$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft File: ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json) Hash identifier: O31JeQRwCWJGpZXOaDIzeEQaVzvu0G+9u4XnTMNrQ+4= Subject key identifier: 40:DB:A3:A8:98:A6:95:33:14:F2:C0:2E:CB:A9:A7:B9:4A:A7:A5:F6 Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft Manifest number: A3 Signing time: Fri 17 May 2024 06:52:17 +0000 Manifest this update: Fri 17 May 2024 06:52:17 +0000 Manifest next update: Fri 24 May 2024 06:52:17 +0000 Files and hashes: 1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: HmwVSpZioDd2R84DlKNJxLHJ24AycA4AgjlyzldVZyM=) 2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: FW53rlrjqKHJK94aR4EnZt9IrMO+EQKuZBZoAjfuW84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Validity Not Before: May 17 06:52:17 2024 GMT Not After : May 24 06:52:17 2024 GMT Subject: CN=6646fea1-4855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:44:52:ba:08:41:6b:ba:a4:8e:d8:b9:d5: df:3a:8a:6d:f4:7f:f3:64:98:66:af:76:5d:ca:5a: ad:81:05:51:5b:46:49:30:7c:66:1a:5b:3b:bc:df: 7c:9d:2c:00:78:0c:ee:4e:39:27:4e:76:47:72:02: 22:4a:ee:b5:82:f3:91:1c:0c:70:de:47:a7:c8:5f: de:98:bf:3b:69:d7:af:48:03:8f:7f:79:f0:03:32: 53:f1:68:85:4b:85:ba:a3:21:a2:a0:37:b0:c8:27: ce:ef:fb:16:da:c2:96:d7:49:51:6c:b9:d1:ef:bb: e9:96:19:af:ea:9a:c0:87:0c:1e:be:f5:aa:cb:e8: d6:b5:b3:09:6e:ea:e0:71:f4:88:5a:b1:0a:cf:62: 0e:9e:87:c0:75:76:4e:ca:44:49:bf:59:07:49:ea: 8b:2d:91:48:11:88:3c:87:84:b4:4a:5e:ed:6d:ed: 89:c7:6b:2f:32:ec:fb:21:b8:0c:df:f9:c1:45:57: 41:53:f6:a6:a0:ca:34:7e:17:9c:d1:47:65:3e:40: 79:ec:2c:8d:c0:3c:c3:0c:11:e1:d2:42:37:70:66: 7c:02:ba:cf:d9:07:5a:88:0f:f7:ba:7d:7f:0b:00: f9:a3:74:95:5c:e4:af:47:3f:e2:82:fd:b3:2d:9b: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DB:A3:A8:98:A6:95:33:14:F2:C0:2E:CB:A9:A7:B9:4A:A7:A5:F6 X509v3 Authority Key Identifier: keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:11:ec:07:da:13:4b:65:f8:42:6f:63:ac:d7:91:97:4a:ec: 7b:d6:5d:87:d1:0d:ea:9c:f0:74:e5:e1:fe:7a:72:47:88:d0: eb:66:63:09:e3:41:e4:f3:33:41:7a:e2:dc:e9:61:f2:2f:ec: dc:50:99:58:22:06:f3:b5:98:ef:e0:dc:0d:07:88:c6:44:96: 6f:9d:a5:55:87:f6:11:23:65:04:86:03:26:2b:2a:a3:5c:82: 31:d7:e3:5c:c7:1a:6e:53:99:cc:e6:4f:fb:69:71:81:4f:a6: 12:78:fb:51:cd:e4:1d:25:cb:ec:6c:b0:e9:78:9e:1f:82:ef: 1b:a0:7d:2a:c7:a9:98:cb:5d:22:64:80:2c:fd:dd:fd:b1:d3: 58:c0:4c:93:73:11:56:b8:b4:d5:ee:ad:ba:2f:1d:da:2f:3e: eb:20:37:4a:34:73:a2:9c:02:6d:c0:94:c4:cd:3c:93:55:bc: 19:02:e4:9f:19:25:e0:4a:6e:a2:44:44:df:70:38:1a:f3:d9: 66:de:0f:d5:63:6c:33:ac:1c:e0:4c:6c:86:33:8f:90:1d:ad: 70:96:37:c8:f0:a3:f2:f3:05:ba:c2:91:b9:a3:fa:e9:52:e5: 72:f1:13:55:45:65:4f:48:b9:35:a2:e1:da:72:83:ad:c6:2b: 8f:25:cd:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNzYxMTAvBgNVBAUTKDhBNTgxNjU1QzkyMkE3QTUxMjFFMDBGQjdBNDI3RTAx OUFDNzMwN0IwHhcNMjQwNTE3MDY1MjE3WhcNMjQwNTI0MDY1MjE3WjAYMRYwFAYD VQQDEw02NjQ2ZmVhMS00ODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrVEUroIQWu6pI7YudXfOopt9H/zZJhmr3ZdylqtgQVRW0ZJMHxmGls7vN98 nSwAeAzuTjknTnZHcgIiSu61gvORHAxw3kenyF/emL87adevSAOPf3nwAzJT8WiF S4W6oyGioDewyCfO7/sW2sKW10lRbLnR77vplhmv6prAhwwevvWqy+jWtbMJburg cfSIWrEKz2IOnofAdXZOykRJv1kHSeqLLZFIEYg8h4S0Sl7tbe2Jx2svMuz7IbgM 3/nBRVdBU/amoMo0fhec0UdlPkB57CyNwDzDDBHh0kI3cGZ8ArrP2QdaiA/3un1/ CwD5o3SVXOSvRz/igv2zLZvEJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDbo6iY ppUzFPLALsupp7lKp6X2MB8GA1UdIwQYMBaAFIpYFlXJIqelEh4A+3pCfgGaxzB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM3Ni9BMzU3RDc5NjIw OEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2VVNIZ0Q3ZWtKLUFackhN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lsZ1dWY2tpcDZVU0hnRDdla0otQVpySE1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM3Ni9BMzU3RDc5NjIwOEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2 VVNIZ0Q3ZWtKLUFackhNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxEewH2hNLZfhCb2Os15GXSux71l2H0Q3qnPB05eH+enJHiNDrZmMJ 40Hk8zNBeuLc6WHyL+zcUJlYIgbztZjv4NwNB4jGRJZvnaVVh/YRI2UEhgMmKyqj XIIx1+NcxxpuU5nM5k/7aXGBT6YSePtRzeQdJcvsbLDpeJ4fgu8boH0qx6mYy10i ZIAs/d39sdNYwEyTcxFWuLTV7q26Lx3aLz7rIDdKNHOinAJtwJTEzTyTVbwZAuSf GSXgSm6iRETfcDga89lm3g/VY2wzrBzgTGyGM4+QHa1wljfI8KPy8wW6wpG5o/rp UuVy8RNVRWVPSLk1ouHacoOtxiuPJc1I -----END CERTIFICATE-----Generated at Fri May 17 08:13:50 2024 by rpki-client on console-fra.rpki-client.org