$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: owpG2rTpfro5fKvRV8hFoWKo39wH3aPr5Msxljk5gYQ= Subject key identifier: 76:F2:84:7C:31:CA:38:BA:04:BE:85:A7:2E:9B:BB:51:7F:FB:F9:8F Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 15A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1598 Signing time: Sat 18 May 2024 17:15:50 +0000 Manifest this update: Sat 18 May 2024 17:15:49 +0000 Manifest next update: Sat 25 May 2024 17:15:49 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: L9HLwstAfRnznxCqIzM08EyJauhqEsOWr+3ZCfVJIk8=) 2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: eVrv/7SB7Sw9s1UVLWjNWn1S1KymWPk3lNtET/pCiNk=) 3: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: mBC+S8sbLCZZz8GfGm6iJpoFGjL0QOywm004JclbsFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5544 (0x15a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: May 18 17:15:49 2024 GMT Not After : May 25 17:15:49 2024 GMT Subject: CN=6648e246-cda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:b0:04:a2:51:c8:1e:c4:3f:7b:c4:10:c5: 4d:33:67:f3:20:96:f7:45:15:62:47:75:27:30:13: 10:74:ba:d1:10:ae:e9:0e:fc:06:46:63:6a:a0:48: ac:4f:e1:99:b3:5f:76:32:d4:93:cb:7c:f3:ec:1e: 5d:d2:cb:a3:6d:21:7f:43:a4:b2:da:ba:0b:1d:b0: fa:9c:d9:71:a7:e3:83:18:20:79:fd:68:af:db:c5: 0c:0c:1f:e8:a0:75:83:21:f6:02:52:32:b4:31:17: 48:52:4f:41:0a:c5:de:a4:48:73:0c:28:b6:8c:2e: 29:f1:a7:08:24:46:b3:92:ed:22:8e:d8:86:24:36: 64:f1:2c:6e:7f:c3:18:b0:e3:9f:15:81:a4:12:8e: 06:53:41:a3:2f:a0:89:89:56:b7:86:94:06:c5:c1: 73:e4:d8:dc:b4:b0:f8:14:07:de:d5:02:1a:f0:9a: dc:cf:b5:03:c7:09:cc:03:47:23:f2:f9:b5:10:90: 58:4f:c5:da:df:53:b5:07:a8:c8:70:97:d7:72:39: 50:15:83:e6:58:38:e8:55:87:6d:61:c1:62:fa:03: 7a:21:ff:82:c4:35:0f:fc:5b:41:20:99:ac:1d:92: d2:8b:2c:09:33:36:7a:76:b5:89:08:b2:93:76:56: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F2:84:7C:31:CA:38:BA:04:BE:85:A7:2E:9B:BB:51:7F:FB:F9:8F X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:56:1f:96:28:21:57:7f:e1:31:64:57:0d:e8:6a:7b:e5:1e: 20:98:70:d3:f7:fe:22:3c:d2:cc:38:1e:8d:c1:5c:cd:a0:60: 17:c4:fc:34:0a:da:41:47:df:35:be:d7:f0:b1:f8:c0:84:20: 8c:a9:3d:d0:17:ed:b4:fa:63:92:09:e0:7b:8a:27:10:ab:85: fe:86:4e:86:47:fb:95:1a:93:3a:4c:73:90:c7:8c:62:96:f6: 98:ad:6c:67:2c:55:37:a8:fb:11:93:48:95:07:f7:10:94:8d: 9f:6f:a2:85:4a:3f:1b:a6:14:f0:1d:24:c9:41:51:3c:91:70: 46:a0:0c:f7:f3:77:ba:b0:ff:cb:db:81:f2:aa:d0:84:32:4e: 73:01:12:27:60:b5:7e:98:38:59:fe:6b:c2:9a:97:06:7d:d5: 05:df:2d:7a:26:75:04:98:ad:f2:b4:69:d6:07:d7:61:74:bb: fc:85:1e:d7:27:33:39:88:d4:67:04:e9:50:d4:38:26:cd:36: b4:8f:87:4c:72:44:b6:19:e5:cf:8d:f6:f8:91:ce:85:bb:89: 5c:71:46:66:ab:70:6d:da:b0:04:81:50:1b:d3:5d:32:b6:c6: 52:f6:f2:8a:fb:49:3c:6a:08:9a:09:84:24:20:0a:67:fa:56: da:bf:4b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjQwNTE4MTcxNTQ5WhcNMjQwNTI1MTcxNTQ5WjAYMRYwFAYD VQQDEw02NjQ4ZTI0Ni1jZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLqwBKJRyB7EP3vEEMVNM2fzIJb3RRViR3UnMBMQdLrREK7pDvwGRmNqoEis T+GZs192MtSTy3zz7B5d0sujbSF/Q6Sy2roLHbD6nNlxp+ODGCB5/Wiv28UMDB/o oHWDIfYCUjK0MRdIUk9BCsXepEhzDCi2jC4p8acIJEazku0ijtiGJDZk8Sxuf8MY sOOfFYGkEo4GU0GjL6CJiVa3hpQGxcFz5NjctLD4FAfe1QIa8Jrcz7UDxwnMA0cj 8vm1EJBYT8Xa31O1B6jIcJfXcjlQFYPmWDjoVYdtYcFi+gN6If+CxDUP/FtBIJms HZLSiywJMzZ6drWJCLKTdlasEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbyhHwx yji6BL6Fpy6bu1F/+/mPMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnVh+WKCFXf+ExZFcN6Gp75R4gmHDT9/4iPNLMOB6NwVzNoGAXxPw0 CtpBR981vtfwsfjAhCCMqT3QF+20+mOSCeB7iicQq4X+hk6GR/uVGpM6THOQx4xi lvaYrWxnLFU3qPsRk0iVB/cQlI2fb6KFSj8bphTwHSTJQVE8kXBGoAz383e6sP/L 24HyqtCEMk5zARInYLV+mDhZ/mvCmpcGfdUF3y16JnUEmK3ytGnWB9dhdLv8hR7X JzM5iNRnBOlQ1DgmzTa0j4dMckS2GeXPjfb4kc6Fu4lccUZmq3Bt2rAEgVAb010y tsZS9vKK+0k8agiaCYQkIApn+lbav0ts -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org