$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: msBBtdWCyJv4fBOcFOMWkuSGMqFwCUERxICYkqUv+Tg= Subject key identifier: 99:2F:F7:99:6C:07:5B:32:4D:EF:34:3D:77:87:9F:90:8F:01:B1:42 Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 0710 Signing time: Sat 18 May 2024 16:20:07 +0000 Manifest this update: Sat 18 May 2024 16:20:07 +0000 Manifest next update: Sat 25 May 2024 16:20:07 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: wttl39zHwg9UI1zeLRbtxy1GhOEv8v/g6eSxsWChZfk=) 2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: gYJqe1joyytxkN1ZytJH28Ehz1uUP2ymtDRMZmWEPps=) 3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: pT4OFb0Ut3O3WHsP00oq6WU/Xt3BvFk/JWRe+d3rVAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: May 18 16:20:07 2024 GMT Not After : May 25 16:20:07 2024 GMT Subject: CN=6648d537-5d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:15:32:21:49:32:34:bd:d0:cc:98:b6:88: 49:c0:e4:12:ca:9f:b9:d5:ca:c4:2b:60:f6:a7:22: ff:d7:16:a9:ba:bc:71:18:23:f0:23:ce:73:53:c3: 28:17:9f:92:e3:cc:c0:1b:cd:d4:ea:2d:29:34:af: fd:8b:08:99:71:39:af:89:27:fc:f2:e9:a1:c5:b5: d9:95:5d:2d:b7:2d:e1:e7:f7:fd:9f:7a:cb:e8:a3: d2:20:1f:ff:f0:98:07:13:16:12:5c:88:39:4b:97: ac:61:cf:b9:53:96:c1:1b:3e:42:02:4d:1b:da:a9: 62:bb:c1:06:e5:ea:d8:69:dd:b6:82:4b:c4:61:13: b8:1e:89:5a:47:84:22:f0:1f:6e:2b:9f:cb:c7:50: d4:e9:2c:67:05:21:b2:0b:36:94:93:e6:17:b9:44: 5c:e0:6d:d1:36:9c:db:3e:9b:b3:46:22:ad:60:e2: 4c:78:8a:77:60:e5:9f:fa:a3:76:e2:e7:19:e4:ee: 95:b6:8f:38:6a:b7:b5:d0:5c:6e:cd:e6:a4:03:f0: cc:79:14:6b:7c:3f:0b:95:29:5c:77:fe:a0:7c:ff: b4:b4:bd:7d:76:c4:db:e1:9e:b1:7b:04:a4:d2:91: c2:10:40:b2:02:10:5c:43:2c:c0:ff:65:ae:d6:0c: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2F:F7:99:6C:07:5B:32:4D:EF:34:3D:77:87:9F:90:8F:01:B1:42 X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:c8:1b:b4:8e:bf:82:0f:a2:9d:fc:04:ee:01:55:07:42:40: 6f:22:41:0e:28:0c:4a:b1:af:d1:47:b5:2a:41:fd:8b:34:72: d3:bf:48:30:92:2e:0e:13:98:25:83:26:bf:25:8d:30:32:cf: 06:e1:67:52:8d:cf:41:ab:a7:ff:b7:dd:6e:7f:8c:bd:f7:e7: cd:f5:eb:ba:1e:4e:00:7d:c7:26:8e:11:49:ff:d8:34:c6:56: c3:ca:e0:60:d0:b2:c4:02:d2:ba:40:21:26:88:7d:6c:a0:8b: e1:7b:13:e9:b6:5c:78:ea:71:88:96:76:de:e9:14:d5:90:48: 7c:b1:eb:e8:3f:8f:66:ea:f0:31:e8:02:22:3a:46:e4:6c:7b: 25:5c:de:b9:30:28:ae:f0:99:bd:f6:7d:da:1a:4c:d8:f0:f4: c8:00:70:94:db:07:79:5c:d1:ca:bb:5f:f2:2c:12:25:c5:a6: 15:e6:12:08:fe:f5:1e:7b:fb:83:36:09:3a:6b:63:16:50:e0: 75:28:e7:bb:2d:54:0b:16:35:79:d0:06:0c:99:bf:23:1e:18: 1e:3f:69:29:e5:bb:76:d4:9c:e5:2e:f7:4e:b2:bd:e2:e9:39: a2:a3:1b:39:0b:77:b8:85:dd:7c:a9:f5:bc:f5:33:f2:8e:4b: bb:2d:c6:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjQwNTE4MTYyMDA3WhcNMjQwNTI1MTYyMDA3WjAYMRYwFAYD VQQDEw02NjQ4ZDUzNy01ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BEVMiFJMjS90MyYtohJwOQSyp+51crEK2D2pyL/1xapurxxGCPwI85zU8Mo F5+S48zAG83U6i0pNK/9iwiZcTmviSf88umhxbXZlV0tty3h5/f9n3rL6KPSIB// 8JgHExYSXIg5S5esYc+5U5bBGz5CAk0b2qliu8EG5erYad22gkvEYRO4HolaR4Qi 8B9uK5/Lx1DU6SxnBSGyCzaUk+YXuURc4G3RNpzbPpuzRiKtYOJMeIp3YOWf+qN2 4ucZ5O6Vto84are10FxuzeakA/DMeRRrfD8LlSlcd/6gfP+0tL19dsTb4Z6xewSk 0pHCEECyAhBcQyzA/2Wu1gz+pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkv95ls B1syTe80PXeHn5CPAbFCMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyyBu0jr+CD6Kd/ATuAVUHQkBvIkEOKAxKsa/RR7UqQf2LNHLTv0gw ki4OE5glgya/JY0wMs8G4WdSjc9Bq6f/t91uf4y99+fN9eu6Hk4AfccmjhFJ/9g0 xlbDyuBg0LLEAtK6QCEmiH1soIvhexPptlx46nGIlnbe6RTVkEh8sevoP49m6vAx 6AIiOkbkbHslXN65MCiu8Jm99n3aGkzY8PTIAHCU2wd5XNHKu1/yLBIlxaYV5hII /vUee/uDNgk6a2MWUOB1KOe7LVQLFjV50AYMmb8jHhgeP2kp5bt21JzlLvdOsr3i 6Tmioxs5C3e4hd18qfW89TPyjku7LcYK -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org