$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json) Hash identifier: +U4q0P7iRk2Ym9SngBmIvKVoAPtOD6j8VuJDfbeGyK4= Subject key identifier: F9:60:50:12:A0:08:4D:42:78:95:D3:58:2B:30:69:76:3E:90:F9:1B Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft Manifest number: 12 Signing time: Fri 17 May 2024 08:58:31 +0000 Manifest this update: Fri 17 May 2024 08:58:31 +0000 Manifest next update: Fri 24 May 2024 08:58:31 +0000 Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: BWDxxhUp4as81yhIr8B+opgDcSyGaJHmqyMxozkZSqk=) 2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: eWHgPofXBpaqUsdaPrMnYH8r6v4MNKIwylvK1ZXMYaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Validity Not Before: May 17 08:58:31 2024 GMT Not After : May 24 08:58:31 2024 GMT Subject: CN=66471c37-f261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:3b:fe:99:48:58:a1:31:9b:9c:07:7e:14: 29:bf:bb:da:a4:2e:7b:8a:32:d5:3e:a2:ce:3a:b5: a8:bd:74:8a:69:2e:45:6d:98:52:5a:34:f7:ea:c1: af:a6:03:22:9f:c2:34:06:8b:43:d9:0f:c3:6b:59: 6b:48:62:71:13:49:de:60:c4:9e:9a:a5:c6:32:c7: 61:3e:67:e2:83:32:88:60:55:70:89:ea:b5:cd:56: c7:a4:58:53:36:6b:34:04:6b:cc:f7:34:78:3f:5a: f3:ca:6e:f2:42:2f:ea:9a:22:83:cd:3d:12:5d:39: 99:4b:ca:9c:7b:d6:23:7b:fa:e3:3d:ae:3c:c1:91: bb:50:4e:fa:b7:de:56:14:14:ec:99:b3:b5:e6:63: 25:1e:7e:45:32:86:76:81:81:5a:18:a5:b0:7d:c6: 45:0f:8d:b2:96:a1:f6:17:72:37:4b:fe:c9:c0:0a: e1:46:72:8e:4e:e6:26:11:4d:5e:8f:8a:3a:a9:4d: 6d:35:d0:4a:52:14:95:02:df:1e:ab:ec:05:1b:91: d8:46:92:14:47:ab:d1:97:5a:f8:5e:89:32:74:3c: a3:a9:3e:ad:61:ad:46:c6:8e:9e:ec:e7:6b:e0:e9: 46:9c:a3:9b:c3:69:26:b9:44:85:93:4c:71:a3:97: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:60:50:12:A0:08:4D:42:78:95:D3:58:2B:30:69:76:3E:90:F9:1B X509v3 Authority Key Identifier: keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:c9:2c:52:48:a1:6a:bd:08:79:ad:da:e9:68:39:dc:77:7b: 4a:d5:42:67:14:ad:17:ba:52:6b:ee:6f:0a:bf:94:60:cb:ea: 9a:37:56:ba:4f:fa:93:67:8b:42:fe:b9:31:d9:90:13:4f:4f: 2d:a7:71:41:8d:ef:04:07:a3:18:63:6f:49:b9:9c:92:ef:9f: 64:b6:15:d4:b4:e6:e0:b3:df:ac:1b:e3:b5:09:b5:49:43:f5: a5:7f:c7:2e:3f:6a:3b:a6:27:06:50:af:b6:c0:18:bb:3f:86: f0:c4:84:a2:9d:e6:35:a0:64:f4:6e:78:c8:9a:06:78:67:85: 90:38:cc:bd:ad:0a:1c:29:ed:f3:ef:55:7f:39:0e:c2:dd:9e: a9:22:3d:83:63:ed:38:c1:07:a1:f2:1b:a9:da:35:0e:08:53: b1:43:ce:e7:91:67:2c:b8:6e:ba:46:e4:31:3f:e2:55:ba:93: b0:79:cf:7c:3e:a9:b0:77:d0:3a:c9:1b:72:ae:14:ae:b4:9a: ba:c0:bd:a0:d9:c7:87:ba:2b:4f:20:03:c3:a0:f9:15:32:37: 99:45:1c:5c:60:76:2a:b9:b2:8f:a9:44:f0:26:78:e4:86:f1: 27:45:3c:c3:63:0f:c3:a4:b5:a2:cb:19:f5:f2:0c:1c:fa:78: 8e:97:bd:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkRBNzExMC8GA1UEBRMoOEEyODJEMUM4RjkwQzMwRDY1OUU2RDhDMEI5QkU0MjIx QzI1MzE5QzAeFw0yNDA1MTcwODU4MzFaFw0yNDA1MjQwODU4MzFaMBgxFjAUBgNV BAMTDTY2NDcxYzM3LWYyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs9jv+mUhYoTGbnAd+FCm/u9qkLnuKMtU+os46tai9dIppLkVtmFJaNPfqwa+m AyKfwjQGi0PZD8NrWWtIYnETSd5gxJ6apcYyx2E+Z+KDMohgVXCJ6rXNVsekWFM2 azQEa8z3NHg/WvPKbvJCL+qaIoPNPRJdOZlLypx71iN7+uM9rjzBkbtQTvq33lYU FOyZs7XmYyUefkUyhnaBgVoYpbB9xkUPjbKWofYXcjdL/snACuFGco5O5iYRTV6P ijqpTW010EpSFJUC3x6r7AUbkdhGkhRHq9GXWvheiTJ0PKOpPq1hrUbGjp7s52vg 6Uaco5vDaSa5RIWTTHGjl0A1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+WBQEqAI TUJ4ldNYKzBpdj6Q+RswHwYDVR0jBBgwFoAUiigtHI+Qww1lnm2MC5vkIhwlMZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREE3LzQ1QkNGQzMwRkQy OTExRUVBNjI5QUU2MkM0RjlBRTAyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1a dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWlndEhJLVF3dzFsbm0yTUM1dmtJaHdsTVp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REE3LzQ1QkNGQzMwRkQyOTExRUVBNjI5QUU2MkM0RjlBRTAyL2lpZ3RISS1Rd3cx bG5tMk1DNXZrSWh3bE1ady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMXJLFJIoWq9CHmt2uloOdx3e0rVQmcUrRe6Umvubwq/lGDL6po3VrpP +pNni0L+uTHZkBNPTy2ncUGN7wQHoxhjb0m5nJLvn2S2FdS05uCz36wb47UJtUlD 9aV/xy4/ajumJwZQr7bAGLs/hvDEhKKd5jWgZPRueMiaBnhnhZA4zL2tChwp7fPv VX85DsLdnqkiPYNj7TjBB6HyG6naNQ4IU7FDzueRZyy4brpG5DE/4lW6k7B5z3w+ qbB30DrJG3KuFK60mrrAvaDZx4e6K08gA8Og+RUyN5lFHFxgdiq5so+pRPAmeOSG 8SdFPMNjD8OktaLLGfXyDBz6eI6XvUI= -----END CERTIFICATE-----Generated at Fri May 17 10:59:10 2024 by rpki-client on console-ams.rpki-client.org