$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json) Hash identifier: v1U8tZVRFxE8Y8a0TbAoCIlv7shbcAXVrQtI2icTKR0= Subject key identifier: 40:3E:F7:90:75:0C:E3:FD:A2:6A:8E:F9:7B:1F:09:49:AE:28:F0:00 Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Certificate serial: 062E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft Manifest number: 0629 Signing time: Thu 28 Mar 2024 23:36:41 +0000 Manifest this update: Thu 28 Mar 2024 23:36:40 +0000 Manifest next update: Thu 04 Apr 2024 23:36:40 +0000 Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: 5ffAYFAwxOlA3eIljRptIyiRdT5sd53P7tgpqdDNK2Y=) 2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: 3kD8w6kxSxV6XYWFlWj1NaSUIuuzPrI6iUcel7na0eY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Apr 2024 23:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Validity Not Before: Mar 28 23:36:40 2024 GMT Not After : Apr 4 23:36:40 2024 GMT Subject: CN=6605ff09-5d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:c6:96:e8:9a:fa:58:28:6c:04:d0:fa:3b: cd:5e:22:76:bf:c4:de:6f:4b:71:6e:46:dd:f1:df: 5a:4f:a2:ac:f4:26:37:c9:92:9b:41:7a:10:b1:7c: 78:7c:b7:d2:9d:d3:79:53:75:a4:62:4e:4d:78:fc: 4a:2c:bd:d0:f8:8f:ea:c6:ef:6d:ef:3d:51:af:22: fa:dc:2f:f3:1c:51:43:1b:09:34:9b:27:18:48:82: 9c:44:4b:7c:1b:36:7c:a3:56:5b:82:37:47:05:b8: 4b:d7:cd:fa:2b:f4:b6:c1:81:b2:63:ef:dd:ee:9b: 38:da:8b:c6:e5:0a:4e:9a:c9:20:27:73:e1:89:a2: c8:fc:bb:22:16:6b:80:5b:a3:2c:b1:06:c8:9d:57: be:a2:e2:d8:8f:db:ba:a6:b4:0c:b4:c7:54:a4:0c: 6f:d3:27:6b:63:60:32:05:86:3f:01:cd:34:4f:52: 82:b4:62:8c:c2:9a:09:82:73:67:3e:74:0f:ae:1b: 1d:d3:77:53:13:2d:cd:76:43:4d:e2:a9:32:35:45: 4b:0b:7f:25:61:6a:60:dd:6c:d9:ef:b8:1f:91:52: 94:a4:51:b8:8e:5d:9c:9c:38:e6:48:f9:d2:17:d9: d2:e2:67:02:36:58:dc:d8:6d:ae:a4:26:a1:20:1b: b5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3E:F7:90:75:0C:E3:FD:A2:6A:8E:F9:7B:1F:09:49:AE:28:F0:00 X509v3 Authority Key Identifier: keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e7:7a:43:0f:05:e1:69:f4:76:49:ef:ce:af:46:f5:30:56: 18:4e:74:4d:53:cf:68:af:ea:60:d4:0a:73:80:c4:66:05:13: cc:60:58:24:8e:4d:a0:a3:6f:b1:a3:ce:6a:33:ad:1f:68:a3: df:07:c3:e7:0f:05:e8:f2:50:15:35:9c:92:9f:d6:c5:38:a7: 81:9c:ca:3a:86:dd:9b:f1:2f:34:0e:c4:1e:15:92:b4:d8:44: 3c:86:1f:ef:90:1a:05:69:91:d9:fc:67:0f:fa:c4:e8:77:35: b5:9d:a8:ec:86:b8:4f:7e:08:38:f8:8b:a4:d7:38:75:8c:c4: 0c:6e:27:4d:50:30:00:d3:e4:28:7d:56:0a:6d:14:43:57:72: 45:6b:d8:81:22:9c:ce:27:59:db:70:17:7d:4b:f9:06:94:0d: f1:4c:47:9b:42:2a:83:4f:97:a2:06:1c:c3:d2:84:ee:5e:ba: ce:1e:c1:73:bd:25:90:b7:7f:8f:17:d1:b7:f5:e6:71:df:3c: 6c:c0:b3:ce:83:e3:9e:8a:02:93:8f:04:d7:36:3c:0f:5f:25: 22:a9:3b:4c:5e:fd:11:49:a4:f1:87:7a:bf:64:3e:6c:aa:04: 59:79:8b:f8:19:21:1c:0d:5e:b9:94:f9:fe:31:9f:0b:75:62: 13:30:f6:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD OEJDMDkxOUUwHhcNMjQwMzI4MjMzNjQwWhcNMjQwNDA0MjMzNjQwWjAYMRYwFAYD VQQDEw02NjA1ZmYwOS01ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWLGluia+lgobATQ+jvNXiJ2v8Teb0txbkbd8d9aT6Ks9CY3yZKbQXoQsXx4 fLfSndN5U3WkYk5NePxKLL3Q+I/qxu9t7z1RryL63C/zHFFDGwk0mycYSIKcREt8 GzZ8o1ZbgjdHBbhL1836K/S2wYGyY+/d7ps42ovG5QpOmskgJ3PhiaLI/LsiFmuA W6MssQbInVe+ouLYj9u6prQMtMdUpAxv0ydrY2AyBYY/Ac00T1KCtGKMwpoJgnNn PnQPrhsd03dTEy3NdkNN4qkyNUVLC38lYWpg3WzZ77gfkVKUpFG4jl2cnDjmSPnS F9nS4mcCNljc2G2upCahIBu1QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA+95B1 DOP9omqO+XsfCUmuKPAAMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC8zOURDRjc1NDQyRjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3Qz OEpHdzA0NjhHV2ZJdkFrWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU53pDDwXhafR2Se/Or0b1MFYYTnRNU89or+pg1ApzgMRmBRPMYFgk jk2go2+xo85qM60faKPfB8PnDwXo8lAVNZySn9bFOKeBnMo6ht2b8S80DsQeFZK0 2EQ8hh/vkBoFaZHZ/GcP+sTodzW1najshrhPfgg4+Iuk1zh1jMQMbidNUDAA0+Qo fVYKbRRDV3JFa9iBIpzOJ1nbcBd9S/kGlA3xTEebQiqDT5eiBhzD0oTuXrrOHsFz vSWQt3+PF9G39eZx3zxswLPOg+OeigKTjwTXNjwPXyUiqTtMXv0RSaTxh3q/ZD5s qgRZeYv4GSEcDV65lPn+MZ8LdWITMPaD -----END CERTIFICATE-----Generated at Fri Mar 29 02:39:25 2024 by rpki-client on console-fra.rpki-client.org