$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: lBmu2+szkRZgpvYr50BEbZQpc+t5WKexdeq40iafyEk= Subject key identifier: 7C:ED:27:3A:F0:4C:6A:A7:BB:80:2A:D0:68:04:16:4B:CE:87:6A:F0 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 08B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 08AB Signing time: Tue 30 Apr 2024 21:51:08 +0000 Manifest this update: Tue 30 Apr 2024 21:51:08 +0000 Manifest next update: Tue 07 May 2024 21:51:08 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: xUqhyceJAE+yKrAx+7F2f/uygwbSJ/DCtIHC6p+YuZY=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: sISmWlhb7frmntFzQwKgfTRrCjDzhLN0MV33XdrzWCk=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: Q35dPplckwcXibFwXwSrezG6FFNrbmD6fZLCuTrGB7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: Apr 30 21:51:08 2024 GMT Not After : May 7 21:51:08 2024 GMT Subject: CN=663167cc-bbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:28:b6:8a:e4:7b:3a:1d:0b:81:93:c0:2c: c7:78:a7:44:8d:ea:86:09:fe:aa:02:24:da:36:6a: ab:d5:9d:ab:ec:20:0c:c5:84:1c:89:d3:47:89:d3: 76:7f:ce:a9:c5:3e:59:4c:98:ee:32:73:31:d7:52: b0:83:60:6b:eb:93:ae:6a:e1:24:9d:1d:81:ac:54: e4:38:a9:7f:5e:48:50:cf:6c:46:65:92:c1:45:93: d4:4c:d7:24:3d:0c:d9:ac:59:54:8f:3f:ed:df:73: cf:38:dc:01:64:46:5f:10:f9:78:27:9c:1b:c2:9d: 1a:37:49:27:64:f7:53:58:a4:c6:39:18:97:dc:cf: ce:b3:1d:82:94:48:8e:df:a9:8d:82:cf:b8:06:8e: e6:e2:a8:0c:dd:f7:d3:da:aa:e5:48:a9:bc:fc:02: 80:7b:ff:7a:8a:9b:22:32:01:13:1a:0d:fa:aa:92: 90:b9:30:0b:88:31:3b:2c:5b:da:11:d2:45:1b:e8: 00:5c:cf:c5:25:e8:84:05:e6:5b:d9:86:45:ee:8a: d1:b2:91:8c:32:b6:9f:c3:65:5c:e5:46:70:df:00: a6:99:ff:99:54:f5:9c:3c:a4:d9:9c:37:57:6c:e5: 29:47:c5:aa:32:13:4e:09:87:8e:47:84:02:22:09: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:ED:27:3A:F0:4C:6A:A7:BB:80:2A:D0:68:04:16:4B:CE:87:6A:F0 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b9:d2:c0:de:7f:7a:a8:f2:ec:6e:00:d3:be:2d:a9:cf:24: 72:73:59:40:a2:03:41:a1:02:dd:21:9b:16:34:6c:71:cd:e3: d5:85:95:5e:cf:90:5e:7a:27:55:4d:a3:56:e6:84:19:e7:a1: ea:33:ce:f7:3c:d1:e3:7d:f3:78:f0:59:d5:d2:f4:9e:31:50: ad:33:f4:a7:5b:09:41:82:23:a9:db:fc:28:4b:dd:dc:ea:38: fa:9c:33:eb:98:3f:33:dc:69:8d:dd:02:fc:b1:94:85:6b:d2: 76:e8:9c:47:26:3c:0d:af:aa:f5:3c:a5:09:08:5c:59:d1:9d: 27:3e:90:c4:fb:b1:58:85:9e:5c:b0:51:04:de:50:b2:06:72: 58:0c:a4:9a:a9:7f:1d:8c:18:01:98:96:78:bf:a7:6f:c6:7f: b5:5e:d7:39:ea:65:4a:b7:05:a5:88:5c:0f:3c:b1:e6:12:c5: 85:2b:bc:2e:e5:ae:96:01:a0:c4:6c:e6:4b:eb:24:c6:6d:d4: 49:82:90:dd:35:a5:8f:26:49:53:71:af:d6:49:17:36:ff:95: 4c:c3:31:9d:cf:e4:28:36:98:b1:15:86:cf:4d:7b:f6:79:ae: 31:da:a8:3c:44:45:46:98:49:e6:b0:9e:8e:60:43:60:6c:59: 60:f1:aa:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjQwNDMwMjE1MTA4WhcNMjQwNTA3MjE1MTA4WjAYMRYwFAYD VQQDEw02NjMxNjdjYy1iYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkUotorkezodC4GTwCzHeKdEjeqGCf6qAiTaNmqr1Z2r7CAMxYQcidNHidN2 f86pxT5ZTJjuMnMx11Kwg2Br65OuauEknR2BrFTkOKl/XkhQz2xGZZLBRZPUTNck PQzZrFlUjz/t33PPONwBZEZfEPl4J5wbwp0aN0knZPdTWKTGORiX3M/Osx2ClEiO 36mNgs+4Bo7m4qgM3ffT2qrlSKm8/AKAe/96ipsiMgETGg36qpKQuTALiDE7LFva EdJFG+gAXM/FJeiEBeZb2YZF7orRspGMMrafw2Vc5UZw3wCmmf+ZVPWcPKTZnDdX bOUpR8WqMhNOCYeOR4QCIgnGFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHztJzrw TGqnu4Aq0GgEFkvOh2rwMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnudLA3n96qPLsbgDTvi2pzyRyc1lAogNBoQLdIZsWNGxxzePVhZVe z5BeeidVTaNW5oQZ56HqM873PNHjffN48FnV0vSeMVCtM/SnWwlBgiOp2/woS93c 6jj6nDPrmD8z3GmN3QL8sZSFa9J26JxHJjwNr6r1PKUJCFxZ0Z0nPpDE+7FYhZ5c sFEE3lCyBnJYDKSaqX8djBgBmJZ4v6dvxn+1Xtc56mVKtwWliFwPPLHmEsWFK7wu 5a6WAaDEbOZL6yTGbdRJgpDdNaWPJklTca/WSRc2/5VMwzGdz+QoNpixFYbPTXv2 ea4x2qg8REVGmEnmsJ6OYENgbFlg8ao6 -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:09 2024 by rpki-client on console-ams.rpki-client.org