$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft File: iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json) Hash identifier: ZPKayV6RjeJcIBmsRfEXw6eJeqxHISbcW+lMPMs3v1U= Subject key identifier: E9:2C:4B:A0:39:99:5C:7D:D4:B5:70:A0:81:92:B4:51:ED:C8:B7:30 Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6 Certificate issuer: /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6 Certificate serial: 0373 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft Manifest number: 036F Signing time: Wed 01 May 2024 03:05:34 +0000 Manifest this update: Wed 01 May 2024 03:05:33 +0000 Manifest next update: Wed 08 May 2024 03:05:33 +0000 Files and hashes: 1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: KY6E7dbQTDAD3qCOT3nV5ePAuQr/tsOaofbzGnqZzTc=) 2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: /lMhtbfP7jO2VNR3cHvi/fELcOjJ6kIqSLBwbKbUlK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6 Validity Not Before: May 1 03:05:33 2024 GMT Not After : May 8 03:05:33 2024 GMT Subject: CN=6631b17d-4669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:33:2a:11:9c:60:43:42:40:7f:34:aa:95: 67:35:56:d1:58:85:f8:fc:85:36:2b:cf:41:60:a0: b1:8a:65:7e:ff:b5:0a:5f:92:7f:64:77:db:e6:00: f9:e3:46:f8:58:81:b8:0d:92:67:3d:19:04:8d:33: e4:6a:bb:a0:ff:b3:83:aa:fd:49:28:8c:ec:e5:22: e9:25:4f:74:87:b2:78:a7:21:29:44:32:41:17:68: ef:e3:02:09:31:78:46:b5:b2:ac:e1:54:5d:b6:41: 5f:d2:a4:1f:48:77:7f:4e:e4:ee:f5:0f:cd:5b:ef: e0:10:a6:99:1b:6e:fe:60:d2:2f:3e:c4:10:45:71: fb:f3:93:c3:a2:e2:2a:dd:19:8e:09:fd:cf:b5:63: fc:cf:80:f2:76:b0:f1:44:fc:8d:6a:96:30:68:d8: 62:a2:03:6f:84:9b:36:26:4b:7c:94:c1:6e:dd:27: 33:fe:85:63:65:e1:b9:f3:46:41:44:04:10:34:22: 03:0a:25:55:ee:f7:0b:96:c9:97:ec:a1:c7:4f:a9: aa:fe:68:fa:1d:c1:21:c9:7a:75:97:57:9f:0e:6c: 5b:3e:d6:9d:e2:c5:c9:2a:ec:c9:12:cb:96:5e:a0: 52:b7:07:b2:71:5d:df:f2:c0:ba:ad:cc:fb:aa:8d: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:4B:A0:39:99:5C:7D:D4:B5:70:A0:81:92:B4:51:ED:C8:B7:30 X509v3 Authority Key Identifier: keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:76:c4:18:cc:49:0b:47:5f:0f:5d:c2:53:28:90:93:8a:65: 3b:df:da:2d:2a:57:bd:b7:e6:4f:a4:60:96:38:7b:a2:e4:6d: e4:e7:c3:67:31:f2:4a:86:d1:25:2a:7b:24:3f:d1:92:c4:8b: 5f:63:e7:c2:0a:11:81:0b:66:12:55:47:c7:e9:52:99:aa:7c: 60:10:4d:d6:46:43:fb:52:fe:5e:72:03:76:df:8d:3b:8e:f0: 00:b4:df:08:83:9d:c4:f3:76:02:d6:e0:d5:f3:43:45:43:b5: 57:fe:1a:65:8c:d2:06:b7:91:0b:59:e4:6e:62:5a:0e:10:c5: 6b:96:51:6c:46:0f:af:02:2c:6c:43:62:24:dd:e4:53:9e:c2: 4f:b2:5a:d5:67:00:1e:45:9e:3e:86:5e:60:2f:dc:ef:06:f1: 64:19:13:0f:e7:19:c8:e9:ed:5b:50:f5:91:f8:52:a3:79:c1: b7:3a:29:c2:a1:0a:eb:ab:9d:9f:be:25:8c:be:55:32:1b:17: ec:0c:77:d0:e9:bb:9a:26:97:32:4e:9c:a6:58:41:8f:0a:22: 5d:dc:ae:dc:3c:ed:fe:82:eb:6b:84:22:35:08:16:a1:ef:93: b5:ce:63:ac:69:39:76:9e:53:d1:ee:54:59:68:ca:ee:b7:a0: f3:c7:e9:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0 NTlEQkMxRjYwHhcNMjQwNTAxMDMwNTMzWhcNMjQwNTA4MDMwNTMzWjAYMRYwFAYD VQQDEw02NjMxYjE3ZC00NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlkzKhGcYENCQH80qpVnNVbRWIX4/IU2K89BYKCximV+/7UKX5J/ZHfb5gD5 40b4WIG4DZJnPRkEjTPkarug/7ODqv1JKIzs5SLpJU90h7J4pyEpRDJBF2jv4wIJ MXhGtbKs4VRdtkFf0qQfSHd/TuTu9Q/NW+/gEKaZG27+YNIvPsQQRXH785PDouIq 3RmOCf3PtWP8z4DydrDxRPyNapYwaNhiogNvhJs2Jkt8lMFu3Scz/oVjZeG580ZB RAQQNCIDCiVV7vcLlsmX7KHHT6mq/mj6HcEhyXp1l1efDmxbPtad4sXJKuzJEsuW XqBStweycV3f8sC6rcz7qo2tEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOksS6A5 mVx91LVwoIGStFHtyLcwMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3 ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1MC8xMTdDMjZFQTVENkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1K QW5STllhWW1oTGxGbmJ3ZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPdsQYzEkLR18PXcJTKJCTimU739otKle9t+ZPpGCWOHui5G3k58Nn MfJKhtElKnskP9GSxItfY+fCChGBC2YSVUfH6VKZqnxgEE3WRkP7Uv5ecgN23407 jvAAtN8Ig53E83YC1uDV80NFQ7VX/hpljNIGt5ELWeRuYloOEMVrllFsRg+vAixs Q2Ik3eRTnsJPslrVZwAeRZ4+hl5gL9zvBvFkGRMP5xnI6e1bUPWR+FKjecG3OinC oQrrq52fviWMvlUyGxfsDHfQ6buaJpcyTpymWEGPCiJd3K7cPO3+gutrhCI1CBah 75O1zmOsaTl2nlPR7lRZaMrut6Dzx+m3 -----END CERTIFICATE-----Generated at Wed May 1 05:59:01 2024 by rpki-client on console-fra.rpki-client.org