$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft File: IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json) Hash identifier: OytBzAbtk7TB6LCTrb0n06H4iD0EOWInnQxJHewE1LM= Subject key identifier: 94:50:1E:06:4F:B4:0D:11:31:F2:6B:C2:9A:C1:4D:3D:76:E4:D2:6B Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7 Certificate issuer: /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft Manifest number: 0125 Signing time: Sun 19 May 2024 05:07:54 +0000 Manifest this update: Sun 19 May 2024 05:07:53 +0000 Manifest next update: Sun 26 May 2024 05:07:53 +0000 Files and hashes: 1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: EVFNx26z5POMDALJfP6B3662t05uBMdZDIxYwMPFf00=) 2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: jlkxPZoNu6eLC2Bik07aFBNxy8+aDrwFi/VBGP0djcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7 Validity Not Before: May 19 05:07:53 2024 GMT Not After : May 26 05:07:53 2024 GMT Subject: CN=6649892a-ae9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:c7:c3:4e:25:80:32:1a:dc:69:9f:22:50: 4b:73:91:be:00:56:cf:f4:1e:da:7b:11:f3:6a:4e: 3c:1c:9c:3f:04:00:54:f9:37:9b:09:80:e6:f7:4d: 25:7a:f1:96:4e:60:d6:e1:87:93:1e:1f:c4:a9:d7: e0:30:6f:ef:69:b3:87:97:81:49:1c:01:bc:6b:1d: 33:87:6d:43:65:c3:7e:b7:61:48:91:28:70:9c:f9: a1:2d:06:70:0f:9b:45:a0:d9:21:50:a5:ef:9f:9f: dd:61:27:1f:44:29:dd:46:b9:1a:88:f6:18:a9:4d: 07:55:09:9b:cf:b5:59:79:77:df:28:63:1c:a3:f7: f3:96:77:26:c5:bd:d5:93:80:85:3b:29:7e:66:dc: 95:81:a4:13:51:c5:77:0b:66:f9:cb:17:dc:e0:21: 17:c9:99:e2:5a:01:ae:d7:52:fa:61:23:d3:d4:9b: a9:2c:dc:f6:a3:0c:08:c0:41:d0:af:6c:e8:74:19: cd:d2:32:cf:7a:c2:37:6a:a8:d0:01:80:20:2f:42: 09:9b:13:4d:89:d0:27:11:f9:80:9f:98:7c:40:74: d4:22:81:0a:f3:ef:53:19:cd:47:fd:04:a0:a0:f5: 33:d0:44:c6:49:88:fd:39:ee:cf:df:61:1a:09:9e: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:50:1E:06:4F:B4:0D:11:31:F2:6B:C2:9A:C1:4D:3D:76:E4:D2:6B X509v3 Authority Key Identifier: keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c8:2f:55:f1:5c:59:81:f6:31:56:8f:04:24:ef:c8:d5:e5: 6f:bc:6f:1f:85:31:31:45:59:70:e7:ca:19:d7:f2:92:d1:21: 09:53:80:34:6b:63:91:d9:94:29:f2:cb:8c:99:36:a3:15:31: 13:9d:7e:00:a7:c8:f4:21:26:a2:7d:6b:ac:11:fa:b2:7b:0d: c6:b5:6e:60:87:96:ee:b6:f6:f9:53:75:9e:0c:58:d5:16:d8: 1d:7a:79:f2:5e:32:3e:0c:1c:62:dc:8f:5d:08:12:d9:59:cb: 38:eb:f7:a1:cc:ce:b1:8f:6f:cf:bb:42:88:23:9d:94:16:85: 32:b7:d2:75:19:21:ab:35:11:c0:42:39:9c:a8:dd:e9:ac:5c: 5f:1f:25:48:8e:d6:54:22:11:67:28:d7:f3:69:70:dd:2d:93: 7b:ab:f6:12:88:31:ca:c2:fd:8f:50:b8:fe:41:7c:3a:7c:ee: 9a:fe:1b:cf:f6:3a:13:5b:11:bb:f7:57:2b:5c:b3:71:36:fe: f7:8f:1c:bd:f3:32:f7:58:6d:8c:41:e9:4f:93:e1:61:f7:78: b0:af:f9:fc:cd:f0:e1:b8:33:02:a4:62:10:92:3e:68:59:3c: fe:79:fc:19:2c:ac:bc:a4:c7:50:1d:5b:71:f9:7e:d4:53:f3: c6:7e:b6:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAyMjYxMTAvBgNVBAUTKDIyMDUxRTcxRkVEMDFCQkU1QjlDRDYyNDQ3NjBDRTZF OTAzMDdBRjcwHhcNMjQwNTE5MDUwNzUzWhcNMjQwNTI2MDUwNzUzWjAYMRYwFAYD VQQDEw02NjQ5ODkyYS1hZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshrHw04lgDIa3GmfIlBLc5G+AFbP9B7aexHzak48HJw/BABU+TebCYDm900l evGWTmDW4YeTHh/EqdfgMG/vabOHl4FJHAG8ax0zh21DZcN+t2FIkShwnPmhLQZw D5tFoNkhUKXvn5/dYScfRCndRrkaiPYYqU0HVQmbz7VZeXffKGMco/fzlncmxb3V k4CFOyl+ZtyVgaQTUcV3C2b5yxfc4CEXyZniWgGu11L6YSPT1JupLNz2owwIwEHQ r2zodBnN0jLPesI3aqjQAYAgL0IJmxNNidAnEfmAn5h8QHTUIoEK8+9TGc1H/QSg oPUz0ETGSYj9Oe7P32EaCZ71awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRQHgZP tA0RMfJrwprBTT125NJrMB8GA1UdIwQYMBaAFCIFHnH+0Bu+W5zWJEdgzm6QMHr3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDIyNi9CNThFQkEzMDU1 QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3NWJuTllrUjJET2JwQXdl dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lnVWVjZjdRRzc1Ym5OWWtSMkRPYnBBd2V2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDIyNi9CNThFQkEzMDU1QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3 NWJuTllrUjJET2JwQXdldmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvyC9V8VxZgfYxVo8EJO/I1eVvvG8fhTExRVlw58oZ1/KS0SEJU4A0 a2OR2ZQp8suMmTajFTETnX4Ap8j0ISaifWusEfqyew3GtW5gh5butvb5U3WeDFjV FtgdennyXjI+DBxi3I9dCBLZWcs46/ehzM6xj2/Pu0KII52UFoUyt9J1GSGrNRHA QjmcqN3prFxfHyVIjtZUIhFnKNfzaXDdLZN7q/YSiDHKwv2PULj+QXw6fO6a/hvP 9joTWxG791crXLNxNv73jxy98zL3WG2MQelPk+Fh93iwr/n8zfDhuDMCpGIQkj5o WTz+efwZLKy8pMdQHVtx+X7UU/PGfrZh -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org