$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: uNXpIEkgXOmDWCbINQ5WfaOsff/oIB81QXQ6Cqz9bYM= Subject key identifier: 4B:B9:3C:F2:58:99:D5:BA:11:FA:6C:03:C4:40:B3:CC:E0:4B:64:8A Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0935 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 0914 Signing time: Thu 02 May 2024 21:25:08 +0000 Manifest this update: Thu 02 May 2024 21:25:07 +0000 Manifest next update: Thu 09 May 2024 21:25:07 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: yZUwOXmh4tbA3PZnELQTPkPLJaIafrtanoYwShxkOh8=) 2: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: 0K4VjUo+Y+yndVYhKJDfJSeTrXcDPLcy/HVViJqUmh8=) 3: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: IIY7vXQJdlXF9s8nCAta46+KSgmUHNyvBMN4IjBXeaE=) 4: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: 4eiQgdaP8VR0bxVWT8fba+rtaJkXzbs2i92ICGj3H7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2357 (0x935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: May 2 21:25:07 2024 GMT Not After : May 9 21:25:07 2024 GMT Subject: CN=663404b4-0a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:26:80:e0:e1:93:ce:3a:08:5a:16:54:7e: d4:1a:4e:4c:91:01:78:72:b9:57:85:e9:96:d5:a6: 56:60:1e:3c:28:cc:2b:55:01:4d:c8:92:a2:17:6a: 29:f8:30:59:3f:24:b9:be:79:fc:bf:0f:84:4b:67: 20:fd:c5:b5:6c:f9:25:31:7f:af:16:38:a4:12:a1: 30:bf:f5:50:40:cc:d3:90:0e:a9:27:18:78:10:26: 98:5d:f8:26:06:3b:e3:97:cd:92:36:22:63:97:62: f7:5c:07:30:19:77:78:f9:75:81:c1:6f:bc:64:b3: 4f:fb:6a:f6:b3:bf:26:84:2c:04:bb:1d:15:90:7c: 42:a1:10:b7:db:1b:a7:1b:be:a3:26:94:9e:c1:d7: 4f:81:ae:f2:9e:70:22:7c:17:1c:8d:91:d3:f9:07: b8:0d:20:4c:b9:27:c3:96:ba:b0:99:e0:58:2c:38: 0f:26:42:ad:c6:38:b9:c9:a3:9b:17:e5:d7:03:91: 88:42:cc:d1:0c:ec:70:5e:e3:ec:75:67:b8:45:d6: 84:1b:7b:ef:a3:db:1d:2b:d1:1d:c2:a2:7b:b5:65: 40:e0:76:54:d8:13:c6:65:ef:a6:81:ad:e2:d6:c3: db:34:08:d9:30:54:2a:fe:b9:20:2b:57:f8:42:09: 6b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B9:3C:F2:58:99:D5:BA:11:FA:6C:03:C4:40:B3:CC:E0:4B:64:8A X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:32:ee:6b:d1:c3:ba:01:fa:b0:87:24:77:cd:69:64:12:49: 24:48:71:ec:a0:6d:46:29:84:40:5a:07:73:ed:35:0b:81:6f: 56:87:ff:79:52:41:ce:64:12:a5:7f:ac:ab:bb:b6:d3:d9:7e: 23:bb:b7:6a:03:9a:63:dd:d6:ef:96:d3:d1:0c:eb:4d:e7:8e: ad:3e:40:31:f0:9f:18:2b:4e:1c:ff:85:fc:88:11:d1:93:99: ce:55:8a:57:31:1e:a6:2c:2d:30:59:43:04:19:bb:4b:c9:8f: bb:1e:d4:0c:0e:70:54:d9:a8:82:f4:13:bc:69:14:98:a6:b4: 4c:30:b2:f4:7c:f7:35:3e:b3:17:a2:10:a2:9e:b1:8e:72:3b: 60:50:d8:0b:ef:7a:65:36:48:5f:a2:59:24:c4:cc:93:6d:6b: 8a:a1:15:cf:d5:31:f7:93:41:82:f1:af:c8:5c:63:94:3e:20: cf:98:e4:6a:3d:de:97:bc:b4:c8:c4:59:6f:9e:28:d1:0d:f2: c3:57:f8:0b:77:bc:f9:79:b4:9e:6b:4a:56:3a:ee:55:be:4b: 85:1e:85:12:f0:55:88:bb:a4:b9:8d:ef:a0:da:67:0e:da:d1: 1f:8b:fa:3d:8b:00:b7:60:cf:4c:63:f4:5c:95:df:03:89:6b: e4:d5:86:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjQwNTAyMjEyNTA3WhcNMjQwNTA5MjEyNTA3WjAYMRYwFAYD VQQDEw02NjM0MDRiNC0wYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHkmgODhk846CFoWVH7UGk5MkQF4crlXhemW1aZWYB48KMwrVQFNyJKiF2op +DBZPyS5vnn8vw+ES2cg/cW1bPklMX+vFjikEqEwv/VQQMzTkA6pJxh4ECaYXfgm Bjvjl82SNiJjl2L3XAcwGXd4+XWBwW+8ZLNP+2r2s78mhCwEux0VkHxCoRC32xun G76jJpSewddPga7ynnAifBccjZHT+Qe4DSBMuSfDlrqwmeBYLDgPJkKtxji5yaOb F+XXA5GIQszRDOxwXuPsdWe4RdaEG3vvo9sdK9EdwqJ7tWVA4HZU2BPGZe+mga3i 1sPbNAjZMFQq/rkgK1f4QglrowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu5PPJY mdW6EfpsA8RAs8zgS2SKMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwMu5r0cO6AfqwhyR3zWlkEkkkSHHsoG1GKYRAWgdz7TULgW9Wh/95 UkHOZBKlf6yru7bT2X4ju7dqA5pj3dbvltPRDOtN546tPkAx8J8YK04c/4X8iBHR k5nOVYpXMR6mLC0wWUMEGbtLyY+7HtQMDnBU2aiC9BO8aRSYprRMMLL0fPc1PrMX ohCinrGOcjtgUNgL73plNkhfolkkxMyTbWuKoRXP1TH3k0GC8a/IXGOUPiDPmORq Pd6XvLTIxFlvnijRDfLDV/gLd7z5ebSea0pWOu5VvkuFHoUS8FWIu6S5je+g2mcO 2tEfi/o9iwC3YM9MY/Rcld8DiWvk1YZ1 -----END CERTIFICATE-----Generated at Thu May 2 22:13:19 2024 by rpki-client on console-fra.rpki-client.org