$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft File: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft (raw, json) Hash identifier: 2rXIPJj7XjjVR9am+bjapM/ZDy36DzzYjS3JdOveLrY= Subject key identifier: F6:21:68:5D:DD:50:40:28:38:46:06:81:A4:5F:4C:93:2F:E7:C5:AE Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8 Certificate issuer: /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8 Certificate serial: 0636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft Manifest number: 0B40 Signing time: Thu 30 May 2024 20:04:40 +0000 Manifest this update: Thu 30 May 2024 20:04:39 +0000 Manifest next update: Thu 06 Jun 2024 20:04:39 +0000 Files and hashes: 1: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl (hash: zURo6zbScFdP4NJvuScdFU6lgwa+YeoYkv/vnVZA340=) 2: 8C13C84069D311EB9DC5D465C4F9AE02.roa (hash: Pcmg23dGzGuCXS6ODObdUydnNvyMglPj9u46qG1/D2Q=) 3: 01283BC2532011EBAE6D1F37C4F9AE02.roa (hash: C3dY5ecFJxjsgmNOMT+co74zHmVNtSHjOrdCGdOQBUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8 Validity Not Before: May 30 20:04:39 2024 GMT Not After : Jun 6 20:04:39 2024 GMT Subject: CN=6658dbd8-aa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:f4:cb:d8:9d:47:50:4f:36:22:e2:e1:78: 61:ff:ff:44:e4:40:ff:c9:49:41:62:b3:7f:fe:77: 4a:5f:21:6c:ab:1b:89:0d:d2:a9:93:9c:45:43:ca: 5d:6f:72:11:4d:ff:bd:c0:92:af:8c:06:5d:4a:d5: a1:a6:df:77:fd:8e:2c:b6:25:96:8c:d3:2f:df:ba: 24:37:46:11:a7:49:76:b4:2a:b2:7b:2f:a6:d6:8f: 72:a3:53:0f:78:cf:5a:61:c3:8c:a5:2c:62:0e:91: 01:22:9f:e5:7c:a1:a1:0e:fb:5a:be:8d:ef:96:34: e5:81:d3:86:a6:66:71:46:30:73:7e:a2:c5:72:b7: 4c:c5:4f:14:65:2c:c6:bb:da:27:da:20:42:c4:24: 7e:f6:8c:d9:4a:c3:bd:23:d4:7b:2a:fd:c2:6a:d9: f0:47:2e:de:d6:56:15:d6:33:11:44:a7:2a:e4:43: 2e:11:25:76:91:25:71:14:ef:69:f6:55:f1:51:bb: fc:8c:01:cc:51:0b:40:73:7e:ef:d3:52:e2:ea:37: fe:00:5e:87:4e:95:d8:cb:c2:79:f2:0b:0f:01:cc: aa:7b:73:89:ca:b7:16:b8:cb:f6:b5:e7:29:82:1e: 11:12:6f:db:f9:78:39:37:8c:dc:e3:9d:f4:1e:fd: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:21:68:5D:DD:50:40:28:38:46:06:81:A4:5F:4C:93:2F:E7:C5:AE X509v3 Authority Key Identifier: keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8a:c5:f7:97:9e:81:04:91:8a:63:fa:ab:7e:12:d9:05:05: 42:39:8b:f5:36:62:c8:2c:9d:96:82:29:33:37:5c:bf:41:6e: d7:8c:1a:7d:3a:51:36:ec:f4:b2:15:b0:e3:08:98:62:b3:73: 52:7c:e2:c7:47:05:d9:a2:9f:72:bb:60:33:85:71:ad:fd:a2: 1f:da:15:02:bd:e5:a6:73:bc:f4:3a:65:2d:39:64:b3:c8:a9: 9d:41:e0:11:ca:97:64:88:bd:3d:25:c9:16:66:e9:28:11:4b: 73:c2:05:d0:fc:a3:a2:63:97:7f:65:a4:4e:50:df:80:e2:6a: 0a:35:6c:17:4c:ff:a8:6e:21:50:e3:f1:5d:2f:57:5c:7f:0e: f1:12:95:7d:9f:20:05:1b:f0:cb:2c:33:a9:72:78:87:33:57: 02:44:3d:26:c3:54:db:38:01:b8:e7:7f:28:c4:6f:31:1a:af: 69:89:57:36:fb:78:1a:75:b6:54:80:ef:4c:89:de:13:c8:eb: ea:b6:74:1b:c2:1d:5d:94:c5:72:c0:95:a7:16:4a:12:76:19: 44:14:01:58:86:1f:03:da:9a:9f:18:7c:61:9a:6e:61:e9:3b: 4b:98:7e:69:cd:b0:57:d7:c5:79:b5:aa:89:fe:8c:ca:10:81: bb:aa:37:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0NzUxMTAvBgNVBAUTKDIyODUwN0VGRjgxQUEyOEU0OTFFMzI2RkJEMURDM0Iz QzkwODcyQjgwHhcNMjQwNTMwMjAwNDM5WhcNMjQwNjA2MjAwNDM5WjAYMRYwFAYD VQQDEw02NjU4ZGJkOC1hYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFf0y9idR1BPNiLi4Xhh//9E5ED/yUlBYrN//ndKXyFsqxuJDdKpk5xFQ8pd b3IRTf+9wJKvjAZdStWhpt93/Y4stiWWjNMv37okN0YRp0l2tCqyey+m1o9yo1MP eM9aYcOMpSxiDpEBIp/lfKGhDvtavo3vljTlgdOGpmZxRjBzfqLFcrdMxU8UZSzG u9on2iBCxCR+9ozZSsO9I9R7Kv3CatnwRy7e1lYV1jMRRKcq5EMuESV2kSVxFO9p 9lXxUbv8jAHMUQtAc37v01Li6jf+AF6HTpXYy8J58gsPAcyqe3OJyrcWuMv2tecp gh4REm/b+Xg5N4zc4530Hv1AzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYhaF3d UEAoOEYGgaRfTJMv58WuMB8GA1UdIwQYMBaAFCKFB+/4GqKOSR4yb70dw7PJCHK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQ3NS9FMDIyQTA1ODBF OTExMUVBQjBFODc0NDFDNEY5QUUwMi9Jb1VIN19nYW9vNUpIakp2dlIzRHM4a0lj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvVUg3X2dhb281SkhqSnZ2UjNEczhrSWNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQ3NS9FMDIyQTA1ODBFOTExMUVBQjBFODc0NDFDNEY5QUUwMi9Jb1VIN19nYW9v NUpIakp2dlIzRHM4a0ljcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZisX3l56BBJGKY/qrfhLZBQVCOYv1NmLILJ2WgikzN1y/QW7XjBp9 OlE27PSyFbDjCJhis3NSfOLHRwXZop9yu2AzhXGt/aIf2hUCveWmc7z0OmUtOWSz yKmdQeARypdkiL09JckWZukoEUtzwgXQ/KOiY5d/ZaROUN+A4moKNWwXTP+obiFQ 4/FdL1dcfw7xEpV9nyAFG/DLLDOpcniHM1cCRD0mw1TbOAG4538oxG8xGq9piVc2 +3gadbZUgO9Mid4TyOvqtnQbwh1dlMVywJWnFkoSdhlEFAFYhh8D2pqfGHxhmm5h 6TtLmH5pzbBX18V5taqJ/ozKEIG7qje5 -----END CERTIFICATE-----Generated at Thu May 30 20:35:32 2024 by rpki-client on console-fra.rpki-client.org