$ rpki-client -vvf rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft File: IIUPxwwl_bFV037LDsOWLGtH_K0.mft (raw, json) Hash identifier: 4zNBok4ttPSRhz018pbZe4uCjvPOcKUCDji1//S5Wz4= Subject key identifier: AB:D6:9E:B4:5E:9E:E8:51:8B:2A:ED:94:86:DA:00:04:7F:FE:03:8C Authority key identifier: 20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD Certificate issuer: /CN=A919D545/serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft Manifest number: 0670 Signing time: Sat 04 May 2024 23:38:22 +0000 Manifest this update: Sat 04 May 2024 23:38:21 +0000 Manifest next update: Sat 11 May 2024 23:38:21 +0000 Files and hashes: 1: IIUPxwwl_bFV037LDsOWLGtH_K0.crl (hash: 0rRjAkwSPgzyQOAhoY4m7VBeU7k6vbuskCp2TwWNs3E=) 2: 934C22582E1C11EBB3ADE232C4F9AE02.roa (hash: gDufjKQaJOTq+sJdmx5tgAXa4LibFtTgzGfGd1AAPKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D545/serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD Validity Not Before: May 4 23:38:21 2024 GMT Not After : May 11 23:38:21 2024 GMT Subject: CN=6636c6ee-c61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:70:df:bb:39:39:4d:99:1d:90:78:2e:e2: d0:3e:76:92:4a:a5:9e:40:d9:2f:24:a8:2b:23:6c: 55:3e:71:76:b6:aa:51:5c:13:50:68:4b:7c:f3:38: a4:dc:94:f2:6f:87:d0:60:23:63:b5:b5:11:ef:a9: 84:17:aa:15:5d:56:be:c3:32:76:8a:b3:78:47:76: b0:ac:66:2e:a5:9e:8e:6e:4a:10:63:d7:f9:f9:f4: 1a:13:e2:9a:8b:d2:d0:43:28:ab:d1:5d:15:9c:f9: f3:b1:0c:2b:99:e5:90:ec:77:80:da:45:ef:7d:2a: 1c:75:33:98:a0:b9:88:cc:57:79:5f:7b:31:d2:4c: 23:28:88:f3:7b:a8:3d:8f:61:22:6d:35:5d:e2:d1: 42:0f:fe:ee:67:30:6d:8a:5a:26:e8:31:2a:ab:3f: c1:f2:72:36:c3:bf:8f:b4:1c:f6:7b:bc:3a:55:80: 35:24:5a:b5:4a:d5:26:cc:dc:17:1f:c8:15:34:58: 12:2c:f8:c8:1c:01:a9:45:09:30:84:13:6d:89:c8: 65:c7:be:e1:a7:be:26:c0:b8:ae:8f:db:41:35:e8: d4:cc:46:8a:6d:6f:6e:9d:e6:75:d0:d1:46:f7:0d: 4e:88:07:37:b7:5d:bd:09:51:c9:5f:f1:db:c6:0e: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D6:9E:B4:5E:9E:E8:51:8B:2A:ED:94:86:DA:00:04:7F:FE:03:8C X509v3 Authority Key Identifier: keyid:20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:65:d5:2c:55:27:70:8e:5c:03:40:a6:b2:d2:99:ae:77:61: ba:2f:42:ce:38:9f:a8:eb:82:9e:1f:41:41:7a:78:ad:89:8d: f2:c5:c7:6f:9b:ea:69:4d:aa:4f:8e:c7:81:7b:9f:08:5b:16: 32:0e:ad:9a:be:59:28:9f:33:c4:f0:55:f8:8a:55:85:e5:44: 49:58:e6:86:7a:2e:c1:9d:ff:92:37:ed:3e:ff:ca:17:45:de: ea:d1:68:d9:b9:0b:1e:86:09:b4:71:0d:fc:b8:17:18:64:66: 00:5a:12:0e:a0:13:31:7a:48:5b:2b:03:b3:db:94:d9:ec:24: cb:a0:46:88:3a:3d:15:4a:c8:9f:60:6a:64:03:be:44:75:08: f1:04:a9:62:38:c3:b6:6a:d6:ac:86:fe:19:57:e3:b1:af:39: 3c:17:5a:0f:f9:de:94:29:79:8e:06:8a:bd:82:10:04:e2:93: 73:ec:71:d2:bd:b7:f0:17:00:ad:eb:b4:49:1e:49:31:68:e9: 39:03:74:01:c3:6e:93:05:45:76:e3:d3:53:4b:3b:ea:80:2c: 81:1c:6c:99:bf:15:63:75:45:f4:7c:01:17:aa:ee:3a:37:f0: 7f:89:a4:8f:7b:71:31:c0:4c:51:23:f8:ef:67:b1:02:6e:a0: eb:ef:e4:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1NDUxMTAvBgNVBAUTKDIwODUwRkM3MEMyNUZEQjE1NUQzN0VDQjBFQzM5NjJD NkI0N0ZDQUQwHhcNMjQwNTA0MjMzODIxWhcNMjQwNTExMjMzODIxWjAYMRYwFAYD VQQDEw02NjM2YzZlZS1jNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZpw37s5OU2ZHZB4LuLQPnaSSqWeQNkvJKgrI2xVPnF2tqpRXBNQaEt88zik 3JTyb4fQYCNjtbUR76mEF6oVXVa+wzJ2irN4R3awrGYupZ6ObkoQY9f5+fQaE+Ka i9LQQyir0V0VnPnzsQwrmeWQ7HeA2kXvfSocdTOYoLmIzFd5X3sx0kwjKIjze6g9 j2EibTVd4tFCD/7uZzBtilom6DEqqz/B8nI2w7+PtBz2e7w6VYA1JFq1StUmzNwX H8gVNFgSLPjIHAGpRQkwhBNtichlx77hp74mwLiuj9tBNejUzEaKbW9uneZ10NFG 9w1OiAc3t129CVHJX/Hbxg6hLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvWnrRe nuhRiyrtlIbaAAR//gOMMB8GA1UdIwQYMBaAFCCFD8cMJf2xVdN+yw7DlixrR/yt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU0NS9GM0I5NzYwNjJF MUExMUVCQjIzOURFMzBDNEY5QUUwMi9JSVVQeHd3bF9iRlYwMzdMRHNPV0xHdEhf SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lJVVB4d3dsX2JGVjAzN0xEc09XTEd0SF9LMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU0NS9GM0I5NzYwNjJFMUExMUVCQjIzOURFMzBDNEY5QUUwMi9JSVVQeHd3bF9i RlYwMzdMRHNPV0xHdEhfSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOZdUsVSdwjlwDQKay0pmud2G6L0LOOJ+o64KeH0FBenitiY3yxcdv m+ppTapPjseBe58IWxYyDq2avlkonzPE8FX4ilWF5URJWOaGei7Bnf+SN+0+/8oX Rd7q0WjZuQsehgm0cQ38uBcYZGYAWhIOoBMxekhbKwOz25TZ7CTLoEaIOj0VSsif YGpkA75EdQjxBKliOMO2atashv4ZV+Oxrzk8F1oP+d6UKXmOBoq9ghAE4pNz7HHS vbfwFwCt67RJHkkxaOk5A3QBw26TBUV249NTSzvqgCyBHGyZvxVjdUX0fAEXqu46 N/B/iaSPe3ExwExRI/jvZ7ECbqDr7+S3 -----END CERTIFICATE-----Generated at Sun May 5 00:12:27 2024 by rpki-client on console-fra.rpki-client.org