$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json) Hash identifier: 2k6/R4q0rrL6GcPuA5BnihsPb1bvjaFWjXZx2xinYgI= Subject key identifier: 94:1B:87:F5:17:4D:07:2E:33:64:1A:E9:C1:31:96:87:F6:F9:16:64 Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft Manifest number: 05C2 Signing time: Sun 19 May 2024 00:09:31 +0000 Manifest this update: Sun 19 May 2024 00:09:31 +0000 Manifest next update: Sun 26 May 2024 00:09:31 +0000 Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: 5T26jNIELXL3ZxmwgRsUKHGJLeGu4llDezwUZ8BeLkY=) 2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: HMNtwiOI8Fji50xPFx+fLZfX2Rn76Q7skuHMKU1WYfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Validity Not Before: May 19 00:09:31 2024 GMT Not After : May 26 00:09:31 2024 GMT Subject: CN=6649433b-ce98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:b0:f4:8c:0b:95:86:d8:8e:03:26:b9:b4: 4c:aa:f0:ef:25:8d:31:7e:ef:c2:a9:85:a3:48:25: 89:08:d7:d8:bd:8c:c7:a7:1f:6b:34:57:eb:1b:ea: 96:8a:37:90:c6:54:19:74:d3:fb:a7:8b:07:55:00: c6:80:7a:38:a5:ad:bc:1c:74:57:21:6d:4d:2e:3b: 36:6a:05:3d:dd:8c:e5:72:ca:ad:af:5b:a9:b2:21: 13:8d:d0:44:37:de:ce:0b:a8:18:0f:cc:f9:f8:06: c8:8b:d4:bb:f9:39:03:db:1b:99:61:99:dd:37:15: a8:02:6d:ab:4f:4e:d4:dc:3d:5c:35:af:41:cc:c9: e3:73:17:20:1a:55:fa:18:6f:ce:4a:f1:70:41:fb: e4:4c:77:f7:3f:dd:b5:e6:81:11:1c:06:50:90:c3: a1:e1:04:56:be:5e:1e:98:71:19:cd:3c:8c:25:da: 74:9f:3f:c3:ec:66:ab:15:de:04:e1:b3:d3:85:20: 5d:fa:30:60:87:02:00:a7:88:d1:b0:0f:8a:c7:01: 80:94:26:8f:22:62:ea:02:65:b8:08:8e:da:d1:d7: a7:de:d9:07:fd:3f:9c:ed:a2:e6:e9:95:df:c7:09: 97:a7:92:e3:dc:54:b3:c4:78:45:95:1c:cb:aa:a3: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1B:87:F5:17:4D:07:2E:33:64:1A:E9:C1:31:96:87:F6:F9:16:64 X509v3 Authority Key Identifier: keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b6:04:f9:89:b2:5b:4f:bf:22:f5:bd:20:3d:ff:2b:ac:77: 20:88:89:8a:af:24:7a:a6:c7:00:17:1b:ac:f0:2e:39:ca:ac: 33:10:40:35:6b:e1:13:a1:65:c2:ee:a4:87:1e:a7:f1:71:c2: ed:d5:39:bc:ff:dc:1f:4e:d4:17:0f:09:0f:10:82:e0:57:2b: ab:45:ef:41:6e:13:06:ca:7b:b9:9b:b4:6c:5d:78:22:54:8e: 62:0b:5f:06:25:95:12:55:e5:23:cc:6d:ca:fa:82:fa:b9:1d: dd:b1:83:68:31:3d:69:b4:2a:4a:ad:89:c8:f0:2a:97:94:7d: 10:06:29:5a:01:1a:dc:9f:6e:86:8f:b1:2c:01:84:67:4f:98: df:93:25:b7:e9:e9:d7:ae:64:e3:87:2e:f2:3e:ae:c0:e7:52: 63:2c:d4:35:50:e9:bc:95:bf:fa:99:35:a8:9e:e5:9f:4c:9f: 9b:43:d5:af:9a:58:fa:87:60:61:3a:b7:ee:36:5d:17:70:1c: c7:5a:47:97:07:79:f7:fa:41:00:aa:90:fc:6d:c1:82:72:56: 7f:8c:31:f4:31:b8:d6:36:95:d6:ac:26:4e:85:d8:7f:92:10: 67:4e:15:29:be:86:18:25:e0:0c:2a:81:0a:28:15:13:96:f9: 4a:71:98:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5 NUMyRENBMTIwHhcNMjQwNTE5MDAwOTMxWhcNMjQwNTI2MDAwOTMxWjAYMRYwFAYD VQQDEw02NjQ5NDMzYi1jZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfmw9IwLlYbYjgMmubRMqvDvJY0xfu/CqYWjSCWJCNfYvYzHpx9rNFfrG+qW ijeQxlQZdNP7p4sHVQDGgHo4pa28HHRXIW1NLjs2agU93Yzlcsqtr1upsiETjdBE N97OC6gYD8z5+AbIi9S7+TkD2xuZYZndNxWoAm2rT07U3D1cNa9BzMnjcxcgGlX6 GG/OSvFwQfvkTHf3P9215oERHAZQkMOh4QRWvl4emHEZzTyMJdp0nz/D7GarFd4E 4bPThSBd+jBghwIAp4jRsA+KxwGAlCaPImLqAmW4CI7a0den3tkH/T+c7aLm6ZXf xwmXp5Lj3FSzxHhFlRzLqqMiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQbh/UX TQcuM2Qa6cExlof2+RZkMB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3 NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDIyRi83QzY0NDQyNjc3NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1 aVFXRVhYTTlsRjJWd3R5aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACtgT5ibJbT78i9b0gPf8rrHcgiImKryR6pscAFxus8C45yqwzEEA1 a+EToWXC7qSHHqfxccLt1Tm8/9wfTtQXDwkPEILgVyurRe9BbhMGynu5m7RsXXgi VI5iC18GJZUSVeUjzG3K+oL6uR3dsYNoMT1ptCpKrYnI8CqXlH0QBilaARrcn26G j7EsAYRnT5jfkyW36enXrmTjhy7yPq7A51JjLNQ1UOm8lb/6mTWonuWfTJ+bQ9Wv mlj6h2BhOrfuNl0XcBzHWkeXB3n3+kEAqpD8bcGCclZ/jDH0MbjWNpXWrCZOhdh/ khBnThUpvoYYJeAMKoEKKBUTlvlKcZhH -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org