$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: iKWKPdQmoZVjOWRCyKglVuXHOJwCP5PDZkt7v8QZxOc= Subject key identifier: 43:3A:EC:FD:93:45:8C:2B:CB:D9:8C:67:4B:C9:DE:C4:60:E6:E3:2B Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: B6 Signing time: Fri 31 May 2024 07:17:07 +0000 Manifest this update: Fri 31 May 2024 07:17:07 +0000 Manifest next update: Fri 07 Jun 2024 07:17:07 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: 7l/JmQuRZks5Uf+2DJnz7QswElXHOG0qzgHH7KyETFY=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: /fIHJha571gb3JKov1qGg+Y5N5BTZWAtQH2WD7i89go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: May 31 07:17:07 2024 GMT Not After : Jun 7 07:17:07 2024 GMT Subject: CN=66597973-1dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:dc:c0:b0:50:7c:be:2a:9e:26:b0:b4:1d: ca:89:b1:1c:94:3f:63:75:10:44:20:b7:13:cc:b4: f6:e7:42:53:7e:2b:66:23:3a:16:a4:ae:23:28:b0: b9:23:fa:cb:5b:1a:d2:aa:63:2b:2f:a2:fa:7f:29: a0:e5:71:52:52:4a:cc:bc:d9:7c:fb:9d:3b:71:9c: 0d:03:cb:51:6b:79:62:45:2a:8f:08:71:37:0f:2c: 83:32:46:34:86:71:fd:8e:7a:52:59:28:d9:de:61: ee:ee:fe:c9:9b:8d:fa:2d:be:24:c3:2e:13:e7:7b: 87:6a:6f:af:24:f3:93:28:c5:4a:1e:9b:03:89:2f: 46:0d:b0:c9:be:b9:7a:5f:41:22:aa:87:0d:55:2a: 31:79:f0:91:0c:88:22:64:b0:0f:52:e8:39:91:08: ec:92:d6:d6:96:c8:4e:bb:b7:c7:7e:53:37:54:a8: f8:62:19:25:09:13:31:70:26:ec:f0:bc:a5:4c:4e: b2:51:df:e6:23:7c:20:22:30:67:40:8c:2d:be:d9: ba:8b:7e:84:85:51:18:fc:de:ed:6e:98:af:49:c5: f9:b8:32:4e:83:11:d5:37:d8:ad:e8:eb:ca:78:7f: ef:24:fe:67:8c:7c:22:d0:47:16:d7:68:c1:f2:2a: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3A:EC:FD:93:45:8C:2B:CB:D9:8C:67:4B:C9:DE:C4:60:E6:E3:2B X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ff:20:77:ee:6d:47:d7:9e:e2:9e:55:dc:5e:4c:1e:33:87: e2:bc:d8:c4:dd:37:30:a0:e6:f3:84:ad:73:0b:22:49:20:47: 5d:92:62:85:d4:67:49:66:82:59:c3:4a:90:47:df:45:e8:48: ab:97:72:a7:fe:7c:f5:7f:bd:10:c3:47:3f:a3:f6:9e:1f:18: df:11:c2:c6:f2:46:5f:07:05:45:7c:f5:21:9f:75:1f:b4:10: 73:72:49:27:39:0e:7f:27:92:85:50:c6:6b:10:3f:11:a4:6c: a2:ea:a1:e1:c7:3f:b6:8b:71:5b:c8:7c:73:cf:c4:a7:d3:56: 69:22:46:3a:09:ce:03:9b:77:18:fd:4c:e0:2b:32:04:39:db: d7:6f:ed:ad:cc:16:a2:2d:ac:c7:40:c0:48:eb:7a:44:47:21: e9:84:08:c8:ce:ef:8a:14:ec:71:b4:b3:18:94:9e:61:41:21: c4:af:1d:2a:a7:54:fb:ad:7a:c8:ef:b1:2b:e6:f7:45:37:ba: f3:55:10:07:a6:a4:3a:7d:b9:93:10:0e:3a:d2:59:61:94:ca: ef:d5:a4:61:03:93:73:18:64:1e:21:59:d3:13:f5:01:d7:97: 2d:9d:8a:8a:02:be:3e:50:88:62:a9:4b:f7:d6:2b:03:52:ed: 8d:e8:be:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjQwNTMxMDcxNzA3WhcNMjQwNjA3MDcxNzA3WjAYMRYwFAYD VQQDEw02NjU5Nzk3My0xZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbvcwLBQfL4qniawtB3KibEclD9jdRBEILcTzLT250JTfitmIzoWpK4jKLC5 I/rLWxrSqmMrL6L6fymg5XFSUkrMvNl8+507cZwNA8tRa3liRSqPCHE3DyyDMkY0 hnH9jnpSWSjZ3mHu7v7Jm436Lb4kwy4T53uHam+vJPOTKMVKHpsDiS9GDbDJvrl6 X0EiqocNVSoxefCRDIgiZLAPUug5kQjsktbWlshOu7fHflM3VKj4YhklCRMxcCbs 8LylTE6yUd/mI3wgIjBnQIwtvtm6i36EhVEY/N7tbpivScX5uDJOgxHVN9it6OvK eH/vJP5njHwi0EcW12jB8ioXbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM67P2T RYwry9mMZ0vJ3sRg5uMrMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6/yB37m1H157inlXcXkweM4fivNjE3TcwoObzhK1zCyJJIEddkmKF 1GdJZoJZw0qQR99F6Eirl3Kn/nz1f70Qw0c/o/aeHxjfEcLG8kZfBwVFfPUhn3Uf tBBzckknOQ5/J5KFUMZrED8RpGyi6qHhxz+2i3FbyHxzz8Sn01ZpIkY6Cc4Dm3cY /UzgKzIEOdvXb+2tzBaiLazHQMBI63pERyHphAjIzu+KFOxxtLMYlJ5hQSHErx0q p1T7rXrI77Er5vdFN7rzVRAHpqQ6fbmTEA460llhlMrv1aRhA5NzGGQeIVnTE/UB 15ctnYqKAr4+UIhiqUv31isDUu2N6L4E -----END CERTIFICATE-----Generated at Fri May 31 10:02:39 2024 by rpki-client on console-ams.rpki-client.org