$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft File: iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json) Hash identifier: xs62uqkXGPnPIuBbRQ4v+tu1uvoSw/39xy6HYXfXyUw= Subject key identifier: 20:85:F3:C6:FA:FE:5B:05:CC:A7:E9:48:F0:80:9D:28:6B:8E:D0:58 Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft Manifest number: 037B Signing time: Sun 19 May 2024 02:48:28 +0000 Manifest this update: Sun 19 May 2024 02:48:27 +0000 Manifest next update: Sun 26 May 2024 02:48:27 +0000 Files and hashes: 1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: 4pRGh4dyGsLdyEVIA5rIJiInfPGWXbhjoMlvHiYpblw=) 2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: ymHEjZOmPNaZts/l9PmvTxzpZ65sqlxazk8ZELgre0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Validity Not Before: May 19 02:48:27 2024 GMT Not After : May 26 02:48:27 2024 GMT Subject: CN=6649687b-2f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:fc:11:86:08:54:ba:1d:25:eb:ad:44:d6: f4:a9:d3:81:71:b3:36:e1:c8:f5:28:62:87:ee:3d: 36:48:6b:f1:74:db:52:9d:f7:ff:81:81:0b:e3:9b: 47:cd:c3:6a:0e:3f:2f:55:a0:6c:7c:e5:c6:e8:f5: b2:10:b1:c4:53:0c:41:55:85:6d:58:c1:2d:f4:21: 16:0c:1a:45:2f:1a:29:92:0c:2c:a5:9a:76:24:2e: 74:31:d2:b0:b0:f4:c1:04:ca:35:7d:e4:4a:ee:1a: e3:b6:86:e0:1b:3d:fa:69:8b:30:78:0c:ee:09:a2: bf:7d:46:09:ea:ec:08:58:7c:b5:31:40:e2:6b:54: e2:ee:aa:8c:34:0c:6c:1b:9d:e2:cf:1b:2a:37:3e: 65:ee:3a:e2:61:25:31:62:f9:1f:3e:52:fc:f8:4c: 7f:05:04:ad:0f:00:83:6c:e3:f9:19:23:63:59:b3: e2:03:e1:63:1f:45:ae:1c:3d:d5:00:6f:8f:bf:36: 7b:ef:dd:13:59:b8:b5:dd:d8:f2:78:0d:fa:b6:5c: 26:15:b3:1e:e7:f5:82:10:dd:74:ff:05:dd:4e:26: ef:f4:9e:7c:7e:8e:30:e7:9d:02:fe:67:83:84:ff: 8f:f9:c8:5b:01:26:ba:c1:cb:d7:af:43:5d:67:b7: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:85:F3:C6:FA:FE:5B:05:CC:A7:E9:48:F0:80:9D:28:6B:8E:D0:58 X509v3 Authority Key Identifier: keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:57:d8:c4:a7:97:13:fb:62:0a:c3:5f:30:75:f1:14:cc:2b: f4:34:dd:dd:05:40:1d:6e:e7:d4:5a:6b:c8:d8:dc:5a:2f:1d: 0a:08:d4:56:ac:c5:eb:0d:39:02:c3:59:4f:6f:88:c0:8a:e9: f1:f4:0a:e1:d9:92:62:47:ad:91:db:1c:17:8a:e7:73:06:bd: a0:25:85:27:96:31:a2:7b:17:dd:8a:f5:07:41:ab:98:24:68: 4a:3a:9b:ac:e0:93:0e:73:65:17:21:dc:60:fe:8b:0d:3b:0c: 3f:0f:98:f2:4c:75:01:a2:49:6a:12:cd:ef:15:3d:01:99:ca: 09:d6:90:d4:f9:5f:42:68:cd:20:20:85:4a:e4:c9:3c:16:a3: bf:8e:07:fb:03:ff:70:02:ca:46:e3:62:02:84:86:cc:66:0f: dc:59:48:53:69:8f:d4:0e:90:7c:d4:09:bd:f7:dc:93:50:d9: cc:7d:6e:cf:c6:f2:9e:f6:e5:72:45:15:c9:7a:2b:be:ba:98: c3:a4:68:fc:98:a2:09:46:07:e0:05:1b:75:23:0f:07:1f:58: 75:7f:87:5f:db:06:83:6e:19:84:4f:86:d3:a7:da:82:b3:ce: b7:8c:30:2f:b2:ab:ae:00:51:9d:a6:4c:9b:3a:37:9f:fa:da: 4f:a1:c5:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5MUIxMTAvBgNVBAUTKDg5QTE5N0QwOTc2ODlDNkVCMzM4NjdBOUNDOEFDQ0Q3 RkIzNjRFODkwHhcNMjQwNTE5MDI0ODI3WhcNMjQwNTI2MDI0ODI3WjAYMRYwFAYD VQQDEw02NjQ5Njg3Yi0yZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKX8EYYIVLodJeutRNb0qdOBcbM24cj1KGKH7j02SGvxdNtSnff/gYEL45tH zcNqDj8vVaBsfOXG6PWyELHEUwxBVYVtWMEt9CEWDBpFLxopkgwspZp2JC50MdKw sPTBBMo1feRK7hrjtobgGz36aYsweAzuCaK/fUYJ6uwIWHy1MUDia1Ti7qqMNAxs G53izxsqNz5l7jriYSUxYvkfPlL8+Ex/BQStDwCDbOP5GSNjWbPiA+FjH0WuHD3V AG+PvzZ7790TWbi13djyeA36tlwmFbMe5/WCEN10/wXdTibv9J58fo4w550C/meD hP+P+chbASa6wcvXr0NdZ7eM5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCF88b6 /lsFzKfpSPCAnShrjtBYMB8GA1UdIwQYMBaAFImhl9CXaJxuszhnqcyKzNf7Nk6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTkxQi83RDBDMzdEMDYw NDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25HNnpPR2VweklyTTFfczJU b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhR1gwSmRvbkc2ek9HZXB6SXJNMV9zMlRvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTkxQi83RDBDMzdEMDYwNDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25H NnpPR2VweklyTTFfczJUb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUV9jEp5cT+2IKw18wdfEUzCv0NN3dBUAdbufUWmvI2NxaLx0KCNRW rMXrDTkCw1lPb4jAiunx9Arh2ZJiR62R2xwXiudzBr2gJYUnljGiexfdivUHQauY JGhKOpus4JMOc2UXIdxg/osNOww/D5jyTHUBoklqEs3vFT0BmcoJ1pDU+V9CaM0g IIVK5Mk8FqO/jgf7A/9wAspG42IChIbMZg/cWUhTaY/UDpB81Am999yTUNnMfW7P xvKe9uVyRRXJeiu+upjDpGj8mKIJRgfgBRt1Iw8HH1h1f4df2waDbhmET4bTp9qC s863jDAvsquuAFGdpkybOjef+tpPocWq -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org