$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: LRKIjOjCr+IR0q47Zc8l3qtW+GvrrMuuPk8paKNUrLA= Subject key identifier: C5:DB:8E:18:D8:71:4F:B2:15:41:25:E7:1C:D6:D4:94:5E:54:F3:D5 Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0B34 Signing time: Fri 31 May 2024 20:26:38 +0000 Manifest this update: Fri 31 May 2024 20:26:37 +0000 Manifest next update: Fri 07 Jun 2024 20:26:37 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: KrfSQKiPE7c9nlC1lAzCnbbRUQjSnvnlOgRxFcvdzRg=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: 4j1+qtyMWN0dqgm2cyGCSaGaYzA8FF/mpgBxorKl3nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: May 31 20:26:37 2024 GMT Not After : Jun 7 20:26:37 2024 GMT Subject: CN=665a327e-40ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ae:87:0d:86:c4:5e:47:40:77:54:c9:3c:7d: 7d:c2:b6:3b:30:39:36:96:0f:d1:42:15:f8:8f:53: 31:46:6a:34:6c:65:b2:99:4a:b2:4d:e9:ae:74:26: d8:31:be:51:6c:74:e6:57:9a:fe:69:20:17:2e:58: d0:83:5d:01:64:e4:22:9a:16:6f:61:28:98:91:47: 47:79:33:08:c3:75:94:04:93:d1:4b:42:1f:32:c2: e4:2d:30:d7:f4:ee:92:d4:35:55:e7:83:cf:de:ff: 93:db:e7:1d:a4:98:80:f7:99:a2:88:02:b6:74:36: ba:d9:02:41:a3:4c:98:2f:69:51:33:2a:92:e6:95: f3:fd:dc:ca:a3:ff:35:52:d1:59:f1:6f:e4:5b:7b: 20:de:c4:84:b5:ec:3e:9c:fa:31:11:89:61:4b:97: f0:f0:2a:6a:4f:2c:9b:99:89:14:4c:29:9b:b0:b4: 38:3c:51:6d:f8:39:b2:dd:8d:be:fb:bf:2c:8f:d3: 2d:13:2f:01:3f:0c:ec:27:00:45:47:48:0e:2f:5a: 95:07:2e:2c:f2:d1:4d:e2:05:76:b6:aa:49:1a:64: b4:59:ee:4a:df:11:0a:26:0c:12:c8:39:cf:18:ce: 6c:8b:6f:cc:43:c5:31:45:0a:f1:f3:f2:ef:dd:1a: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DB:8E:18:D8:71:4F:B2:15:41:25:E7:1C:D6:D4:94:5E:54:F3:D5 X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:24:ef:0a:09:2d:19:b4:28:01:e1:44:16:a2:80:e4:c5:84: 90:03:5e:db:f4:dc:4e:c0:09:c1:09:20:2b:94:ee:b2:bd:0e: 25:ed:e4:43:3e:a3:05:94:d1:1d:60:4c:03:cb:b8:da:ca:68: 5b:2c:55:9e:f1:24:20:0c:ed:ad:3d:96:b6:5a:d6:5d:85:c5: 66:fa:de:e0:57:90:4b:bd:3d:d2:ea:90:f0:ba:a9:3e:b7:b5: 5c:0b:5f:9a:3e:9d:38:82:24:c4:c7:44:d3:e5:8d:09:81:e6: 29:cd:17:53:9d:b6:d3:99:36:31:2d:1e:f2:df:30:7f:3a:ed: e1:ec:5c:32:60:74:e9:fd:46:c8:ef:99:01:20:39:d3:6c:1d: ce:22:e4:aa:52:97:b9:f1:37:93:04:e2:cc:43:c7:d1:cd:4c: 32:d4:09:19:e2:9c:33:08:ae:89:cd:27:6b:f7:bd:3d:e7:ff: 69:37:ff:98:c5:df:7c:f4:c5:e6:97:93:97:f3:98:40:54:a1: 21:1b:af:42:d1:ba:32:50:44:7c:18:7c:c8:8c:67:08:5f:a1: b0:ad:7e:d0:82:41:00:ec:1c:7f:86:fa:79:b2:9d:2d:f5:1b: 96:5e:89:9d:d1:8a:5e:65:c2:0f:3d:1a:da:59:d3:6a:7a:9c: 03:52:5c:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjQwNTMxMjAyNjM3WhcNMjQwNjA3MjAyNjM3WjAYMRYwFAYD VQQDEw02NjVhMzI3ZS00MGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA666HDYbEXkdAd1TJPH19wrY7MDk2lg/RQhX4j1MxRmo0bGWymUqyTemudCbY Mb5RbHTmV5r+aSAXLljQg10BZOQimhZvYSiYkUdHeTMIw3WUBJPRS0IfMsLkLTDX 9O6S1DVV54PP3v+T2+cdpJiA95miiAK2dDa62QJBo0yYL2lRMyqS5pXz/dzKo/81 UtFZ8W/kW3sg3sSEtew+nPoxEYlhS5fw8CpqTyybmYkUTCmbsLQ4PFFt+Dmy3Y2+ +78sj9MtEy8BPwzsJwBFR0gOL1qVBy4s8tFN4gV2tqpJGmS0We5K3xEKJgwSyDnP GM5si2/MQ8UxRQrx8/Lv3Ro6RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXbjhjY cU+yFUEl5xzW1JReVPPVMB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtJO8KCS0ZtCgB4UQWooDkxYSQA17b9NxOwAnBCSArlO6yvQ4l7eRD PqMFlNEdYEwDy7jaymhbLFWe8SQgDO2tPZa2WtZdhcVm+t7gV5BLvT3S6pDwuqk+ t7VcC1+aPp04giTEx0TT5Y0JgeYpzRdTnbbTmTYxLR7y3zB/Ou3h7FwyYHTp/UbI 75kBIDnTbB3OIuSqUpe58TeTBOLMQ8fRzUwy1AkZ4pwzCK6JzSdr97095/9pN/+Y xd989MXml5OX85hAVKEhG69C0boyUER8GHzIjGcIX6GwrX7QgkEA7Bx/hvp5sp0t 9RuWXomd0YpeZcIPPRraWdNqepwDUlzP -----END CERTIFICATE-----Generated at Fri May 31 22:13:10 2024 by rpki-client on console-fra.rpki-client.org