$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: R4MqLRjTgnbXAW4lPO5wr961qzfjvSyUj/yW+uw70b8= Subject key identifier: B2:CD:25:08:F0:03:E3:9F:E1:C9:BB:90:22:B1:AC:00:B1:2E:F0:02 Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 071C Signing time: Thu 02 May 2024 22:50:26 +0000 Manifest this update: Thu 02 May 2024 22:50:26 +0000 Manifest next update: Thu 09 May 2024 22:50:26 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: bQwgzjPmLcyL0nTqHuTcM1f2d8uk4D0pLBltQpAdQ90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: May 2 22:50:26 2024 GMT Not After : May 9 22:50:26 2024 GMT Subject: CN=663418b2-85e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:26:c4:5f:d4:29:83:e7:de:84:c5:1d:3d: c4:06:18:12:da:25:e8:d4:65:63:f8:c2:fd:b5:0d: ce:d5:17:87:8b:ae:38:78:a9:bb:17:9e:76:c0:c4: 2a:b9:ab:99:8e:a1:a7:05:6b:56:1b:c0:b4:ae:f2: b7:6e:f3:43:e9:ee:4e:d7:85:47:2a:88:29:7e:a8: 87:f7:db:8e:6a:9c:bf:2d:db:86:b2:2a:b9:31:e4: 9b:41:77:9b:79:00:3d:1f:91:da:4b:bf:1c:9f:4a: 74:ac:18:04:6d:e7:84:82:f4:11:99:68:7f:84:61: fd:a5:54:68:72:23:00:a8:b0:53:9f:2e:10:1a:3b: b6:22:cb:3a:de:4b:e6:08:bd:b9:e3:c4:83:cf:23: ff:a2:24:1d:23:50:90:28:96:53:c3:bb:92:96:ca: 74:5d:35:4b:9f:55:e3:80:a7:a4:e4:6c:d4:37:45: 02:42:19:8d:95:60:9e:e2:1d:75:67:12:8f:fd:1d: be:81:16:59:da:f7:16:ed:29:5f:a5:e4:c1:a2:66: 2b:4d:c2:df:6f:3e:82:ff:88:9f:dc:5f:ab:f1:02: 6a:ab:b4:22:22:85:cd:72:c3:4f:4b:70:a9:bc:31: b6:71:3a:4b:8f:5c:7a:b3:ad:e5:b0:ea:7f:ba:57: 05:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CD:25:08:F0:03:E3:9F:E1:C9:BB:90:22:B1:AC:00:B1:2E:F0:02 X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:27:00:32:f3:2d:61:08:f9:87:42:b7:c4:8c:8f:7a:88:39: bf:36:dd:51:e3:19:9f:7c:86:d1:30:00:cb:31:39:80:da:4c: 6a:4b:cd:44:87:e5:5a:84:84:7f:7b:7a:bd:4e:90:2c:38:6e: 4c:07:5c:77:e0:61:d7:26:57:af:8e:6a:a1:13:82:ca:5d:38: 8c:90:8f:e5:63:eb:6c:25:aa:b0:b6:54:2c:f2:cc:0f:1b:03: 62:7c:34:0d:95:88:d6:ee:19:f1:ea:cf:cd:d5:ff:bc:b9:f7: 1f:be:91:a7:1d:22:97:88:ef:0b:f1:cb:67:31:3a:3f:c3:f9: ce:f3:29:ce:82:e6:12:e5:e2:21:55:a2:14:1a:62:a1:e8:bc: b0:b0:c8:d6:16:2b:20:22:d7:96:0c:71:09:ed:11:b6:23:d3: 55:8a:6e:73:30:6e:86:25:90:de:44:03:0a:4d:0d:b2:91:e4: 1d:f4:2c:58:f9:ce:11:58:3b:98:47:5e:b5:ba:c1:06:2c:4b: 19:dc:eb:73:33:42:95:48:bc:69:32:41:7d:93:55:98:71:5c: 50:ab:7b:f4:21:04:f0:d2:3b:43:f1:e1:38:74:d5:a2:06:85: 4e:50:95:77:68:fc:b4:0b:a8:a6:ce:a3:06:85:e4:a9:10:4e: 98:87:ce:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjQwNTAyMjI1MDI2WhcNMjQwNTA5MjI1MDI2WjAYMRYwFAYD VQQDEw02NjM0MThiMi04NWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGwmxF/UKYPn3oTFHT3EBhgS2iXo1GVj+ML9tQ3O1ReHi644eKm7F552wMQq uauZjqGnBWtWG8C0rvK3bvND6e5O14VHKogpfqiH99uOapy/LduGsiq5MeSbQXeb eQA9H5HaS78cn0p0rBgEbeeEgvQRmWh/hGH9pVRociMAqLBTny4QGju2Iss63kvm CL2548SDzyP/oiQdI1CQKJZTw7uSlsp0XTVLn1XjgKek5GzUN0UCQhmNlWCe4h11 ZxKP/R2+gRZZ2vcW7SlfpeTBomYrTcLfbz6C/4if3F+r8QJqq7QiIoXNcsNPS3Cp vDG2cTpLj1x6s63lsOp/ulcFUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLNJQjw A+Of4cm7kCKxrACxLvACMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqJwAy8y1hCPmHQrfEjI96iDm/Nt1R4xmffIbRMADLMTmA2kxqS81E h+VahIR/e3q9TpAsOG5MB1x34GHXJlevjmqhE4LKXTiMkI/lY+tsJaqwtlQs8swP GwNifDQNlYjW7hnx6s/N1f+8ufcfvpGnHSKXiO8L8ctnMTo/w/nO8ynOguYS5eIh VaIUGmKh6LywsMjWFisgIteWDHEJ7RG2I9NVim5zMG6GJZDeRAMKTQ2ykeQd9CxY +c4RWDuYR161usEGLEsZ3OtzM0KVSLxpMkF9k1WYcVxQq3v0IQTw0jtD8eE4dNWi BoVOUJV3aPy0C6imzqMGheSpEE6Yh85l -----END CERTIFICATE-----Generated at Thu May 2 23:48:43 2024 by rpki-client on console-fra.rpki-client.org