$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: zPpSW0DeDwp2P4OCtCAPFIgJnDqRn2aRiKONYfDg9ug= Subject key identifier: 7B:1B:23:C1:D4:A3:DF:FB:E0:71:29:C5:8A:15:D4:A7:D5:4F:92:54 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 011D Signing time: Sat 25 May 2024 05:32:36 +0000 Manifest this update: Sat 25 May 2024 05:32:36 +0000 Manifest next update: Sat 01 Jun 2024 05:32:36 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: Qf4J0dNO1jx5oFetX9+BuUsfENZaYzfRCTDVvKxjgRo=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: Ocs9fY1y4Dml47WlHW8ZQXXWYhVC6xPKMA75wdQOmZ4=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 5ACArxlK+Iiq2w4atQzrcIkaGeaDW2uYXfK1DQWLUTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 05:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: May 25 05:32:36 2024 GMT Not After : Jun 1 05:32:36 2024 GMT Subject: CN=665177f4-4342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:ea:c8:65:61:3e:9e:2c:09:63:1f:49:7d: 81:2f:99:0b:e7:cd:4f:d2:f3:24:cc:26:00:25:f0: 61:9a:22:3d:78:a1:f7:06:91:1b:ef:33:4f:9f:5e: 32:41:10:a6:3f:e6:cb:75:64:03:d0:00:09:d6:7b: bb:3d:03:52:7f:46:4a:ba:47:5d:e4:8e:36:77:cb: 6a:46:2b:ec:00:da:44:43:24:0c:08:09:93:6f:8a: f2:09:3e:c7:18:8d:df:ce:ae:23:9f:b4:39:4a:ab: 47:c8:29:fa:8d:ff:7e:fa:6d:60:ff:4c:e9:27:21: 8c:a2:a5:bd:50:48:7b:85:62:aa:3c:c7:36:51:c5: 28:5d:f7:81:6f:73:b3:c3:e9:0e:c5:4b:25:05:b1: 35:ba:03:3b:75:71:87:74:d4:72:1c:87:e4:e7:3c: ee:49:7e:8a:21:68:7d:6d:26:4e:56:5b:d7:33:2c: 23:2d:ef:c2:e7:a0:58:2a:32:c5:79:41:77:51:70: e5:c8:81:91:ec:06:20:05:92:0a:1c:66:51:e0:54: 26:9e:78:2d:68:34:33:9a:94:e1:b6:3d:14:34:4e: f1:45:57:2b:74:70:84:8a:0d:26:16:f4:de:f3:f6: c7:3f:e9:86:0c:53:86:c1:bd:4e:f8:1a:7d:69:e8: 3e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1B:23:C1:D4:A3:DF:FB:E0:71:29:C5:8A:15:D4:A7:D5:4F:92:54 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:02:02:e4:54:c7:6a:fe:15:90:c0:30:93:88:00:21:e5:59: ea:33:19:5b:39:9f:f3:f7:67:8e:8b:1c:11:17:f0:0c:07:52: 6b:27:10:b9:99:6b:f3:29:1b:c1:6d:e7:a1:76:75:6e:c8:65: d8:f2:04:07:f6:a4:f6:ac:e0:37:f8:ad:1d:c6:14:cd:19:58: c8:c2:4d:8a:fc:86:c0:da:d7:59:d9:29:ab:84:a5:a9:bd:4d: 2d:e8:ad:93:15:62:aa:1a:d6:0a:35:1e:ec:c0:7a:7e:82:b8: 9d:af:d4:e3:d1:d2:53:da:cd:32:72:aa:02:24:d4:64:10:63: 85:0b:0e:5b:16:c8:d5:e0:a1:e0:fa:40:24:bf:3e:ba:f8:16: 29:d3:f7:a6:ee:86:2e:94:e8:b3:1d:a6:d9:3c:5f:3f:39:fe: 7e:ba:2c:59:28:2e:9d:65:8d:b5:c9:7e:fb:80:42:f3:94:5d: 7b:8f:5c:23:d3:44:b6:e8:32:38:45:0a:d7:d2:a2:81:93:43: 5e:b7:e7:8a:b7:4d:c4:bf:af:59:bf:e4:3d:43:3d:73:0c:e8: 42:ea:c1:f9:f8:f0:fd:a4:34:ed:00:9b:5b:38:84:07:04:d8: 10:cd:e9:1c:2c:d9:31:2e:be:45:c1:c8:9a:bf:32:d4:ae:99: 65:ab:aa:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjQwNTI1MDUzMjM2WhcNMjQwNjAxMDUzMjM2WjAYMRYwFAYD VQQDEw02NjUxNzdmNC00MzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4bqyGVhPp4sCWMfSX2BL5kL581P0vMkzCYAJfBhmiI9eKH3BpEb7zNPn14y QRCmP+bLdWQD0AAJ1nu7PQNSf0ZKukdd5I42d8tqRivsANpEQyQMCAmTb4ryCT7H GI3fzq4jn7Q5SqtHyCn6jf9++m1g/0zpJyGMoqW9UEh7hWKqPMc2UcUoXfeBb3Oz w+kOxUslBbE1ugM7dXGHdNRyHIfk5zzuSX6KIWh9bSZOVlvXMywjLe/C56BYKjLF eUF3UXDlyIGR7AYgBZIKHGZR4FQmnngtaDQzmpThtj0UNE7xRVcrdHCEig0mFvTe 8/bHP+mGDFOGwb1O+Bp9aeg+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsbI8HU o9/74HEpxYoV1KfVT5JUMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOAgLkVMdq/hWQwDCTiAAh5VnqMxlbOZ/z92eOixwRF/AMB1JrJxC5 mWvzKRvBbeehdnVuyGXY8gQH9qT2rOA3+K0dxhTNGVjIwk2K/IbA2tdZ2SmrhKWp vU0t6K2TFWKqGtYKNR7swHp+gridr9Tj0dJT2s0ycqoCJNRkEGOFCw5bFsjV4KHg +kAkvz66+BYp0/em7oYulOizHabZPF8/Of5+uixZKC6dZY21yX77gELzlF17j1wj 00S26DI4RQrX0qKBk0Net+eKt03Ev69Zv+Q9Qz1zDOhC6sH5+PD9pDTtAJtbOIQH BNgQzekcLNkxLr5FwciavzLUrpllq6qc -----END CERTIFICATE-----Generated at Sat May 25 07:21:59 2024 by rpki-client on console-ams.rpki-client.org