$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: VWOYhI+jNaDP9jrj+HfMnT8BjxtLr8SLAEY19naZKTs= Subject key identifier: 9B:C2:42:B1:EC:A3:0C:3E:9F:5A:FD:27:46:70:B6:8C:12:54:17:0E Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 0312 Signing time: Sat 27 Apr 2024 03:04:25 +0000 Manifest this update: Sat 27 Apr 2024 03:04:24 +0000 Manifest next update: Sat 04 May 2024 03:04:24 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: r7sJ1sijtokKlZTC7EPfotpbjXPdHDzl2t8HMluDHyM=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: F+NKv1+QLpZkyoToey6zxPzR2KWP15IIWzcg2dMx2EQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Apr 27 03:04:24 2024 GMT Not After : May 4 03:04:24 2024 GMT Subject: CN=662c6b38-dbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:57:8a:5e:84:8f:2b:81:68:31:25:6e:fc: e3:03:f3:bf:96:48:b5:b5:4a:47:6b:aa:1f:83:2a: 9d:39:fc:78:ad:4a:bf:79:38:5e:91:70:23:55:68: 3f:d4:ad:fe:24:bf:dc:9b:a5:92:1c:75:50:ab:72: 5e:aa:91:9f:3f:2c:0a:7a:89:c8:ee:d7:66:cf:c0: d2:4f:de:e8:14:1b:48:e3:a4:c1:e5:24:8e:f1:ec: 94:1f:a6:a4:06:f5:12:c4:2d:2c:3e:9b:58:bf:0a: af:2d:3e:7c:96:30:9c:c3:bc:34:f2:21:3f:97:d7: 9a:34:6c:10:c6:39:09:91:7d:56:cb:e8:3a:d1:66: 36:32:be:f2:19:5e:c4:ff:ab:71:fe:73:1c:a3:0a: 98:50:39:0b:3a:52:4c:55:4a:ee:5b:13:fa:02:a6: bd:7b:9e:02:96:c0:e6:5f:30:73:28:dd:67:6d:79: 3e:2c:4c:2d:69:e3:1d:8d:7b:ab:15:6c:2d:aa:52: af:ae:1a:9b:74:43:bb:f3:df:38:a1:11:26:b4:10: bb:c9:93:d3:8d:59:79:eb:1d:fa:c2:bc:0d:54:cf: d9:82:c4:7b:8e:be:bf:d0:db:86:7d:07:1d:07:51: 4c:2b:ee:e9:d8:b5:65:2d:1c:0b:7a:fd:35:0d:ed: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C2:42:B1:EC:A3:0C:3E:9F:5A:FD:27:46:70:B6:8C:12:54:17:0E X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:65:ba:6d:46:56:fa:b1:69:0f:eb:6f:c6:c6:c8:23:ca:61: 34:b1:0d:b4:27:f8:d3:01:4e:4e:cb:70:79:42:d8:87:24:91: 74:e7:a3:78:96:87:9c:04:bb:3f:24:4e:0b:11:b5:48:2d:46: 4a:1f:20:d7:c3:2a:e0:c6:60:97:4d:96:83:63:6b:0f:e6:bf: 29:2e:1b:65:07:56:18:9a:93:46:eb:4c:db:6a:91:21:7f:57: d7:ad:55:1b:3b:18:48:c9:76:3a:61:85:8d:e0:60:76:4e:0d: 1e:82:6a:8f:31:ad:bf:c3:da:51:33:61:36:e0:a4:e9:48:07: 04:bc:e9:88:ce:98:78:8f:7a:29:64:a7:bd:7d:2f:a9:cc:15: 7a:84:cd:1a:27:0b:ee:1c:7b:ef:d4:41:e5:3d:fb:39:a7:58: 02:dc:b2:4d:7e:6e:20:be:d7:b0:91:d2:1a:1d:ad:6c:bd:9d: fe:d0:9f:26:88:8f:84:4e:02:ee:f6:41:a6:1e:da:1b:d4:8d: e9:f0:05:41:e5:33:9e:c9:ad:38:18:cd:a7:e4:9d:f9:22:14: b4:87:21:49:8a:4c:e4:ca:dd:28:34:a9:61:4f:49:da:ec:ef: fd:11:5f:f2:df:80:e3:6e:6b:df:1b:d4:a6:19:a8:8e:f5:45: 0f:d9:bb:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjQwNDI3MDMwNDI0WhcNMjQwNTA0MDMwNDI0WjAYMRYwFAYD VQQDEw02NjJjNmIzOC1kYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GpXil6EjyuBaDElbvzjA/O/lki1tUpHa6ofgyqdOfx4rUq/eThekXAjVWg/ 1K3+JL/cm6WSHHVQq3JeqpGfPywKeonI7tdmz8DST97oFBtI46TB5SSO8eyUH6ak BvUSxC0sPptYvwqvLT58ljCcw7w08iE/l9eaNGwQxjkJkX1Wy+g60WY2Mr7yGV7E /6tx/nMcowqYUDkLOlJMVUruWxP6Aqa9e54ClsDmXzBzKN1nbXk+LEwtaeMdjXur FWwtqlKvrhqbdEO78984oREmtBC7yZPTjVl56x36wrwNVM/ZgsR7jr6/0NuGfQcd B1FMK+7p2LVlLRwLev01De3bmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvCQrHs oww+n1r9J0ZwtowSVBcOMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXZbptRlb6sWkP62/GxsgjymE0sQ20J/jTAU5Oy3B5QtiHJJF056N4 loecBLs/JE4LEbVILUZKHyDXwyrgxmCXTZaDY2sP5r8pLhtlB1YYmpNG60zbapEh f1fXrVUbOxhIyXY6YYWN4GB2Tg0egmqPMa2/w9pRM2E24KTpSAcEvOmIzph4j3op ZKe9fS+pzBV6hM0aJwvuHHvv1EHlPfs5p1gC3LJNfm4gvtewkdIaHa1svZ3+0J8m iI+ETgLu9kGmHtob1I3p8AVB5TOeya04GM2n5J35IhS0hyFJikzkyt0oNKlhT0na 7O/9EV/y34DjbmvfG9SmGaiO9UUP2bs3 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:41 2024 by rpki-client on console-ams.rpki-client.org