$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json) Hash identifier: ruKX1sUnN0F2sFabSrc9OYsyD5bO04SUvg+bojMu638= Subject key identifier: B6:13:FD:28:D9:94:A8:DF:86:2B:48:23:5E:20:9B:1A:53:93:55:41 Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft Manifest number: EB Signing time: Wed 01 May 2024 06:09:46 +0000 Manifest this update: Wed 01 May 2024 06:09:46 +0000 Manifest next update: Wed 08 May 2024 06:09:46 +0000 Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: g4XvLCG55qI9/FdwAGH0PI4G+CSbKcRL+Ydk5DakNlc=) 2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: c8qsy6Ai7aK2W2nI3RvEEZhRhyIrZcGTRTKb5B3tQmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: May 1 06:09:46 2024 GMT Not After : May 8 06:09:46 2024 GMT Subject: CN=6631dcaa-6c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:11:1c:6a:51:b3:e2:16:13:7d:b6:9e:4d: 46:31:73:b7:b5:5e:54:08:ad:74:ba:ae:40:bc:8c: f3:31:c2:be:dd:b5:83:7e:b6:08:51:17:0d:0b:f8: 0d:1d:36:0b:43:0f:83:db:cf:d6:51:b1:35:1e:44: c5:6a:4a:c9:7b:d4:7e:8b:bb:05:fe:dd:7a:a7:67: 32:4e:d5:08:88:dd:8e:96:b4:83:dc:3c:97:99:41: 4f:05:b4:36:02:37:46:8f:c0:7b:82:ec:50:22:bb: a7:dd:04:a0:28:7a:cf:53:b9:6b:0a:37:e5:3f:17: 49:09:c7:b7:12:b6:11:6b:62:af:a0:e8:0e:4e:0d: f9:75:c8:ca:55:86:f2:1d:c4:6a:79:7a:3e:a4:b2: 22:e3:55:f3:0e:a1:af:80:4f:d0:39:c0:cc:11:21: 11:00:d6:d8:3f:69:b5:c3:c8:b8:c2:9d:ff:a9:1c: fb:da:d1:d4:d5:06:c5:46:b4:1e:97:c4:05:dc:b0: 28:63:f9:64:cb:af:40:f3:30:23:b4:1f:60:f8:22: b2:e1:16:33:c9:67:ee:e6:dd:95:71:db:0f:22:2c: 48:e5:1d:de:66:8d:4a:11:e5:cd:3b:de:90:d2:86: ee:77:90:5a:97:34:4e:63:7e:00:05:0b:ff:eb:a3: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:13:FD:28:D9:94:A8:DF:86:2B:48:23:5E:20:9B:1A:53:93:55:41 X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8b:89:fb:75:49:84:0a:15:29:32:47:6f:96:9d:c9:89:4c: b6:12:da:1b:9c:53:59:fa:1e:9e:2a:be:23:53:b8:7a:17:d0: 1b:65:e3:52:b7:86:18:20:bf:26:0e:4d:2c:5b:4a:5c:66:d6: 4c:c8:1d:f1:78:fc:b6:47:10:e5:f0:7f:0d:f6:ef:74:d1:6a: a4:fd:9a:56:57:33:51:09:f1:ac:b3:a8:c4:15:b4:07:6e:3d: 6d:8e:ca:9b:de:c1:e4:27:8d:52:12:5c:24:5d:bf:b1:ff:a0: 34:e9:a4:bb:e4:47:7c:d3:48:3a:7d:d6:6c:72:3c:bb:f9:ea: 1d:3a:a7:bb:72:77:24:21:f0:34:e9:e2:00:bb:96:61:45:8f: 5a:02:50:93:cd:b3:df:87:8b:63:07:f5:93:95:d7:1c:29:fa: fb:c7:21:0f:9c:66:9e:87:03:b7:be:41:a6:24:0d:fe:37:05: 99:78:dd:8b:38:2c:71:e3:8e:46:8e:81:7e:75:c1:55:d5:15: 90:22:4f:87:fe:b2:20:5f:b6:a9:9e:97:39:4c:21:ed:f4:f0: 6c:10:c2:b5:15:e7:c8:6b:46:93:34:6c:7c:13:76:4e:90:90: e1:75:d0:6d:1a:e5:4b:d6:8c:6d:cb:60:c7:1f:a4:54:0a:84: ac:f8:70:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjQwNTAxMDYwOTQ2WhcNMjQwNTA4MDYwOTQ2WjAYMRYwFAYD VQQDEw02NjMxZGNhYS02YzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMQRHGpRs+IWE322nk1GMXO3tV5UCK10uq5AvIzzMcK+3bWDfrYIURcNC/gN HTYLQw+D28/WUbE1HkTFakrJe9R+i7sF/t16p2cyTtUIiN2OlrSD3DyXmUFPBbQ2 AjdGj8B7guxQIrun3QSgKHrPU7lrCjflPxdJCce3ErYRa2KvoOgOTg35dcjKVYby HcRqeXo+pLIi41XzDqGvgE/QOcDMESERANbYP2m1w8i4wp3/qRz72tHU1QbFRrQe l8QF3LAoY/lky69A8zAjtB9g+CKy4RYzyWfu5t2VcdsPIixI5R3eZo1KEeXNO96Q 0obud5BalzROY34ABQv/66PkUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYT/SjZ lKjfhitII14gmxpTk1VBMB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhC U0pTM25NbjlkekVieDhveGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKi4n7dUmEChUpMkdvlp3JiUy2EtobnFNZ+h6eKr4jU7h6F9AbZeNS t4YYIL8mDk0sW0pcZtZMyB3xePy2RxDl8H8N9u900Wqk/ZpWVzNRCfGss6jEFbQH bj1tjsqb3sHkJ41SElwkXb+x/6A06aS75Ed800g6fdZscjy7+eodOqe7cnckIfA0 6eIAu5ZhRY9aAlCTzbPfh4tjB/WTldccKfr7xyEPnGaehwO3vkGmJA3+NwWZeN2L OCxx445GjoF+dcFV1RWQIk+H/rIgX7apnpc5TCHt9PBsEMK1FefIa0aTNGx8E3ZO kJDhddBtGuVL1oxty2DHH6RUCoSs+HDv -----END CERTIFICATE-----Generated at Wed May 1 07:23:54 2024 by rpki-client on console-ams.rpki-client.org