$ rpki-client -vvf rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft File: i9g61zjcTFeYTcLssh1ekBm7yMo.mft (raw, json) Hash identifier: u/hZydRhEHUzdUMaXyE5BoNhYL4BChI+6td/lFLJtrM= Subject key identifier: E8:F3:4C:50:86:DE:38:E4:82:18:50:11:A5:ED:29:9F:38:E3:62:8B Authority key identifier: 8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA Certificate issuer: /CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft Manifest number: 0A28 Signing time: Sat 18 May 2024 20:33:24 +0000 Manifest this update: Sat 18 May 2024 20:33:23 +0000 Manifest next update: Sat 25 May 2024 20:33:23 +0000 Files and hashes: 1: i9g61zjcTFeYTcLssh1ekBm7yMo.crl (hash: RZhBotVEVzn7apAEEUBxDE6iZ2oOjfKBB1dst+TfiP8=) 2: 2EAEF16047F211EAB16A5F1FC4F9AE02.roa (hash: xyx7ZvpUqEsJ4hzF+wnC82GdA9zPLO4pSnhWJzYXkK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA Validity Not Before: May 18 20:33:23 2024 GMT Not After : May 25 20:33:23 2024 GMT Subject: CN=66491094-c211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:2b:ea:aa:16:aa:01:0c:12:2a:e1:50:7d: a2:d8:b1:b1:9e:7d:9a:93:2c:f3:27:d4:18:fc:2b: 96:6e:0f:58:d1:b3:84:99:e9:5d:51:bf:ea:25:9d: b2:ac:c2:f9:e4:85:a6:64:6d:62:bd:7f:65:2e:1f: d2:dd:da:6a:99:81:ef:fc:df:31:f4:0d:d5:24:f8: 92:08:df:5a:ce:fc:f4:91:71:62:ab:3b:9e:5e:12: 14:2b:71:06:67:f2:b9:7b:e2:b7:87:98:8d:22:49: 35:82:0e:ac:d8:31:18:dd:3b:d2:a2:39:01:f8:e3: 69:09:d8:bb:e8:bc:40:96:a2:7f:4f:b9:f6:5e:92: 70:e4:41:c4:4b:6a:53:ec:85:01:2f:e2:c3:16:dc: 67:dd:5e:0d:2a:05:fb:cb:64:d5:6c:8c:6a:cb:7a: e0:93:18:9a:06:d2:05:57:ad:c6:82:b7:e4:62:07: 57:13:6e:e7:03:3d:a0:7b:a2:a1:24:93:8d:b9:4c: 64:87:8f:09:c8:b0:e2:ec:17:98:68:e5:76:30:60: 89:31:b8:4d:e3:01:48:1d:17:2e:78:94:d4:65:f7: f8:b3:b9:97:44:b7:7f:29:7a:76:af:9f:0e:97:b3: db:dd:6f:c2:a6:ea:5d:35:f4:93:a2:f8:eb:c7:9a: a1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:4C:50:86:DE:38:E4:82:18:50:11:A5:ED:29:9F:38:E3:62:8B X509v3 Authority Key Identifier: keyid:8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:67:f3:2b:2f:63:0d:f8:c1:b2:5b:1a:d3:59:32:2a:d4:cc: f6:14:2f:2a:e6:8c:0e:41:b5:e0:2f:9b:e9:b6:1d:17:57:b3: ce:4f:41:a0:05:8f:59:51:f2:1a:6c:ce:ac:f6:ad:89:8a:99: c6:b4:be:79:2e:06:22:bc:56:52:b9:c6:4d:9c:95:3b:02:ca: 3c:81:b1:e8:93:8b:18:87:f2:6f:0b:52:d2:18:d3:49:e5:05: 84:88:34:3c:38:44:5e:35:57:61:2f:75:f2:5e:77:ef:0c:d4: a9:77:39:a0:62:33:3c:09:15:0c:30:21:22:80:8a:21:c5:49: b2:0b:56:79:ed:24:c4:1c:c6:bb:3d:92:56:e8:28:ff:b6:88: 48:be:05:dd:2f:48:f5:d6:d4:40:37:8a:16:d0:f3:9d:9a:7c: 6e:4e:49:6a:21:94:d1:8b:97:9a:cd:b1:68:da:d0:c8:3f:84: a5:f6:5f:6b:83:b9:66:5f:6f:5b:11:28:bf:15:56:a3:c1:d5: 11:fb:fc:5a:f9:a9:58:93:79:a2:12:e2:8b:4b:bc:16:37:18: 69:4f:2a:74:64:37:78:78:4f:c6:32:f1:31:9a:e7:ca:ea:34: c0:e9:b2:59:c6:3a:59:0d:19:70:88:5b:1e:86:30:1e:e5:25: 40:3e:22:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NDOTQxMTAvBgNVBAUTKDhCRDgzQUQ3MzhEQzRDNTc5ODREQzJFQ0IyMUQ1RTkw MTlCQkM4Q0EwHhcNMjQwNTE4MjAzMzIzWhcNMjQwNTI1MjAzMzIzWjAYMRYwFAYD VQQDEw02NjQ5MTA5NC1jMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE4r6qoWqgEMEirhUH2i2LGxnn2akyzzJ9QY/CuWbg9Y0bOEmeldUb/qJZ2y rML55IWmZG1ivX9lLh/S3dpqmYHv/N8x9A3VJPiSCN9azvz0kXFiqzueXhIUK3EG Z/K5e+K3h5iNIkk1gg6s2DEY3TvSojkB+ONpCdi76LxAlqJ/T7n2XpJw5EHES2pT 7IUBL+LDFtxn3V4NKgX7y2TVbIxqy3rgkxiaBtIFV63GgrfkYgdXE27nAz2ge6Kh JJONuUxkh48JyLDi7BeYaOV2MGCJMbhN4wFIHRcueJTUZff4s7mXRLd/KXp2r58O l7Pb3W/CpupdNfSTovjrx5qhewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjzTFCG 3jjkghhQEaXtKZ8442KLMB8GA1UdIwQYMBaAFIvYOtc43ExXmE3C7LIdXpAZu8jK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0M5NC82NkRFQkU2NDQ3 RjAxMUVBODNFM0U3MUJDNEY5QUUwMi9pOWc2MXpqY1RGZVlUY0xzc2gxZWtCbTd5 TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5ZzYxempjVEZlWVRjTHNzaDFla0JtN3lNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0M5NC82NkRFQkU2NDQ3RjAxMUVBODNFM0U3MUJDNEY5QUUwMi9pOWc2MXpqY1RG ZVlUY0xzc2gxZWtCbTd5TW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKZ/MrL2MN+MGyWxrTWTIq1Mz2FC8q5owOQbXgL5vpth0XV7POT0Gg BY9ZUfIabM6s9q2JipnGtL55LgYivFZSucZNnJU7Aso8gbHok4sYh/JvC1LSGNNJ 5QWEiDQ8OEReNVdhL3XyXnfvDNSpdzmgYjM8CRUMMCEigIohxUmyC1Z57STEHMa7 PZJW6Cj/tohIvgXdL0j11tRAN4oW0POdmnxuTklqIZTRi5eazbFo2tDIP4Sl9l9r g7lmX29bESi/FVajwdUR+/xa+alYk3miEuKLS7wWNxhpTyp0ZDd4eE/GMvExmufK 6jTA6bJZxjpZDRlwiFsehjAe5SVAPiJy -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org