$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json) Hash identifier: kgD/CqZ42H0cdGR8q2NOaKdfujFRLXmR2Ceqc5LevXg= Subject key identifier: B1:D2:87:D3:45:D2:86:C9:D3:6A:8C:29:7E:87:A7:52:E7:CB:47:7C Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft Manifest number: F3 Signing time: Sun 19 May 2024 05:48:20 +0000 Manifest this update: Sun 19 May 2024 05:48:19 +0000 Manifest next update: Sun 26 May 2024 05:48:19 +0000 Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: BpXNwoTKxuBQeD1LyM5Q6H8Et4kK4DMZolyYpSHtPjQ=) 2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: c8qsy6Ai7aK2W2nI3RvEEZhRhyIrZcGTRTKb5B3tQmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: May 19 05:48:19 2024 GMT Not After : May 26 05:48:19 2024 GMT Subject: CN=664992a3-3989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:c6:3d:0b:a6:0d:bd:84:ae:72:68:9b:7d: 45:e3:57:8a:e3:93:8d:e3:fb:93:bf:17:71:84:1c: 22:85:16:cd:9f:e4:fa:a6:cd:ee:7d:f8:cd:eb:d4: de:47:b2:35:ab:4f:27:9b:6d:cb:21:35:3d:ee:3f: 8b:5d:6c:f5:ba:a7:2d:94:96:ef:e4:7f:33:1d:a8: f9:a1:2a:47:2f:65:d1:68:64:3f:08:c7:3e:00:bb: 38:82:2a:95:de:2e:b9:13:cc:fd:bd:c5:c2:d4:8c: 0f:96:ec:f9:8c:c0:70:d9:32:85:f9:6d:6c:3f:ce: b3:7e:43:2a:e3:28:4d:a0:57:84:3a:9c:e6:38:a1: dd:df:47:59:18:11:92:58:38:60:9d:f6:35:b2:98: 5b:1e:87:0f:f1:58:98:de:9c:23:79:5a:85:2c:48: 5a:98:33:c5:76:67:c3:85:0b:a6:7f:81:a2:43:48: 29:78:d0:6c:28:5b:1f:be:dd:5d:2f:48:7f:42:01: 0b:3d:16:3c:ef:ae:f0:4a:64:a9:3c:69:a0:82:72: 9d:13:7d:cb:8e:e7:2e:22:6d:43:6c:a4:0c:a6:85: d9:a4:ec:8e:3a:80:44:3e:75:5e:ad:c1:eb:b6:08: 01:87:8e:d1:c4:a6:95:d6:b7:6e:03:a7:70:09:33: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D2:87:D3:45:D2:86:C9:D3:6A:8C:29:7E:87:A7:52:E7:CB:47:7C X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:73:25:54:11:fc:fa:47:02:1a:89:cc:f6:70:0d:c4:16:8f: f1:76:21:e0:03:45:2c:24:95:81:8d:1a:ae:ac:e3:ba:9b:b8: 21:14:43:bc:c6:96:a1:4a:ed:54:ad:0c:c7:68:fa:fa:3a:c6: 3d:c0:b3:0f:eb:aa:be:13:31:7d:b1:e3:ce:01:6b:f8:29:d5: 30:11:84:74:d6:05:15:b8:53:83:43:e5:10:4e:25:45:dd:13: d3:5e:3a:b2:02:34:e8:6e:33:dd:15:95:5c:34:0f:52:b7:94: 5d:a0:7a:3c:3a:b5:1e:73:dd:e7:3d:44:6e:d4:26:98:36:70: 97:7e:9e:1f:2e:0c:8e:5d:b1:35:0b:b4:f3:f8:89:6c:0d:01: fe:6f:49:e8:d9:0c:e7:9f:db:2b:4d:e0:92:49:6e:3c:ae:91: ca:04:be:ca:f1:eb:0b:82:35:31:cd:3d:d1:35:52:de:86:18: e1:92:c0:54:64:d4:24:22:8f:0c:25:59:b7:44:5f:9a:f2:80: d1:a7:d5:24:c5:e0:35:d4:54:79:0f:c2:2f:06:15:3e:a6:a9: c9:23:90:e0:61:ee:82:fa:28:f5:19:71:1b:7e:5c:81:71:a2: 92:5c:18:71:9b:cf:6a:0a:95:a6:fb:38:46:77:3f:74:84:89: 60:61:24:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjQwNTE5MDU0ODE5WhcNMjQwNTI2MDU0ODE5WjAYMRYwFAYD VQQDEw02NjQ5OTJhMy0zOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYDGPQumDb2ErnJom31F41eK45ON4/uTvxdxhBwihRbNn+T6ps3uffjN69Te R7I1q08nm23LITU97j+LXWz1uqctlJbv5H8zHaj5oSpHL2XRaGQ/CMc+ALs4giqV 3i65E8z9vcXC1IwPluz5jMBw2TKF+W1sP86zfkMq4yhNoFeEOpzmOKHd30dZGBGS WDhgnfY1sphbHocP8ViY3pwjeVqFLEhamDPFdmfDhQumf4GiQ0gpeNBsKFsfvt1d L0h/QgELPRY8767wSmSpPGmggnKdE33LjucuIm1DbKQMpoXZpOyOOoBEPnVercHr tggBh47RxKaV1rduA6dwCTM++wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHSh9NF 0obJ02qMKX6Hp1Lny0d8MB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhC U0pTM25NbjlkekVieDhveGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCacyVUEfz6RwIaicz2cA3EFo/xdiHgA0UsJJWBjRqurOO6m7ghFEO8 xpahSu1UrQzHaPr6OsY9wLMP66q+EzF9sePOAWv4KdUwEYR01gUVuFODQ+UQTiVF 3RPTXjqyAjTobjPdFZVcNA9St5RdoHo8OrUec93nPURu1CaYNnCXfp4fLgyOXbE1 C7Tz+IlsDQH+b0no2Qznn9srTeCSSW48rpHKBL7K8esLgjUxzT3RNVLehhjhksBU ZNQkIo8MJVm3RF+a8oDRp9UkxeA11FR5D8IvBhU+pqnJI5DgYe6C+ij1GXEbflyB caKSXBhxm89qCpWm+zhGdz90hIlgYSSv -----END CERTIFICATE-----Generated at Sun May 19 08:24:59 2024 by rpki-client on console-ams.rpki-client.org