$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json) Hash identifier: wLzuqboUgtOwxizsVzYC00T8lE3DQ4qK6j2V/l5agUE= Subject key identifier: 4C:B4:99:36:B5:65:A6:7F:1D:51:24:2D:F0:DD:FD:5D:5B:72:B2:E7 Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft Manifest number: 68 Signing time: Fri 31 May 2024 08:27:55 +0000 Manifest this update: Fri 31 May 2024 08:27:55 +0000 Manifest next update: Fri 07 Jun 2024 08:27:55 +0000 Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: yR6Su50Xi2357orc/vNM58TQE5o+Eqgf0H0AtLpGlSw=) 2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: e+PPjlFLXc6MN2cqTUfg11r9FRcEBPWXN3IXgHLc99I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Validity Not Before: May 31 08:27:55 2024 GMT Not After : Jun 7 08:27:55 2024 GMT Subject: CN=66598a0b-d235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:ab:34:90:eb:d6:c3:3e:ee:75:e1:ad:83: 73:ea:12:6a:8c:66:a7:a9:33:80:f7:b0:94:ba:1d: da:05:4d:2b:fd:a4:4d:4e:3a:ff:c5:46:3c:78:4f: c2:3c:4a:d0:f9:fb:93:91:ff:db:a9:f8:1a:17:e7: 56:38:b0:b2:d7:98:51:fd:05:60:d4:3f:4f:90:4c: 79:bc:c6:6e:08:97:09:2b:01:90:15:4d:40:83:19: 9a:ac:21:33:fd:59:11:1d:82:fd:fa:1e:12:5a:34: 14:65:0a:d8:3a:0b:d7:72:0f:7a:27:0d:f8:40:f0: 93:9e:3a:23:16:6c:5a:fa:b2:d0:c5:1a:90:75:ff: a1:41:e7:64:f6:85:88:b8:8f:ed:f3:90:59:6d:50: fa:41:ed:92:ff:57:8f:ec:d4:d7:a4:a8:b8:76:fc: b9:3f:d6:dc:7a:16:60:74:39:14:71:19:b2:90:74: 29:1d:45:01:1d:e3:b9:ca:13:f4:ff:8c:a3:94:0c: 44:99:ac:cd:7f:9a:3d:b7:84:81:0d:40:40:b6:7b: 49:0e:ab:e9:33:00:b0:80:75:c7:16:b8:1b:f0:01: 2e:ee:c4:cd:65:47:ec:13:26:0d:2e:79:9a:c6:5c: 5c:8b:4b:d9:98:4c:77:bd:46:b4:dd:ec:74:fa:ee: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B4:99:36:B5:65:A6:7F:1D:51:24:2D:F0:DD:FD:5D:5B:72:B2:E7 X509v3 Authority Key Identifier: keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:65:6f:1e:1b:35:e4:0e:26:5b:d8:d9:6d:68:7a:bb:2e:21: 8f:0b:29:f8:45:99:dc:33:41:fe:d0:fd:fe:11:d0:85:ea:b6: ba:92:bc:e3:c8:69:a2:fb:10:42:44:84:b1:69:00:a8:38:95: 7a:21:58:6e:67:b5:a2:c2:f8:34:16:fa:da:9d:1e:51:de:9b: 78:c0:df:3f:b6:7d:04:0d:47:9c:ea:9c:57:0a:d9:37:fd:8a: 68:f5:dd:e1:41:37:ac:70:6f:00:18:64:25:4d:9a:21:36:26: 9c:87:33:1c:fb:30:89:3e:d8:f1:3d:49:e2:50:64:db:51:52: 24:31:ab:d7:a6:9c:72:2c:88:60:55:ed:d8:98:e8:e2:48:e6: 84:b9:c4:9f:e5:8e:59:b5:27:82:72:e5:f5:2e:fe:9f:66:cd: 98:89:48:f4:19:08:5d:65:72:68:d7:1c:53:ff:3d:a3:26:d8: f7:84:71:d8:c3:b2:33:ab:a3:ff:35:3f:9f:29:ce:d6:2f:d5: c6:03:8a:ad:1c:85:e9:b2:30:48:49:3a:ed:2d:a2:9e:eb:f4: 0e:d9:ec:90:a2:63:85:c5:91:d7:4a:f5:de:3e:1b:f9:c0:0a: 23:0d:10:17:54:b6:5f:16:56:88:66:65:a5:09:0f:84:1b:17: f0:76:de:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTRGNzExMC8GA1UEBRMoMjJEM0U5NzQ0REFENDk3NTAzNkNDNDIyQUMxMUM0MDQ3 MjBFNjZFQTAeFw0yNDA1MzEwODI3NTVaFw0yNDA2MDcwODI3NTVaMBgxFjAUBgNV BAMTDTY2NTk4YTBiLWQyMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxWKs0kOvWwz7udeGtg3PqEmqMZqepM4D3sJS6HdoFTSv9pE1OOv/FRjx4T8I8 StD5+5OR/9up+BoX51Y4sLLXmFH9BWDUP0+QTHm8xm4IlwkrAZAVTUCDGZqsITP9 WREdgv36HhJaNBRlCtg6C9dyD3onDfhA8JOeOiMWbFr6stDFGpB1/6FB52T2hYi4 j+3zkFltUPpB7ZL/V4/s1NekqLh2/Lk/1tx6FmB0ORRxGbKQdCkdRQEd47nKE/T/ jKOUDESZrM1/mj23hIENQEC2e0kOq+kzALCAdccWuBvwAS7uxM1lR+wTJg0ueZrG XFyLS9mYTHe9RrTd7HT67iwtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTLSZNrVl pn8dUSQt8N39XVtysucwHwYDVR0jBBgwFoAUItPpdE2tSXUDbMQirBHEBHIOZuow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNEY3LzJBNDg5Mzg2N0U4 MjExRUU5OURBOUI3QUM0RjlBRTAyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXRQcGRFMnRTWFVEYk1RaXJCSEVCSElPWnVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB NEY3LzJBNDg5Mzg2N0U4MjExRUU5OURBOUI3QUM0RjlBRTAyL0l0UHBkRTJ0U1hV RGJNUWlyQkhFQkhJT1p1by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxlbx4bNeQOJlvY2W1oersuIY8LKfhFmdwzQf7Q/f4R0IXqtrqSvOPI aaL7EEJEhLFpAKg4lXohWG5ntaLC+DQW+tqdHlHem3jA3z+2fQQNR5zqnFcK2Tf9 imj13eFBN6xwbwAYZCVNmiE2JpyHMxz7MIk+2PE9SeJQZNtRUiQxq9emnHIsiGBV 7diY6OJI5oS5xJ/ljlm1J4Jy5fUu/p9mzZiJSPQZCF1lcmjXHFP/PaMm2PeEcdjD sjOro/81P58pztYv1cYDiq0chemyMEhJOu0top7r9A7Z7JCiY4XFkddK9d4+G/nA CiMNEBdUtl8WVohmZaUJD4QbF/B23vs= -----END CERTIFICATE-----Generated at Fri May 31 10:01:47 2024 by rpki-client on console-ams.rpki-client.org