$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: emrBE2DmNfL0DqBo+1nxYZGMNj+zSI+Bo6XpsbvtTYs= Subject key identifier: 41:8A:DF:C7:9A:8E:61:CE:DF:39:BD:93:82:F5:D9:42:2C:33:35:52 Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 1201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 11F1 Signing time: Sat 18 May 2024 17:42:54 +0000 Manifest this update: Sat 18 May 2024 17:42:54 +0000 Manifest next update: Sat 25 May 2024 17:42:54 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: Xks22IMUAhWXES9eMO33+/hq0axeFIzQIwmJ6zMiSY4=) 2: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: fVrnmoIbc0WT1j2hFk/lgNhemMnLi+wRvt02urL7HX0=) 3: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: ++HKMKnO2wwG3IjoXlVb7Z/y+OSqAGLthTpFlPfUd3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4609 (0x1201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: May 18 17:42:54 2024 GMT Not After : May 25 17:42:54 2024 GMT Subject: CN=6648e89e-dc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:24:cd:b7:dc:b8:2d:d1:18:1e:09:2d:2e:06: a9:e6:2d:7a:cb:04:09:be:67:6f:ed:0b:f1:c3:cd: 0f:9b:a8:f0:23:9c:d5:71:d9:f3:56:63:0b:00:45: c7:0f:53:71:89:25:88:61:bf:d8:80:0a:04:04:b9: 6b:f5:e6:20:10:62:3b:5d:21:b5:73:7b:1e:10:f6: 86:30:d1:79:8a:68:2a:7f:cb:95:28:da:c6:39:b9: 80:c0:8c:39:92:ed:d6:57:8c:93:02:84:5e:47:e5: b8:55:c7:bc:94:f5:df:4f:9f:4a:eb:30:ca:e8:39: 35:26:3f:ce:fc:70:ae:a7:5b:b3:f3:36:0f:3b:31: 78:e7:c2:dd:80:70:0c:ca:d1:fc:43:ed:9e:ce:d7: 70:ac:3c:86:7c:b3:c0:d9:cd:91:74:67:68:81:8b: 1d:93:b2:db:a5:a8:a3:9c:05:96:46:be:c0:06:53: db:1b:6c:b0:ec:22:2e:61:12:7e:7e:3b:3c:40:d6: db:30:eb:60:4e:24:39:4e:68:d0:b3:8c:99:13:71: b2:70:e8:59:ef:75:11:17:5f:db:4c:16:d8:23:77: dc:63:f1:5e:70:81:e3:d1:87:9d:22:d8:c8:98:ed: 74:cb:d3:e6:5c:d4:20:da:c3:ac:4f:55:23:f7:ba: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8A:DF:C7:9A:8E:61:CE:DF:39:BD:93:82:F5:D9:42:2C:33:35:52 X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a4:b4:df:97:cc:90:09:df:2f:78:ac:5a:ee:57:d0:26:04: cf:4c:2c:b2:e5:80:5b:36:6d:6c:96:4a:91:6d:4f:61:88:5b: 5b:ad:b9:6e:3d:9f:1f:38:10:6a:6c:9b:3b:e1:60:47:01:57: 90:6e:c7:e3:47:e4:a8:a3:38:24:b5:14:3c:aa:3d:cf:73:c3: 00:75:26:5a:76:77:5e:6e:48:f1:a8:7b:35:fc:95:e7:fd:32: fa:a5:39:eb:c8:8a:bb:0e:8c:dd:1c:c5:68:31:86:98:5f:b4: 9f:96:84:cc:7e:54:6c:dd:10:2a:37:40:09:fd:05:9a:6d:eb: d6:69:87:1c:4f:54:9e:49:b1:d5:c1:a8:d1:0d:80:b0:b4:2e: db:33:32:58:7a:55:1c:a0:6c:6e:06:d0:42:e7:e7:7d:5a:4e: 56:d0:51:72:74:53:57:53:2d:fd:c6:0d:c6:fd:ab:0d:21:32: 0c:77:9b:37:be:13:12:ab:a3:ef:47:92:0d:5f:33:f3:53:3d: 7c:cd:d4:ff:9c:a4:d3:09:c3:ae:e0:44:05:bf:98:fa:7f:40: eb:b9:fc:ce:ac:ac:bc:52:6d:1f:2d:a6:4b:17:71:ae:3a:52: 6b:b8:e8:23:ea:81:57:ee:ca:bf:7d:a7:94:4d:5a:bc:49:b3: 2c:e3:61:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjQwNTE4MTc0MjU0WhcNMjQwNTI1MTc0MjU0WjAYMRYwFAYD VQQDEw02NjQ4ZTg5ZS1kYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iTNt9y4LdEYHgktLgap5i16ywQJvmdv7Qvxw80Pm6jwI5zVcdnzVmMLAEXH D1NxiSWIYb/YgAoEBLlr9eYgEGI7XSG1c3seEPaGMNF5imgqf8uVKNrGObmAwIw5 ku3WV4yTAoReR+W4Vce8lPXfT59K6zDK6Dk1Jj/O/HCup1uz8zYPOzF458LdgHAM ytH8Q+2eztdwrDyGfLPA2c2RdGdogYsdk7LbpaijnAWWRr7ABlPbG2yw7CIuYRJ+ fjs8QNbbMOtgTiQ5TmjQs4yZE3GycOhZ73URF1/bTBbYI3fcY/FecIHj0YedItjI mO10y9PmXNQg2sOsT1Uj97rmIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGK38ea jmHO3zm9k4L12UIsMzVSMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYpLTfl8yQCd8veKxa7lfQJgTPTCyy5YBbNm1slkqRbU9hiFtbrblu PZ8fOBBqbJs74WBHAVeQbsfjR+SoozgktRQ8qj3Pc8MAdSZadndebkjxqHs1/JXn /TL6pTnryIq7DozdHMVoMYaYX7SfloTMflRs3RAqN0AJ/QWabevWaYccT1SeSbHV wajRDYCwtC7bMzJYelUcoGxuBtBC5+d9Wk5W0FFydFNXUy39xg3G/asNITIMd5s3 vhMSq6PvR5INXzPzUz18zdT/nKTTCcOu4EQFv5j6f0DrufzOrKy8Um0fLaZLF3Gu OlJruOgj6oFX7sq/faeUTVq8SbMs42HK -----END CERTIFICATE-----Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org