$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: abhnm6VF6udIRTVx0T3fEfTcKhXIEC1So1/02UXYbwA= Subject key identifier: 68:54:B9:A8:70:82:5E:48:DC:A3:63:FC:4A:8B:10:65:D7:21:C2:02 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 74 Signing time: Sat 25 May 2024 07:42:32 +0000 Manifest this update: Sat 25 May 2024 07:42:31 +0000 Manifest next update: Sat 01 Jun 2024 07:42:31 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: dUqDr4UC6U2oD1qF6NU3bgvFCZZDR5gVXmQkLOzb+Kc=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: WqChmFL0t+0fvgVc6SzyAMYVtnHR5DBUAjHd0DNHHE0=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: eXTBE8BtvNJbRs+t5O94GI8MZuItYc/KZDVWqR74VHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 06:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: May 25 07:42:31 2024 GMT Not After : Jun 1 07:42:31 2024 GMT Subject: CN=66519667-9989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:1c:45:d3:44:8d:9c:dc:a8:25:a8:e9:32: d1:be:49:63:7c:28:d8:1b:49:24:35:00:8a:21:05: 94:c4:cf:ea:43:b2:3f:6a:1a:be:b4:f5:50:d6:4b: 6b:68:1d:99:56:60:4a:7b:7f:ed:b1:58:d6:31:0a: a8:9e:4f:a1:fc:35:a3:47:e1:a5:47:ca:b4:fd:c2: 6c:ba:37:0c:b4:d0:5c:e0:e1:1e:80:86:7f:44:f8: 02:1b:44:1a:e3:b5:85:94:25:c9:2c:c0:85:cf:c3: 38:5c:de:8b:a3:bb:ff:37:aa:33:da:e2:72:d6:80: b2:5a:2c:a6:4d:64:3b:98:02:1d:0f:a1:06:8e:9a: c9:b3:e5:f7:16:e6:6f:6c:54:a8:41:0a:37:b5:06: 8e:cf:9c:bb:6b:bb:5b:05:ac:05:f1:fe:b1:e3:df: 0d:bf:db:5e:fb:4c:98:b5:bd:77:7a:10:59:91:4b: ac:ad:dc:56:52:82:aa:60:a6:64:e0:43:d0:bd:23: 93:88:66:88:94:ae:82:56:0f:a6:d2:c4:b8:3e:76: c6:13:22:bb:67:1b:48:d5:42:30:8b:e0:ec:e2:3a: 67:b6:86:e3:bc:e2:92:a4:96:4f:b2:ee:72:63:5b: f7:8c:99:ba:f3:0c:15:84:ea:91:98:38:4d:d3:06: 9c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:54:B9:A8:70:82:5E:48:DC:A3:63:FC:4A:8B:10:65:D7:21:C2:02 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c3:b0:98:47:dc:92:c5:a2:b5:2a:50:4e:c3:85:0b:93:ca: 1a:91:36:03:04:b7:28:b5:9b:de:83:2e:2a:2e:08:5f:5a:43: c2:cc:c4:f8:5e:dd:ba:5d:2a:ac:26:80:67:e3:ff:a2:8f:e7: f9:62:0f:18:44:ba:86:28:68:03:36:3e:15:69:fa:c4:c7:17: a8:f6:2b:95:dd:85:25:af:b8:5a:b9:5e:1f:33:0a:cb:92:f1: ed:b0:e3:b9:7e:ca:93:42:64:33:77:0a:b3:5e:d2:4b:2c:84: 53:aa:ae:29:ee:73:69:79:aa:24:7a:1c:9b:ba:14:58:9b:99: 16:18:35:51:bd:66:9b:86:8e:08:97:2c:d3:f5:42:ea:5c:51: fe:8e:cc:7d:bf:85:9f:1e:c6:ce:fa:4b:ea:7f:c1:d8:b2:63: b1:7f:ca:da:c3:55:70:8a:44:29:78:25:36:e7:c1:5b:c4:d0: 24:9c:0e:a4:85:8a:d0:fd:e8:a0:18:6c:fd:6b:5c:c6:cb:e6: 93:f1:cc:6f:b5:20:de:22:2f:81:bc:50:2c:f4:eb:a6:57:0d: 2d:35:c4:2d:fe:0d:73:0c:53:fc:7e:03:10:41:8e:26:da:a5: 92:ea:66:fb:d4:18:6e:bf:ca:c4:32:b6:a0:b6:62:c7:14:8b: 33:89:ae:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QUJGRDExMC8GA1UEBRMoMjE3REEyOTA4Qzc1NDc1REJEQ0RBQTcwRTM2QjlCNDBE NDkxMkVERDAeFw0yNDA1MjUwNzQyMzFaFw0yNDA2MDEwNzQyMzFaMBgxFjAUBgNV BAMTDTY2NTE5NjY3LTk5ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6qBxF00SNnNyoJajpMtG+SWN8KNgbSSQ1AIohBZTEz+pDsj9qGr609VDWS2to HZlWYEp7f+2xWNYxCqieT6H8NaNH4aVHyrT9wmy6Nwy00Fzg4R6Ahn9E+AIbRBrj tYWUJckswIXPwzhc3ouju/83qjPa4nLWgLJaLKZNZDuYAh0PoQaOmsmz5fcW5m9s VKhBCje1Bo7PnLtru1sFrAXx/rHj3w2/2177TJi1vXd6EFmRS6yt3FZSgqpgpmTg Q9C9I5OIZoiUroJWD6bSxLg+dsYTIrtnG0jVQjCL4OziOme2huO84pKklk+y7nJj W/eMmbrzDBWE6pGYOE3TBpyBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaFS5qHCC Xkjco2P8SosQZdchwgIwHwYDVR0jBBgwFoAUIX2ikIx1R129zapw42ubQNSRLt0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBQkZELzg5NUE0OTUwNkQ4 OTExRUU4MkExRjY4MEM0RjlBRTAyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVgyaWtJeDFSMTI5emFwdzQydWJRTlNSTHQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB QkZELzg5NUE0OTUwNkQ4OTExRUU4MkExRjY4MEM0RjlBRTAyL0lYMmlrSXgxUjEy OXphcHc0MnViUU5TUkx0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIzDsJhH3JLForUqUE7DhQuTyhqRNgMEtyi1m96DLiouCF9aQ8LMxPhe 3bpdKqwmgGfj/6KP5/liDxhEuoYoaAM2PhVp+sTHF6j2K5XdhSWvuFq5Xh8zCsuS 8e2w47l+ypNCZDN3CrNe0ksshFOqrinuc2l5qiR6HJu6FFibmRYYNVG9ZpuGjgiX LNP1QupcUf6OzH2/hZ8exs76S+p/wdiyY7F/ytrDVXCKRCl4JTbnwVvE0CScDqSF itD96KAYbP1rXMbL5pPxzG+1IN4iL4G8UCz066ZXDS01xC3+DXMMU/x+AxBBjiba pZLqZvvUGG6/ysQytqC2YscUizOJrog= -----END CERTIFICATE-----Generated at Sat May 25 10:21:16 2024 by rpki-client on console-ams.rpki-client.org