$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft File: i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft (raw, json) Hash identifier: LhA51fVPuVvfD8YWXkH/Wh0GS/Di9PTmjUj5inCrEDg= Subject key identifier: 80:B9:34:83:7F:9A:21:DF:51:73:44:55:ED:F9:7A:74:2D:4C:9E:45 Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft Manifest number: 47 Signing time: Sun 19 May 2024 08:02:59 +0000 Manifest this update: Sun 19 May 2024 08:02:58 +0000 Manifest next update: Sun 26 May 2024 08:02:58 +0000 Files and hashes: 1: i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl (hash: JFe5IAh87RhQ1+cGsx0FUUNcFMLwgJjH0vVO4gbeBzc=) 2: 2601A296AE1011EE92B7161BC4F9AE02.roa (hash: Q9BAL6epupu20AGfMtifky/Z08LCKLMPntK7hc+eQCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Validity Not Before: May 19 08:02:58 2024 GMT Not After : May 26 08:02:58 2024 GMT Subject: CN=6649b233-2167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:ab:e9:d2:d9:43:c2:8d:b3:7f:c1:d9:09: fa:5f:c9:c1:84:ef:c9:7c:66:c3:3e:19:a3:02:a5: 07:e8:a4:2b:25:5a:1a:4e:3e:69:52:39:02:2e:1f: a9:5d:97:09:fb:57:a4:18:23:e7:04:c6:bf:bb:4b: 41:06:8e:13:a2:67:b2:c3:bc:5b:67:7a:ae:c1:37: a4:cd:08:28:eb:e8:71:af:1c:6a:cc:89:d4:ae:0b: 87:9c:82:8e:d1:c7:de:52:c2:84:7d:91:c0:a0:f5: 4a:96:80:df:f0:21:37:00:33:cc:a2:0f:1a:11:e8: 4f:6a:dc:8a:eb:d6:f7:4b:a6:d7:18:e1:87:70:d8: 9a:a8:bc:7a:63:b4:c4:35:67:1b:6c:02:3a:ca:30: e0:33:e6:ee:4f:a2:2f:4d:58:05:48:0a:13:5e:aa: 81:47:0f:3d:06:e6:e5:38:01:55:36:28:f2:ce:1c: ac:62:03:2e:19:ff:d9:f0:77:b5:7b:99:2d:97:c3: 7b:fc:e7:ce:a5:b8:e3:9a:1b:a1:2f:a4:c4:85:bd: f8:0d:a8:fd:7e:58:92:45:0d:85:9d:71:97:fe:48: 04:9a:3e:02:b5:2e:c5:6c:00:bc:a1:84:73:e7:86: 6e:d4:8e:3a:f2:60:17:87:d5:34:7b:e8:03:7b:d7: 89:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B9:34:83:7F:9A:21:DF:51:73:44:55:ED:F9:7A:74:2D:4C:9E:45 X509v3 Authority Key Identifier: keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:d7:94:df:d0:b0:c6:9a:2c:e1:31:f4:c7:99:1a:0b:e8:a8: 51:45:ec:5e:ec:b2:17:80:dd:43:5a:f5:78:f4:6a:5e:e6:99: 7d:ac:34:79:af:fb:08:60:80:21:ef:67:d5:30:5e:27:cc:33: 38:5e:59:02:13:a6:bf:e6:51:95:fa:f7:b7:e2:54:9b:8e:f9: c0:3c:85:46:25:34:63:49:71:83:34:eb:3c:8b:63:d1:71:cb: d4:20:4e:83:24:d0:1d:a1:97:fd:ed:f9:e5:27:27:e2:af:56: d3:e4:b6:4b:fe:7c:7a:cb:fd:e9:ce:9a:95:d4:7b:aa:03:37: 58:68:36:e2:c4:a5:c7:68:dd:bf:18:56:70:a1:d5:60:80:77: b6:06:58:17:19:71:2d:48:5f:70:d1:55:7d:06:08:81:62:a4: 2c:10:09:5c:dc:73:d2:69:05:09:e2:e6:60:d9:f0:ee:a6:7e: 18:be:30:5e:2f:e0:0b:a6:6a:67:e7:cf:f7:a2:7b:13:08:92: fb:4a:25:56:f9:36:8e:72:f5:f4:82:58:e9:03:65:cf:45:1e: d1:c8:89:2a:6e:93:9d:0a:3d:c9:cf:16:38:d3:3d:d5:cc:c6: 4d:e4:55:fe:3e:a1:f3:13:3d:74:b5:2e:10:ce:2a:16:ee:23: c2:26:e6:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkU2ODExMC8GA1UEBRMoOEJBOTRFMjQ0Qzg3MDNFMkUyMTI0NTZCOTg3MUIzQzgy RDUwNzA5QzAeFw0yNDA1MTkwODAyNThaFw0yNDA1MjYwODAyNThaMBgxFjAUBgNV BAMTDTY2NDliMjMzLTIxNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Sqvp0tlDwo2zf8HZCfpfycGE78l8ZsM+GaMCpQfopCslWhpOPmlSOQIuH6ld lwn7V6QYI+cExr+7S0EGjhOiZ7LDvFtneq7BN6TNCCjr6HGvHGrMidSuC4ecgo7R x95SwoR9kcCg9UqWgN/wITcAM8yiDxoR6E9q3Irr1vdLptcY4Ydw2JqovHpjtMQ1 ZxtsAjrKMOAz5u5Poi9NWAVIChNeqoFHDz0G5uU4AVU2KPLOHKxiAy4Z/9nwd7V7 mS2Xw3v8586luOOaG6EvpMSFvfgNqP1+WJJFDYWdcZf+SASaPgK1LsVsALyhhHPn hm7UjjryYBeH1TR76AN714nhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgLk0g3+a Id9Rc0RV7fl6dC1MnkUwHwYDVR0jBBgwFoAUi6lOJEyHA+LiEkVrmHGzyC1QcJww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2RTY4L0QyQkFBQzRBQUUw RjExRUVBN0FDOTQxQUM0RjlBRTAyL2k2bE9KRXlIQS1MaUVrVnJtSEd6eUMxUWNK dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaTZsT0pFeUhBLUxpRWtWcm1IR3p5QzFRY0p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 RTY4L0QyQkFBQzRBQUUwRjExRUVBN0FDOTQxQUM0RjlBRTAyL2k2bE9KRXlIQS1M aUVrVnJtSEd6eUMxUWNKdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEDXlN/QsMaaLOEx9MeZGgvoqFFF7F7ssheA3UNa9Xj0al7mmX2sNHmv +whggCHvZ9UwXifMMzheWQITpr/mUZX697fiVJuO+cA8hUYlNGNJcYM06zyLY9Fx y9QgToMk0B2hl/3t+eUnJ+KvVtPktkv+fHrL/enOmpXUe6oDN1hoNuLEpcdo3b8Y VnCh1WCAd7YGWBcZcS1IX3DRVX0GCIFipCwQCVzcc9JpBQni5mDZ8O6mfhi+MF4v 4Aumamfnz/eiexMIkvtKJVb5No5y9fSCWOkDZc9FHtHIiSpuk50KPcnPFjjTPdXM xk3kVf4+ofMTPXS1LhDOKhbuI8Im5j8= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org