ss+hmw5g2cs JNoBjT0SZOEcfp3rNB0mp7/UUjX2qDAlvBAGc29Nqg7REHNzO7k7AHqswBP8QoWA /s6739PRNexGfypj1cudAOvHBNpImhKkyMiEb9cuYpdcHuDWu94GVaLcVTTkAcpm vEZFj5COf24SuKewHTj7+VT7YX72oUlsF4/bCsuI7VLSjayREmyUpAIK5kqH762Z lLbiwVPJpzdcqNDMjfCIOJzl8UJ90bfHXtbHMRExF5EcSA0EFJpM05Q406/DyTow Cbi096phJf+FJHnssJj6PIbdhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEHK1ny 7dwEyuRwbCgO+YUGTv6gMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC8zOURDRjc1NDQyRjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3Qz OEpHdzA0NjhHV2ZJdkFrWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQkyw6FUjsc4yWRE9iO4cjI82Z324PHxTlTW+HBuBvxcoIRdZdsxVW yvd663XA/Ep62WTxB2ruyhFtstUe834YIt5cxfWNxUVu5Uhr3VsUOdEfSEZM+i8I yux5jfHrJRf6gr+YcEpbajqa0/3NKTxsbRCL7mLSGej0EkMplIghJUXIzKa7V1Uv 2r9eRLqZIex41WLWm3cJTWKrQLakvv83jZN8zyeVKVkTIn25+r07hB3YGwcTEQYc atc0TP6M3dxqY0B514oRj6IWsEf1mQsxsjs5kPPkoX09Wn1KfRd+53PZSkauEJRf hFPeI+K7Oho3VToRZt/WQkf3FwtIsNbn -----END CERTIFICATE-----Generated at Sun May 19 00:59:40 2024 by rpki-client on console-fra.rpki-client.org