$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft File: iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json) Hash identifier: VBNfLWCrDCaOfHKpfk8QzybM0XHC0W4fEN2YUTE+ABM= Subject key identifier: 40:92:E2:02:04:5B:33:AD:42:AD:E1:49:53:D7:B7:11:62:99:D9:31 Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 Certificate issuer: /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft Manifest number: 0581 Signing time: Fri 03 May 2024 00:43:11 +0000 Manifest this update: Fri 03 May 2024 00:43:10 +0000 Manifest next update: Fri 10 May 2024 00:43:10 +0000 Files and hashes: 1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: fRPPdvWFKiuUGb4lo9yIe82UiCtf4aB9uWqIcKkK8fY=) 2: 6339493A516311ED90F04711C4F9AE02.roa (hash: WXF55ahHLLIxuCdgdv6S5K66iBb3zG6OgjxwlWvJGNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Validity Not Before: May 3 00:43:10 2024 GMT Not After : May 10 00:43:10 2024 GMT Subject: CN=6634331f-a966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:d5:0f:e3:b8:b0:de:72:7e:c7:1d:e3:78: c2:66:ee:54:20:68:d8:4f:90:0c:77:bb:76:a7:cd: ad:85:fb:16:61:c9:a5:39:61:54:68:0a:37:2e:a7: 41:f9:3c:7c:06:bc:2a:a3:b0:19:9c:53:65:e5:7f: 8f:6e:e8:69:41:9e:f5:6d:62:94:8d:c0:8e:df:f8: 0b:be:a9:ed:80:f5:b6:c6:ed:68:c0:1e:b8:e1:c5: d3:83:e1:34:b8:8b:79:4d:71:57:4d:69:68:12:ed: 23:0f:fb:e7:d2:a9:85:71:91:1c:44:d1:17:b3:37: 9f:ec:89:23:a3:d6:16:6d:37:5c:1a:25:4a:2b:81: 03:09:bb:dd:37:fa:cc:99:d1:98:94:a4:ce:e4:f2: b6:fb:51:35:85:fd:05:cf:f1:d3:07:f7:21:0a:65: f9:4c:64:2c:a6:08:96:6a:7c:11:94:a4:e0:d5:cc: 09:ab:fc:95:ad:40:0b:f5:43:9d:ad:78:5f:3e:45: 6b:43:e2:b1:12:8a:da:ea:c9:a5:30:af:1c:75:b3: 3c:b8:c7:4b:1e:2a:92:d2:da:f6:ad:72:ea:45:f6: 72:52:29:03:cf:97:ec:ad:5d:51:cc:1f:46:e3:60: f9:d5:42:62:8d:87:c4:79:fc:c2:99:84:f1:b7:de: 43:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:92:E2:02:04:5B:33:AD:42:AD:E1:49:53:D7:B7:11:62:99:D9:31 X509v3 Authority Key Identifier: keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:1a:56:1c:15:1d:9b:f3:02:38:68:fb:d5:2b:92:04:32:60: 44:79:06:a9:c5:8f:87:7c:09:7e:29:b4:23:bb:f8:31:86:16: fd:1e:a7:8a:bf:4e:03:8f:12:7a:ad:87:4e:21:32:0c:23:08: 0a:d6:58:2a:11:06:a2:20:f0:7e:d6:b6:af:5d:8f:65:6c:76: 65:11:bf:da:f7:4a:e2:02:c6:b9:34:ab:72:52:3b:db:c8:6b: 5f:ac:ff:78:8a:b8:b2:bd:51:0a:72:d7:75:4e:b8:a3:bb:c6: e6:e4:aa:ef:aa:d4:33:b1:f3:af:c7:09:06:35:fe:c5:fd:b3: c3:63:0c:57:ed:6a:df:98:a3:79:d5:92:70:ce:71:e7:a5:79: b4:f1:1a:4e:7c:cb:39:35:35:59:fd:4a:a3:b6:19:f7:9e:32: b7:7e:bb:a0:69:30:af:07:3a:0a:bf:d1:ba:fd:dc:7f:78:65: ac:74:a0:7c:c8:28:44:41:ef:62:b2:5b:71:33:0a:c0:bf:0b: 9a:26:71:00:d5:e9:7e:db:dd:04:87:3b:89:5b:cd:39:80:a3: 67:0d:ae:54:b0:21:87:d6:b4:a0:8e:96:e6:c7:2c:52:87:54: 34:48:aa:cd:b9:da:a3:9c:ed:ff:3a:38:f5:53:43:ca:c4:88: 36:31:ec:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE MUM0QjlGMTcwHhcNMjQwNTAzMDA0MzEwWhcNMjQwNTEwMDA0MzEwWjAYMRYwFAYD VQQDEw02NjM0MzMxZi1hOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpvVD+O4sN5yfscd43jCZu5UIGjYT5AMd7t2p82thfsWYcmlOWFUaAo3LqdB +Tx8Brwqo7AZnFNl5X+PbuhpQZ71bWKUjcCO3/gLvqntgPW2xu1owB644cXTg+E0 uIt5TXFXTWloEu0jD/vn0qmFcZEcRNEXszef7Ikjo9YWbTdcGiVKK4EDCbvdN/rM mdGYlKTO5PK2+1E1hf0Fz/HTB/chCmX5TGQspgiWanwRlKTg1cwJq/yVrUAL9UOd rXhfPkVrQ+KxEora6smlMK8cdbM8uMdLHiqS0tr2rXLqRfZyUikDz5fsrV1RzB9G 42D51UJijYfEefzCmYTxt95DOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECS4gIE WzOtQq3hSVPXtxFimdkxMB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwMi85MzlDQUUyQzhERDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4 Q2xNOTlMdU9MT2pSeExueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNGlYcFR2b8wI4aPvVK5IEMmBEeQapxY+HfAl+KbQju/gxhhb9HqeK v04DjxJ6rYdOITIMIwgK1lgqEQaiIPB+1ravXY9lbHZlEb/a90riAsa5NKtyUjvb yGtfrP94iriyvVEKctd1Triju8bm5KrvqtQzsfOvxwkGNf7F/bPDYwxX7WrfmKN5 1ZJwznHnpXm08RpOfMs5NTVZ/Uqjthn3njK3frugaTCvBzoKv9G6/dx/eGWsdKB8 yChEQe9isltxMwrAvwuaJnEA1el+290EhzuJW805gKNnDa5UsCGH1rSgjpbmxyxS h1Q0SKrNudqjnO3/Ojj1U0PKxIg2MeyZ -----END CERTIFICATE-----Generated at Fri May 3 03:10:45 2024 by rpki-client on console-ams.rpki-client.org