$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: HYSDEFvcl/XETmnfy/cIPC211ib+eZlGZZl2o33b3sY= Subject key identifier: DC:8B:8D:0E:B9:37:9F:EE:84:18:85:A2:87:B4:73:A0:B8:47:D7:9D Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0B73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0B6C Signing time: Sat 18 May 2024 19:31:18 +0000 Manifest this update: Sat 18 May 2024 19:31:18 +0000 Manifest next update: Sat 25 May 2024 19:31:18 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: IieWpw2ODEaxmZ07s/u2CghEaTMx89D75/CtDRhRO3o=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: VI23YCDXjIBJjEO8GafeMzlZaX/Tvi6JTYc9mJtHlpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: May 18 19:31:18 2024 GMT Not After : May 25 19:31:18 2024 GMT Subject: CN=66490206-a37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:1e:7f:79:e2:81:24:45:e7:ca:f0:97:bb: a9:ba:bb:e9:60:77:c5:06:e4:fc:c6:6e:27:d4:dd: 9c:4c:46:46:c8:3f:be:d3:49:b0:41:50:1d:d6:60: af:73:fa:4f:fb:15:59:76:6c:1d:0b:a7:bd:f3:2b: d7:b5:0e:d1:b4:0d:87:d6:00:31:44:58:b6:6a:40: 0b:e6:7a:37:01:1d:3a:0d:03:85:3a:4e:26:cb:39: 87:69:6d:2f:f6:58:52:e3:6b:a0:ac:17:a3:5a:35: d3:75:1d:4d:c2:58:ba:b6:e0:84:a3:5f:a8:e4:67: d4:30:a2:be:e8:26:59:03:ed:c5:13:71:4e:6c:1f: f0:13:a1:da:da:82:b3:58:d7:88:61:26:9d:69:1c: dd:0e:1c:dd:6e:db:36:f9:0c:90:d0:64:88:0f:43: ad:4b:84:4d:97:2a:ab:4f:6e:c4:75:10:cd:af:d6: eb:80:50:14:7e:d5:20:88:e0:60:e4:65:7b:8b:f7: 9c:9f:7e:ba:be:55:b2:31:d7:8b:53:3b:bc:bb:23: 41:16:f4:ad:1e:b3:ad:d1:9f:02:e2:e6:1b:28:57: cb:3c:60:d8:d1:01:2e:95:c5:69:c5:53:f4:e9:62: 4b:d6:63:9b:69:94:6c:f3:90:35:4d:67:a0:cd:c7: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8B:8D:0E:B9:37:9F:EE:84:18:85:A2:87:B4:73:A0:B8:47:D7:9D X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a5:0b:de:15:5d:c6:3e:4a:58:43:06:05:cb:6c:80:d7:25: 0b:de:cb:12:7d:6d:90:80:04:92:3d:3d:82:07:ca:1c:8a:67: 64:83:8e:9a:35:ed:35:78:cc:69:c1:c1:4c:0f:c9:dd:7f:b4: 2c:da:99:ad:63:99:22:5f:32:37:2d:91:b6:59:fd:0b:11:48: 24:5d:9d:b2:be:03:66:df:16:15:f8:b9:dc:e5:67:8c:22:55: 69:62:fd:bc:fe:51:be:93:26:b6:bd:44:1a:ee:f0:31:ba:db: e9:1c:39:b5:a5:9c:01:6b:27:93:72:4b:0c:a6:89:07:c5:ca: ca:a7:76:27:c9:8d:31:85:ef:99:4e:c0:6f:e1:ea:43:e5:b8: fe:89:77:8e:41:9b:70:8c:14:f2:8b:56:12:91:57:27:22:b6: 52:16:9d:ce:a9:f8:ba:dd:30:52:34:9e:74:67:bc:d5:41:13: c8:68:d5:7d:ed:aa:c5:4c:c8:a1:e4:db:2b:93:fd:cb:1e:cc: 37:d4:f6:b9:e2:4d:f0:c8:51:30:68:62:aa:eb:8e:ff:97:6c: cb:38:38:f8:1a:45:94:64:ec:f1:d3:42:19:ac:bc:e5:28:d0: a2:bd:32:60:12:71:70:33:08:67:63:c8:1d:75:c9:e3:5a:47: 53:87:f8:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjQwNTE4MTkzMTE4WhcNMjQwNTI1MTkzMTE4WjAYMRYwFAYD VQQDEw02NjQ5MDIwNi1hMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte4ef3nigSRF58rwl7upurvpYHfFBuT8xm4n1N2cTEZGyD++00mwQVAd1mCv c/pP+xVZdmwdC6e98yvXtQ7RtA2H1gAxRFi2akAL5no3AR06DQOFOk4myzmHaW0v 9lhS42ugrBejWjXTdR1Nwli6tuCEo1+o5GfUMKK+6CZZA+3FE3FObB/wE6Ha2oKz WNeIYSadaRzdDhzdbts2+QyQ0GSID0OtS4RNlyqrT27EdRDNr9brgFAUftUgiOBg 5GV7i/ecn366vlWyMdeLUzu8uyNBFvStHrOt0Z8C4uYbKFfLPGDY0QEulcVpxVP0 6WJL1mObaZRs85A1TWegzcd42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyLjQ65 N5/uhBiFooe0c6C4R9edMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbpQveFV3GPkpYQwYFy2yA1yUL3ssSfW2QgASSPT2CB8ocimdkg46a Ne01eMxpwcFMD8ndf7Qs2pmtY5kiXzI3LZG2Wf0LEUgkXZ2yvgNm3xYV+Lnc5WeM IlVpYv28/lG+kya2vUQa7vAxutvpHDm1pZwBayeTcksMpokHxcrKp3YnyY0xhe+Z TsBv4epD5bj+iXeOQZtwjBTyi1YSkVcnIrZSFp3Oqfi63TBSNJ50Z7zVQRPIaNV9 7arFTMih5Nsrk/3LHsw31Pa54k3wyFEwaGKq647/l2zLODj4GkWUZOzx00IZrLzl KNCivTJgEnFwMwhnY8gddcnjWkdTh/j7 -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org