$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: O2KLzZF9nF99rHG5B0+GROrFk+2NX9oGJrahhW5IXD8= Subject key identifier: D9:AA:07:CB:83:9E:96:00:47:B5:01:7A:A2:13:86:26:9D:CC:9D:6F Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: AE Signing time: Wed 15 May 2024 06:39:24 +0000 Manifest this update: Wed 15 May 2024 06:39:23 +0000 Manifest next update: Wed 22 May 2024 06:39:23 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: /IHHZDEHHp0kVbB+htquuXqoPbFNI6e4wQuJ+ekxWlc=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: /fIHJha571gb3JKov1qGg+Y5N5BTZWAtQH2WD7i89go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: May 15 06:39:23 2024 GMT Not After : May 22 06:39:23 2024 GMT Subject: CN=6644589b-092b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:a6:3e:51:29:14:5b:57:49:56:37:d2:94: 77:2d:4f:87:53:d3:8b:2a:66:04:8b:dc:39:f1:17: e5:69:b2:ff:54:85:35:da:e4:c3:88:ce:12:d8:ac: 6d:81:e3:04:d6:ce:8f:64:ad:13:6f:52:d6:38:a9: 50:e6:aa:8f:8c:d8:44:0a:62:42:51:1b:3a:e7:43: 65:98:ca:86:a3:69:0e:c7:fc:e4:78:97:68:8a:ee: 6c:5f:cf:64:7b:42:74:15:08:7e:f8:20:29:88:2e: 86:26:c1:04:a2:51:25:ca:aa:66:05:c0:22:82:2e: 15:62:17:9c:d4:9e:0a:c4:03:be:5d:aa:fb:b2:62: 10:65:46:b0:31:a9:b5:b2:78:e4:54:69:2a:3a:8c: 6e:4c:73:ca:fd:9b:47:b3:07:7c:1a:4d:c6:4a:0e: c0:36:2b:d5:21:0e:20:dc:ac:cf:c6:a8:64:58:ae: 2c:b8:d9:6a:2a:e8:d2:9f:7f:35:f0:06:6d:ae:26: 12:d8:9c:e0:fd:64:79:62:90:f7:e0:85:89:6d:c0: 91:77:f5:91:71:b8:49:bd:62:d9:68:fc:52:7f:79: 4b:02:d8:71:ac:ba:87:55:fb:84:a0:7a:9f:41:b2: a3:4f:35:12:c9:d5:a3:8d:e3:a3:4f:26:8b:26:4f: ba:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AA:07:CB:83:9E:96:00:47:B5:01:7A:A2:13:86:26:9D:CC:9D:6F X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c4:ea:04:45:b0:70:b9:66:ca:01:6b:33:1e:98:7d:a7:1e: 69:c3:1e:a7:e4:dc:8e:c2:cd:ae:3c:a6:7f:5e:30:ad:0b:af: 52:dd:91:0a:1a:3f:02:16:6c:c6:ec:7c:c5:77:fd:7b:5d:1a: b3:2e:37:b5:08:84:ff:96:01:0e:e0:22:73:82:36:8b:82:52: fc:60:2d:93:93:b8:bb:96:e3:b7:9f:16:63:4c:ea:0c:66:02: 97:42:e0:e1:13:b4:e3:18:44:53:7e:27:7b:32:71:9a:24:2b: 4a:42:a0:be:1b:43:d6:27:d9:de:51:33:02:7f:89:a6:f2:b6: ec:ce:fc:57:d8:a7:01:1e:06:c7:9b:65:25:ca:d8:43:ec:2d: 16:0e:ee:2e:72:2e:90:44:54:6a:8b:9c:e5:e8:53:67:a8:f3: 24:b1:57:c7:5f:4f:f0:d3:5e:8a:a1:a4:9a:85:48:e2:b7:fc: 35:4f:d7:eb:05:db:df:68:fa:65:20:fe:c2:93:0b:65:f5:b9: fc:7e:f2:cd:3f:5e:55:5c:10:29:5c:aa:f2:37:8d:9b:0a:d7: a6:43:9d:d1:d6:c4:46:cb:42:62:8e:e0:f0:48:b8:ae:a9:a7: 48:4b:8b:7a:31:e1:dc:28:25:84:66:6c:a1:c0:cd:5a:ee:9e: 36:91:55:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjQwNTE1MDYzOTIzWhcNMjQwNTIyMDYzOTIzWjAYMRYwFAYD VQQDEw02NjQ0NTg5Yi0wOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lamPlEpFFtXSVY30pR3LU+HU9OLKmYEi9w58RflabL/VIU12uTDiM4S2Kxt geME1s6PZK0Tb1LWOKlQ5qqPjNhECmJCURs650NlmMqGo2kOx/zkeJdoiu5sX89k e0J0FQh++CApiC6GJsEEolElyqpmBcAigi4VYhec1J4KxAO+Xar7smIQZUawMam1 snjkVGkqOoxuTHPK/ZtHswd8Gk3GSg7ANivVIQ4g3KzPxqhkWK4suNlqKujSn381 8AZtriYS2Jzg/WR5YpD34IWJbcCRd/WRcbhJvWLZaPxSf3lLAthxrLqHVfuEoHqf QbKjTzUSydWjjeOjTyaLJk+6owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmqB8uD npYAR7UBeqIThiadzJ1vMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWxOoERbBwuWbKAWszHph9px5pwx6n5NyOws2uPKZ/XjCtC69S3ZEK Gj8CFmzG7HzFd/17XRqzLje1CIT/lgEO4CJzgjaLglL8YC2Tk7i7luO3nxZjTOoM ZgKXQuDhE7TjGERTfid7MnGaJCtKQqC+G0PWJ9neUTMCf4mm8rbszvxX2KcBHgbH m2UlythD7C0WDu4uci6QRFRqi5zl6FNnqPMksVfHX0/w016KoaSahUjit/w1T9fr BdvfaPplIP7Ckwtl9bn8fvLNP15VXBApXKryN42bCtemQ53R1sRGy0JijuDwSLiu qadIS4t6MeHcKCWEZmyhwM1a7p42kVXw -----END CERTIFICATE-----Generated at Wed May 15 09:28:13 2024 by rpki-client on console-fra.rpki-client.org