$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: qMdGTOO3uPP330QMS0g2qcOeJGJ9qJyVJrX11+Tb7h0= Subject key identifier: 9C:2A:E0:50:2C:8D:F7:8A:D3:24:7E:4E:70:D5:E3:64:22:75:86:99 Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 17D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 17D1 Signing time: Sat 04 May 2024 17:03:56 +0000 Manifest this update: Sat 04 May 2024 17:03:56 +0000 Manifest next update: Sat 11 May 2024 17:03:56 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: UnhZiSgV1Zl1zk4WlW/27WoyV3ZvlJL7MDR+3KFAAys=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: 9o3PzclvpnBg2lRAwn/BzGlT0NhAuk70j3EBaFmerbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6104 (0x17d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: May 4 17:03:56 2024 GMT Not After : May 11 17:03:56 2024 GMT Subject: CN=66366a7c-f833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:c4:10:a5:0f:cb:e5:3b:9e:be:fb:12:76: 63:e2:23:9b:f0:c1:07:82:58:59:40:cc:e7:bb:d0: bd:e1:11:a6:0b:45:b3:24:c1:f5:10:aa:75:d4:09: ae:2f:3e:f9:f6:9f:11:0f:95:48:96:d1:95:0f:b9: 38:8b:94:71:14:ee:62:0c:5a:fc:52:c1:a3:1a:7b: a5:c0:66:1f:78:5c:cd:67:f9:d5:a3:db:d6:0c:cd: 7f:2e:9c:01:0f:4c:98:4a:86:b2:49:c6:c8:78:2a: f1:ca:65:9b:c6:f0:08:46:9f:1d:cc:3f:65:fb:7e: 17:56:9e:b8:34:e7:e7:b0:1e:e3:15:9f:64:03:4e: 0a:52:31:af:b4:8d:03:16:37:3f:a4:54:77:68:0f: e6:ef:d0:95:d2:94:0c:a8:41:87:1c:67:ff:55:28: b3:c0:69:f8:e7:61:e8:8d:e6:b6:5c:d5:18:8a:1c: 27:2d:dd:27:7c:1c:c9:e7:a3:50:84:fe:61:f9:49: 85:c4:5b:f2:a3:26:81:de:92:fb:b8:35:59:a9:46: 71:70:25:ae:43:fc:1b:65:16:23:86:b9:70:3a:c1: 63:b1:d9:8e:1c:d0:1b:d4:a9:d3:61:f9:bd:4f:c2: 0b:7b:6a:1f:d1:54:45:ac:c7:70:4f:65:61:1a:3c: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2A:E0:50:2C:8D:F7:8A:D3:24:7E:4E:70:D5:E3:64:22:75:86:99 X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:54:ec:1f:be:06:0e:fc:75:ea:d7:1e:15:c0:24:ec:89:b5: e7:bf:02:e2:e7:fd:41:02:00:f9:00:af:58:ce:ec:f4:9e:65: 7f:0d:9f:cc:06:5d:2b:5d:07:a0:73:cb:4f:12:48:84:a6:7c: 0a:a0:bb:35:2d:c3:c8:8f:81:8c:19:68:78:b8:e8:40:cd:b5: 24:db:56:90:3b:4b:07:f6:a5:9d:91:d4:3e:ab:1c:6b:98:9c: d5:b7:95:ac:af:8c:f3:2a:1a:12:7b:d7:14:ee:9d:39:ac:eb: 22:b7:95:e3:74:09:83:9a:1a:91:29:c5:ac:9b:0a:ad:85:cd: a1:02:67:43:08:ea:6a:14:c6:08:ac:58:5b:4d:0b:21:d6:ca: f6:6d:f5:69:58:16:73:64:c9:16:72:e2:aa:c8:c5:f2:1d:03: 32:28:ae:7b:37:9e:ef:d5:ba:8a:fa:61:59:86:17:d0:dc:bf: 85:64:4a:d5:d6:54:fb:fb:22:71:ab:15:26:92:8c:ff:5c:e3: 15:13:a0:4f:3d:aa:b3:63:38:4a:ce:c6:32:b1:5a:36:2c:37: 87:8f:cd:65:6a:dd:9c:50:1b:5d:c8:d5:66:22:2b:ba:84:87: d4:ec:68:df:67:a1:f8:18:d8:4a:45:b4:c7:52:82:07:cb:12: 9f:9e:fb:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjQwNTA0MTcwMzU2WhcNMjQwNTExMTcwMzU2WjAYMRYwFAYD VQQDEw02NjM2NmE3Yy1mODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZLEEKUPy+U7nr77EnZj4iOb8MEHglhZQMznu9C94RGmC0WzJMH1EKp11Amu Lz759p8RD5VIltGVD7k4i5RxFO5iDFr8UsGjGnulwGYfeFzNZ/nVo9vWDM1/LpwB D0yYSoayScbIeCrxymWbxvAIRp8dzD9l+34XVp64NOfnsB7jFZ9kA04KUjGvtI0D Fjc/pFR3aA/m79CV0pQMqEGHHGf/VSizwGn452Hojea2XNUYihwnLd0nfBzJ56NQ hP5h+UmFxFvyoyaB3pL7uDVZqUZxcCWuQ/wbZRYjhrlwOsFjsdmOHNAb1KnTYfm9 T8ILe2of0VRFrMdwT2VhGjx/QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwq4FAs jfeK0yR+TnDV42QidYaZMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoVOwfvgYO/HXq1x4VwCTsibXnvwLi5/1BAgD5AK9Yzuz0nmV/DZ/M Bl0rXQegc8tPEkiEpnwKoLs1LcPIj4GMGWh4uOhAzbUk21aQO0sH9qWdkdQ+qxxr mJzVt5Wsr4zzKhoSe9cU7p05rOsit5XjdAmDmhqRKcWsmwqthc2hAmdDCOpqFMYI rFhbTQsh1sr2bfVpWBZzZMkWcuKqyMXyHQMyKK57N57v1bqK+mFZhhfQ3L+FZErV 1lT7+yJxqxUmkoz/XOMVE6BPPaqzYzhKzsYysVo2LDeHj81lat2cUBtdyNVmIiu6 hIfU7GjfZ6H4GNhKRbTHUoIHyxKfnvtZ -----END CERTIFICATE-----Generated at Sat May 4 17:44:37 2024 by rpki-client on console-ams.rpki-client.org