$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json) Hash identifier: Me9bPXHs9Hc2AfsKG3HVCqgGAyrrdKDM7ZsA0sIdgME= Subject key identifier: B4:C9:FC:CF:73:B8:2E:CF:22:09:E8:81:EC:18:2D:05:D1:4C:6A:FC Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft Manifest number: 13 Signing time: Sun 19 May 2024 08:49:19 +0000 Manifest this update: Sun 19 May 2024 08:49:19 +0000 Manifest next update: Sun 26 May 2024 08:49:19 +0000 Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: hZiLjE4Yzq6syDDLuHxfkJSnxAkkUvI7A0f4qJwKDPU=) 2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: eWHgPofXBpaqUsdaPrMnYH8r6v4MNKIwylvK1ZXMYaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Validity Not Before: May 19 08:49:19 2024 GMT Not After : May 26 08:49:19 2024 GMT Subject: CN=6649bd0f-3fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:35:d9:95:95:a7:d6:88:c1:a0:51:64:43:db: 53:fc:48:46:96:2e:c7:a0:b3:0d:7e:00:9d:d4:ab: d8:c6:23:1f:a5:f4:82:90:3e:4b:65:60:fa:c9:4a: d6:68:43:85:db:d7:42:6c:ff:50:fa:80:96:71:1f: cd:e0:f5:6c:20:6a:32:5e:16:61:de:e9:e6:06:9b: f3:c6:77:f4:d2:dc:30:ed:ec:de:24:ea:38:bd:f6: dd:93:85:62:c7:d8:f0:80:52:cd:f5:d0:83:7f:b4: ce:84:5a:3a:c1:ed:8a:5f:35:12:15:be:d5:f2:03: 01:95:dd:8c:6b:36:2a:54:14:de:1c:02:73:cc:ea: 44:b4:2b:40:97:fd:dd:e3:c5:ec:83:ae:e1:df:38: 29:b5:83:b2:1d:57:54:47:6b:cf:e9:24:a8:6c:fe: 54:48:a7:99:76:36:4a:4a:37:52:8d:2d:ca:5c:64: ef:ea:06:93:cf:39:b2:e8:b2:25:ed:c1:42:df:13: cf:63:66:db:d7:69:d4:db:ab:df:7a:be:99:58:7a: 9d:f1:04:4b:03:8b:2d:5e:0c:af:72:ba:c6:c9:31: 15:be:e7:d0:c1:05:cc:2e:2c:da:70:4e:22:67:6d: 3f:ff:1e:cb:6a:d4:88:ae:4d:94:3f:04:f6:d6:54: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C9:FC:CF:73:B8:2E:CF:22:09:E8:81:EC:18:2D:05:D1:4C:6A:FC X509v3 Authority Key Identifier: keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b3:89:1e:64:4e:51:d0:aa:fb:e5:e8:fd:5a:be:51:0c:50: 39:a6:d7:73:da:7e:aa:df:2c:f7:1d:bf:91:7c:b7:cb:dc:0a: 39:ed:65:8a:12:62:f5:b9:2d:5f:a4:58:48:4a:47:37:c9:fe: 99:3b:f9:47:de:4d:2b:b4:38:5e:57:f6:ef:89:56:ed:9b:d0: f0:bb:86:d2:53:24:92:df:56:58:b3:a1:3e:c4:6b:54:70:d5: 29:6e:bc:d4:50:b5:77:95:ff:cc:13:c0:b6:20:11:d2:89:b7: af:66:bd:79:97:f1:fd:2b:68:40:d3:15:74:a4:54:ef:02:06: 40:64:e2:fc:8a:c2:22:3f:97:d4:10:39:76:85:1b:6c:7f:1a: 2a:ed:4e:1b:25:4c:1a:fb:83:73:45:af:b0:0a:24:75:d1:36: 4d:ce:26:90:6e:fd:db:1f:83:a2:d3:c1:05:d2:39:77:d7:1c: 47:94:9d:43:36:69:ee:58:58:14:35:8d:88:5f:da:54:e1:d3: ba:6f:1c:e3:26:24:2c:c0:df:90:e6:3d:c4:4a:e7:f7:29:f9: 68:3b:e0:dc:b0:5f:41:a0:10:da:cd:7b:b9:a0:26:34:7f:f5: 8c:94:b4:28:e3:1e:68:80:02:67:b5:b6:a6:9f:99:af:80:eb: 34:e7:f6:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkRBNzExMC8GA1UEBRMoOEEyODJEMUM4RjkwQzMwRDY1OUU2RDhDMEI5QkU0MjIx QzI1MzE5QzAeFw0yNDA1MTkwODQ5MTlaFw0yNDA1MjYwODQ5MTlaMBgxFjAUBgNV BAMTDTY2NDliZDBmLTNmZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaNdmVlafWiMGgUWRD21P8SEaWLsegsw1+AJ3Uq9jGIx+l9IKQPktlYPrJStZo Q4Xb10Js/1D6gJZxH83g9WwgajJeFmHe6eYGm/PGd/TS3DDt7N4k6ji99t2ThWLH 2PCAUs310IN/tM6EWjrB7YpfNRIVvtXyAwGV3YxrNipUFN4cAnPM6kS0K0CX/d3j xeyDruHfOCm1g7IdV1RHa8/pJKhs/lRIp5l2NkpKN1KNLcpcZO/qBpPPObLosiXt wULfE89jZtvXadTbq996vplYep3xBEsDiy1eDK9yusbJMRW+59DBBcwuLNpwTiJn bT//Hstq1IiuTZQ/BPbWVPI1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtMn8z3O4 Ls8iCeiB7BgtBdFMavwwHwYDVR0jBBgwFoAUiigtHI+Qww1lnm2MC5vkIhwlMZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREE3LzQ1QkNGQzMwRkQy OTExRUVBNjI5QUU2MkM0RjlBRTAyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1a dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWlndEhJLVF3dzFsbm0yTUM1dmtJaHdsTVp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REE3LzQ1QkNGQzMwRkQyOTExRUVBNjI5QUU2MkM0RjlBRTAyL2lpZ3RISS1Rd3cx bG5tMk1DNXZrSWh3bE1ady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+ziR5kTlHQqvvl6P1avlEMUDmm13PafqrfLPcdv5F8t8vcCjntZYoS YvW5LV+kWEhKRzfJ/pk7+UfeTSu0OF5X9u+JVu2b0PC7htJTJJLfVlizoT7Ea1Rw 1SluvNRQtXeV/8wTwLYgEdKJt69mvXmX8f0raEDTFXSkVO8CBkBk4vyKwiI/l9QQ OXaFG2x/GirtThslTBr7g3NFr7AKJHXRNk3OJpBu/dsfg6LTwQXSOXfXHEeUnUM2 ae5YWBQ1jYhf2lTh07pvHOMmJCzA35DmPcRK5/cp+Wg74NywX0GgENrNe7mgJjR/ 9YyUtCjjHmiAAme1tqafma+A6zTn9nQ= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org