$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: HAbZO9wMN+kutaktygCDAv6htwvUhLycOU/xBAmnFEE= Subject key identifier: 1E:6D:8C:70:FB:12:32:0C:63:45:8F:66:7C:5E:68:65:7E:5C:95:79 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: 30 Signing time: Sun 19 May 2024 08:24:47 +0000 Manifest this update: Sun 19 May 2024 08:24:46 +0000 Manifest next update: Sun 26 May 2024 08:24:46 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: FeUarMgIbXkVgdAGZDvegUJ8hT7nKd5fv1AImdRxw9A=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: rao6m+0CNNHk39UCfSySyHpZ6I8A/9rkFLhpDFmF54Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: May 19 08:24:46 2024 GMT Not After : May 26 08:24:46 2024 GMT Subject: CN=6649b74f-3d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:83:37:8a:63:35:e4:a4:a6:18:33:c0:aa: 69:a7:a4:5d:ca:5b:e3:10:29:c6:b0:fb:c4:61:51: 46:e3:d7:85:5e:72:19:f2:75:c0:34:ae:03:2e:e3: 26:13:05:cd:4a:b8:c8:71:69:1d:24:83:af:2c:b3: 81:98:e8:f4:e3:0e:d7:61:fb:8b:1b:20:32:42:f1: a4:a5:bd:ef:d8:95:18:2e:fd:9e:28:0a:c7:f9:88: ae:c3:c4:dd:a0:41:9c:76:57:72:09:2e:e5:2f:2e: e8:bf:15:06:ea:82:40:aa:d9:16:f7:3d:ba:91:5a: 29:86:1e:bf:db:49:3a:c2:2a:17:c5:c0:b6:95:bb: 26:88:d0:56:80:38:5a:9d:02:e1:30:73:66:00:29: b7:c5:d1:3c:81:4a:ee:51:28:a1:1d:8c:04:94:a3: 82:dc:49:66:fe:95:b7:69:a3:49:61:ab:bf:a2:16: c8:51:0a:b3:37:ad:ed:36:14:d4:1b:65:5f:3d:64: 04:57:34:58:9c:66:f5:fd:d0:2e:15:f9:98:11:20: d4:02:69:55:bb:eb:4a:ba:fa:f2:c6:fb:db:45:9f: bf:36:0c:2e:fd:02:aa:07:ff:0e:2b:af:4c:98:63: c6:10:8b:8b:ee:5b:08:04:86:8a:0e:83:9c:a7:7c: 34:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6D:8C:70:FB:12:32:0C:63:45:8F:66:7C:5E:68:65:7E:5C:95:79 X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:00:e8:be:bb:56:b6:31:5e:41:81:c5:f1:96:be:e1:df:f5: 02:5f:91:f3:37:62:e7:0e:36:e0:43:07:9c:43:46:0c:6f:33: 91:72:ff:6c:92:18:dc:9a:23:a9:d6:0d:b6:b5:1e:cc:56:6f: cb:5d:df:00:7b:81:50:0e:c7:8e:31:6e:81:99:ea:90:3a:21: 8a:54:b8:c0:20:09:63:00:5a:d5:c1:b5:11:fa:29:15:15:69: 09:82:b8:7c:43:0f:99:8d:d9:b6:10:12:30:34:3e:2c:f4:b7: 8a:c4:65:11:06:20:27:c4:a2:8b:92:eb:83:a8:59:cc:79:6d: 94:2b:24:4d:b6:56:19:e4:1b:39:4d:7d:d5:2d:4e:00:90:52: a5:16:01:98:d0:6e:3c:07:ee:0c:38:2a:d2:43:b8:bd:6b:24: c4:46:d7:f3:6f:b3:81:ee:d3:8b:13:96:ab:87:e6:41:41:4d: 8b:45:1f:27:2b:5b:d6:10:97:ae:1a:13:42:8a:22:e4:b4:de: 76:10:05:b2:17:de:6a:d3:61:4b:6e:07:66:72:03:ae:c3:d2: 2a:1b:06:6d:7d:91:90:bc:98:2f:76:3a:a5:43:61:70:5d:5d: d5:47:f4:0e:5d:09:dc:dc:a8:04:76:60:b7:f7:e3:5a:73:04: 56:2d:2b:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MEVERjExMC8GA1UEBRMoOEI2NDE5Njg2OTExN0I5OUI4NzlCNERDQkFGMDQyOTBC QzE2ODEwQzAeFw0yNDA1MTkwODI0NDZaFw0yNDA1MjYwODI0NDZaMBgxFjAUBgNV BAMTDTY2NDliNzRmLTNkOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCstYM3imM15KSmGDPAqmmnpF3KW+MQKcaw+8RhUUbj14VechnydcA0rgMu4yYT Bc1KuMhxaR0kg68ss4GY6PTjDtdh+4sbIDJC8aSlve/YlRgu/Z4oCsf5iK7DxN2g QZx2V3IJLuUvLui/FQbqgkCq2Rb3PbqRWimGHr/bSTrCKhfFwLaVuyaI0FaAOFqd AuEwc2YAKbfF0TyBSu5RKKEdjASUo4LcSWb+lbdpo0lhq7+iFshRCrM3re02FNQb ZV89ZARXNFicZvX90C4V+ZgRINQCaVW760q6+vLG+9tFn782DC79AqoH/w4rr0yY Y8YQi4vuWwgEhooOg5ynfDQ3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHm2McPsS MgxjRY9mfF5oZX5clXkwHwYDVR0jBBgwFoAUi2QZaGkRe5m4ebTcuvBCkLwWgQww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwRURGLzNERTM5RTgyQ0ZB RDExRUVBQ0ZBNDI2OEM0RjlBRTAyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dR dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaTJRWmFHa1JlNW00ZWJUY3V2QkNrTHdXZ1F3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw RURGLzNERTM5RTgyQ0ZBRDExRUVBQ0ZBNDI2OEM0RjlBRTAyL2kyUVphR2tSZTVt NGViVGN1dkJDa0x3V2dRdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFwA6L67VrYxXkGBxfGWvuHf9QJfkfM3YucONuBDB5xDRgxvM5Fy/2yS GNyaI6nWDba1HsxWb8td3wB7gVAOx44xboGZ6pA6IYpUuMAgCWMAWtXBtRH6KRUV aQmCuHxDD5mN2bYQEjA0Piz0t4rEZREGICfEoouS64OoWcx5bZQrJE22VhnkGzlN fdUtTgCQUqUWAZjQbjwH7gw4KtJDuL1rJMRG1/Nvs4Hu04sTlquH5kFBTYtFHycr W9YQl64aE0KKIuS03nYQBbIX3mrTYUtuB2ZyA67D0iobBm19kZC8mC92OqVDYXBd XdVH9A5dCdzcqAR2YLf341pzBFYtK/s= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org