$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json) Hash identifier: FR7OKrgDNhPIEObRoNF/6G9i9o35lQ+8oPMyGInXB9g= Subject key identifier: D3:AD:FB:85:21:1D:43:67:59:9C:74:4D:81:F3:36:ED:E3:EF:84:5B Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0B59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft Manifest number: 0B49 Signing time: Fri 31 May 2024 20:24:37 +0000 Manifest this update: Fri 31 May 2024 20:24:36 +0000 Manifest next update: Fri 07 Jun 2024 20:24:36 +0000 Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: n3PPgGPQwH7h/vuxDEqkW5T0bp6mTTNscB16fRS1Qrg=) 2: FA7A1C3AAEE911EA8DB3E03CC4F9AE02.roa (hash: QE5ecgdG5fYcUSCX+MxTdkEzDIB0KG6YE5GZCloiYJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2905 (0xb59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: May 31 20:24:36 2024 GMT Not After : Jun 7 20:24:36 2024 GMT Subject: CN=665a3204-9eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b9:26:b5:d9:ce:0a:1e:b2:45:20:5c:cd:cd: 3e:a9:97:68:50:5b:b2:bf:3a:4b:27:69:ae:fb:b5: ac:a8:7e:1e:d2:84:96:ef:11:de:58:9e:7f:0f:7a: d6:95:a1:04:b3:f3:f3:58:63:f3:2c:4c:76:2c:a8: f1:9e:ee:f9:44:31:75:e7:5f:68:d3:ce:d7:2f:45: 1a:d4:1a:cf:a6:38:db:89:e7:e7:11:f4:01:55:a2: 9e:d3:78:cc:03:76:44:5e:b1:06:05:f5:3a:3d:bc: 2e:39:f0:52:2e:c3:96:f5:02:2a:15:ae:12:4a:83: 85:10:f8:ae:95:d7:e0:8d:23:f9:9e:fd:ee:25:2a: b1:07:ee:b3:5b:57:41:bf:a0:cc:63:9f:3d:82:c9: 43:dd:b8:e1:d3:75:c9:58:9a:d8:6a:7e:35:af:06: 85:0f:f6:2b:73:aa:23:57:3b:63:29:eb:41:8a:d7: b7:0e:30:63:29:99:58:ff:14:26:32:83:26:d8:a2: af:20:d3:30:a8:74:56:18:b8:8b:04:aa:e4:b9:1d: f9:5b:79:da:d6:a8:a7:21:7b:ca:35:a2:75:ac:75: dd:a3:a5:60:2a:80:6f:31:74:3c:fa:96:9a:12:1d: 36:0c:98:96:ba:ee:c1:13:5f:70:d4:79:06:39:b9: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AD:FB:85:21:1D:43:67:59:9C:74:4D:81:F3:36:ED:E3:EF:84:5B X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:17:25:c2:4d:1d:89:5d:95:f2:68:a6:aa:b1:30:7d:58:2f: a3:4a:12:d5:fe:52:00:d8:c2:4b:0e:3f:e8:91:24:eb:a4:29: 97:59:10:6b:93:e5:e4:ee:ef:29:1d:90:0b:81:ce:25:8b:62: 1e:c5:4c:df:ce:7f:54:fc:0e:3b:c6:6d:47:49:1f:e8:4a:e4: ca:b4:7f:f5:4c:01:fb:ad:98:82:7b:0e:16:c3:f4:de:d3:a9: 16:40:95:bb:21:00:0b:df:b9:7d:e4:46:44:93:a0:85:4c:eb: a3:5c:a4:50:6c:39:ce:6b:bf:18:c8:92:8f:43:ab:10:bf:56: 43:4f:6d:d3:0a:6b:68:e4:82:cc:75:d0:c5:89:32:6f:f5:90: c5:7d:da:e4:c3:f9:57:30:6b:ee:f6:2a:00:52:a7:40:b5:48: 4a:dc:22:fa:aa:ef:b2:86:ca:77:04:6b:03:a7:ef:9b:2e:45: f4:e0:d4:af:1f:7f:d4:04:22:50:61:b8:67:3f:cc:4e:b3:c1: 92:72:d9:30:b3:33:fe:88:ba:1a:09:64:21:fe:ae:e1:ac:ab: 55:2b:2a:dd:36:d1:89:30:7b:88:4e:90:c2:1a:d9:03:02:a7: 18:c1:46:2d:21:c3:f9:a1:f5:01:15:03:5e:cf:5f:03:12:1c: 70:8d:31:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjQwNTMxMjAyNDM2WhcNMjQwNjA3MjAyNDM2WjAYMRYwFAYD VQQDEw02NjVhMzIwNC05ZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rkmtdnOCh6yRSBczc0+qZdoUFuyvzpLJ2mu+7WsqH4e0oSW7xHeWJ5/D3rW laEEs/PzWGPzLEx2LKjxnu75RDF1519o087XL0Ua1BrPpjjbiefnEfQBVaKe03jM A3ZEXrEGBfU6PbwuOfBSLsOW9QIqFa4SSoOFEPiuldfgjSP5nv3uJSqxB+6zW1dB v6DMY589gslD3bjh03XJWJrYan41rwaFD/Yrc6ojVztjKetBite3DjBjKZlY/xQm MoMm2KKvINMwqHRWGLiLBKrkuR35W3na1qinIXvKNaJ1rHXdo6VgKoBvMXQ8+paa Eh02DJiWuu7BE19w1HkGObljLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOt+4Uh HUNnWZx0TYHzNu3j74RbMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuFyXCTR2JXZXyaKaqsTB9WC+jShLV/lIA2MJLDj/okSTrpCmXWRBr k+Xk7u8pHZALgc4li2IexUzfzn9U/A47xm1HSR/oSuTKtH/1TAH7rZiCew4Ww/Te 06kWQJW7IQAL37l95EZEk6CFTOujXKRQbDnOa78YyJKPQ6sQv1ZDT23TCmto5ILM ddDFiTJv9ZDFfdrkw/lXMGvu9ioAUqdAtUhK3CL6qu+yhsp3BGsDp++bLkX04NSv H3/UBCJQYbhnP8xOs8GSctkwszP+iLoaCWQh/q7hrKtVKyrdNtGJMHuITpDCGtkD AqcYwUYtIcP5ofUBFQNez18DEhxwjTFl -----END CERTIFICATE-----Generated at Fri May 31 22:13:07 2024 by rpki-client on console-fra.rpki-client.org