$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft File: ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json) Hash identifier: jNgaZ72uORV198DQ7tD3sDZKw8Zw4LQZliP4Z0OtjKQ= Subject key identifier: 32:FF:2B:30:C3:7A:6C:48:41:0F:BE:B6:5C:37:10:0A:32:96:5F:0B Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft Manifest number: AA Signing time: Fri 31 May 2024 07:33:43 +0000 Manifest this update: Fri 31 May 2024 07:33:42 +0000 Manifest next update: Fri 07 Jun 2024 07:33:42 +0000 Files and hashes: 1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: JHLqhVtu7xt+8QreDXwf7NuJr6qSScZHeJ6nxKUKX4o=) 2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: FW53rlrjqKHJK94aR4EnZt9IrMO+EQKuZBZoAjfuW84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Validity Not Before: May 31 07:33:42 2024 GMT Not After : Jun 7 07:33:42 2024 GMT Subject: CN=66597d57-016b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:60:a8:48:bd:d2:9e:c0:30:3b:02:45:22: 84:07:30:b5:89:69:a8:2d:a9:46:11:b1:ae:64:28: 52:50:29:79:bd:e4:36:55:be:fc:b3:4c:2c:39:17: 9c:ee:c0:5f:0d:ad:cd:5f:2a:18:01:18:34:ac:9f: 37:79:e4:49:8f:36:70:99:46:26:a1:5e:7c:67:fd: d0:ed:ec:24:ce:6b:1a:34:ce:e4:3b:e0:6d:c8:da: 6c:bc:81:88:41:26:35:a3:f2:e7:ad:d5:c4:9e:c0: 2c:3c:7b:7a:91:c1:e5:b9:0b:b6:03:fc:f9:7e:29: a6:ba:81:f9:ef:11:c5:5f:5a:f8:07:f9:f4:a6:91: 14:08:18:58:0f:91:50:7e:62:22:70:04:5b:fd:03: f3:92:21:5e:e6:7c:23:5b:58:82:9c:09:8d:cc:5b: 30:28:2a:d3:6e:3b:98:8d:7b:04:34:28:15:f5:2b: 4e:99:f5:d2:8a:e2:7f:c0:a7:d0:ed:2d:c8:d6:c1: a6:71:23:34:8a:85:23:35:58:f2:42:60:39:51:9d: f4:ec:ba:e5:e1:2d:04:f2:a3:f2:c9:95:02:a7:8d: b9:28:25:8f:3b:73:19:f9:76:55:d2:4f:14:c3:4c: dc:b3:d8:36:e4:97:a7:e8:70:80:10:ee:67:22:07: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:2B:30:C3:7A:6C:48:41:0F:BE:B6:5C:37:10:0A:32:96:5F:0B X509v3 Authority Key Identifier: keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:17:0f:ad:9a:e6:78:a3:57:2c:1f:9f:19:7a:78:81:23:f7: 66:63:b4:de:13:52:16:ff:0a:fe:cb:dd:65:52:dc:54:d1:20: 9b:e4:03:08:3b:8b:78:ea:21:2e:14:73:db:12:d3:94:f2:f7: 60:6a:03:24:ba:55:75:ca:6a:2a:e6:47:48:0f:57:92:0a:e2: 06:96:05:b2:4f:9b:13:8a:cb:9c:34:8d:e8:f5:29:92:1a:c1: 9d:f9:69:c5:57:75:d7:17:0b:15:49:ac:67:79:53:55:6d:fb: 65:5b:42:5c:d2:2e:53:a4:a0:b2:d6:3c:c8:56:00:ad:5c:df: ca:66:e4:73:e8:54:af:39:35:a7:24:9d:b4:aa:5a:dc:74:6b: ca:be:06:b7:65:d1:cd:98:2a:b7:38:0d:ad:9e:6c:44:63:f4: 57:c5:b4:51:b8:d1:69:0f:f7:16:09:e6:43:fa:f8:76:8e:93: 19:a2:e3:e1:b9:10:c9:6d:bc:39:13:5d:3f:3c:d2:b4:37:c8: 01:83:da:3f:ef:52:19:c4:bf:b0:2d:7a:f7:78:be:14:b5:d1: 0d:d1:4a:e9:f4:16:c3:f7:2c:34:61:2f:74:63:e9:c3:c4:e9: 0c:4d:e6:ac:88:d8:3d:98:6d:77:21:2a:ea:ce:ae:e3:c7:05: 70:80:8b:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNzYxMTAvBgNVBAUTKDhBNTgxNjU1QzkyMkE3QTUxMjFFMDBGQjdBNDI3RTAx OUFDNzMwN0IwHhcNMjQwNTMxMDczMzQyWhcNMjQwNjA3MDczMzQyWjAYMRYwFAYD VQQDEw02NjU5N2Q1Ny0wMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeJgqEi90p7AMDsCRSKEBzC1iWmoLalGEbGuZChSUCl5veQ2Vb78s0wsORec 7sBfDa3NXyoYARg0rJ83eeRJjzZwmUYmoV58Z/3Q7ewkzmsaNM7kO+BtyNpsvIGI QSY1o/LnrdXEnsAsPHt6kcHluQu2A/z5fimmuoH57xHFX1r4B/n0ppEUCBhYD5FQ fmIicARb/QPzkiFe5nwjW1iCnAmNzFswKCrTbjuYjXsENCgV9StOmfXSiuJ/wKfQ 7S3I1sGmcSM0ioUjNVjyQmA5UZ307Lrl4S0E8qPyyZUCp425KCWPO3MZ+XZV0k8U w0zcs9g25Jen6HCAEO5nIgc0MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL/KzDD emxIQQ++tlw3EAoyll8LMB8GA1UdIwQYMBaAFIpYFlXJIqelEh4A+3pCfgGaxzB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM3Ni9BMzU3RDc5NjIw OEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2VVNIZ0Q3ZWtKLUFackhN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lsZ1dWY2tpcDZVU0hnRDdla0otQVpySE1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM3Ni9BMzU3RDc5NjIwOEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2 VVNIZ0Q3ZWtKLUFackhNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFFw+tmuZ4o1csH58ZeniBI/dmY7TeE1IW/wr+y91lUtxU0SCb5AMI O4t46iEuFHPbEtOU8vdgagMkulV1ymoq5kdID1eSCuIGlgWyT5sTisucNI3o9SmS GsGd+WnFV3XXFwsVSaxneVNVbftlW0Jc0i5TpKCy1jzIVgCtXN/KZuRz6FSvOTWn JJ20qlrcdGvKvga3ZdHNmCq3OA2tnmxEY/RXxbRRuNFpD/cWCeZD+vh2jpMZouPh uRDJbbw5E10/PNK0N8gBg9o/71IZxL+wLXr3eL4UtdEN0Urp9BbD9yw0YS90Y+nD xOkMTeasiNg9mG13ISrqzq7jxwVwgIul -----END CERTIFICATE-----Generated at Fri May 31 10:01:44 2024 by rpki-client on console-ams.rpki-client.org