$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: hoRgc9KDj88zVXcs/I7dp5XzZTk6bxmRl+rpH5yptoU= Subject key identifier: 70:4A:03:AD:D2:8B:30:76:B0:29:F9:63:E3:F2:58:6A:08:D2:BE:5F Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 0281 Signing time: Sun 19 May 2024 03:41:59 +0000 Manifest this update: Sun 19 May 2024 03:41:58 +0000 Manifest next update: Sun 26 May 2024 03:41:58 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: S/Lg/NhV+IV2tJWP9tsDxK5pLaAV4y0surhEh/NXIxk=) 2: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: o+InfXL4ukjFr34bbrRuhamkpyzK3H/+DY8jO61Lmc0=) 3: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: vtKO3SjXmvH9dx82EC9zDXe8Vmhi92GTEywUdw7xySE=) 4: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: PESjMQOAZB7rvOiAhEgdB1/OLnkYT/S5AzMdHgU3c1g=) 5: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: YTVR1eRZmLQDmpmvp4FXUX1YjYSfdRBEsPsmW02Am8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: May 19 03:41:58 2024 GMT Not After : May 26 03:41:58 2024 GMT Subject: CN=66497507-6160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:ab:ed:90:86:51:59:fa:c7:72:a7:b8:dc: 91:06:1a:4a:3d:ff:76:0d:2b:85:35:3c:8a:55:38: 7c:73:1f:c3:b7:ce:b8:c6:ed:18:fb:51:e1:a6:33: 32:2d:3f:cc:15:10:c2:e1:c5:07:43:15:2e:c2:b7: e1:ef:71:a7:83:85:e1:d6:87:7d:ea:53:de:9d:0c: 38:e5:e3:3a:2e:89:58:42:dd:50:9d:b5:82:d8:51: d7:71:6b:29:82:af:9c:a5:93:be:c7:14:85:a9:8c: 28:02:71:93:87:ff:dc:96:70:71:e4:21:03:14:2c: 05:12:ab:1c:cc:aa:88:d3:c1:09:53:23:42:56:86: 0c:73:3d:09:d3:a6:20:f1:ab:5d:5a:a4:00:04:09: ac:11:ca:08:c0:97:c3:13:8e:32:58:df:fa:09:86: cb:7c:8e:e8:04:5f:f0:cc:1c:f6:92:bf:da:91:0b: 99:01:3b:6e:44:c2:cc:f2:87:7c:0a:19:d6:f8:5a: ce:63:b1:64:14:6f:2a:ef:3e:e8:a9:c9:1f:53:3e: 52:26:fa:66:05:c0:6f:ae:f0:44:ad:aa:4e:0b:8a: fc:b3:c4:2b:9b:95:6e:e9:08:d7:db:c3:c0:0a:5c: c5:0f:a7:28:a8:c6:b2:60:8a:d0:a1:e0:a7:b4:ff: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4A:03:AD:D2:8B:30:76:B0:29:F9:63:E3:F2:58:6A:08:D2:BE:5F X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:48:e6:d2:e0:d9:1a:c9:a2:0e:a2:cb:32:7f:00:75:2a:c7: b8:13:dd:1f:d7:a1:11:57:7e:cd:86:7e:63:b4:72:0c:76:4a: bb:be:56:7b:c9:ef:68:d5:fb:73:37:70:1a:a2:e8:05:4f:36: f9:b4:fa:1c:ae:d8:2e:d5:15:6b:19:4a:1e:66:a7:40:9b:40: 1c:a2:0a:94:bf:4a:47:06:0f:5e:7d:1f:a1:75:66:42:a3:47: df:f8:ab:e5:75:74:57:21:14:de:54:b7:87:4a:8a:89:ff:90: 7a:07:c5:b5:43:aa:26:62:ce:9d:c6:9b:3c:3c:31:6c:cb:9b: 61:8f:54:94:59:2a:64:95:95:ba:91:1d:21:95:dc:cd:6b:49: 2e:ef:46:61:29:85:07:37:00:c6:ff:1d:43:7b:fd:7e:89:3b: 62:ba:61:fa:a9:0a:70:23:3d:d5:c8:c5:95:a4:46:f7:d3:1c: 93:ae:fd:0c:f5:a2:d2:91:10:8d:26:b2:c0:a3:c5:bb:cd:66: 2c:9c:03:ca:d4:c6:85:8f:29:a7:94:66:12:87:d1:c6:5f:0c: bc:39:e4:23:ec:3a:16:06:0a:f9:ca:d0:42:ab:75:50:14:59: cf:df:70:f8:53:73:3f:ef:ff:08:90:4e:53:ec:3f:5b:e2:c7: a2:c3:35:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjQwNTE5MDM0MTU4WhcNMjQwNTI2MDM0MTU4WjAYMRYwFAYD VQQDEw02NjQ5NzUwNy02MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqar7ZCGUVn6x3KnuNyRBhpKPf92DSuFNTyKVTh8cx/Dt864xu0Y+1HhpjMy LT/MFRDC4cUHQxUuwrfh73Gng4Xh1od96lPenQw45eM6LolYQt1QnbWC2FHXcWsp gq+cpZO+xxSFqYwoAnGTh//clnBx5CEDFCwFEqsczKqI08EJUyNCVoYMcz0J06Yg 8atdWqQABAmsEcoIwJfDE44yWN/6CYbLfI7oBF/wzBz2kr/akQuZATtuRMLM8od8 ChnW+FrOY7FkFG8q7z7oqckfUz5SJvpmBcBvrvBErapOC4r8s8Qrm5Vu6QjX28PA ClzFD6coqMayYIrQoeCntP/0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBKA63S izB2sCn5Y+PyWGoI0r5fMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6SObS4NkayaIOossyfwB1Kse4E90f16ERV37Nhn5jtHIMdkq7vlZ7 ye9o1ftzN3AaougFTzb5tPocrtgu1RVrGUoeZqdAm0AcogqUv0pHBg9efR+hdWZC o0ff+KvldXRXIRTeVLeHSoqJ/5B6B8W1Q6omYs6dxps8PDFsy5thj1SUWSpklZW6 kR0hldzNa0ku70ZhKYUHNwDG/x1De/1+iTtiumH6qQpwIz3VyMWVpEb30xyTrv0M 9aLSkRCNJrLAo8W7zWYsnAPK1MaFjymnlGYSh9HGXwy8OeQj7DoWBgr5ytBCq3VQ FFnP33D4U3M/7/8IkE5T7D9b4seiwzU1 -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org