$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json) Hash identifier: qRbyS60fE4K9woV1MfumTqfvm3pgHvIA2FyeXsoAJDI= Subject key identifier: B2:BC:0C:84:D2:2E:9B:8A:CB:F8:B3:55:27:B1:2A:74:FA:96:65:C0 Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Certificate serial: 05BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft Manifest number: 05B7 Signing time: Sat 27 Apr 2024 00:09:17 +0000 Manifest this update: Sat 27 Apr 2024 00:09:17 +0000 Manifest next update: Sat 04 May 2024 00:09:17 +0000 Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: xEM8r8adukZwzBuuQhikq7ZNnDHElaaLYGoACHu1iMo=) 2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: HMNtwiOI8Fji50xPFx+fLZfX2Rn76Q7skuHMKU1WYfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Validity Not Before: Apr 27 00:09:17 2024 GMT Not After : May 4 00:09:17 2024 GMT Subject: CN=662c422d-3e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:01:b5:f0:b4:dd:3d:5a:e7:ff:f3:f1:86: 9e:af:2a:37:ec:2e:df:da:fb:ed:fc:27:95:46:b5: 3f:12:a4:b6:be:e6:0d:ee:53:e7:35:ed:9b:11:cb: 3e:ff:ca:d4:3d:8a:fb:1f:b1:bc:41:f0:00:7a:59: 38:bb:42:ed:20:1b:06:9f:c5:03:fe:c4:f5:c5:0f: 71:b4:99:da:a0:c2:45:7b:cf:37:2e:3f:2f:ed:41: 1a:0d:4b:3e:99:90:e8:8d:81:4f:39:e6:07:34:b6: 64:9e:ea:73:9b:d0:d3:a5:a7:1d:fb:05:b2:64:e3: 2b:6d:88:84:93:a5:d1:2d:7c:a9:f9:54:53:82:af: ea:f2:d6:a1:4e:5b:3c:89:0b:4d:c0:c7:b1:e1:a0: 92:6e:dc:bb:2c:dd:ea:3c:ef:17:ad:3f:ab:6b:ac: ba:52:d2:c9:31:54:f6:6b:94:65:cc:6d:dc:fa:6c: d7:9e:cc:cb:ba:ae:cf:c7:45:f5:27:69:7e:e0:ce: 71:de:30:c9:7f:a4:34:b5:9b:e8:cc:64:1e:c5:67: de:9e:3f:3c:2e:63:51:12:b1:9d:4e:9e:61:6e:26: 3a:ed:91:8a:37:43:b0:16:55:cd:d1:66:8f:f3:cd: 6c:45:62:e3:6d:23:b8:0f:8a:c6:78:77:be:8e:aa: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:0C:84:D2:2E:9B:8A:CB:F8:B3:55:27:B1:2A:74:FA:96:65:C0 X509v3 Authority Key Identifier: keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:84:79:94:6e:ca:ce:1f:57:1a:ed:ec:b2:6e:ec:cd:6b:24: 10:8f:76:30:aa:8f:18:a2:8f:1a:c3:2d:f0:a8:49:2d:05:cd: d5:0d:dd:1d:ce:8f:35:14:f9:cd:62:11:b6:43:70:fc:75:e1: 4f:62:39:a1:f0:62:48:9c:3a:d9:d2:55:ff:ca:59:a6:02:49: e1:07:ce:87:58:46:0b:48:4e:2c:ef:c7:94:1f:9e:cd:6c:2a: ad:a1:24:f3:71:12:20:e8:c3:49:22:cc:4a:2a:2b:ee:2b:6c: 49:5d:2a:95:88:90:97:a6:ae:44:97:79:17:09:4e:c0:80:47: 15:92:b9:fe:0e:9f:aa:ed:d7:0e:e1:57:1e:8d:03:90:f9:54: b2:f2:8b:a9:24:7d:d2:7e:0b:d4:e9:20:6a:b8:92:10:70:23: a1:a2:6c:dd:a2:56:de:8a:52:bf:ca:32:31:4c:a1:c2:ed:dc: 4c:d6:51:bb:e5:87:09:8b:78:0d:62:85:ec:0a:7d:a9:7b:68: c7:9e:39:3f:6a:68:89:08:a0:72:fd:57:2d:83:ef:54:51:2a: ad:ab:0a:6c:e5:3c:a8:76:67:1a:9a:3d:99:cc:ba:76:51:b8: 36:4e:e7:ca:4d:35:0f:d2:26:d3:06:56:26:ad:e6:9f:52:3d: 04:65:57:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5 NUMyRENBMTIwHhcNMjQwNDI3MDAwOTE3WhcNMjQwNTA0MDAwOTE3WjAYMRYwFAYD VQQDEw02NjJjNDIyZC0zZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sYBtfC03T1a5//z8Yaeryo37C7f2vvt/CeVRrU/EqS2vuYN7lPnNe2bEcs+ /8rUPYr7H7G8QfAAelk4u0LtIBsGn8UD/sT1xQ9xtJnaoMJFe883Lj8v7UEaDUs+ mZDojYFPOeYHNLZknupzm9DTpacd+wWyZOMrbYiEk6XRLXyp+VRTgq/q8tahTls8 iQtNwMex4aCSbty7LN3qPO8XrT+ra6y6UtLJMVT2a5RlzG3c+mzXnszLuq7Px0X1 J2l+4M5x3jDJf6Q0tZvozGQexWfenj88LmNRErGdTp5hbiY67ZGKN0OwFlXN0WaP 881sRWLjbSO4D4rGeHe+jqpYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK8DITS LpuKy/izVSexKnT6lmXAMB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3 NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDIyRi83QzY0NDQyNjc3NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1 aVFXRVhYTTlsRjJWd3R5aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBhHmUbsrOH1ca7eyybuzNayQQj3Ywqo8Yoo8awy3wqEktBc3VDd0d zo81FPnNYhG2Q3D8deFPYjmh8GJInDrZ0lX/ylmmAknhB86HWEYLSE4s78eUH57N bCqtoSTzcRIg6MNJIsxKKivuK2xJXSqViJCXpq5El3kXCU7AgEcVkrn+Dp+q7dcO 4VcejQOQ+VSy8oupJH3SfgvU6SBquJIQcCOhomzdolbeilK/yjIxTKHC7dxM1lG7 5YcJi3gNYoXsCn2pe2jHnjk/amiJCKBy/Vctg+9UUSqtqwps5Tyodmcamj2ZzLp2 Ubg2TufKTTUP0ibTBlYmreafUj0EZVeX -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:45 2024 by rpki-client on console-ams.rpki-client.org