$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: xoRQqyqSBHVza1dLJ/9T0IB1ap3D0GDoyPhAgJz35X8= Subject key identifier: A9:C0:F5:01:7B:DD:DC:EE:54:F3:10:52:00:82:EF:73:05:75:CD:63 Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 064E Signing time: Mon 06 May 2024 23:43:12 +0000 Manifest this update: Mon 06 May 2024 23:43:11 +0000 Manifest next update: Mon 13 May 2024 23:43:11 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: gHamKENAHyy0lME/uNXqnWpOAXIztL9xpnfP7p2LGek=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: egE4N/qKr2iW2AJr7yaLioX9jscnmyrfB7Bs35ulzKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: May 6 23:43:11 2024 GMT Not After : May 13 23:43:11 2024 GMT Subject: CN=66396b10-ad55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:e9:b3:ed:f7:41:12:cc:b4:ad:00:ad:db: b1:b2:f7:e7:ab:94:0a:44:36:61:39:83:00:d8:73: 16:6d:e7:48:71:9c:95:b5:18:dc:d9:bd:69:a9:32: 2c:bf:66:43:f0:1b:46:8b:9b:f1:92:36:db:89:c8: ab:af:64:67:1c:b3:be:14:96:38:58:13:d5:9e:9d: 33:15:5c:ce:40:a8:6a:4e:35:51:1e:8e:af:8f:55: 3d:17:8d:8a:e6:82:92:4d:c1:06:cd:49:36:11:95: ff:90:3e:ab:a7:e7:90:57:91:cf:1c:87:fb:0f:12: 16:7a:e4:87:fb:12:13:d3:14:e3:2e:9f:d0:fe:d9: 71:ca:93:5d:76:63:67:44:03:60:4e:c2:16:43:c4: e7:70:26:ae:3b:71:93:44:9c:fe:7d:32:ae:ae:3b: c9:6e:c8:4e:0e:1c:94:44:31:19:02:50:0f:c2:d0: 95:56:34:1f:23:64:4b:a1:a8:a9:11:33:55:75:94: 89:67:15:2b:fb:62:2a:b3:63:4a:d0:51:f7:35:5e: 88:ee:64:05:0c:f3:95:d7:1d:65:17:ce:23:4f:01: 50:5b:c0:21:fb:73:f4:2a:84:e9:f3:d2:83:fa:2f: 2d:32:35:41:df:72:60:03:51:fa:74:2d:d8:c0:9d: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:F5:01:7B:DD:DC:EE:54:F3:10:52:00:82:EF:73:05:75:CD:63 X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:db:eb:16:45:33:83:53:2c:28:8a:94:f1:af:d3:ac:4e:4e: 32:84:4a:b9:d5:ba:a9:5f:da:d1:3e:3a:f3:6a:bc:42:51:74: 63:58:bd:d9:c4:f2:7c:4d:f1:ac:95:a7:51:75:91:5e:07:d1: d9:4e:06:61:76:90:78:12:0a:b2:9b:b5:df:97:ea:d1:34:73: bc:51:92:71:fa:cc:63:47:ad:64:e9:bf:ca:5a:6c:6d:53:c6: c3:19:c5:2a:88:48:e6:ac:4b:f1:79:8a:3a:d1:da:c9:2a:0e: 08:d0:0e:74:4c:d9:da:37:5b:c0:64:a8:f0:98:90:88:39:ea: a4:c3:2d:f3:4b:b5:02:37:ba:0b:db:3f:12:03:50:1c:40:4f: 05:ea:d2:c9:cc:5c:33:42:da:fe:cf:1a:3b:6f:af:90:61:14: bf:87:b9:06:58:04:3a:94:eb:7d:ee:52:3d:b2:ae:c3:79:fd: 3b:31:19:e7:b8:9e:9c:69:0a:16:64:f3:02:e0:26:8f:4c:5c: 9d:de:0c:ea:71:80:5a:9d:8d:f0:e5:b9:bd:3f:80:fb:fa:1d: 6c:65:25:04:a6:cf:b1:c6:14:bc:9f:fd:5b:51:88:5b:29:e5: c5:21:dd:16:89:b1:41:57:10:20:f1:f8:40:e5:f6:56:09:d6: be:91:1b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjQwNTA2MjM0MzExWhcNMjQwNTEzMjM0MzExWjAYMRYwFAYD VQQDEw02NjM5NmIxMC1hZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuPps+33QRLMtK0Arduxsvfnq5QKRDZhOYMA2HMWbedIcZyVtRjc2b1pqTIs v2ZD8BtGi5vxkjbbicirr2RnHLO+FJY4WBPVnp0zFVzOQKhqTjVRHo6vj1U9F42K 5oKSTcEGzUk2EZX/kD6rp+eQV5HPHIf7DxIWeuSH+xIT0xTjLp/Q/tlxypNddmNn RANgTsIWQ8TncCauO3GTRJz+fTKurjvJbshODhyURDEZAlAPwtCVVjQfI2RLoaip ETNVdZSJZxUr+2Iqs2NK0FH3NV6I7mQFDPOV1x1lF84jTwFQW8Ah+3P0KoTp89KD +i8tMjVB33JgA1H6dC3YwJ3b6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnA9QF7 3dzuVPMQUgCC73MFdc1jMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs2+sWRTODUywoipTxr9OsTk4yhEq51bqpX9rRPjrzarxCUXRjWL3Z xPJ8TfGsladRdZFeB9HZTgZhdpB4Egqym7Xfl+rRNHO8UZJx+sxjR61k6b/KWmxt U8bDGcUqiEjmrEvxeYo60drJKg4I0A50TNnaN1vAZKjwmJCIOeqkwy3zS7UCN7oL 2z8SA1AcQE8F6tLJzFwzQtr+zxo7b6+QYRS/h7kGWAQ6lOt97lI9sq7Def07MRnn uJ6caQoWZPMC4CaPTFyd3gzqcYBanY3w5bm9P4D7+h1sZSUEps+xxhS8n/1bUYhb KeXFId0WibFBVxAg8fhA5fZWCda+kRs9 -----END CERTIFICATE-----Generated at Tue May 7 00:53:17 2024 by rpki-client on console-ams.rpki-client.org