$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json) Hash identifier: e5Tv/PoMFietvP5OvhV/TJ6D9SC0iJsMXIrEKz0FVIE= Subject key identifier: FA:3D:2F:6A:50:A6:4B:75:A5:DA:21:3A:91:74:73:C5:F4:FE:BA:2C Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft Manifest number: 026D Signing time: Sun 19 May 2024 03:46:05 +0000 Manifest this update: Sun 19 May 2024 03:46:05 +0000 Manifest next update: Sun 26 May 2024 03:46:05 +0000 Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: 7JzaILDs8uP1++fsNj5W6Pjp0kGGPqAXaOnxuQkaIww=) 2: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: DbMlrA2mgcFyuLE7QB39mPODBO4SPCFwB1pU2tz91NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: May 19 03:46:05 2024 GMT Not After : May 26 03:46:05 2024 GMT Subject: CN=664975fd-c55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:45:78:9d:67:1f:87:7b:be:d1:89:1f:bd: 58:29:af:79:5d:e3:1b:c3:da:e0:ef:78:d5:20:8d: 09:33:0b:82:7a:34:a9:f6:f6:69:c9:d9:68:1e:33: 77:77:fb:ee:f2:2f:75:f2:62:ba:aa:c2:bd:31:b9: 7e:8d:b8:ab:ac:fc:bf:4a:23:37:9b:bf:33:1c:ab: 3a:30:89:8d:60:07:14:5a:24:0c:67:ae:ce:f3:4a: b9:18:4e:0f:b9:e2:6b:42:4c:cc:ab:26:83:bd:30: 85:dc:d4:64:a7:9d:59:55:88:6d:0d:15:4c:52:23: b5:49:b0:a8:5f:7e:5c:75:01:7f:0a:33:51:7a:ab: d2:a1:27:82:b7:29:cc:6e:a9:ab:3e:c0:a1:07:d0: da:6d:36:ed:1a:29:a9:a9:9b:da:1f:dc:fc:90:81: e4:43:cc:60:1f:a0:be:21:45:b4:36:dd:9e:11:93: 28:33:ec:fd:d7:6b:62:1d:36:ad:4b:d3:3f:a1:57: 3f:b5:48:e7:31:d2:7a:8b:8e:fd:ae:f4:16:48:d1: 16:f5:d8:a2:9e:2a:28:8e:15:5a:86:94:61:3c:08: 9c:39:67:e2:ee:1b:9a:0d:46:84:c0:f1:af:c5:15: 04:c6:41:96:e4:42:f1:86:ca:7f:9c:4d:bf:85:b7: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3D:2F:6A:50:A6:4B:75:A5:DA:21:3A:91:74:73:C5:F4:FE:BA:2C X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:17:90:b3:59:6d:f0:18:4b:6b:39:21:da:ff:f6:28:10:e9: b6:4f:57:ff:fa:b5:ff:63:17:44:7a:37:36:98:18:2b:e7:63: 5a:68:cb:f0:cf:5e:55:b7:e0:80:76:61:71:cf:b5:72:14:58: 37:c5:ac:b6:50:76:a8:a9:7d:67:86:49:c0:d1:ed:6a:1a:f6: dd:75:7b:96:8c:18:95:e2:2b:43:ee:94:97:1b:dc:a6:14:41: e6:8d:f8:ee:f5:4a:af:26:45:60:2d:96:40:68:3d:9c:31:ea: e5:a5:97:a9:a9:05:14:eb:da:4e:27:ba:09:0e:8a:5c:3e:db: 9b:6b:54:ea:c4:bb:13:84:2c:ad:80:15:80:93:b9:cf:10:0e: e7:85:07:fb:51:04:a7:b4:7e:04:ad:ea:cc:08:f0:8a:f2:66: a7:75:7c:83:fc:39:7a:53:23:b8:48:82:2e:38:9c:9b:44:be: 40:85:08:29:ce:08:cc:a1:31:df:4e:0c:21:d7:51:61:4c:2f: 04:0c:3f:9f:24:0a:b1:7c:ec:87:5c:92:80:5a:07:5d:0d:45: af:ea:9c:dd:87:8d:5a:15:fb:47:ff:0b:a3:4a:21:4a:64:9b: ed:fd:da:4e:95:80:3f:14:84:c8:0c:14:3c:e2:be:cb:74:08: 92:9e:fc:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjQwNTE5MDM0NjA1WhcNMjQwNTI2MDM0NjA1WjAYMRYwFAYD VQQDEw02NjQ5NzVmZC1jNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+ZFeJ1nH4d7vtGJH71YKa95XeMbw9rg73jVII0JMwuCejSp9vZpydloHjN3 d/vu8i918mK6qsK9Mbl+jbirrPy/SiM3m78zHKs6MImNYAcUWiQMZ67O80q5GE4P ueJrQkzMqyaDvTCF3NRkp51ZVYhtDRVMUiO1SbCoX35cdQF/CjNReqvSoSeCtynM bqmrPsChB9DabTbtGimpqZvaH9z8kIHkQ8xgH6C+IUW0Nt2eEZMoM+z912tiHTat S9M/oVc/tUjnMdJ6i479rvQWSNEW9diinioojhVahpRhPAicOWfi7huaDUaEwPGv xRUExkGW5ELxhsp/nE2/hbf1rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo9L2pQ pkt1pdohOpF0c8X0/rosMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhF5CzWW3wGEtrOSHa//YoEOm2T1f/+rX/YxdEejc2mBgr52NaaMvw z15Vt+CAdmFxz7VyFFg3xay2UHaoqX1nhknA0e1qGvbddXuWjBiV4itD7pSXG9ym FEHmjfju9UqvJkVgLZZAaD2cMerlpZepqQUU69pOJ7oJDopcPtuba1TqxLsThCyt gBWAk7nPEA7nhQf7UQSntH4ErerMCPCK8mandXyD/Dl6UyO4SIIuOJybRL5AhQgp zgjMoTHfTgwh11FhTC8EDD+fJAqxfOyHXJKAWgddDUWv6pzdh41aFftH/wujSiFK ZJvt/dpOlYA/FITIDBQ84r7LdAiSnvxW -----END CERTIFICATE-----Generated at Sun May 19 04:22:03 2024 by rpki-client on console-fra.rpki-client.org