$ rpki-client -vvf rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.mft File: II1GFNCXXVXjphjK5xdsVlfLvVc.mft (raw, json) Hash identifier: ssfcYwh39GwCR0xW8zY9SxhJTGQpsqeZF9OvvWsDNpI= Subject key identifier: 2E:17:01:6F:49:E3:22:E3:4E:60:2A:C0:42:B0:79:D0:43:55:9D:02 Authority key identifier: 20:8D:46:14:D0:97:5D:55:E3:A6:18:CA:E7:17:6C:56:57:CB:BD:57 Certificate issuer: /CN=A9164BA0/serialNumber=208D4614D0975D55E3A618CAE7176C5657CBBD57 Certificate serial: 11E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/II1GFNCXXVXjphjK5xdsVlfLvVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.mft Manifest number: 11D7 Signing time: Sat 18 May 2024 17:44:20 +0000 Manifest this update: Sat 18 May 2024 17:44:20 +0000 Manifest next update: Sat 25 May 2024 17:44:20 +0000 Files and hashes: 1: II1GFNCXXVXjphjK5xdsVlfLvVc.crl (hash: pThLKzqYgn/n+zPaguzN6Us9Ri2ERHKA4IZ+r/xOAbQ=) 2: C99FCC04C98911EEB202774EC4F9AE02.roa (hash: CN513gptpgWOAGrwedoL+NmnhdtoT8tpUaUHxWzHk8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.crl rsync://rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/II1GFNCXXVXjphjK5xdsVlfLvVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4578 (0x11e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164BA0/serialNumber=208D4614D0975D55E3A618CAE7176C5657CBBD57 Validity Not Before: May 18 17:44:20 2024 GMT Not After : May 25 17:44:20 2024 GMT Subject: CN=6648e8f4-5f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:a2:22:a4:b1:a6:e2:55:73:19:88:5d:6e: 1d:0d:d8:91:80:25:73:e8:cd:19:ab:11:ee:20:1d: c8:34:5b:e5:d3:3c:23:0c:5a:57:b8:2a:cd:d8:c1: 84:50:a5:c3:ca:9e:b8:ba:0a:57:f7:71:2b:78:7c: 4c:46:2e:d8:e1:90:b1:83:43:63:b6:8c:9b:05:db: 33:52:0d:8e:b6:04:f6:f2:4c:1a:1c:59:d9:3b:70: 99:2c:ef:7e:75:4d:e5:39:cf:37:18:86:0f:d7:a0: 06:07:72:73:4f:9e:12:2d:97:4c:d6:da:ed:60:ba: f2:b2:65:80:67:fc:a9:9b:b9:3f:77:26:4a:3d:05: 2f:a7:95:15:d0:e5:e4:8e:9e:2b:c8:82:11:4a:af: 40:b3:e8:e8:8e:22:16:2b:9b:92:d9:62:ab:2b:52: 92:c3:bc:5e:52:02:82:36:74:c5:a8:02:ee:3c:e5: eb:51:37:2a:c1:78:26:59:1f:43:31:02:6e:cc:8c: a6:6f:90:b6:91:96:37:fd:ce:dc:50:72:91:a9:c5: dc:b0:75:53:93:45:8a:b3:8e:6d:c5:3b:15:1e:ef: 89:7d:a4:ac:87:e2:4d:e9:f7:36:01:e7:48:d4:8f: 7d:88:b8:3c:b4:bf:37:5b:d6:cb:0a:92:1e:e3:48: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:17:01:6F:49:E3:22:E3:4E:60:2A:C0:42:B0:79:D0:43:55:9D:02 X509v3 Authority Key Identifier: keyid:20:8D:46:14:D0:97:5D:55:E3:A6:18:CA:E7:17:6C:56:57:CB:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/II1GFNCXXVXjphjK5xdsVlfLvVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:77:b4:4a:23:bb:ed:da:c7:33:98:ff:83:32:72:fa:b5:a1: 65:da:01:35:3f:58:dc:8b:06:6d:6f:bd:44:45:c7:12:c3:30: 32:2e:f8:39:20:ce:1a:d9:9c:d0:cb:41:1c:bb:99:dd:21:26: dc:98:a5:75:d7:4b:12:ae:4a:31:a4:b3:73:45:b2:43:31:74: 73:d4:1a:b2:0f:29:0b:5d:81:fa:5b:0c:2c:71:6f:80:ec:64: 9b:ad:67:6a:17:dc:a2:ee:60:d3:ab:bd:b3:43:54:9e:0e:d5: a3:5a:5c:48:0e:87:5e:04:83:f8:27:09:80:21:64:e7:17:50: bd:65:08:9e:56:67:e8:98:8f:b8:87:29:3c:8f:7c:09:91:c1: 90:e2:a6:b1:1c:0a:0c:ec:88:2b:ac:16:e3:72:e3:11:25:4b: 70:d8:61:ff:fc:d1:c1:1a:a0:a3:09:c0:e7:d9:8f:95:6e:98: 33:b0:a1:76:d8:fa:3d:33:da:71:91:fd:b2:4c:5c:32:69:b9: b4:d0:86:63:c6:a3:9d:43:71:31:3f:3b:42:21:65:d6:50:e1: 89:42:99:02:b6:da:0e:fe:47:48:c2:e1:4a:c4:c6:2f:cd:ef: 89:45:62:8d:03:51:01:2f:df:53:88:1a:cc:6e:0e:5e:e0:a8: 31:f1:68:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCQTAxMTAvBgNVBAUTKDIwOEQ0NjE0RDA5NzVENTVFM0E2MThDQUU3MTc2QzU2 NTdDQkJENTcwHhcNMjQwNTE4MTc0NDIwWhcNMjQwNTI1MTc0NDIwWjAYMRYwFAYD VQQDEw02NjQ4ZThmNC01ZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtOiIqSxpuJVcxmIXW4dDdiRgCVz6M0ZqxHuIB3INFvl0zwjDFpXuCrN2MGE UKXDyp64ugpX93EreHxMRi7Y4ZCxg0NjtoybBdszUg2OtgT28kwaHFnZO3CZLO9+ dU3lOc83GIYP16AGB3JzT54SLZdM1trtYLrysmWAZ/ypm7k/dyZKPQUvp5UV0OXk jp4ryIIRSq9As+jojiIWK5uS2WKrK1KSw7xeUgKCNnTFqALuPOXrUTcqwXgmWR9D MQJuzIymb5C2kZY3/c7cUHKRqcXcsHVTk0WKs45txTsVHu+JfaSsh+JN6fc2AedI 1I99iLg8tL83W9bLCpIe40jxywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4XAW9J 4yLjTmAqwEKwedBDVZ0CMB8GA1UdIwQYMBaAFCCNRhTQl11V46YYyucXbFZXy71X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEJBMC9EQkE0RjMzNkM3 OUUxMUU4QTM2MjFDNEJDNEY5QUUwMi9JSTFHRk5DWFhWWGpwaGpLNXhkc1ZsZkx2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lJMUdGTkNYWFZYanBoaks1eGRzVmxmTHZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEJBMC9EQkE0RjMzNkM3OUUxMUU4QTM2MjFDNEJDNEY5QUUwMi9JSTFHRk5DWFhW WGpwaGpLNXhkc1ZsZkx2VmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxd7RKI7vt2sczmP+DMnL6taFl2gE1P1jciwZtb71ERccSwzAyLvg5 IM4a2ZzQy0Ecu5ndISbcmKV110sSrkoxpLNzRbJDMXRz1BqyDykLXYH6WwwscW+A 7GSbrWdqF9yi7mDTq72zQ1SeDtWjWlxIDodeBIP4JwmAIWTnF1C9ZQieVmfomI+4 hyk8j3wJkcGQ4qaxHAoM7IgrrBbjcuMRJUtw2GH//NHBGqCjCcDn2Y+VbpgzsKF2 2Po9M9pxkf2yTFwyabm00IZjxqOdQ3ExPztCIWXWUOGJQpkCttoO/kdIwuFKxMYv ze+JRWKNA1EBL99TiBrMbg5e4Kgx8Wj0 -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org