$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: DxijbfsvVWLrNO75HO1BvZaiWr2cBt7HhaHFDIbpZoY= Subject key identifier: 4D:65:51:16:81:B2:78:CD:A5:33:13:82:DA:C4:74:AC:4C:D2:F9:E8 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 078B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 075D Signing time: Sat 18 May 2024 22:27:32 +0000 Manifest this update: Sat 18 May 2024 22:27:31 +0000 Manifest next update: Sat 25 May 2024 22:27:31 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: dwC0bHLmW1liN2dFfhpMs+AIb1qoCh3aF1p9NCDwOJA=) 2: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: Gqxdee19gYRpq/7iwpjpXekbiJ6Xa1Y+QdRU7kjs52c=) 3: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: nC1WBHIp4+7rOVDK2SGvb6WbxsoSeuXt9b32LImOpZY=) 4: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: 8fs3YaYWIcjJ2lhMZaBhEZMi33VUKYw0lZXOUjkrASM=) 5: 116D9634E5DF11EA9E8E8D6AC4F9AE02.roa (hash: hnqMAC9ZqQrJRPkkpvwFD0cRkfBj2RbAjFwQo75assE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1931 (0x78b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: May 18 22:27:31 2024 GMT Not After : May 25 22:27:31 2024 GMT Subject: CN=66492b54-de15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:68:f5:a3:e0:5f:0a:93:0c:be:b8:55:5a: d8:7c:3f:10:5b:2b:d8:dd:ea:df:49:01:61:9f:4c: 17:c7:63:26:77:5e:95:23:a0:4c:9b:cb:8c:e2:75: dd:ed:5d:60:f9:de:55:db:41:be:f2:58:86:25:2f: 64:dc:e4:08:60:fc:39:3f:dd:24:af:c7:3e:c0:d3: ad:c0:a4:a6:94:3d:8b:ad:c7:3d:00:3d:c5:c5:fa: a8:b2:18:a6:f5:fa:9f:bb:8c:41:df:ba:64:7b:ab: 22:28:bc:b0:f3:ee:60:e1:67:41:dd:55:5b:3e:fc: c6:27:cb:d1:6e:b0:c5:ff:98:e4:c2:48:36:b1:3c: c2:ce:ff:bc:f5:82:66:53:45:8a:ec:dd:6d:15:1e: 16:ed:82:e2:30:57:e8:d5:0e:16:32:b4:f8:47:2f: 8b:bc:cc:fc:ee:e7:0a:2e:a9:e0:ee:a0:1b:cd:59: a4:5f:1a:4b:b3:4a:c4:a4:43:b0:1d:6e:92:d4:b4: ad:05:00:b0:bc:32:3f:aa:f0:c6:04:f0:fe:5e:23: 63:b2:f6:ed:13:b0:19:23:41:ef:af:ef:32:69:fc: 24:13:e9:d8:53:c2:13:84:9a:1c:d5:36:9f:43:6e: bf:27:99:1c:f6:9e:52:2d:17:b9:4d:94:46:d5:69: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:51:16:81:B2:78:CD:A5:33:13:82:DA:C4:74:AC:4C:D2:F9:E8 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:af:01:f9:29:d9:a5:46:46:73:b1:16:3c:e9:a7:64:07:a0: 5c:93:14:2f:d7:06:02:75:11:6b:90:62:3c:c8:3b:b9:85:98: 26:19:c2:76:32:ee:29:92:41:0a:5b:de:d3:e4:1f:41:9f:56: 93:d4:3a:0a:50:5d:15:6e:ae:36:82:88:77:2b:4b:3b:a8:a4: a6:d5:03:05:a7:4f:f1:a6:fa:cf:b4:ca:49:5f:4a:a6:24:dc: 5b:95:69:7f:ea:4b:5b:c4:28:0d:90:9b:92:b1:1a:b2:5f:ed: d6:08:91:51:cc:f9:19:67:9b:03:b9:a6:eb:4b:cf:76:02:d1: 81:80:2e:0d:e8:1c:e6:89:50:56:7a:f0:f9:9d:c1:60:39:e0: ab:c4:f3:ad:25:a4:5d:fe:50:c8:a8:59:fd:64:94:00:e8:de: 54:fd:4c:f3:1e:5a:cf:0f:b3:fd:8f:6b:93:39:4e:6f:cc:19: 26:b9:5e:30:77:27:bf:77:2e:77:20:a3:7e:4d:87:ed:35:02: c2:60:af:40:3f:ae:28:0e:d4:01:b5:55:79:9c:62:b1:e5:2d: 1b:17:96:5e:34:05:4a:1e:97:39:05:b1:39:a8:fe:b1:5e:e5: 82:bd:39:01:1a:c7:ac:4a:0e:07:02:d8:16:22:95:5d:90:0b: a5:7f:52:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjQwNTE4MjIyNzMxWhcNMjQwNTI1MjIyNzMxWjAYMRYwFAYD VQQDEw02NjQ5MmI1NC1kZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteBo9aPgXwqTDL64VVrYfD8QWyvY3erfSQFhn0wXx2Mmd16VI6BMm8uM4nXd 7V1g+d5V20G+8liGJS9k3OQIYPw5P90kr8c+wNOtwKSmlD2Lrcc9AD3Fxfqoshim 9fqfu4xB37pke6siKLyw8+5g4WdB3VVbPvzGJ8vRbrDF/5jkwkg2sTzCzv+89YJm U0WK7N1tFR4W7YLiMFfo1Q4WMrT4Ry+LvMz87ucKLqng7qAbzVmkXxpLs0rEpEOw HW6S1LStBQCwvDI/qvDGBPD+XiNjsvbtE7AZI0Hvr+8yafwkE+nYU8IThJoc1Taf Q26/J5kc9p5SLRe5TZRG1WkUSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1lURaB snjNpTMTgtrEdKxM0vnoMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCerwH5KdmlRkZzsRY86adkB6BckxQv1wYCdRFrkGI8yDu5hZgmGcJ2 Mu4pkkEKW97T5B9Bn1aT1DoKUF0Vbq42goh3K0s7qKSm1QMFp0/xpvrPtMpJX0qm JNxblWl/6ktbxCgNkJuSsRqyX+3WCJFRzPkZZ5sDuabrS892AtGBgC4N6BzmiVBW evD5ncFgOeCrxPOtJaRd/lDIqFn9ZJQA6N5U/UzzHlrPD7P9j2uTOU5vzBkmuV4w dye/dy53IKN+TYftNQLCYK9AP64oDtQBtVV5nGKx5S0bF5ZeNAVKHpc5BbE5qP6x XuWCvTkBGsesSg4HAtgWIpVdkAulf1Jy -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org