$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: VzNCgmeauwvlReUUyUICvglg9CF4HUmsuhY23NPLXGs= Subject key identifier: 4A:B7:46:BD:39:47:72:2B:6E:BE:B5:97:57:CB:75:AA:35:E9:07:27 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 06CF Signing time: Sat 18 May 2024 23:01:38 +0000 Manifest this update: Sat 18 May 2024 23:01:37 +0000 Manifest next update: Sat 25 May 2024 23:01:37 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: iEIAY6TpBhyD5hcn1Yw85QkJ63hFrqQ3Hw4rFTPvPXg=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: dzdiy1DRvArzMHuJm0zK0Ej0qp+73nyVvQe0PUAhct4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: May 18 23:01:37 2024 GMT Not After : May 25 23:01:37 2024 GMT Subject: CN=66493352-5d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:d1:c5:9e:3f:24:57:dc:de:ac:31:89:c4: f1:89:22:c2:af:6f:fd:f6:98:66:a2:d9:c9:a0:a6: a8:0d:7f:58:59:a5:7e:d6:77:aa:95:e1:fa:07:d5: dc:64:b4:49:71:99:ac:7b:22:f6:fc:fb:8d:56:61: 47:7a:00:c3:be:4b:a1:35:a4:5d:ca:6a:f1:4a:4b: b7:f3:07:9d:a5:e2:f9:e4:95:38:94:62:10:11:be: c3:c4:e7:cc:cf:39:47:af:b2:be:14:5b:70:9e:ab: 3e:2c:ea:a4:3d:de:78:44:72:18:33:62:bb:7f:b0: 6c:b3:d7:9d:63:e6:77:fe:eb:8c:1d:c9:7d:57:73: 13:6d:39:c2:14:1d:0d:a5:4b:37:ef:89:3a:d6:7c: f5:49:14:9e:b1:40:77:0e:1e:3c:d3:62:f5:41:ad: 4e:52:68:ae:eb:58:66:ea:b2:d8:79:87:bc:cd:74: f0:3e:2c:b7:13:de:96:8b:c7:4f:5d:b7:bf:43:e2: 31:63:67:d5:4f:15:ca:88:1e:08:40:e2:e5:69:98: 44:97:a6:d5:a6:b4:ba:f5:c3:23:99:a5:46:59:0a: bb:06:c2:41:b5:db:10:2e:83:5f:d2:48:4c:d8:bf: c2:f5:2a:6f:d7:68:d0:68:0f:49:40:fa:50:05:86: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B7:46:BD:39:47:72:2B:6E:BE:B5:97:57:CB:75:AA:35:E9:07:27 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:56:e2:35:5c:cc:a8:83:37:84:29:d7:2b:d2:14:1d:20:a0: 28:81:ea:54:99:72:2c:e9:a6:e8:c7:a9:89:80:4b:ff:9d:ca: 71:78:f2:40:c8:d0:42:69:cc:de:e7:41:ff:f0:0d:76:89:a1: a6:05:fd:62:cf:a6:d3:5e:a1:25:cd:ae:50:c2:0d:0a:aa:bf: 0f:d0:e3:74:59:20:94:9f:ef:78:32:9b:75:6d:77:79:fe:a8: c1:22:42:cb:4c:24:d8:5c:d1:a8:4c:96:54:ca:3a:20:09:65: a9:de:93:0e:6c:e3:1b:c4:bb:18:d6:ce:74:7c:3f:b0:26:82: 65:72:42:80:f3:a3:54:69:9a:ba:f2:e9:76:ae:fc:60:1d:86: fd:33:29:32:ec:2b:bc:90:68:04:b1:cd:7a:7b:57:3c:9e:2f: 00:9d:47:63:84:d6:c2:c6:32:2f:31:51:89:90:10:f2:84:b8: 0f:c3:f9:3e:79:2b:f3:1f:ee:7b:dd:0b:b8:b1:53:d8:94:ab: cd:28:3d:e3:72:83:d9:ee:c9:d4:a7:23:ec:fd:41:29:72:c5: 3e:0a:0a:c3:6c:98:a8:70:a3:6f:87:0d:9f:45:eb:b3:0b:b1: 03:01:bc:79:a1:e8:d9:e5:5f:58:5c:49:94:89:66:6e:88:69: 27:f3:91:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjQwNTE4MjMwMTM3WhcNMjQwNTI1MjMwMTM3WjAYMRYwFAYD VQQDEw02NjQ5MzM1Mi01ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvejRxZ4/JFfc3qwxicTxiSLCr2/99phmotnJoKaoDX9YWaV+1neqleH6B9Xc ZLRJcZmseyL2/PuNVmFHegDDvkuhNaRdymrxSku38wedpeL55JU4lGIQEb7DxOfM zzlHr7K+FFtwnqs+LOqkPd54RHIYM2K7f7Bss9edY+Z3/uuMHcl9V3MTbTnCFB0N pUs374k61nz1SRSesUB3Dh4802L1Qa1OUmiu61hm6rLYeYe8zXTwPiy3E96Wi8dP Xbe/Q+IxY2fVTxXKiB4IQOLlaZhEl6bVprS69cMjmaVGWQq7BsJBtdsQLoNf0khM 2L/C9Spv12jQaA9JQPpQBYaY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq3Rr05 R3Irbr61l1fLdao16QcnMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/VuI1XMyogzeEKdcr0hQdIKAogepUmXIs6abox6mJgEv/ncpxePJA yNBCacze50H/8A12iaGmBf1iz6bTXqElza5Qwg0Kqr8P0ON0WSCUn+94Mpt1bXd5 /qjBIkLLTCTYXNGoTJZUyjogCWWp3pMObOMbxLsY1s50fD+wJoJlckKA86NUaZq6 8ul2rvxgHYb9Myky7Cu8kGgEsc16e1c8ni8AnUdjhNbCxjIvMVGJkBDyhLgPw/k+ eSvzH+573Qu4sVPYlKvNKD3jcoPZ7snUpyPs/UEpcsU+CgrDbJiocKNvhw2fReuz C7EDAbx5oejZ5V9YXEmUiWZuiGkn85FM -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org