$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: 3Eu22PEPOam9kYYPylzqfIjtXZTHnmi5lNz7nv6yKho= Subject key identifier: 3D:FB:E7:E0:D1:A6:67:3F:4F:C4:97:E2:B6:66:CB:11:04:6A:C7:79 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 091F Signing time: Sat 18 May 2024 21:11:16 +0000 Manifest this update: Sat 18 May 2024 21:11:16 +0000 Manifest next update: Sat 25 May 2024 21:11:16 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: FjdVhyWDciarL9JZ8XslknbOmX/gkiBbRFLuzNe47mo=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: 9ubLeIKH/kTnlE4cW/+I5O6o9Y6wEde7fUcw20Ci5Ck=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: aOFO6GftXaMnWGoPfaj8leZpOMZB4KxEvjyCRhGy9Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: May 18 21:11:16 2024 GMT Not After : May 25 21:11:16 2024 GMT Subject: CN=66491974-6843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:0e:45:0e:c0:d5:db:8b:b8:a2:f7:c5:62: fe:31:2a:96:f7:c4:51:98:f7:4a:36:ab:b7:83:03: 37:57:10:36:76:0f:e4:16:f4:d6:38:a4:31:f3:71: a5:13:3c:e3:fe:4f:27:c5:35:5c:44:48:f6:59:4b: 0d:50:d6:6e:b8:2c:b4:33:be:e6:be:18:71:ea:4b: 61:52:57:86:f7:d7:a5:49:e4:25:b2:c0:31:48:02: 29:c8:28:ed:21:85:70:bc:ff:29:18:32:61:af:74: aa:50:d1:6c:06:a2:00:2c:bd:5d:ba:ed:f1:71:fc: 47:d1:1c:3b:d3:12:2e:0d:36:06:58:c3:63:1e:9f: fa:55:b4:52:b5:db:32:c8:bc:c6:d3:f9:4e:2e:d1: 43:51:e8:77:57:57:66:36:b7:1c:1c:04:d5:9b:5a: 90:9d:c7:50:aa:b7:3a:33:b4:91:66:49:44:a2:a7: 35:ed:e6:cc:b4:dd:a7:b6:e9:8e:64:1e:2d:bb:c4: 16:90:6f:81:d2:1e:4a:36:03:c9:b4:cf:13:d1:c1: 65:81:7b:2f:ef:41:a7:c1:74:bc:f2:22:3a:bd:f3: 3d:5a:1d:2b:a7:37:bc:b9:98:c0:20:eb:81:f2:1b: 5f:ec:87:48:11:ec:67:4e:03:33:a9:13:ff:8e:23: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FB:E7:E0:D1:A6:67:3F:4F:C4:97:E2:B6:66:CB:11:04:6A:C7:79 X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4d:52:d8:c7:d3:28:82:24:bf:b9:6b:cc:02:7c:72:39:2a: c9:3e:e5:d7:7a:6f:d4:e0:a8:bd:f2:da:70:6a:b6:15:af:b5: af:f7:c1:24:09:6a:fe:7d:3c:9d:d7:4f:a8:ef:38:96:24:90: d6:45:be:82:3a:08:aa:8d:fe:64:65:c0:5e:66:7d:1d:51:b5: 54:db:ac:92:88:bf:58:5a:7f:c4:64:cd:88:6c:41:93:37:7d: 29:34:00:e9:a1:b2:d8:7f:12:d7:24:6c:b8:0e:a3:26:13:4d: 22:88:69:0a:d1:3a:48:28:c2:54:21:9b:d1:31:ed:a7:cf:28: b4:75:14:e0:89:c9:8b:02:24:7a:d8:cc:e0:2b:7c:24:3b:06: d3:8f:36:fc:49:0d:5c:b4:ba:64:15:14:e8:23:d1:06:19:f1: 88:b7:0a:c6:56:fb:cd:0a:2b:c6:73:53:b8:0a:45:4e:4a:ba: 5d:78:45:3c:c9:4d:df:ca:bb:54:d3:bc:c4:b6:87:d6:b8:ab: 23:13:07:58:37:13:2a:80:75:5d:3f:05:87:9a:5b:e9:13:45: 06:26:bf:2c:45:06:51:c9:35:b3:3f:68:60:a6:fd:32:37:16: 87:52:87:eb:8a:78:98:10:f3:ab:e6:3f:00:97:99:c4:29:e1: a6:ef:63:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjQwNTE4MjExMTE2WhcNMjQwNTI1MjExMTE2WjAYMRYwFAYD VQQDEw02NjQ5MTk3NC02ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxToORQ7A1duLuKL3xWL+MSqW98RRmPdKNqu3gwM3VxA2dg/kFvTWOKQx83Gl Ezzj/k8nxTVcREj2WUsNUNZuuCy0M77mvhhx6kthUleG99elSeQlssAxSAIpyCjt IYVwvP8pGDJhr3SqUNFsBqIALL1duu3xcfxH0Rw70xIuDTYGWMNjHp/6VbRStdsy yLzG0/lOLtFDUeh3V1dmNrccHATVm1qQncdQqrc6M7SRZklEoqc17ebMtN2ntumO ZB4tu8QWkG+B0h5KNgPJtM8T0cFlgXsv70GnwXS88iI6vfM9Wh0rpze8uZjAIOuB 8htf7IdIEexnTgMzqRP/jiMN1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD375+DR pmc/T8SX4rZmyxEEasd5MB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKTVLYx9MogiS/uWvMAnxyOSrJPuXXem/U4Ki98tpwarYVr7Wv98Ek CWr+fTyd10+o7ziWJJDWRb6COgiqjf5kZcBeZn0dUbVU26ySiL9YWn/EZM2IbEGT N30pNADpobLYfxLXJGy4DqMmE00iiGkK0TpIKMJUIZvRMe2nzyi0dRTgicmLAiR6 2MzgK3wkOwbTjzb8SQ1ctLpkFRToI9EGGfGItwrGVvvNCivGc1O4CkVOSrpdeEU8 yU3fyrtU07zEtofWuKsjEwdYNxMqgHVdPwWHmlvpE0UGJr8sRQZRyTWzP2hgpv0y NxaHUofriniYEPOr5j8Al5nEKeGm72Nw -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org