$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json) Hash identifier: 4Yeji/38PtMTsuWXv/z3BfN6cSSwj76/vV8RPonxwok= Subject key identifier: AC:CC:80:C8:C6:19:79:AF:D4:F1:07:03:F7:27:5C:A8:81:5D:6B:64 Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft Manifest number: 38 Signing time: Sun 19 May 2024 08:16:45 +0000 Manifest this update: Sun 19 May 2024 08:16:44 +0000 Manifest next update: Sun 26 May 2024 08:16:44 +0000 Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: SEyN6BjiND2zvfbBsxH4XDfuZSjIcuTUWEWjMC/iocE=) 2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: TlwKY8840Dm8xfdNqjL0RFl5yxFx6ZTK9aojXdZLogY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Validity Not Before: May 19 08:16:44 2024 GMT Not After : May 26 08:16:44 2024 GMT Subject: CN=6649b56c-9f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:bc:b9:b0:b7:9d:24:8f:5c:9e:67:00:46: bb:1b:07:0d:b8:f2:07:ca:f4:af:86:d5:72:1c:97: ae:d6:90:01:f5:15:21:65:92:b7:16:5c:a7:b7:f4: 38:0c:7c:99:ec:c9:f9:ab:26:12:dd:8a:e4:ce:8c: 47:7c:5f:cf:85:e2:c0:de:1f:4a:12:d1:77:73:28: 6a:29:a3:9b:7e:35:fb:a6:c3:cd:64:d7:7d:c5:5b: 79:70:55:fd:82:b5:e4:31:85:7e:9f:2a:5d:fc:73: 75:b0:4a:ed:3f:1c:f0:41:e5:04:30:1c:cf:fe:53: 60:83:5d:00:6e:6d:27:c0:46:c2:2a:50:d2:a9:59: cd:6e:96:42:e4:1e:b0:c6:12:38:a7:ce:61:a2:72: f7:1e:28:3d:fc:a5:0d:47:d3:0c:d0:45:13:0b:fa: a8:35:c2:9f:34:0d:32:54:78:ad:46:68:db:75:5c: a3:dc:76:8c:89:00:30:95:cf:09:73:c0:9b:c8:c7: 81:05:05:9e:bf:b9:a9:cb:03:3f:2c:e7:70:66:6e: 92:2c:4b:ae:44:69:55:de:43:6f:45:6d:d4:1c:b0: 86:7c:27:c8:50:0f:c3:eb:05:7a:34:e6:b1:c0:8f: 13:ab:e9:c5:c4:c4:0d:c5:b5:af:12:82:a6:2f:d6: cb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CC:80:C8:C6:19:79:AF:D4:F1:07:03:F7:27:5C:A8:81:5D:6B:64 X509v3 Authority Key Identifier: keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:20:91:e7:34:7c:9f:aa:f9:04:77:94:8e:78:f5:38:e0:5e: 1f:27:5e:b5:23:0b:f1:80:55:ff:c6:15:52:4e:ae:f9:b6:41: 33:9f:e9:21:5d:3e:08:ea:0a:53:65:eb:22:14:a5:f7:72:9d: 19:f2:dc:2a:10:e2:c5:d3:55:37:56:9d:dd:14:99:5c:34:ea: 81:46:93:38:a0:dd:73:f6:d5:91:28:d7:bc:12:dd:08:96:52: 02:92:ae:dd:40:11:a2:a1:3d:a4:e0:4f:db:39:06:06:b7:b0: b4:85:1c:f7:27:1f:ea:48:b3:c1:2e:3a:0d:f9:b0:04:d8:a2: 60:f5:61:be:e5:4f:b0:c9:e6:e4:6f:85:48:03:8d:b5:d2:de: 50:09:1a:0f:11:20:94:b7:0b:46:3f:21:3a:14:1f:1b:85:5a: 61:cf:7f:e3:98:62:c9:0d:7e:86:dd:25:ec:68:ed:1b:af:b0: 82:ea:2a:3f:af:cf:c5:8d:64:63:eb:7a:ad:03:7a:22:50:ef: c8:a3:4a:a7:ed:8a:5c:d5:15:f9:f2:32:0d:40:a7:45:1d:58: 13:66:60:29:b4:7d:04:c8:ad:2f:bf:55:cc:d6:60:46:f4:16: df:2e:d0:55:8c:d0:9e:e8:1e:04:67:f8:f2:45:e3:8c:0c:30: e3:0b:81:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUJGMDExMC8GA1UEBRMoRkM4ODY4OTRFMkQ3MEUzNTJFNEYxNjgwNTJDNTFCMDVB QjA1QUNDNTAeFw0yNDA1MTkwODE2NDRaFw0yNDA1MjYwODE2NDRaMBgxFjAUBgNV BAMTDTY2NDliNTZjLTlmMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNULy5sLedJI9cnmcARrsbBw248gfK9K+G1XIcl67WkAH1FSFlkrcWXKe39DgM fJnsyfmrJhLdiuTOjEd8X8+F4sDeH0oS0XdzKGopo5t+Nfumw81k133FW3lwVf2C teQxhX6fKl38c3WwSu0/HPBB5QQwHM/+U2CDXQBubSfARsIqUNKpWc1ulkLkHrDG EjinzmGicvceKD38pQ1H0wzQRRML+qg1wp80DTJUeK1GaNt1XKPcdoyJADCVzwlz wJvIx4EFBZ6/uanLAz8s53BmbpIsS65EaVXeQ29FbdQcsIZ8J8hQD8PrBXo05rHA jxOr6cXExA3Fta8SgqYv1sshAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrMyAyMYZ ea/U8QcD9ydcqIFda2QwHwYDVR0jBBgwFoAU/IholOLXDjUuTxaAUsUbBasFrMUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBQkYwL0Q5NkJBNjYwQzA5 OTExRUVCOTUwNUE0MUM0RjlBRTAyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJN VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0lob2xPTFhEalV1VHhhQVVzVWJCYXNGck1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB QkYwL0Q5NkJBNjYwQzA5OTExRUVCOTUwNUE0MUM0RjlBRTAyL19JaG9sT0xYRGpV dVR4YUFVc1ViQmFzRnJNVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0gkec0fJ+q+QR3lI549TjgXh8nXrUjC/GAVf/GFVJOrvm2QTOf6SFd PgjqClNl6yIUpfdynRny3CoQ4sXTVTdWnd0UmVw06oFGkzig3XP21ZEo17wS3QiW UgKSrt1AEaKhPaTgT9s5Bga3sLSFHPcnH+pIs8EuOg35sATYomD1Yb7lT7DJ5uRv hUgDjbXS3lAJGg8RIJS3C0Y/IToUHxuFWmHPf+OYYskNfobdJexo7RuvsILqKj+v z8WNZGPreq0DeiJQ78ijSqftilzVFfnyMg1Ap0UdWBNmYCm0fQTIrS+/VczWYEb0 Ft8u0FWM0J7oHgRn+PJF44wMMOMLgdw= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org