$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json) Hash identifier: /mh/4QfMq8V3LTM7qCbwx/zAnxqSproXvGQ2Xovva34= Subject key identifier: D9:DF:5C:FD:0C:FC:19:23:3E:B7:04:10:B8:1F:46:C3:84:AC:93:2D Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft Manifest number: 65 Signing time: Fri 31 May 2024 08:35:36 +0000 Manifest this update: Fri 31 May 2024 08:35:36 +0000 Manifest next update: Fri 07 Jun 2024 08:35:36 +0000 Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: qyZQ7wzkT6pzJilwZVvux2XweeGYYgQg+CE0UM8t9WE=) 2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: VC/skDThQftldVbspNHCislgZHfc7Kw5lpI8wDN6suI=) 3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: JrS4QOKWl/toc0OYKrIEB8GXyI1gTp5S/X8d4ugPSvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: May 31 08:35:36 2024 GMT Not After : Jun 7 08:35:36 2024 GMT Subject: CN=66598bd8-8a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:2c:b2:bf:54:83:c0:f7:5b:47:7b:f4:82: e3:ec:63:2c:4b:c5:02:6e:94:d0:09:fc:c3:60:98: 23:35:0e:b7:97:2c:e3:32:e9:cc:31:17:61:58:32: 00:be:b0:7c:8f:03:a6:d3:d2:44:c7:77:07:af:63: 68:3c:0f:e6:6d:7f:6b:1c:80:c0:db:b3:8b:55:ef: 48:b7:2c:7c:35:25:b5:c5:ca:d2:b2:67:9d:cd:22: 0b:1f:83:89:ba:b1:48:ee:31:08:a8:69:eb:6b:fb: 19:d0:bb:ab:2f:8e:d4:16:2e:d4:0e:96:94:fe:8f: 38:55:94:cb:23:d8:c4:70:73:16:5e:fa:52:d6:5c: 4b:0b:1f:aa:7e:9e:1c:41:43:15:96:1b:92:1e:d7: bd:ab:5d:3c:6e:fe:f9:bb:5c:e6:6c:d7:8d:7c:29: 7a:05:24:f9:35:3c:f7:51:3a:39:b1:55:81:a2:b3: d3:c2:53:55:90:e6:a1:18:17:6a:c5:9e:b7:a3:bd: 69:2e:c9:cc:4d:64:10:f0:d6:c2:83:70:a5:65:b9: 44:27:c4:f3:b5:83:c0:e2:d7:0a:7e:ca:0e:68:ec: a4:9d:67:ba:fe:10:6c:57:26:f5:31:43:3c:0d:08: 51:8b:24:5e:19:92:82:d0:2d:98:5a:5c:a5:70:53: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DF:5C:FD:0C:FC:19:23:3E:B7:04:10:B8:1F:46:C3:84:AC:93:2D X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3f:d6:29:d0:71:2a:b1:cb:d5:d5:d8:da:a4:4d:45:86:58: b8:7d:10:71:2f:58:f0:d0:50:2d:c9:74:fd:7d:23:7a:b0:d1: a6:61:3e:78:1a:e8:5f:c3:3e:97:c6:69:58:22:b1:57:80:75: 7c:85:07:11:38:34:42:8a:23:e6:e4:ae:81:f1:2d:85:8d:6d: 43:f1:48:ad:9d:32:2e:f7:ce:fa:fb:67:94:27:93:43:58:52: 82:98:29:fe:3c:0b:e7:1c:1f:ce:41:de:75:e2:1a:f2:68:da: a7:38:19:00:41:23:d5:e2:74:c5:82:f7:95:d2:6f:ad:4e:ef: 86:a7:18:e3:b4:8e:6b:66:df:1e:12:6b:4f:cd:ae:46:74:bd: a4:d3:6d:7b:45:f5:f2:e5:f1:e4:77:b1:86:15:bb:de:de:0a: 68:d3:ee:94:5f:04:97:a9:80:cf:d7:0b:7d:b7:d8:9f:2e:df: 03:e2:b6:b7:09:03:d1:f9:2e:0a:4c:01:cf:25:b0:62:a2:d5: 69:3a:d7:b0:95:ca:0b:a6:51:63:84:5e:ec:43:e7:9c:4c:4f: f6:7e:7b:c2:a0:9f:f5:f0:d6:d1:cc:4a:63:74:5b:ad:d4:ff: e9:91:31:33:a7:eb:61:b8:79:39:45:77:b7:f4:6b:c1:58:b3: eb:3e:b7:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0MyRDExMC8GA1UEBRMoOEI2NUE1Mjk0Mzc3RDY4NjM3OEM0NkIzRTlEQUQ3Q0RC NUI2Njc5MTAeFw0yNDA1MzEwODM1MzZaFw0yNDA2MDcwODM1MzZaMBgxFjAUBgNV BAMTDTY2NTk4YmQ4LThhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLeyyyv1SDwPdbR3v0guPsYyxLxQJulNAJ/MNgmCM1DreXLOMy6cwxF2FYMgC+ sHyPA6bT0kTHdwevY2g8D+Ztf2scgMDbs4tV70i3LHw1JbXFytKyZ53NIgsfg4m6 sUjuMQioaetr+xnQu6svjtQWLtQOlpT+jzhVlMsj2MRwcxZe+lLWXEsLH6p+nhxB QxWWG5Ie172rXTxu/vm7XOZs1418KXoFJPk1PPdROjmxVYGis9PCU1WQ5qEYF2rF nrejvWkuycxNZBDw1sKDcKVluUQnxPO1g8Di1wp+yg5o7KSdZ7r+EGxXJvUxQzwN CFGLJF4ZkoLQLZhaXKVwUwiPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2d9c/Qz8 GSM+twQQuB9Gw4Ssky0wHwYDVR0jBBgwFoAUi2WlKUN31oY3jEaz6drXzbW2Z5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QzJELzlFMzlGOTM2OEM5 RTExRUU4N0M4RUU3OEM0RjlBRTAyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaTJXbEtVTjMxb1kzakVhejZkclh6YlcyWjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QzJELzlFMzlGOTM2OEM5RTExRUU4N0M4RUU3OEM0RjlBRTAyL2kyV2xLVU4zMW9Z M2pFYXo2ZHJYemJXMlo1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4/1inQcSqxy9XV2NqkTUWGWLh9EHEvWPDQUC3JdP19I3qw0aZhPnga 6F/DPpfGaVgisVeAdXyFBxE4NEKKI+bkroHxLYWNbUPxSK2dMi73zvr7Z5Qnk0NY UoKYKf48C+ccH85B3nXiGvJo2qc4GQBBI9XidMWC95XSb61O74anGOO0jmtm3x4S a0/NrkZ0vaTTbXtF9fLl8eR3sYYVu97eCmjT7pRfBJepgM/XC3232J8u3wPitrcJ A9H5LgpMAc8lsGKi1Wk617CVygumUWOEXuxD55xMT/Z+e8Kgn/Xw1tHMSmN0W63U /+mRMTOn62G4eTlFd7f0a8FYs+s+t1k= -----END CERTIFICATE-----Generated at Fri May 31 10:01:38 2024 by rpki-client on console-ams.rpki-client.org