$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: c9lRpy79foYDd61ovHni9pTvW+SVPD5iphJFkToh17w= Subject key identifier: B0:AD:BB:25:68:DC:CC:DE:46:82:6B:D6:60:FE:DC:F8:10:77:BD:11 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0922 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 091A Signing time: Mon 06 May 2024 21:18:19 +0000 Manifest this update: Mon 06 May 2024 21:18:18 +0000 Manifest next update: Mon 13 May 2024 21:18:18 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: 5uNkjwORh8ystOyvTk9jy4CZ8zRw7JdNFquCLO8mG4o=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: 9ubLeIKH/kTnlE4cW/+I5O6o9Y6wEde7fUcw20Ci5Ck=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: aOFO6GftXaMnWGoPfaj8leZpOMZB4KxEvjyCRhGy9Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2338 (0x922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: May 6 21:18:18 2024 GMT Not After : May 13 21:18:18 2024 GMT Subject: CN=6639491b-6214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:bc:d7:dc:94:b5:ec:ef:af:6d:00:26:94: 02:d5:e4:ee:d2:45:38:82:95:89:9a:f2:a1:47:7b: 4b:e5:f3:79:24:14:a2:31:02:d1:17:66:41:94:f6: 25:ea:62:5c:7f:c5:c3:c9:7c:98:1f:94:d0:d3:55: a5:09:a2:fa:53:db:83:b0:6b:b9:f4:0e:d3:5d:90: 23:27:0f:ca:b5:33:31:97:5a:a2:35:a4:6b:77:ca: a0:4e:79:23:9c:29:7c:5e:62:94:65:3b:dd:15:03: 6d:ee:e0:10:bb:ff:11:73:f3:84:33:e8:1c:60:ea: bf:36:fd:3c:aa:74:5d:7f:7c:d8:1a:bc:2b:3e:4b: 81:ec:5c:4b:d0:ff:a9:09:1a:08:f5:0b:c6:21:f4: e5:8f:bd:af:e9:3b:e9:1c:a1:52:da:5e:bb:f5:ea: ec:21:80:d0:13:a5:42:2a:03:3b:c9:2f:6b:e5:20: eb:7d:45:d8:32:4e:51:05:ba:52:6e:82:5e:48:6b: 13:80:a3:b8:51:da:7e:f9:e2:20:6d:80:0e:c7:b8: 78:3d:29:e4:ef:14:b2:89:96:28:72:bb:be:a5:0d: c0:9d:7a:62:6c:2d:32:f3:c9:f4:49:62:4c:9f:6e: d6:c3:1d:c1:90:29:80:8d:a5:03:3d:dc:50:65:e1: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AD:BB:25:68:DC:CC:DE:46:82:6B:D6:60:FE:DC:F8:10:77:BD:11 X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e1:e7:39:0f:de:74:5c:0c:9f:18:02:92:45:76:33:8f:3f: 14:dc:79:4e:ed:fb:c2:c4:db:14:f3:32:a9:de:0e:ed:8b:87: 3a:9e:46:a2:83:84:fa:ec:e4:4f:96:37:36:03:14:e5:ca:82: b8:de:3d:23:b0:aa:6d:f4:f1:01:2d:74:1e:8b:76:0a:21:32: a3:50:40:71:40:0f:b5:40:63:ac:fa:46:37:a7:ec:bf:4d:a4: ee:3a:30:72:e2:04:a9:3a:c8:91:71:ce:49:68:56:6a:0a:ad: d9:8f:a0:cf:3d:1e:02:27:c5:a6:89:6e:82:5a:3d:07:a3:5e: 52:ee:0f:46:28:80:6b:18:17:84:4e:a2:0f:ec:e9:47:f3:fb: 48:eb:64:d5:a6:d6:49:b6:72:63:fd:fe:1a:64:8a:17:09:a5: db:72:39:14:41:c8:cd:09:e0:87:a7:33:7c:35:9b:af:2b:ab: 39:ea:4a:8f:dd:89:67:ff:63:f3:05:34:f8:68:fe:cb:ac:f5: 99:43:4b:0b:e5:c5:6f:f9:04:40:3b:c5:c8:19:6d:7d:d2:f4: a5:59:cc:5c:83:57:d1:d4:4a:80:1f:06:24:3c:d0:2e:33:36: bd:f5:6d:0c:5e:d5:b4:c5:ce:db:85:ed:1e:63:2f:ee:76:5d: 20:c3:bc:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjQwNTA2MjExODE4WhcNMjQwNTEzMjExODE4WjAYMRYwFAYD VQQDEw02NjM5NDkxYi02MjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdG819yUtezvr20AJpQC1eTu0kU4gpWJmvKhR3tL5fN5JBSiMQLRF2ZBlPYl 6mJcf8XDyXyYH5TQ01WlCaL6U9uDsGu59A7TXZAjJw/KtTMxl1qiNaRrd8qgTnkj nCl8XmKUZTvdFQNt7uAQu/8Rc/OEM+gcYOq/Nv08qnRdf3zYGrwrPkuB7FxL0P+p CRoI9QvGIfTlj72v6TvpHKFS2l679ersIYDQE6VCKgM7yS9r5SDrfUXYMk5RBbpS boJeSGsTgKO4Udp++eIgbYAOx7h4PSnk7xSyiZYocru+pQ3AnXpibC0y88n0SWJM n27Wwx3BkCmAjaUDPdxQZeH5LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCtuyVo 3MzeRoJr1mD+3PgQd70RMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB64ec5D950XAyfGAKSRXYzjz8U3HlO7fvCxNsU8zKp3g7ti4c6nkai g4T67ORPljc2AxTlyoK43j0jsKpt9PEBLXQei3YKITKjUEBxQA+1QGOs+kY3p+y/ TaTuOjBy4gSpOsiRcc5JaFZqCq3Zj6DPPR4CJ8WmiW6CWj0Ho15S7g9GKIBrGBeE TqIP7OlH8/tI62TVptZJtnJj/f4aZIoXCaXbcjkUQcjNCeCHpzN8NZuvK6s56kqP 3Yln/2PzBTT4aP7LrPWZQ0sL5cVv+QRAO8XIGW190vSlWcxcg1fR1EqAHwYkPNAu Mza99W0MXtW0xc7bhe0eYy/udl0gw7xs -----END CERTIFICATE-----Generated at Mon May 6 22:41:00 2024 by rpki-client on console-ams.rpki-client.org