$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft File: IRxVC1PrIEdRhbq83n5w32dESLc.mft (raw, json) Hash identifier: 9eHalVPdGt2WQU8LkLhaqBxAdlc9+lKo77B+RaibpvM= Subject key identifier: CA:5A:84:FF:61:52:3E:16:AB:6F:CB:14:39:D8:1E:C3:A3:49:11:1C Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Certificate serial: 0BC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft Manifest number: 0BA6 Signing time: Sat 18 May 2024 19:18:28 +0000 Manifest this update: Sat 18 May 2024 19:18:27 +0000 Manifest next update: Sat 25 May 2024 19:18:27 +0000 Files and hashes: 1: IRxVC1PrIEdRhbq83n5w32dESLc.crl (hash: K884h3Er28oTVdxKIN3DCgj4zmLCPNOq2IOuwDNjPNE=) 2: 65F631C0B5E411EDA143B259C4F9AE02.roa (hash: ITLNf+xAEKjAWhXm6FjOyGl4IXrVUlSU1rhTA0XKsLw=) 3: 2948A912B6A511EDAF611B68C4F9AE02.roa (hash: 1+I5VIpA+YWUDSc9cWat+eMtaNj2l0No1cGIx72qy3c=) 4: 674743FCB5E411EDA143B259C4F9AE02.roa (hash: 99SzWTchwz/heq5hSs3tXaMqMVZV43TqEvRt9UZciB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3016 (0xbc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Validity Not Before: May 18 19:18:27 2024 GMT Not After : May 25 19:18:27 2024 GMT Subject: CN=6648ff04-c721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:de:70:de:ae:94:2f:6a:81:9d:d0:2e:67: e8:a1:ce:8f:6c:57:1e:be:a1:0c:6a:e8:d2:dc:b3: 02:ee:65:0d:bb:5f:e5:47:65:01:73:7b:ce:f3:3e: a6:e1:cd:46:89:4e:45:3f:eb:b6:ac:0b:4e:eb:8e: 22:45:14:f0:f8:e1:da:c0:86:7e:54:17:12:f4:b8: 70:f8:6b:d7:de:3c:f3:51:b9:4e:36:63:4a:b1:f5: 74:5c:2f:e5:34:d3:78:38:ed:9d:a4:08:65:71:69: a0:91:aa:97:f8:4a:29:00:7d:81:35:37:1f:9c:09: 9d:f2:30:38:4a:f6:5d:bc:a9:20:b0:ea:a6:b7:42: ff:7d:6c:19:f2:c5:97:49:b3:ba:f7:be:c7:80:13: 68:f1:19:19:44:1b:8c:91:d0:e6:f9:63:1f:fe:68: 61:d0:01:74:64:82:8c:d1:d8:4c:1b:60:95:5a:02: c8:e7:4a:4a:3b:d7:ab:07:65:6e:f6:00:06:ee:66: 97:54:1a:3d:f7:72:82:11:7a:b1:3f:88:fd:23:0c: 3c:16:8c:62:a3:67:f1:06:b4:c9:19:48:31:71:8d: c3:c1:9e:6c:b8:aa:59:40:63:8b:05:7f:68:b4:02: aa:65:50:b0:df:24:c2:e6:cd:f2:af:68:fb:4e:29: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5A:84:FF:61:52:3E:16:AB:6F:CB:14:39:D8:1E:C3:A3:49:11:1C X509v3 Authority Key Identifier: keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:97:11:34:e7:0d:4d:11:bb:b7:75:40:9c:ae:b8:6e:1e:d4: c4:41:18:51:06:a2:69:3f:87:12:12:f1:c1:56:ed:31:35:88: f7:f0:be:c0:dd:04:de:9b:d6:6a:8c:96:0a:cc:f7:55:a8:76: 01:be:20:01:b6:a5:7d:41:df:3a:f0:ee:f8:a3:9f:f0:43:b3: b4:20:d6:65:fe:83:b6:80:1d:0f:1a:dd:9d:d9:e8:05:0d:44: 1c:27:2b:47:bc:cc:c2:46:9d:47:d9:18:de:4b:6f:7b:70:a5: b0:15:01:6f:da:53:0b:dc:cd:c8:46:11:10:9a:82:30:d4:0a: d1:6d:d2:16:61:ae:aa:f3:86:94:8c:56:71:a8:8f:bf:ad:14: 73:4d:fa:6a:79:ae:c9:8f:de:c6:b3:12:83:75:16:94:71:f9: d0:fa:5e:95:c1:59:2d:17:dd:64:c3:70:d6:21:e5:57:6b:cf: ee:0d:41:96:78:3f:63:37:70:77:6b:b5:05:80:28:6a:68:5e: e9:ac:bd:c9:54:42:2a:b9:d8:df:a9:29:53:6d:4e:3e:8e:c5: 30:eb:08:4e:be:4e:2b:48:5f:a0:77:c6:25:4e:14:15:89:53: 70:1b:c1:05:43:f2:01:d2:0b:ef:89:31:ca:7f:ce:18:20:32: 9c:ca:2e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2MDgxMTAvBgNVBAUTKDIxMUM1NTBCNTNFQjIwNDc1MTg1QkFCQ0RFN0U3MERG Njc0NDQ4QjcwHhcNMjQwNTE4MTkxODI3WhcNMjQwNTI1MTkxODI3WjAYMRYwFAYD VQQDEw02NjQ4ZmYwNC1jNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWnecN6ulC9qgZ3QLmfooc6PbFcevqEMaujS3LMC7mUNu1/lR2UBc3vO8z6m 4c1GiU5FP+u2rAtO644iRRTw+OHawIZ+VBcS9Lhw+GvX3jzzUblONmNKsfV0XC/l NNN4OO2dpAhlcWmgkaqX+EopAH2BNTcfnAmd8jA4SvZdvKkgsOqmt0L/fWwZ8sWX SbO6977HgBNo8RkZRBuMkdDm+WMf/mhh0AF0ZIKM0dhMG2CVWgLI50pKO9erB2Vu 9gAG7maXVBo993KCEXqxP4j9Iww8Foxio2fxBrTJGUgxcY3DwZ5suKpZQGOLBX9o tAKqZVCw3yTC5s3yr2j7Tikq0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpahP9h Uj4Wq2/LFDnYHsOjSREcMB8GA1UdIwQYMBaAFCEcVQtT6yBHUYW6vN5+cN9nREi3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTYwOC83NDgwRkM4ODAy RTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklFZFJoYnE4M241dzMyZEVT TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSeFZDMVBySUVkUmhicTgzbjV3MzJkRVNMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTYwOC83NDgwRkM4ODAyRTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklF ZFJoYnE4M241dzMyZEVTTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjlxE05w1NEbu3dUCcrrhuHtTEQRhRBqJpP4cSEvHBVu0xNYj38L7A 3QTem9ZqjJYKzPdVqHYBviABtqV9Qd868O74o5/wQ7O0INZl/oO2gB0PGt2d2egF DUQcJytHvMzCRp1H2RjeS297cKWwFQFv2lML3M3IRhEQmoIw1ArRbdIWYa6q84aU jFZxqI+/rRRzTfpqea7Jj97GsxKDdRaUcfnQ+l6VwVktF91kw3DWIeVXa8/uDUGW eD9jN3B3a7UFgChqaF7prL3JVEIqudjfqSlTbU4+jsUw6whOvk4rSF+gd8YlThQV iVNwG8EFQ/IB0gvviTHKf84YIDKcyi6h -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org