$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft File: ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json) Hash identifier: 8vCLbgBzduSWG16FDTAtVyJRMd1XIlFE41cFm2NA3Ws= Subject key identifier: 0A:45:36:62:88:6F:DC:B0:B9:0E:F5:0D:1E:B9:FD:09:D6:61:5B:5E Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 Certificate issuer: /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft Manifest number: 01A5 Signing time: Sun 19 May 2024 04:37:00 +0000 Manifest this update: Sun 19 May 2024 04:36:59 +0000 Manifest next update: Sun 26 May 2024 04:36:59 +0000 Files and hashes: 1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: nkk4jvAuSYXpOefjWacweRcguubA7A4WWJ5iInXQeHk=) 2: A1FA613614AF11ED8CE9335EC4F9AE02.roa (hash: NY+gTLFTqgONw/Im054lXjpnwS9V2SYU25fAyEwIiZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Validity Not Before: May 19 04:36:59 2024 GMT Not After : May 26 04:36:59 2024 GMT Subject: CN=664981eb-f5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:24:4b:07:0c:ff:56:a6:d9:d8:4b:b1:de: 13:1e:25:8a:24:1c:ab:0e:9e:20:3c:90:3b:3f:3d: 83:43:ac:58:97:89:c2:57:9b:7d:5a:1e:27:8d:df: 0a:2a:8d:47:88:10:cd:d7:e9:ab:0b:34:af:1a:0e: 4b:2e:89:e6:87:1c:e0:d6:11:e9:7b:ee:9b:9e:9c: d0:80:84:ef:dc:09:b1:e3:63:a0:93:04:fa:8c:8e: 5a:d4:5f:da:dd:3b:47:25:73:d8:79:b8:8d:c5:1d: e2:7d:33:6c:bb:69:cb:cc:57:df:db:be:0e:d1:84: ab:72:b7:85:19:15:44:86:2c:7c:b8:ec:60:f1:c5: 9d:9b:f8:7b:f1:ff:0a:ef:9e:36:72:11:db:b6:95: 5c:e9:2b:f1:04:88:b2:de:ab:13:b1:78:64:3c:13: 40:64:05:bb:0e:bf:44:f4:97:6d:2e:2d:f0:65:91: 63:2e:0b:7a:ec:8c:65:37:d8:42:b1:42:ea:d9:10: e5:dd:23:15:83:d5:44:84:52:45:20:f6:23:83:ee: f4:f9:ff:ca:9a:df:ca:c0:69:c9:05:07:c8:e3:a8: 85:0b:e7:cb:61:ae:c3:7d:4d:d8:34:df:bb:2c:af: 61:7c:4f:ce:76:5a:43:f9:8d:8e:fa:83:ec:18:64: 1c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:45:36:62:88:6F:DC:B0:B9:0E:F5:0D:1E:B9:FD:09:D6:61:5B:5E X509v3 Authority Key Identifier: keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c7:92:a6:69:3a:0f:0d:73:8d:74:84:13:2d:ef:fe:3a:27: 7c:f1:7e:9b:fc:55:2c:38:cb:c8:f1:6e:fc:1a:d6:cc:06:87: 20:2f:33:da:7d:62:78:83:db:72:cd:a3:0e:40:96:d3:3c:b5: 60:9d:70:25:2c:1c:33:8f:a3:6c:8b:84:63:b1:04:fd:c5:32: cb:6f:d0:c3:7f:f2:e0:2f:e7:78:ac:ab:50:be:9a:18:1f:8b: 39:02:68:93:30:e2:38:f4:ea:1a:12:e8:3e:cc:e2:e3:4a:e7: 1a:b1:38:2c:1f:5d:7f:22:90:76:67:b5:eb:f0:fd:09:a2:22: 24:57:11:dc:a3:88:df:03:de:7a:87:54:13:c7:a4:13:3d:f3: 62:0e:e7:8f:71:b7:a2:6f:98:d3:ae:1d:1c:07:b3:5f:97:cb: 3e:b7:52:fd:16:f5:1b:70:a0:bf:be:0d:79:02:19:65:ef:a6: d6:6e:ee:65:89:20:5d:3c:85:23:c3:f9:f3:11:28:7c:28:9d: 7e:c1:b9:d0:12:f5:33:65:4d:b0:3e:a4:98:fc:30:41:18:61: 10:3b:95:bf:af:44:27:b9:3d:87:3f:84:d7:b4:d8:42:00:22: c5:eb:99:2b:25:09:b5:0d:16:6e:0e:e4:78:92:b2:18:37:0f: 09:34:a0:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzRDQxMTAvBgNVBAUTKDhBMzM5MTk1RTJDRTI5NzVCNUY3ODk5QTNEMDJDRTYy RUY5MUJGMzkwHhcNMjQwNTE5MDQzNjU5WhcNMjQwNTI2MDQzNjU5WjAYMRYwFAYD VQQDEw02NjQ5ODFlYi1mNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LYkSwcM/1am2dhLsd4THiWKJByrDp4gPJA7Pz2DQ6xYl4nCV5t9Wh4njd8K Ko1HiBDN1+mrCzSvGg5LLonmhxzg1hHpe+6bnpzQgITv3Amx42OgkwT6jI5a1F/a 3TtHJXPYebiNxR3ifTNsu2nLzFff274O0YSrcreFGRVEhix8uOxg8cWdm/h78f8K 7542chHbtpVc6SvxBIiy3qsTsXhkPBNAZAW7Dr9E9JdtLi3wZZFjLgt67IxlN9hC sULq2RDl3SMVg9VEhFJFIPYjg+70+f/Kmt/KwGnJBQfI46iFC+fLYa7DfU3YNN+7 LK9hfE/OdlpD+Y2O+oPsGGQc4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApFNmKI b9ywuQ71DR65/QnWYVteMB8GA1UdIwQYMBaAFIozkZXizil1tfeJmj0CzmLvkb85 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODNENC9GNkJFODY5NjE0 QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tYVzE5NG1hUFFMT1l1LVJ2 emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqT1JsZUxPS1hXMTk0bWFQUUxPWXUtUnZ6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODNENC9GNkJFODY5NjE0QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tY VzE5NG1hUFFMT1l1LVJ2emsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwx5KmaToPDXONdIQTLe/+Oid88X6b/FUsOMvI8W78GtbMBocgLzPa fWJ4g9tyzaMOQJbTPLVgnXAlLBwzj6Nsi4RjsQT9xTLLb9DDf/LgL+d4rKtQvpoY H4s5AmiTMOI49OoaEug+zOLjSucasTgsH11/IpB2Z7Xr8P0JoiIkVxHco4jfA956 h1QTx6QTPfNiDuePcbeib5jTrh0cB7Nfl8s+t1L9FvUbcKC/vg15Ahll76bWbu5l iSBdPIUjw/nzESh8KJ1+wbnQEvUzZU2wPqSY/DBBGGEQO5W/r0QnuT2HP4TXtNhC ACLF65krJQm1DRZuDuR4krIYNw8JNKC6 -----END CERTIFICATE-----Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org