$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: 3vNsMQ8ytROmAoU5EwNj/DIH4cJvgcNdzee9mlX7aJA= Subject key identifier: 64:DD:DA:A9:07:ED:2C:C7:C6:6A:96:D5:F1:30:20:54:44:26:B6:5A Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0B66 Signing time: Sat 04 May 2024 19:42:46 +0000 Manifest this update: Sat 04 May 2024 19:42:46 +0000 Manifest next update: Sat 11 May 2024 19:42:45 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: xdFFTkvNyPPy8KA9vgMumzc2A9kc+G6JRJFUiK2B+mc=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: VI23YCDXjIBJjEO8GafeMzlZaX/Tvi6JTYc9mJtHlpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: May 4 19:42:46 2024 GMT Not After : May 11 19:42:45 2024 GMT Subject: CN=66368fb6-0ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9b:a5:31:2e:79:74:f9:67:d2:41:b3:ec:7f: 0e:21:bd:9a:26:da:71:3b:e0:62:9b:7e:ea:9f:55: af:85:1d:cb:82:a5:46:b5:f8:80:d1:eb:dc:52:e9: 87:1c:09:82:d4:7b:33:d2:4b:da:33:05:c7:fb:e2: 3f:50:b5:a6:7c:ed:82:75:03:9d:90:1e:0b:c8:2f: 66:05:06:98:9d:8d:a3:63:62:7f:6a:dc:8b:0d:38: 72:b2:81:29:69:64:f2:6c:36:35:8b:7e:56:48:cd: 69:b3:08:09:ce:c7:d4:53:d9:9c:a1:f9:25:d6:84: 98:75:89:fc:e2:96:41:3e:1d:a7:92:47:1c:20:1a: 57:4c:1a:36:e1:b6:a5:10:47:fa:b0:98:ff:4f:9f: 63:f2:68:8e:ba:9e:a9:6e:f9:4e:fa:fd:c5:d0:91: 31:0d:1d:b6:e0:da:41:08:e7:98:99:81:e4:0c:01: 0b:c4:61:c3:3f:df:0f:c6:fd:bc:55:a2:fb:b4:6e: ff:c2:32:90:cc:c2:16:cd:a4:7c:a2:54:ad:f4:81: e0:ae:1a:83:38:95:e7:53:5f:d1:84:79:e4:d6:8f: b5:60:67:7c:a4:1c:3d:d1:0a:d8:ff:1f:36:8b:f0: b4:fb:8e:c2:0c:d2:af:94:84:f4:87:eb:96:1d:e9: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DD:DA:A9:07:ED:2C:C7:C6:6A:96:D5:F1:30:20:54:44:26:B6:5A X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d2:28:0e:f3:8c:8b:ad:f1:37:b4:38:4b:e6:ba:ae:4a:e5: f1:7b:dc:e0:27:98:9b:d5:db:61:f6:28:39:e5:52:72:49:0c: 90:50:6a:7f:48:27:6f:19:92:2d:50:4c:85:72:16:a5:96:61: b7:60:1a:23:18:22:1d:d4:62:a8:ef:ec:dd:b3:a1:27:c6:8f: b4:66:e3:6b:c8:67:4e:34:22:a6:40:0f:fc:c8:a4:c9:86:9b: 83:bc:9f:20:54:08:62:4b:60:da:e5:b5:eb:79:f2:2c:6d:da: 68:c8:72:6f:f6:9f:fa:28:04:15:ce:5d:b1:66:da:e9:65:22: 3e:aa:92:c7:05:d0:31:a2:f0:fd:ba:2e:67:14:f3:b8:da:8a: 86:49:dd:f3:71:9d:84:fb:f1:e8:c1:c6:f5:9c:4a:1a:25:38: 89:60:4c:64:67:f7:41:f6:6c:d8:a2:db:f8:ab:f1:40:7b:74: 58:96:d9:a9:09:b2:bc:ef:55:86:06:2a:ff:8c:bf:22:7c:dc: 2f:2f:01:dc:21:00:0b:1c:e5:86:7f:f7:07:63:c0:cd:ab:28: 1e:22:a1:c0:02:61:cc:07:e0:d7:14:b3:30:eb:a9:c9:1e:84: 35:84:9c:b2:db:04:84:3d:55:98:53:d0:3c:c4:f7:74:b1:36: 16:c1:bb:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjQwNTA0MTk0MjQ2WhcNMjQwNTExMTk0MjQ1WjAYMRYwFAYD VQQDEw02NjM2OGZiNi0wYWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pulMS55dPln0kGz7H8OIb2aJtpxO+Bim37qn1WvhR3LgqVGtfiA0evcUumH HAmC1Hsz0kvaMwXH++I/ULWmfO2CdQOdkB4LyC9mBQaYnY2jY2J/atyLDThysoEp aWTybDY1i35WSM1pswgJzsfUU9mcofkl1oSYdYn84pZBPh2nkkccIBpXTBo24bal EEf6sJj/T59j8miOup6pbvlO+v3F0JExDR224NpBCOeYmYHkDAELxGHDP98Pxv28 VaL7tG7/wjKQzMIWzaR8olSt9IHgrhqDOJXnU1/RhHnk1o+1YGd8pBw90QrY/x82 i/C0+47CDNKvlIT0h+uWHemOSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTd2qkH 7SzHxmqW1fEwIFREJrZaMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH0igO84yLrfE3tDhL5rquSuXxe9zgJ5ib1dth9ig55VJySQyQUGp/ SCdvGZItUEyFchallmG3YBojGCId1GKo7+zds6Enxo+0ZuNryGdONCKmQA/8yKTJ hpuDvJ8gVAhiS2Da5bXrefIsbdpoyHJv9p/6KAQVzl2xZtrpZSI+qpLHBdAxovD9 ui5nFPO42oqGSd3zcZ2E+/Howcb1nEoaJTiJYExkZ/dB9mzYotv4q/FAe3RYltmp CbK871WGBir/jL8ifNwvLwHcIQALHOWGf/cHY8DNqygeIqHAAmHMB+DXFLMw66nJ HoQ1hJyy2wSEPVWYU9A8xPd0sTYWwbuc -----END CERTIFICATE-----Generated at Sat May 4 20:37:10 2024 by rpki-client on console-fra.rpki-client.org