$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: O9PGHJZs9my/d1K8reQDZMQ1vmWCFDJXuBrpKqaQuzs= Subject key identifier: E2:01:9F:8F:97:56:15:F4:7C:AF:0B:AB:CE:79:1A:7A:41:29:B5:0D Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 0653 Signing time: Sat 18 May 2024 23:38:19 +0000 Manifest this update: Sat 18 May 2024 23:38:18 +0000 Manifest next update: Sat 25 May 2024 23:38:18 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: 4eBF8lXajkgU1yf3nSNz0Ggf3vUNESOUOvQRmKhBJgQ=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: egE4N/qKr2iW2AJr7yaLioX9jscnmyrfB7Bs35ulzKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: May 18 23:38:18 2024 GMT Not After : May 25 23:38:18 2024 GMT Subject: CN=66493bea-8518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:07:96:8d:c1:73:57:d3:0f:42:5f:99:ff: e6:9e:f3:51:23:50:17:51:b9:1f:63:6d:4d:fb:06: 46:8a:92:2a:c8:d0:44:3c:df:8c:02:b0:b5:0b:69: 6c:fa:ce:b0:47:c6:c1:f0:f5:17:23:54:c5:f3:b2: e8:3d:16:b2:b2:c7:f6:96:97:fc:ab:4a:7d:d5:b4: c1:d7:d8:9a:b7:b6:1b:42:87:10:aa:d3:35:ed:53: 2d:71:8f:11:9c:f7:f8:05:4f:1e:32:25:b4:11:aa: a9:84:58:ae:58:c7:a5:ac:31:2b:5c:66:07:cd:1f: 1d:55:db:02:ec:a9:1c:ba:e9:9b:63:77:94:03:54: 91:c4:46:7a:e7:58:96:ef:cc:94:f4:3f:11:c3:83: 0d:5d:ad:54:dd:d2:16:a0:b9:5d:c4:91:51:b5:6e: 56:40:4f:9b:0a:3b:87:5d:50:71:66:4a:0c:37:47: 92:3e:eb:89:49:50:30:f3:25:b6:d8:02:2a:ce:56: 45:eb:8c:9a:08:98:af:12:1a:62:d4:2d:67:87:89: ad:6b:5b:82:a7:7a:10:a3:08:6e:e3:5a:f4:fa:ee: 55:2f:69:6f:25:88:93:2b:ce:da:f8:7c:4b:91:85: 39:d9:dc:d9:d3:be:9a:2a:7d:d7:4a:1b:72:61:ee: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:01:9F:8F:97:56:15:F4:7C:AF:0B:AB:CE:79:1A:7A:41:29:B5:0D X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ff:22:c3:7d:c7:e7:21:50:d6:1a:66:41:25:e3:02:cc:78: 1e:0d:e9:eb:4e:05:16:fc:fe:ae:79:ed:44:6e:ef:8f:a2:0d: 5e:0c:f4:ae:ce:7e:99:1b:bb:c1:d3:f0:fc:60:cc:1d:76:43: e6:9b:cb:84:c5:3c:ed:13:2e:27:10:c9:de:cf:d0:2d:33:30: 92:50:fb:e9:2d:1e:b4:f9:af:14:24:ec:4e:41:0d:4e:cd:70: 65:d6:ee:44:09:69:24:3c:65:56:2d:b6:f9:7e:0c:fe:d2:22: d7:9d:09:ae:49:37:96:83:fb:a5:6f:e9:57:c0:d7:d3:79:82: 65:7a:6e:5e:8e:b7:0b:ff:55:bf:48:26:c2:2c:1c:06:a1:7d: b0:4b:14:10:a1:82:53:09:08:87:b0:9b:6c:80:cd:d7:db:6b: a1:2e:eb:61:6a:d1:ef:17:4a:7f:7b:16:60:8c:e4:a9:84:a4: 28:33:d8:5f:e6:84:46:70:2a:5b:30:a8:b7:41:aa:d8:39:ee: d6:61:1b:00:a6:9a:51:db:a6:d4:a6:fc:53:ea:7a:bb:76:f1: 3f:4d:f3:8a:6b:92:df:f4:31:c7:a0:31:91:80:0d:88:57:f5: 34:b5:70:38:72:c6:4a:fb:53:12:3e:cb:b9:0c:a6:03:ea:28: f0:d4:27:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjQwNTE4MjMzODE4WhcNMjQwNTI1MjMzODE4WjAYMRYwFAYD VQQDEw02NjQ5M2JlYS04NTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucoHlo3Bc1fTD0Jfmf/mnvNRI1AXUbkfY21N+wZGipIqyNBEPN+MArC1C2ls +s6wR8bB8PUXI1TF87LoPRayssf2lpf8q0p91bTB19iat7YbQocQqtM17VMtcY8R nPf4BU8eMiW0EaqphFiuWMelrDErXGYHzR8dVdsC7KkcuumbY3eUA1SRxEZ651iW 78yU9D8Rw4MNXa1U3dIWoLldxJFRtW5WQE+bCjuHXVBxZkoMN0eSPuuJSVAw8yW2 2AIqzlZF64yaCJivEhpi1C1nh4mta1uCp3oQowhu41r0+u5VL2lvJYiTK87a+HxL kYU52dzZ076aKn3XShtyYe53+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIBn4+X VhX0fK8Lq855GnpBKbUNMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx/yLDfcfnIVDWGmZBJeMCzHgeDenrTgUW/P6uee1Ebu+Pog1eDPSu zn6ZG7vB0/D8YMwddkPmm8uExTztEy4nEMnez9AtMzCSUPvpLR60+a8UJOxOQQ1O zXBl1u5ECWkkPGVWLbb5fgz+0iLXnQmuSTeWg/ulb+lXwNfTeYJlem5ejrcL/1W/ SCbCLBwGoX2wSxQQoYJTCQiHsJtsgM3X22uhLuthatHvF0p/exZgjOSphKQoM9hf 5oRGcCpbMKi3QarYOe7WYRsApppR26bUpvxT6nq7dvE/TfOKa5Lf9DHHoDGRgA2I V/U0tXA4csZK+1MSPsu5DKYD6ijw1CcW -----END CERTIFICATE-----Generated at Sun May 19 00:16:14 2024 by rpki-client on console-fra.rpki-client.org