$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: PneBk7NCCiUTPTFOCz4RO4AyPwmKBQT6O3awER5PwCM= Subject key identifier: FB:B6:FD:EE:81:AA:2F:DA:1E:C2:D0:DF:67:8D:95:12:46:F7:F5:AE Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 06D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 06C9 Signing time: Sat 18 May 2024 23:00:43 +0000 Manifest this update: Sat 18 May 2024 23:00:43 +0000 Manifest next update: Sat 25 May 2024 23:00:43 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: ndxpZFxXz3WgiBAZGr/Ke50Z33Dk9RcwKGs7MfKoFBk=) 2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: mkW1sQllP4GJ+PHaArLvzAfd1vCBLoHBC53bcBOlx3Y=) 3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: yoKd3WvINlmK3i2rQSfdIpIQAcmmAKBdXCry++KEaCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: May 18 23:00:43 2024 GMT Not After : May 25 23:00:43 2024 GMT Subject: CN=6649331b-28e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:2d:06:98:72:ad:e8:2b:72:a5:f8:2d:5e: f7:ee:29:f6:a1:93:eb:e2:0f:1a:a9:b2:c3:16:4d: d7:57:31:bc:19:cb:38:17:fc:98:9e:a0:f8:4c:fc: 09:b0:12:15:e8:43:9c:a1:8d:aa:d4:a3:cb:43:1a: 65:c0:7a:eb:b5:98:05:9a:11:bd:f8:38:34:40:a9: 18:8d:f1:5c:a0:06:bb:77:d2:a3:2b:45:e5:b9:a2: ff:64:5f:94:b4:f1:81:50:c1:03:ba:b3:43:8a:84: 5a:7e:3e:9a:a0:8b:13:f0:d4:12:7f:d6:ba:fb:9a: c7:1d:e0:52:8c:6a:e4:77:8a:e6:3f:d2:7b:f0:e7: d3:82:c5:39:0a:14:dc:40:9a:b4:55:03:f0:2e:e7: b0:18:6a:db:b4:47:17:12:3a:51:f0:25:c6:89:84: 34:b6:14:ef:aa:be:99:42:8e:f3:d1:87:71:6e:1b: bc:50:f7:fa:99:56:49:13:0b:71:df:f7:6b:f6:f6: 47:a9:f8:0b:80:3f:78:e6:94:51:ce:94:f9:df:e1: 85:5e:a5:af:f2:db:fc:a7:a9:75:c0:b7:e1:d2:eb: 9e:1f:32:7f:75:f0:3b:ba:41:a3:4d:b0:01:63:f4: f4:e9:c6:d3:34:4a:f2:f8:6c:7d:3c:14:e9:7b:87: bd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B6:FD:EE:81:AA:2F:DA:1E:C2:D0:DF:67:8D:95:12:46:F7:F5:AE X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f8:72:59:b4:e6:40:46:76:97:9c:10:6f:16:6b:a3:f4:53: 1e:bc:6f:33:b1:63:ef:4c:f1:ce:bc:24:65:7a:70:e5:88:98: 63:75:84:0b:1d:ca:38:6a:47:02:48:5a:4b:9f:28:83:f3:f6: 92:35:0f:71:23:f5:35:ba:aa:42:54:06:af:f2:db:33:0f:f3: e5:d5:fb:8a:a7:b8:3f:c5:11:13:35:4b:ad:cd:78:3c:6f:6d: de:0b:6d:46:b2:49:ed:0c:b5:3c:0c:e4:f1:64:2d:0c:12:aa: a0:0d:94:c1:31:54:17:e1:9f:d7:c5:c6:ef:63:5e:a7:af:e6: d6:92:93:f3:59:e1:c3:b6:ca:6d:44:75:f2:7b:9d:77:91:5f: 67:21:37:6c:13:84:6b:ba:fd:6e:4e:6e:6d:76:05:6f:49:bc: 6b:b4:2a:07:98:31:52:e6:28:61:2d:7e:fc:6c:94:33:b5:a7: 0e:08:a7:ee:4e:41:fd:7a:39:d0:5b:2d:c8:41:7e:77:51:40: ba:ea:3d:44:03:2e:ee:f7:b0:a7:43:7c:91:1c:15:90:fb:46: 93:43:e8:1f:c0:66:45:7b:b0:02:fe:e9:6c:d9:f5:8b:9a:0d: 18:15:73:19:72:52:56:b3:13:6f:5e:70:53:7b:7f:8a:ab:42: f3:9b:a1:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjQwNTE4MjMwMDQzWhcNMjQwNTI1MjMwMDQzWjAYMRYwFAYD VQQDEw02NjQ5MzMxYi0yOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaYtBphyregrcqX4LV737in2oZPr4g8aqbLDFk3XVzG8Gcs4F/yYnqD4TPwJ sBIV6EOcoY2q1KPLQxplwHrrtZgFmhG9+Dg0QKkYjfFcoAa7d9KjK0XluaL/ZF+U tPGBUMEDurNDioRafj6aoIsT8NQSf9a6+5rHHeBSjGrkd4rmP9J78OfTgsU5ChTc QJq0VQPwLuewGGrbtEcXEjpR8CXGiYQ0thTvqr6ZQo7z0Ydxbhu8UPf6mVZJEwtx 3/dr9vZHqfgLgD945pRRzpT53+GFXqWv8tv8p6l1wLfh0uueHzJ/dfA7ukGjTbAB Y/T06cbTNEry+Gx9PBTpe4e9ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu2/e6B qi/aHsLQ32eNlRJG9/WuMB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC+HJZtOZARnaXnBBvFmuj9FMevG8zsWPvTPHOvCRlenDliJhjdYQL Hco4akcCSFpLnyiD8/aSNQ9xI/U1uqpCVAav8tszD/Pl1fuKp7g/xRETNUutzXg8 b23eC21GskntDLU8DOTxZC0MEqqgDZTBMVQX4Z/XxcbvY16nr+bWkpPzWeHDtspt RHXye513kV9nITdsE4Rruv1uTm5tdgVvSbxrtCoHmDFS5ihhLX78bJQztacOCKfu TkH9ejnQWy3IQX53UUC66j1EAy7u97CnQ3yRHBWQ+0aTQ+gfwGZFe7AC/uls2fWL mg0YFXMZclJWsxNvXnBTe3+Kq0Lzm6Gs -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org