$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: ZzrCKkKnPnFyZy31eFS5qdZvIvcP5yW82/3ipsuZ7fg= Subject key identifier: FA:01:F9:0B:1C:67:62:7B:75:CB:39:C0:08:92:61:DF:8D:25:5D:36 Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 02DD Signing time: Sun 05 May 2024 03:29:15 +0000 Manifest this update: Sun 05 May 2024 03:29:15 +0000 Manifest next update: Sun 12 May 2024 03:29:15 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: unxnjuVYI8T84gzJVbXfwuPZwNdbTpX1+ySZh4wgqHA=) 2: 6D1AB66299DC11EC8F668276C4F9AE02.roa (hash: FWoO/+Lm9aGZBFUfNqbe6GMXLp4oCWQOP8DeUKW0aa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Validity Not Before: May 5 03:29:15 2024 GMT Not After : May 12 03:29:15 2024 GMT Subject: CN=6636fd0b-a119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:94:b1:7c:12:64:7e:1b:d3:24:a7:81:08: 2b:f1:c1:c8:d6:9e:6b:5b:c7:2c:ab:b0:6f:b3:64: c9:d8:82:8c:59:fa:73:3b:e9:8c:b3:4f:26:f6:0f: f3:07:40:f9:8d:89:bb:3b:4e:4c:9f:00:a0:5c:6e: f7:5f:56:fc:1d:97:7c:94:eb:42:ec:a7:fd:bf:29: dc:9a:73:9a:57:0a:2f:78:42:d3:7c:eb:ba:0c:de: b8:ca:8a:7e:62:3d:80:c2:da:1f:37:d9:34:2c:01: 37:3a:f8:df:9d:07:0b:85:a3:3f:83:df:88:9a:40: ec:f7:9a:fc:b7:dd:b3:86:e0:8b:23:85:51:88:46: 70:ff:a0:7d:08:59:9d:10:9c:38:a9:b3:19:77:73: 5d:7e:82:fc:e4:39:98:55:82:85:6d:0a:6e:95:40: ac:9c:4e:9b:4c:1f:6f:fb:66:0d:82:a6:f3:47:65: 2e:06:7d:a7:2a:f9:1a:8f:da:18:63:d9:19:b9:c7: a7:4a:23:88:4b:d4:84:0a:a3:c7:10:48:3a:c6:11: ec:ab:ea:63:73:3d:83:1c:fd:5b:14:04:f0:0e:f7: 30:17:0b:2e:ce:d2:d6:70:91:13:4f:4a:e6:9a:1e: b5:dc:7f:70:e1:d6:68:02:91:8f:27:e9:19:34:3b: 74:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:01:F9:0B:1C:67:62:7B:75:CB:39:C0:08:92:61:DF:8D:25:5D:36 X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:06:71:92:96:e1:76:47:2f:7e:1a:65:8b:a1:6f:d9:00:45: 17:56:54:27:40:ef:40:2e:34:83:7e:cb:9c:f8:08:eb:46:fd: 80:db:c0:17:d1:b6:69:fd:c3:72:ae:79:b5:fa:f6:e0:66:fa: 7a:72:8a:22:7e:d6:1c:d7:b2:11:1a:39:53:27:c2:d2:e9:7e: fb:ac:ad:7b:91:ca:a3:2c:35:1d:ef:ff:53:aa:64:03:07:57: 1a:6d:a7:b0:16:de:80:2b:2c:3b:0d:55:d4:62:98:e1:a1:77: cf:82:5a:9b:1f:d1:a4:c2:f4:d8:5b:a3:73:c6:b9:e0:38:ce: 01:66:8e:84:77:b4:fb:4e:b6:70:82:69:48:57:c9:34:fe:f7: bd:20:36:17:22:b0:27:32:69:fb:8a:ec:da:26:0c:d2:66:e8: 5e:77:03:56:73:61:5d:4e:05:85:62:42:1b:f0:2a:51:dc:db: 22:fc:d1:6a:35:da:6e:c0:0e:42:08:c8:9a:05:0d:bd:1e:cc: 9d:c2:4b:c2:5c:e9:cd:fa:38:1e:0f:cf:01:f7:8b:50:8a:21: b9:49:2b:88:76:70:14:ed:1b:87:2b:ff:c3:3e:09:4e:29:a5: cc:fb:1a:57:ba:d7:73:f2:73:29:96:d1:29:14:c3:fa:38:d5: 47:1d:4d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjQwNTA1MDMyOTE1WhcNMjQwNTEyMDMyOTE1WjAYMRYwFAYD VQQDEw02NjM2ZmQwYi1hMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsSUsXwSZH4b0ySngQgr8cHI1p5rW8csq7Bvs2TJ2IKMWfpzO+mMs08m9g/z B0D5jYm7O05MnwCgXG73X1b8HZd8lOtC7Kf9vyncmnOaVwoveELTfOu6DN64yop+ Yj2AwtofN9k0LAE3OvjfnQcLhaM/g9+ImkDs95r8t92zhuCLI4VRiEZw/6B9CFmd EJw4qbMZd3NdfoL85DmYVYKFbQpulUCsnE6bTB9v+2YNgqbzR2UuBn2nKvkaj9oY Y9kZucenSiOIS9SECqPHEEg6xhHsq+pjcz2DHP1bFATwDvcwFwsuztLWcJETT0rm mh613H9w4dZoApGPJ+kZNDt06wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoB+Qsc Z2J7dcs5wAiSYd+NJV02MB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSBnGSluF2Ry9+GmWLoW/ZAEUXVlQnQO9ALjSDfsuc+AjrRv2A28AX 0bZp/cNyrnm1+vbgZvp6cooiftYc17IRGjlTJ8LS6X77rK17kcqjLDUd7/9TqmQD B1cabaewFt6AKyw7DVXUYpjhoXfPglqbH9GkwvTYW6NzxrngOM4BZo6Ed7T7TrZw gmlIV8k0/ve9IDYXIrAnMmn7iuzaJgzSZuhedwNWc2FdTgWFYkIb8CpR3Nsi/NFq NdpuwA5CCMiaBQ29HsydwkvCXOnN+jgeD88B94tQiiG5SSuIdnAU7RuHK//DPglO KaXM+xpXutdz8nMpltEpFMP6ONVHHU3M -----END CERTIFICATE-----Generated at Sun May 5 04:34:55 2024 by rpki-client on console-fra.rpki-client.org