$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: 0mWH/I7Gi3amgwflF2XxS9UzuYDbXrAaY4u9TUQqYdU= Subject key identifier: 51:A0:62:BB:B4:5C:09:4B:17:61:25:98:CC:4F:43:AF:BC:0D:76:B9 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 03EB Signing time: Sun 19 May 2024 02:16:42 +0000 Manifest this update: Sun 19 May 2024 02:16:42 +0000 Manifest next update: Sun 26 May 2024 02:16:42 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: s1LXyM8UquWxubhiXRnK4xp0KMQdB2xYUsw4I2/QwBU=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: 3qMZp3+M5FZ80FGb08CJJYblZdMa5d9OyBUjhn/KCgc=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: Jy06RuNcIozmUpJkb5bkvsOUvizH+RoD3a0onCBSUE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: May 19 02:16:42 2024 GMT Not After : May 26 02:16:42 2024 GMT Subject: CN=6649610a-c880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:01:7b:6a:98:4a:41:82:13:74:aa:0c:ac: 99:02:44:59:e9:0c:a1:38:bc:8a:88:6c:ac:b7:a8: 96:64:cb:a4:7c:4a:3a:4d:f9:e6:d9:c9:a6:c2:e1: 4c:b2:99:d0:e3:d9:f4:62:9d:a6:ad:52:31:4c:02: 0e:5a:c5:cd:28:58:1e:9e:37:cd:02:87:68:4e:34: e4:8c:89:db:e5:30:bd:7a:5a:c5:6b:28:d0:12:97: 8e:ef:e9:64:37:4f:1d:80:ff:a4:cd:2d:8f:33:8c: 85:18:e5:68:a3:4f:a6:83:71:16:9f:6b:19:4a:eb: 8e:52:43:7d:c9:75:b3:14:c7:dd:fb:31:df:11:de: ab:a9:7a:7e:05:a8:41:6d:e4:7e:be:1b:db:e6:8d: 60:de:38:2d:ba:d6:7a:22:ed:3c:ec:2e:32:c6:3a: 63:31:42:3c:d0:fe:ba:d0:3c:16:a0:d4:40:25:f7: 40:07:4a:bd:6f:81:bd:90:ff:8c:66:09:a3:9c:ac: ab:5c:7b:ad:91:dd:3a:fd:dc:1f:bf:63:8f:ae:4b: 03:16:90:97:b0:cd:01:5f:c2:76:d5:4b:9d:cc:d4: 0a:49:8b:3b:b6:44:6a:dc:0a:37:45:53:c5:66:5b: ee:73:28:f4:e8:41:f8:dc:a7:64:e5:ac:36:15:f0: 17:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A0:62:BB:B4:5C:09:4B:17:61:25:98:CC:4F:43:AF:BC:0D:76:B9 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:69:88:79:55:7d:6f:3d:13:83:9c:65:9d:73:78:47:c1:a6: 1b:81:11:72:75:84:51:87:7b:0f:20:c7:13:05:08:ab:f1:e8: a9:23:07:f9:4b:4a:d5:be:c7:3c:49:0f:e6:31:f9:eb:23:a4: 32:7b:7e:f0:62:e0:4f:20:c7:be:be:e3:39:8c:5b:ed:9d:cd: eb:e7:cf:0c:74:7c:4a:f0:32:27:7a:71:50:76:b2:07:ca:98: 2a:04:7e:87:bb:dd:08:af:26:bf:42:9b:0d:d1:19:94:90:d4: 10:44:cc:fd:50:88:26:b6:a0:c0:67:cd:49:0e:f2:9a:07:39: 91:81:c8:0c:82:be:97:db:17:3a:f2:a4:58:e4:2e:01:8f:ed: 8b:0d:31:5e:ea:60:6c:f9:da:bd:b3:36:e9:97:4b:a7:aa:c0: ff:ee:71:74:a2:1d:3e:00:74:70:f9:ea:ca:8b:8b:0b:87:72: 09:d4:5e:08:3d:8f:7d:f9:ef:9d:ae:47:cb:bb:3d:bb:8e:2b: 9d:9f:38:eb:ba:3b:23:c1:4c:78:ff:71:8c:cf:e9:dc:a8:8c: 7e:12:ae:c5:1d:ee:38:b6:35:e2:c8:07:92:f7:a7:f1:dc:d7: ea:94:bc:33:75:b4:98:5a:b4:e6:fc:0e:b5:85:b3:3d:e0:90: 01:e2:6e:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjQwNTE5MDIxNjQyWhcNMjQwNTI2MDIxNjQyWjAYMRYwFAYD VQQDEw02NjQ5NjEwYS1jODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuQBe2qYSkGCE3SqDKyZAkRZ6QyhOLyKiGyst6iWZMukfEo6Tfnm2cmmwuFM spnQ49n0Yp2mrVIxTAIOWsXNKFgenjfNAodoTjTkjInb5TC9elrFayjQEpeO7+lk N08dgP+kzS2PM4yFGOVoo0+mg3EWn2sZSuuOUkN9yXWzFMfd+zHfEd6rqXp+BahB beR+vhvb5o1g3jgtutZ6Iu087C4yxjpjMUI80P660DwWoNRAJfdAB0q9b4G9kP+M ZgmjnKyrXHutkd06/dwfv2OPrksDFpCXsM0BX8J21UudzNQKSYs7tkRq3Ao3RVPF Zlvucyj06EH43Kdk5aw2FfAXVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGgYru0 XAlLF2ElmMxPQ6+8DXa5MB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPaYh5VX1vPRODnGWdc3hHwaYbgRFydYRRh3sPIMcTBQir8eipIwf5 S0rVvsc8SQ/mMfnrI6Qye37wYuBPIMe+vuM5jFvtnc3r588MdHxK8DInenFQdrIH ypgqBH6Hu90Irya/QpsN0RmUkNQQRMz9UIgmtqDAZ81JDvKaBzmRgcgMgr6X2xc6 8qRY5C4Bj+2LDTFe6mBs+dq9szbpl0unqsD/7nF0oh0+AHRw+erKi4sLh3IJ1F4I PY99+e+drkfLuz27jiudnzjrujsjwUx4/3GMz+ncqIx+Eq7FHe44tjXiyAeS96fx 3NfqlLwzdbSYWrTm/A61hbM94JAB4m7f -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org