$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: veYsO7infLbzAiM7EFqdk1dOrzSAIMBgR+nrk2YCnz4= Subject key identifier: E4:5A:C5:45:8C:D2:48:74:C4:8F:5A:ED:8F:74:FA:2B:72:14:DA:70 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 08B3 Signing time: Sat 18 May 2024 21:30:22 +0000 Manifest this update: Sat 18 May 2024 21:30:21 +0000 Manifest next update: Sat 25 May 2024 21:30:21 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: QNV6VPS6HxI5EMV/KixDc8U1lNJeJjdVwfW75UAklGY=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: sISmWlhb7frmntFzQwKgfTRrCjDzhLN0MV33XdrzWCk=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: Q35dPplckwcXibFwXwSrezG6FFNrbmD6fZLCuTrGB7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: May 18 21:30:21 2024 GMT Not After : May 25 21:30:21 2024 GMT Subject: CN=66491dee-8628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:60:ba:c0:2f:37:9d:b4:f7:c0:3e:44:63: 57:6b:fe:a2:80:ea:76:73:b3:c7:8b:58:0c:33:1c: c7:32:25:83:7e:2f:ea:70:26:e6:2a:46:98:30:71: 41:19:44:f7:85:78:d6:33:7b:02:d9:8f:1b:12:e0: 08:d3:ad:45:d8:1b:cc:9a:19:11:e9:96:d1:fb:d9: 15:93:ff:bb:8c:d4:c7:03:9a:d9:53:2b:b7:b6:09: 4a:ae:df:e4:ec:79:8c:27:7f:49:b4:b0:af:a9:cd: af:71:61:f5:13:10:5a:fd:8b:fe:b7:ca:8d:1f:a4: be:8a:32:8a:bc:56:0d:29:5d:e3:5b:b6:65:1a:4e: 76:43:1c:d4:9c:3c:7a:b2:ed:0f:26:fa:c4:41:c2: d4:a9:c8:aa:47:32:7f:a2:74:b5:da:b1:a6:47:30: 7a:4f:9a:f4:cd:50:24:f6:5f:03:aa:6d:95:26:7c: bf:b0:70:87:5a:34:dd:9b:d9:f3:ab:84:bb:87:ac: 32:94:09:9a:3f:3f:c8:10:79:34:0e:2b:cd:dd:fb: f2:f0:94:7d:5e:b7:de:c7:f6:92:9e:c3:3a:b1:11: ff:2a:d7:4e:c5:5d:ea:48:bd:1f:41:cb:43:2f:11: 0a:62:cd:53:d8:e1:7b:a1:99:e9:1d:25:bb:8a:c9: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5A:C5:45:8C:D2:48:74:C4:8F:5A:ED:8F:74:FA:2B:72:14:DA:70 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f2:0c:b8:2f:39:d9:b7:e3:ec:1c:e6:7f:e8:ee:54:f7:56: 2b:4b:db:a8:f4:0f:4c:c6:ea:5e:83:59:87:ec:4a:ab:27:75: 31:e6:db:1e:6b:e7:f6:0d:bb:ee:60:d2:b6:ee:6c:2a:14:d8: 08:e9:ea:98:30:51:0a:04:b4:d4:d7:9e:fe:7b:4a:30:a4:82: cb:08:88:53:5a:f6:21:30:9b:e6:04:da:5b:a7:24:d2:e3:6d: 3a:c0:c0:05:92:45:28:ca:13:33:c9:d6:ad:bf:4b:6f:99:4c: ca:82:93:02:b3:cd:3d:44:77:ff:97:8a:9a:d1:bd:26:d9:48: b3:64:5f:b6:5e:5b:f4:d5:40:23:80:cd:50:bf:5e:48:9d:8a: 91:6c:4e:e9:75:ae:54:2e:04:a9:2d:a1:6f:a4:c4:a1:a2:d0: 2a:8a:b4:ca:f1:2c:86:59:68:dc:46:0a:02:7e:8f:0c:a6:fe: 01:a2:56:99:25:20:91:26:85:76:d3:82:b6:6d:db:b6:1f:d8: 76:79:3e:da:c0:82:62:77:42:9c:d1:cb:1c:43:26:89:47:e7: c7:16:85:b4:a4:22:97:1c:a0:16:c7:46:b3:ea:f6:d5:06:8a: ac:14:63:8b:fd:cb:b0:e4:27:a9:bd:9d:ac:f8:3b:a0:e2:2b: f8:dc:dc:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjQwNTE4MjEzMDIxWhcNMjQwNTI1MjEzMDIxWjAYMRYwFAYD VQQDEw02NjQ5MWRlZS04NjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7pgusAvN52098A+RGNXa/6igOp2c7PHi1gMMxzHMiWDfi/qcCbmKkaYMHFB GUT3hXjWM3sC2Y8bEuAI061F2BvMmhkR6ZbR+9kVk/+7jNTHA5rZUyu3tglKrt/k 7HmMJ39JtLCvqc2vcWH1ExBa/Yv+t8qNH6S+ijKKvFYNKV3jW7ZlGk52QxzUnDx6 su0PJvrEQcLUqciqRzJ/onS12rGmRzB6T5r0zVAk9l8Dqm2VJny/sHCHWjTdm9nz q4S7h6wylAmaPz/IEHk0DivN3fvy8JR9Xrfex/aSnsM6sRH/KtdOxV3qSL0fQctD LxEKYs1T2OF7oZnpHSW7islZ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORaxUWM 0kh0xI9a7Y90+ityFNpwMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe8gy4LznZt+PsHOZ/6O5U91YrS9uo9A9Mxupeg1mH7EqrJ3Ux5tse a+f2DbvuYNK27mwqFNgI6eqYMFEKBLTU157+e0owpILLCIhTWvYhMJvmBNpbpyTS 4206wMAFkkUoyhMzydatv0tvmUzKgpMCs809RHf/l4qa0b0m2UizZF+2Xlv01UAj gM1Qv15InYqRbE7pda5ULgSpLaFvpMShotAqirTK8SyGWWjcRgoCfo8Mpv4BolaZ JSCRJoV204K2bdu2H9h2eT7awIJid0Kc0cscQyaJR+fHFoW0pCKXHKAWx0az6vbV BoqsFGOL/cuw5CepvZ2s+Dug4iv43NxR -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org