$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: VQ4VRqSx6RJOJ98fKjnHd8YDFuoU6AJ60rC1R+7XEY0= Subject key identifier: EC:D9:08:CE:8A:45:A5:FC:08:7B:16:F5:5E:BF:52:EA:53:6B:60:5E Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 62 Signing time: Fri 17 May 2024 07:54:13 +0000 Manifest this update: Fri 17 May 2024 07:54:12 +0000 Manifest next update: Fri 24 May 2024 07:54:12 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: yrozcTEw3yZ+Wj3hSrtRjfEqeinEByaQFE6RTUTCfFQ=) 2: 7898766C921111EEB27ADA0BC4F9AE02.roa (hash: PbFH0LW/eDc+RsqKHQh/Z9To2QMCAkbu+8IxiZlAMJc=) 3: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: 7q6dRt1PRPumvLOcxheCYVDUESOcIxgJ43UkEKxKC5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: May 17 07:54:12 2024 GMT Not After : May 24 07:54:12 2024 GMT Subject: CN=66470d25-2634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:67:df:ab:99:ff:8d:40:54:55:be:33:ae: b5:ba:64:ae:c1:1d:e6:40:5c:a7:05:cd:00:6a:30: 8a:37:d9:9a:56:43:2f:0e:22:18:67:24:e2:83:00: d6:eb:65:f7:01:d4:50:00:59:f4:67:5d:16:25:68: 14:28:10:67:9b:c9:9e:b9:20:ed:f1:97:79:a8:c7: b4:47:0b:94:98:3a:b2:4e:fb:79:e2:ec:bf:da:3a: 55:dc:a3:34:88:ea:98:6d:4e:ca:26:d5:e3:85:cc: 44:80:e8:02:35:9b:37:09:ed:a5:3b:50:88:eb:44: 67:85:a6:28:ea:cb:d5:d9:d3:8c:0c:36:2f:02:30: 97:c6:43:a9:9d:7b:b6:e2:64:37:77:90:be:cd:7d: f4:50:a4:c0:c4:87:92:9e:3a:f2:b2:1f:80:07:a4: 6f:95:d6:fb:6d:85:28:df:2f:2f:89:b6:7e:15:51: 4c:ed:22:03:bf:63:07:dc:a4:86:7f:0e:f9:39:e1: 71:eb:77:ed:fd:ed:38:e7:24:d7:33:ea:73:c1:78: 24:fb:56:0d:4c:83:a9:ed:c4:ae:f0:f3:8d:8f:83: e0:87:31:1b:77:60:5f:a6:b1:01:f0:ce:03:04:d8: e0:dd:7e:3d:0a:90:63:0c:71:75:41:bc:1c:75:15: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D9:08:CE:8A:45:A5:FC:08:7B:16:F5:5E:BF:52:EA:53:6B:60:5E X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3d:e7:d7:a0:4b:19:09:a5:e8:e7:22:3d:cd:c7:81:8e:fa: 23:9c:08:8b:25:3e:54:81:ca:f1:9a:2d:b4:dd:9c:ce:da:c9: 0c:fd:0e:d8:99:9c:98:a8:07:b6:69:3a:98:83:12:b5:b5:a8: 7c:c6:8d:6b:e1:4d:8b:02:3c:04:b5:ec:0f:27:66:22:30:dd: 7d:2e:fd:74:bd:f6:28:ff:13:e6:2a:08:80:8f:42:26:fa:a4: b3:30:8e:71:da:06:8d:6d:bc:19:58:3a:17:61:1e:e1:d8:ee: 02:1d:3a:a6:af:b3:a9:e9:e0:0d:b4:9c:c1:e1:24:a9:5e:b8: 01:0f:dd:e7:5c:40:dc:82:85:1b:cc:3b:b6:fd:c2:e1:41:9d: b3:50:c6:aa:1e:1b:de:a0:10:92:63:bb:85:63:7b:b1:56:22: 54:f1:72:ef:d6:4f:23:08:81:0f:6a:03:22:fa:54:d0:dc:bd: ce:40:71:89:f0:45:d8:c5:0b:6d:63:e8:e0:a5:6b:27:00:f9: b0:43:c5:02:60:64:cc:ff:92:62:46:e9:4a:d9:58:f9:c7:1d: c8:fe:22:f2:b7:46:54:1e:f4:e1:dc:e7:0c:bc:e9:7e:c5:85: a1:61:62:35:0a:44:17:2f:8a:06:e2:26:5d:21:74:5f:ce:3a: bb:c0:b1:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjVEQjExMC8GA1UEBRMoN0JFMjMwMTUzQ0ZGOTAwMTY0MkRCQzlCMjRGODVEMEND MjgyMzY0RTAeFw0yNDA1MTcwNzU0MTJaFw0yNDA1MjQwNzU0MTJaMBgxFjAUBgNV BAMTDTY2NDcwZDI1LTI2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/DGffq5n/jUBUVb4zrrW6ZK7BHeZAXKcFzQBqMIo32ZpWQy8OIhhnJOKDANbr ZfcB1FAAWfRnXRYlaBQoEGebyZ65IO3xl3mox7RHC5SYOrJO+3ni7L/aOlXcozSI 6phtTsom1eOFzESA6AI1mzcJ7aU7UIjrRGeFpijqy9XZ04wMNi8CMJfGQ6mde7bi ZDd3kL7NffRQpMDEh5KeOvKyH4AHpG+V1vtthSjfLy+Jtn4VUUztIgO/YwfcpIZ/ Dvk54XHrd+397TjnJNcz6nPBeCT7Vg1Mg6ntxK7w842Pg+CHMRt3YF+msQHwzgME 2ODdfj0KkGMMcXVBvBx1FcQ9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7NkIzopF pfwIexb1Xr9S6lNrYF4wHwYDVR0jBBgwFoAUe+IwFTz/kAFkLbybJPhdDMKCNk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyNURCLzExOTM5RDEwOTA2 OTExRUVCMjNENzQyNUM0RjlBRTAyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05r NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZS1Jd0ZUel9rQUZrTGJ5YkpQaGRETUtDTms0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy NURCLzExOTM5RDEwOTA2OTExRUVCMjNENzQyNUM0RjlBRTAyL2UtSXdGVHpfa0FG a0xieWJKUGhkRE1LQ05rNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIA959egSxkJpejnIj3Nx4GO+iOcCIslPlSByvGaLbTdnM7ayQz9DtiZ nJioB7ZpOpiDErW1qHzGjWvhTYsCPAS17A8nZiIw3X0u/XS99ij/E+YqCICPQib6 pLMwjnHaBo1tvBlYOhdhHuHY7gIdOqavs6np4A20nMHhJKleuAEP3edcQNyChRvM O7b9wuFBnbNQxqoeG96gEJJju4Vje7FWIlTxcu/WTyMIgQ9qAyL6VNDcvc5AcYnw RdjFC21j6OClaycA+bBDxQJgZMz/kmJG6UrZWPnHHcj+IvK3RlQe9OHc5wy86X7F haFhYjUKRBcvigbiJl0hdF/OOrvAsTM= -----END CERTIFICATE-----Generated at Fri May 17 08:52:48 2024 by rpki-client on console-ams.rpki-client.org