$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: RrtAW+njbRUe01GJvEcf3JuuPvOUZdanLMBDD4+toVo= Subject key identifier: 21:26:27:93:C2:61:BF:B2:39:31:D6:F8:93:26:89:D9:39:04:42:FA Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0BA4 Signing time: Sat 18 May 2024 19:14:21 +0000 Manifest this update: Sat 18 May 2024 19:14:21 +0000 Manifest next update: Sat 25 May 2024 19:14:21 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: OxljOV2hFSeiL1rss8wCnFm/sPzLP10H8+hIl4rszsQ=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: jv9kj6qt4NhPT9yq4nsD+F0WmRlH/hpUG9ulUFAbwwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: May 18 19:14:21 2024 GMT Not After : May 25 19:14:21 2024 GMT Subject: CN=6648fe0d-1eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:18:e9:e1:10:bb:e9:7f:a9:33:2f:22:14: 44:59:c3:18:b9:5f:ee:12:14:80:a1:ec:78:2e:38: 85:c2:94:a1:89:97:d8:dd:80:74:05:05:43:7b:08: 40:a4:23:2f:ed:f5:bf:d9:ee:ff:05:91:4d:04:6e: 3f:b4:22:cd:5c:cc:fd:88:49:cb:05:92:19:09:15: df:9a:a9:31:21:f2:ce:da:ce:b4:3b:b6:4f:d5:ba: ac:1a:79:cb:d7:11:52:7d:77:55:9f:00:52:bc:77: 94:63:8d:29:46:3d:8c:72:a7:df:d3:fb:61:28:83: e3:c9:f7:09:f0:80:37:af:20:6c:fd:30:f3:10:65: a9:ad:86:91:f8:0c:c5:29:f7:b2:9e:98:3d:0f:0f: 16:e5:fc:9d:5a:d6:26:00:6e:a8:e9:e1:92:14:85: 05:b4:2c:85:39:36:71:46:95:56:20:d5:e6:2c:83: 85:66:81:c9:fc:6a:b1:a3:52:46:5c:50:9e:74:a4: 35:f6:53:fb:78:60:35:46:70:7d:fa:98:0c:e5:a8: 5c:d1:33:e8:be:fc:e1:56:ea:01:3a:9b:8c:d7:c5: 57:9f:32:f6:5b:82:de:6a:6e:07:41:a0:e3:e8:81: 1a:79:4e:42:a1:ee:40:88:3e:c5:1d:18:30:b4:c4: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:26:27:93:C2:61:BF:B2:39:31:D6:F8:93:26:89:D9:39:04:42:FA X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d5:10:27:54:b2:c3:4d:71:8b:f6:6c:a4:20:bb:1a:df:3a: d7:ce:56:03:57:92:b4:e7:9f:6b:08:fb:c2:7e:64:b4:2b:fa: 84:1f:8d:be:f6:b7:2c:47:f8:54:75:1d:9f:4e:51:36:8f:ee: 00:c6:c6:91:16:34:2d:56:f3:18:5a:44:ae:09:f9:06:94:a3: 09:02:7f:b7:00:cf:c1:1c:82:31:ee:de:ce:4d:f8:60:b3:bf: e1:f1:fb:25:01:9a:57:30:ad:c7:03:83:78:df:d2:c5:90:29: 24:27:ac:13:e2:d8:f7:e0:9c:13:d4:d3:fc:b4:3a:62:ac:21: 3b:e9:75:ae:3d:71:cb:0c:24:e3:6c:04:74:96:53:21:91:b3: 02:ba:88:a4:ce:ea:d1:85:18:b2:a9:ec:d3:e8:f7:86:6f:06: bc:0f:bc:e0:74:81:a8:bd:f5:b9:d5:ee:6e:88:64:90:cc:62: 0b:fe:e0:4d:d1:69:21:9f:97:22:2f:b4:1b:63:1f:32:34:84: 42:d2:c0:84:bf:c2:13:88:71:c4:f1:af:47:8a:cf:b6:46:8d: 1e:51:da:dc:61:a0:a7:89:c8:67:0d:81:7f:76:80:b5:f4:1b: c5:3b:11:b5:3c:ae:26:6f:6c:fb:37:cf:8f:b4:0e:79:9b:1c: 86:92:ed:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjQwNTE4MTkxNDIxWhcNMjQwNTI1MTkxNDIxWjAYMRYwFAYD VQQDEw02NjQ4ZmUwZC0xZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunQY6eEQu+l/qTMvIhREWcMYuV/uEhSAoex4LjiFwpShiZfY3YB0BQVDewhA pCMv7fW/2e7/BZFNBG4/tCLNXMz9iEnLBZIZCRXfmqkxIfLO2s60O7ZP1bqsGnnL 1xFSfXdVnwBSvHeUY40pRj2Mcqff0/thKIPjyfcJ8IA3ryBs/TDzEGWprYaR+AzF Kfeynpg9Dw8W5fydWtYmAG6o6eGSFIUFtCyFOTZxRpVWINXmLIOFZoHJ/Gqxo1JG XFCedKQ19lP7eGA1RnB9+pgM5ahc0TPovvzhVuoBOpuM18VXnzL2W4Leam4HQaDj 6IEaeU5Coe5AiD7FHRgwtMQUJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEmJ5PC Yb+yOTHW+JMmidk5BEL6MB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ1RAnVLLDTXGL9mykILsa3zrXzlYDV5K0559rCPvCfmS0K/qEH42+ 9rcsR/hUdR2fTlE2j+4AxsaRFjQtVvMYWkSuCfkGlKMJAn+3AM/BHIIx7t7OTfhg s7/h8fslAZpXMK3HA4N439LFkCkkJ6wT4tj34JwT1NP8tDpirCE76XWuPXHLDCTj bAR0llMhkbMCuoikzurRhRiyqezT6PeGbwa8D7zgdIGovfW51e5uiGSQzGIL/uBN 0Wkhn5ciL7QbYx8yNIRC0sCEv8ITiHHE8a9His+2Ro0eUdrcYaCnichnDYF/doC1 9BvFOxG1PK4mb2z7N8+PtA55mxyGku0p -----END CERTIFICATE-----Generated at Sat May 18 20:15:58 2024 by rpki-client on console-ams.rpki-client.org