$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: D9Ut1q1AMubdhkTnH3/u7pm02r5Q0RE8EnaKYMA3Plg= Subject key identifier: 9F:AA:E8:9F:6D:08:C5:8B:88:FA:A6:3B:48:B1:01:FE:24:7F:31:29 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 072B Signing time: Sat 18 May 2024 22:40:13 +0000 Manifest this update: Sat 18 May 2024 22:40:12 +0000 Manifest next update: Sat 25 May 2024 22:40:12 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: awN3udJuI7RBSnWWSpL5VpFTHJagDlIv+VK9l6p/ewk=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: YsVfDXFIC7xnP5MntDAopQPhYtPk1ODWWS+LdtWXaNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: May 18 22:40:12 2024 GMT Not After : May 25 22:40:12 2024 GMT Subject: CN=66492e4d-768f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:88:2c:08:f8:fe:a5:8a:dd:b8:67:6a:e6: 0a:49:fe:0e:39:18:d6:8a:bb:84:c3:4c:84:a3:d6: 5d:41:10:1c:3a:c5:c7:42:76:78:4a:34:07:08:f8: 98:d2:26:a9:d7:b8:4e:6e:66:21:df:71:85:69:e2: c2:ee:67:42:a9:3e:27:7d:38:e8:4e:73:2b:1b:d2: d7:87:56:0b:92:8d:36:4b:ff:6b:3d:cc:fd:b3:53: 70:68:e7:0d:ee:00:e4:23:eb:74:8c:9a:aa:bd:6d: 21:44:fb:5f:27:42:27:fe:a6:94:f7:a9:6c:68:5f: 17:5c:e8:52:ab:a2:19:3c:23:8d:1e:c5:d9:d9:ca: 5a:cd:2a:82:23:04:9f:8a:f4:19:7c:0e:07:e8:73: 95:3c:30:71:64:ab:51:b8:38:7d:3c:a9:17:46:cd: c6:b5:35:49:50:15:ca:f7:f1:e6:96:3b:14:68:f6: 2c:5f:f7:72:f6:24:d1:b5:9d:95:17:1b:dd:d0:4d: 39:b7:6d:d8:4e:18:c5:23:00:2e:8d:2e:a1:17:20: 8b:89:d2:f0:cc:2f:a9:b2:ac:54:1f:e8:ef:d7:b1: 64:bd:24:ea:59:1e:f0:a1:7b:1e:7d:8a:ab:f0:d5: 65:62:17:e3:90:6b:45:4d:29:68:4f:6f:2b:76:a1: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AA:E8:9F:6D:08:C5:8B:88:FA:A6:3B:48:B1:01:FE:24:7F:31:29 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:04:3c:33:67:fe:7e:91:0b:92:06:90:14:e4:94:7a:e0:61: 7c:9e:fd:81:fc:19:fa:72:83:9a:62:bc:f9:09:f7:5b:33:48: 49:22:27:a2:e3:39:04:98:ce:77:12:9d:06:e5:84:70:46:eb: 64:13:59:62:24:2e:63:02:b1:36:d9:ed:ed:c4:0d:2f:7f:9b: 64:f6:6f:54:7e:1a:cc:56:8d:c2:81:59:0a:03:c5:45:07:a9: 21:d9:a5:3b:3f:b2:bf:b5:a3:e9:27:2c:c6:7b:90:eb:ab:d5: c0:b6:67:22:71:34:cd:2f:c6:eb:31:0f:8c:71:e2:07:e4:ec: 5a:69:95:fd:b0:ba:08:5e:b7:a3:5b:e6:02:50:30:08:27:f5: 04:24:38:4e:11:75:08:36:89:08:8f:72:9c:dd:03:61:f2:d9: 3e:06:0c:a7:3b:f1:4b:3c:dc:51:37:86:bc:38:83:6b:df:96: 50:c1:16:90:52:58:20:6a:d7:ae:d2:72:b7:f7:95:ab:ff:93: 29:bd:dc:86:bc:7a:27:c4:a1:92:66:14:20:ac:08:53:91:b5: ec:81:0a:80:7b:13:34:59:30:16:26:d0:63:44:57:b1:dc:be: 53:bf:cf:b7:1c:3d:68:86:f8:14:5b:d5:7a:4f:b5:e8:e7:f0: 2a:f4:96:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlGNDExMC8GA1UEBRMoMjJCNEE5QUFBOTgyQUJDQjM5Rjk3ODk4NkJDQjY3NzBC NjAyQzFBNDAeFw0yNDA1MTgyMjQwMTJaFw0yNDA1MjUyMjQwMTJaMBgxFjAUBgNV BAMTDTY2NDkyZTRkLTc2OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGm4gsCPj+pYrduGdq5gpJ/g45GNaKu4TDTISj1l1BEBw6xcdCdnhKNAcI+JjS JqnXuE5uZiHfcYVp4sLuZ0KpPid9OOhOcysb0teHVguSjTZL/2s9zP2zU3Bo5w3u AOQj63SMmqq9bSFE+18nQif+ppT3qWxoXxdc6FKrohk8I40exdnZylrNKoIjBJ+K 9Bl8Dgfoc5U8MHFkq1G4OH08qRdGzca1NUlQFcr38eaWOxRo9ixf93L2JNG1nZUX G93QTTm3bdhOGMUjAC6NLqEXIIuJ0vDML6myrFQf6O/XsWS9JOpZHvChex59iqvw 1WViF+OQa0VNKWhPbyt2oT+XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn6ron20I xYuI+qY7SLEB/iR/MSkwHwYDVR0jBBgwFoAUIrSpqqmCq8s5+XiYa8tncLYCwaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUY0LzNENkJBNTc0RjY5 NjExRUE5MzQ4NkYyNUM0RjlBRTAyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXJTcHFxbUNxOHM1LVhpWWE4dG5jTFlDd2FRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUY0LzNENkJBNTc0RjY5NjExRUE5MzQ4NkYyNUM0RjlBRTAyL0lyU3BxcW1DcThz NS1YaVlhOHRuY0xZQ3dhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABwEPDNn/n6RC5IGkBTklHrgYXye/YH8Gfpyg5pivPkJ91szSEkiJ6Lj OQSYzncSnQblhHBG62QTWWIkLmMCsTbZ7e3EDS9/m2T2b1R+GsxWjcKBWQoDxUUH qSHZpTs/sr+1o+knLMZ7kOur1cC2ZyJxNM0vxusxD4xx4gfk7Fpplf2wughet6Nb 5gJQMAgn9QQkOE4RdQg2iQiPcpzdA2Hy2T4GDKc78Us83FE3hrw4g2vfllDBFpBS WCBq167Scrf3lav/kym93Ia8eifEoZJmFCCsCFORteyBCoB7EzRZMBYm0GNEV7Hc vlO/z7ccPWiG+BRb1XpPtejn8Cr0ll4= -----END CERTIFICATE-----Generated at Sun May 19 00:30:17 2024 by rpki-client on console-ams.rpki-client.org