$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: biwfoaEwjujx2nSsal1+DX4WEGnaySM0rz/71pm7KXw= Subject key identifier: 52:F3:BE:E0:67:B9:96:5B:D2:6A:79:4A:80:AF:6C:07:A0:B2:C7:7C Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: CA Signing time: Sun 19 May 2024 06:15:25 +0000 Manifest this update: Sun 19 May 2024 06:15:24 +0000 Manifest next update: Sun 26 May 2024 06:15:24 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: WqQq/v4Hf5WlVUXbFhfXB7rJvAfxSOuPSPAtIVdsLXg=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: jk8Sbeajd8SP8xYcpO63DjvkE7irofgCOLMPl17DXJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: May 19 06:15:24 2024 GMT Not After : May 26 06:15:24 2024 GMT Subject: CN=664998fd-dde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:6e:3d:ee:55:f1:ea:bd:77:80:6c:62:bb: 41:ba:8e:62:a2:83:a5:40:c7:c8:2c:b9:a2:e7:57: 7c:76:c4:8e:bb:dd:60:20:0e:7d:ce:5e:aa:9c:27: d1:5d:21:bb:08:6b:15:38:7a:26:85:cd:73:6d:dc: f7:2e:38:93:48:05:2b:5d:28:03:20:6b:a1:ac:e7: 6c:2d:37:c2:d8:49:0c:34:fc:d7:1d:ba:d5:2d:ed: ff:ac:27:b9:13:3e:e2:3c:ca:1f:bc:18:b1:83:16: 3a:97:be:e2:b7:d4:5a:e1:46:63:28:67:3b:72:7a: f7:d6:5a:86:55:c8:e5:51:bb:e1:b8:81:4d:0c:54: 90:55:5e:84:41:0d:0b:69:61:71:c9:7e:98:5e:f6: 75:82:eb:9b:82:5f:6a:69:fd:f2:7d:9c:6b:bb:eb: 68:bd:11:df:36:45:f3:d9:4c:88:da:2a:e7:38:6c: 76:99:6d:80:f9:34:e3:70:1b:e0:99:62:0a:ae:69: 4c:d4:a7:77:00:0c:06:70:de:22:f1:92:57:11:d9: 88:39:3e:bf:e0:9a:76:2b:75:14:26:0b:ce:5e:87: ab:23:df:ab:36:2c:02:28:b1:85:ca:8f:6a:50:19: fc:67:2c:93:ea:c9:5b:7d:03:d1:fb:e6:38:2e:9d: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F3:BE:E0:67:B9:96:5B:D2:6A:79:4A:80:AF:6C:07:A0:B2:C7:7C X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c5:46:3b:9c:83:53:79:c1:84:22:ce:9d:e1:72:91:5c:73: 76:f3:ac:40:ad:91:6d:2c:9c:d9:d8:da:b4:7f:63:36:76:49: 0f:1a:fb:87:c1:cf:55:f4:c7:ee:8c:e2:4e:91:34:a1:23:89: fd:3f:0f:47:29:e8:bd:50:60:54:f7:92:e0:6b:c7:70:f9:71: 8e:f6:4b:f2:a4:d8:ea:bb:26:29:b0:3f:53:68:b3:5a:2a:f3: 07:4d:2f:d5:9e:72:33:d1:47:1f:1d:94:02:e5:6c:64:38:74: dc:b2:be:63:29:f2:01:c5:e7:1a:3b:3c:d3:70:e2:dd:09:86: 01:73:75:a6:c3:e2:65:50:4b:42:97:35:7f:6c:f2:b0:74:51: 62:68:75:5c:66:56:4e:7e:f9:00:55:55:b9:50:9f:b7:84:d5: a5:17:98:f2:7c:1e:1b:62:2b:65:aa:d8:4a:da:d2:b7:cf:ee: 3c:19:9a:2c:f9:a5:73:45:5e:46:74:1f:68:2b:18:e9:85:a3: a0:31:5e:08:20:59:c4:7c:2d:f1:96:10:58:09:23:f9:77:80: 5a:de:6a:7e:5e:13:ba:99:c9:0f:af:1d:72:ae:1d:e8:16:23: 3a:94:ff:24:2b:25:80:ae:4e:59:12:83:c9:00:0e:a4:f1:e2: c7:85:ad:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjQwNTE5MDYxNTI0WhcNMjQwNTI2MDYxNTI0WjAYMRYwFAYD VQQDEw02NjQ5OThmZC1kZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzORuPe5V8eq9d4BsYrtBuo5iooOlQMfILLmi51d8dsSOu91gIA59zl6qnCfR XSG7CGsVOHomhc1zbdz3LjiTSAUrXSgDIGuhrOdsLTfC2EkMNPzXHbrVLe3/rCe5 Ez7iPMofvBixgxY6l77it9Ra4UZjKGc7cnr31lqGVcjlUbvhuIFNDFSQVV6EQQ0L aWFxyX6YXvZ1guubgl9qaf3yfZxru+tovRHfNkXz2UyI2irnOGx2mW2A+TTjcBvg mWIKrmlM1Kd3AAwGcN4i8ZJXEdmIOT6/4Jp2K3UUJgvOXoerI9+rNiwCKLGFyo9q UBn8ZyyT6slbfQPR++Y4Lp0ApwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLzvuBn uZZb0mp5SoCvbAegssd8MB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIxUY7nINTecGEIs6d4XKRXHN286xArZFtLJzZ2Nq0f2M2dkkPGvuH wc9V9MfujOJOkTShI4n9Pw9HKei9UGBU95Lga8dw+XGO9kvypNjquyYpsD9TaLNa KvMHTS/VnnIz0UcfHZQC5WxkOHTcsr5jKfIBxecaOzzTcOLdCYYBc3Wmw+JlUEtC lzV/bPKwdFFiaHVcZlZOfvkAVVW5UJ+3hNWlF5jyfB4bYitlqthK2tK3z+48GZos +aVzRV5GdB9oKxjphaOgMV4IIFnEfC3xlhBYCSP5d4Ba3mp+XhO6mckPrx1yrh3o FiM6lP8kKyWArk5ZEoPJAA6k8eLHha3Y -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org