$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: 1j0ObHMBbD1RKzTtFWA0nq4z9HBI6D06rP7wGq9nRQY= Subject key identifier: 6C:29:BF:CC:E0:46:1C:C3:5E:3E:1D:D6:B9:BA:88:CE:3D:88:E8:B0 Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 0685 Signing time: Sat 18 May 2024 23:22:55 +0000 Manifest this update: Sat 18 May 2024 23:22:55 +0000 Manifest next update: Sat 25 May 2024 23:22:55 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: Y7fWFD6mrUzYgRnjTLzMGfLVtL9AMAqRj09pk0VEE9A=) 2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: y4LQLdgjq6TDz8VF/AukTm9uK6xzzjTJc/4cmyC+iJo=) 3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: koTLUDSoOq9KKfWTB/aW59SQqfB1uGPLSve3WZCy99Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: May 18 23:22:55 2024 GMT Not After : May 25 23:22:55 2024 GMT Subject: CN=6649384f-ae31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:51:07:24:c4:d5:a4:47:46:df:9d:1e:2d: 62:37:5a:1d:25:01:5e:01:cd:44:73:e4:fb:75:90: 68:d7:72:71:f1:7c:21:09:c9:dd:83:a2:4e:36:6c: 9b:e9:71:65:7b:45:f6:84:06:67:6b:a6:74:f6:4e: b2:a5:43:bc:b8:58:50:75:77:09:a7:90:b1:2b:d9: 5b:27:87:b2:81:ea:37:bd:92:e0:cc:ea:27:c8:88: 35:29:e3:42:21:f5:9b:96:14:09:7d:5c:b1:60:28: 61:e7:7e:32:42:91:d6:db:79:98:19:10:d1:cc:4d: 1b:93:3e:16:16:03:d9:ed:aa:96:fe:3b:f2:42:dc: 7c:6b:96:ac:8c:d4:d5:18:32:4e:5c:07:c7:4f:15: 0c:2d:a1:4d:0b:4b:59:8b:88:3d:60:87:b7:b1:ff: 5a:15:77:4e:a2:90:00:75:83:93:00:49:52:37:dc: 66:ff:26:c1:de:65:69:85:84:5d:20:bc:a4:5c:33: b3:1e:52:46:f3:ea:75:7b:32:e7:ab:47:48:41:ec: 72:9b:a6:a2:42:71:d9:cb:34:99:01:ee:48:1c:a9: 89:d0:a5:c0:12:71:24:b5:f0:5b:dc:a2:03:34:d8: 5c:f5:7a:06:cd:67:bc:8e:7d:48:d7:2e:be:d2:25: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:29:BF:CC:E0:46:1C:C3:5E:3E:1D:D6:B9:BA:88:CE:3D:88:E8:B0 X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:0b:59:23:01:b8:1f:17:40:ef:94:91:66:65:3c:de:95:8c: d7:ac:36:fd:3d:66:3e:87:d1:cf:a7:e1:3e:ce:04:0e:b9:b9: ea:47:19:c2:51:8c:1d:4b:53:bf:1e:cf:ab:0b:4e:17:90:d3: 58:7f:fb:e9:62:9a:db:de:67:8e:32:bc:86:61:7c:6f:3f:b3: 63:40:87:d0:27:9d:cc:5c:46:10:79:98:07:eb:bc:42:67:33: fb:90:b0:67:fc:19:a1:fb:cf:97:5d:b1:65:ba:a1:54:c3:f6: 65:3d:ee:9d:d7:06:63:18:ee:b5:31:d8:3b:c3:79:bf:0f:e8: 55:09:e0:20:a6:e3:19:88:64:07:b2:fd:3c:9f:c7:1c:84:cc: 62:ef:68:6b:9c:b8:f2:28:06:23:03:b2:d2:c6:0e:bb:75:6d: 46:79:49:db:a0:4b:a8:00:fa:08:43:9d:33:d8:53:07:19:c9: 31:b1:a4:f0:8e:aa:a9:c5:73:e5:2b:2c:ec:d3:65:0d:f4:1b: 72:ff:a4:2c:48:37:f7:f2:93:8d:7b:07:77:d5:76:3a:5b:25: 5d:f0:b3:bd:00:48:43:e6:3b:32:0e:89:f5:f7:d4:bb:68:29: 43:22:f8:ac:5e:a0:cf:a1:ed:ce:39:ef:36:4c:5e:65:13:61: 63:e0:5e:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjQwNTE4MjMyMjU1WhcNMjQwNTI1MjMyMjU1WjAYMRYwFAYD VQQDEw02NjQ5Mzg0Zi1hZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzdRByTE1aRHRt+dHi1iN1odJQFeAc1Ec+T7dZBo13Jx8XwhCcndg6JONmyb 6XFle0X2hAZna6Z09k6ypUO8uFhQdXcJp5CxK9lbJ4eygeo3vZLgzOonyIg1KeNC IfWblhQJfVyxYChh534yQpHW23mYGRDRzE0bkz4WFgPZ7aqW/jvyQtx8a5asjNTV GDJOXAfHTxUMLaFNC0tZi4g9YIe3sf9aFXdOopAAdYOTAElSN9xm/ybB3mVphYRd ILykXDOzHlJG8+p1ezLnq0dIQexym6aiQnHZyzSZAe5IHKmJ0KXAEnEktfBb3KID NNhc9XoGzWe8jn1I1y6+0iW4GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwpv8zg RhzDXj4d1rm6iM49iOiwMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3C1kjAbgfF0DvlJFmZTzelYzXrDb9PWY+h9HPp+E+zgQOubnqRxnC UYwdS1O/Hs+rC04XkNNYf/vpYprb3meOMryGYXxvP7NjQIfQJ53MXEYQeZgH67xC ZzP7kLBn/Bmh+8+XXbFluqFUw/ZlPe6d1wZjGO61Mdg7w3m/D+hVCeAgpuMZiGQH sv08n8cchMxi72hrnLjyKAYjA7LSxg67dW1GeUnboEuoAPoIQ50z2FMHGckxsaTw jqqpxXPlKyzs02UN9Bty/6QsSDf38pONewd31XY6WyVd8LO9AEhD5jsyDon199S7 aClDIvisXqDPoe3OOe82TF5lE2Fj4F7+ -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org