$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: A0+hHD51Q0tZRT5rEUagudel76H0sEJFA1YxyWt+zTA= Subject key identifier: BF:FB:80:FD:1C:66:CA:AB:41:97:A2:76:5C:0C:9B:ED:11:87:FC:15 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 7C Signing time: Fri 17 May 2024 07:23:32 +0000 Manifest this update: Fri 17 May 2024 07:23:32 +0000 Manifest next update: Fri 24 May 2024 07:23:32 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: 039I6Aj2S/2aPUovH0J2ToqmzMzLJ/ic1M9GZDGmdzs=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: K64KDPi5IA1n4NsggDwjziZoO8m7GMY/mXI66wYP0r0=) 3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: NwxdRlAk907NKJkhCsTkOJalcdDOfSPPue8UDy8L6vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: May 17 07:23:32 2024 GMT Not After : May 24 07:23:32 2024 GMT Subject: CN=664705f4-78f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:18:29:db:6d:c6:78:73:62:8e:72:37:b6:99: ae:66:da:5e:41:9a:a9:6b:12:d3:7a:2c:a8:0e:4e: 50:3c:83:8a:4c:7c:e0:a4:89:ee:56:71:01:2b:27: a4:ae:b0:50:e2:f1:ab:1c:cf:8b:8f:b8:66:4b:b6: 89:63:51:82:75:8f:e3:5c:0a:96:f4:20:9c:ce:fa: fd:8c:30:ed:ab:83:b0:ff:50:18:b7:d0:01:00:fa: f0:22:5c:e6:f7:6b:e2:b0:07:e5:a6:d9:43:1e:a8: b1:da:9a:ee:f7:5d:16:0e:ee:61:c8:d8:76:d2:af: 30:3b:2e:df:26:ff:62:04:82:88:13:27:57:c2:0f: d0:22:e9:e4:b2:d5:f4:14:cc:92:2d:28:5e:17:9d: c8:98:6b:c8:9f:cc:04:90:56:57:74:67:20:5e:0f: 11:60:b0:d3:cf:88:1c:9d:e8:05:77:83:0b:50:60: cc:dc:55:fb:8e:f9:d6:3c:98:7e:f4:74:cf:0e:b2: 4f:02:c9:d2:bd:71:19:a8:38:1d:48:50:c7:78:58: c1:47:d5:38:54:b6:45:b7:d9:b6:85:c9:cf:6a:d6: 6a:ba:5b:8f:5a:ac:aa:24:3b:89:45:3f:c8:0b:66: e7:90:89:09:13:f7:52:18:2b:d8:76:d4:27:e5:4d: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FB:80:FD:1C:66:CA:AB:41:97:A2:76:5C:0C:9B:ED:11:87:FC:15 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:9b:21:92:fd:69:c7:54:ac:12:d7:49:ab:06:61:8e:06:86: 7d:39:2f:c5:87:cd:32:ff:98:4b:a5:36:44:37:b9:2d:d3:90: 87:bf:3a:79:84:f7:94:91:de:27:0c:bd:cb:a3:a4:33:41:f8: 16:83:7a:0f:24:ec:82:0e:6b:3b:0c:c9:64:e3:9a:dc:2c:75: 60:09:1a:7a:c3:37:21:be:fc:6b:4d:11:89:1e:84:df:61:93: 16:7b:97:ae:fe:0f:ce:29:cd:ac:3b:bb:8d:15:7c:ef:6e:45: b0:45:9b:22:10:a8:91:25:a3:69:70:27:f0:4b:0e:11:24:27: 5d:6a:ad:13:22:bf:e2:43:8a:5f:c1:fc:8b:c6:42:84:ff:c7: 5a:3a:51:dd:eb:ce:ba:29:e5:91:7e:46:6b:4b:54:3a:a9:77: 8a:ba:ad:e0:3f:71:93:f9:68:6b:e3:28:e8:48:91:df:0a:97: 67:5b:32:5c:01:94:f8:cf:41:56:cf:f9:d6:84:f2:27:3f:41: 29:f6:2f:62:7f:b9:09:3f:3b:48:64:5d:9d:eb:e8:f4:13:06: 5c:43:1a:95:f5:32:c8:81:65:63:84:1d:de:5b:c8:1e:95:f3: 5a:ce:3a:b3:09:63:4d:e2:59:73:0a:04:f2:3f:b2:e1:af:d6: 27:2e:4b:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RjkzNzExMC8GA1UEBRMoODhBMkNCNDYyNDgwMUJDOUM3QURBMjIzODM5RkMzQzUz NkM3RkIyNjAeFw0yNDA1MTcwNzIzMzJaFw0yNDA1MjQwNzIzMzJaMBgxFjAUBgNV BAMTDTY2NDcwNWY0LTc4ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoGCnbbcZ4c2KOcje2ma5m2l5BmqlrEtN6LKgOTlA8g4pMfOCkie5WcQErJ6Su sFDi8ascz4uPuGZLtoljUYJ1j+NcCpb0IJzO+v2MMO2rg7D/UBi30AEA+vAiXOb3 a+KwB+Wm2UMeqLHamu73XRYO7mHI2HbSrzA7Lt8m/2IEgogTJ1fCD9Ai6eSy1fQU zJItKF4XnciYa8ifzASQVld0ZyBeDxFgsNPPiByd6AV3gwtQYMzcVfuO+dY8mH70 dM8Osk8CydK9cRmoOB1IUMd4WMFH1ThUtkW32baFyc9q1mq6W49arKokO4lFP8gL ZueQiQkT91IYK9h21CflTf7RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv/uA/Rxm yqtBl6J2XAyb7RGH/BUwHwYDVR0jBBgwFoAUiKLLRiSAG8nHraIjg5/DxTbH+yYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGOTM3LzI2QjQ5ODFFNUIy MzExRUVCODc3M0Y3MEM0RjlBRTAyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUtMTFJpU0FHOG5IcmFJamc1X0R4VGJILXlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG OTM3LzI2QjQ5ODFFNUIyMzExRUVCODc3M0Y3MEM0RjlBRTAyL2lLTExSaVNBRzhu SHJhSWpnNV9EeFRiSC15WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANebIZL9acdUrBLXSasGYY4Ghn05L8WHzTL/mEulNkQ3uS3TkIe/OnmE 95SR3icMvcujpDNB+BaDeg8k7IIOazsMyWTjmtwsdWAJGnrDNyG+/GtNEYkehN9h kxZ7l67+D84pzaw7u40VfO9uRbBFmyIQqJElo2lwJ/BLDhEkJ11qrRMiv+JDil/B /IvGQoT/x1o6Ud3rzrop5ZF+RmtLVDqpd4q6reA/cZP5aGvjKOhIkd8Kl2dbMlwB lPjPQVbP+daE8ic/QSn2L2J/uQk/O0hkXZ3r6PQTBlxDGpX1MsiBZWOEHd5byB6V 81rOOrMJY03iWXMKBPI/suGv1icuS2k= -----END CERTIFICATE-----Generated at Fri May 17 08:52:48 2024 by rpki-client on console-ams.rpki-client.org