$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: RK/H4wVUeYuHBC2WRiJFbiDOuFA45n+K/Plnezr4jeE= Subject key identifier: 13:65:E6:89:B0:73:F4:00:15:D3:4E:5C:9D:9B:68:E5:E6:C0:56:D5 Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 0616 Signing time: Sat 04 May 2024 23:59:01 +0000 Manifest this update: Sat 04 May 2024 23:59:00 +0000 Manifest next update: Sat 11 May 2024 23:59:00 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: R2wh8iaJ4YS+kFDdmt17MYfxEnEO6ljCKYXOfbtD6qk=) 2: 2D4B9E3853C511EBBA606539C4F9AE02.roa (hash: j4EkXDapkvbTEeniRs7Fwk3kZ1tSYM5VffLIcE0f2bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: May 4 23:59:00 2024 GMT Not After : May 11 23:59:00 2024 GMT Subject: CN=6636cbc4-decb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:e2:c4:bd:87:37:9b:0a:42:88:5d:3a:0e: a7:68:7f:4e:79:02:0d:19:c9:e8:d6:92:73:8f:eb: ac:38:64:74:0d:a8:d9:32:b6:d3:5a:19:5f:d1:36: 8c:27:00:fb:11:b6:be:73:00:69:a4:a7:5f:53:1c: 63:ce:00:68:41:57:fa:56:b2:3c:07:9f:1f:cc:03: 3d:dc:d0:40:7c:50:1c:87:d7:fc:81:cb:45:5f:cb: 00:6e:08:18:7b:39:5c:c8:a2:3c:3e:e3:ad:0e:3c: 9f:4e:76:50:1f:1f:81:7f:e3:54:e1:ac:ec:12:36: 11:2c:52:f9:ee:6d:05:11:8b:d1:b8:0a:ee:b7:f4: 12:37:a6:68:5a:86:af:48:34:aa:d9:08:ee:6f:cb: e4:42:b4:ee:6a:69:8a:8f:f1:63:c7:33:45:3a:35: da:aa:4c:b9:9c:43:57:b0:38:72:e5:bd:3f:85:2d: c7:70:63:81:09:62:5a:60:9d:66:e4:6c:cc:c0:8e: 19:51:aa:11:d0:de:cb:80:17:b5:30:e2:9f:64:7b: 7c:a6:8d:c2:91:5b:54:de:b6:01:f7:e2:97:dd:47: 34:cd:24:de:36:c2:dd:2a:c0:37:b9:79:22:de:43: 11:c8:98:30:33:5e:7d:87:dd:a2:1f:b9:95:5a:a7: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:65:E6:89:B0:73:F4:00:15:D3:4E:5C:9D:9B:68:E5:E6:C0:56:D5 X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:52:80:33:2e:d1:0f:83:49:77:6c:bf:cb:1f:a2:25:64:b7: 3e:2f:03:5c:0d:75:26:04:57:51:e6:a2:75:7f:10:15:29:89: 6b:a2:5f:74:3b:53:70:2b:2c:bc:64:9e:68:c0:35:f7:c2:37: ee:1e:98:5f:06:e4:1f:18:0f:3f:0b:63:97:9d:a9:90:9b:a7: 28:96:23:cc:b6:b2:f0:1f:73:ee:7f:0c:17:e2:ef:90:c5:d1: c2:54:a2:4a:68:f6:ad:c3:b1:bb:8b:57:61:d2:5a:52:3d:6e: 12:4d:ee:b2:ce:31:0f:62:a7:12:47:81:5e:59:4c:2b:70:07: d7:72:3f:b9:db:67:3a:c4:16:ee:32:81:dc:39:70:4c:37:ca: 25:6d:d4:e6:d7:3a:2f:ad:83:0f:c1:08:ca:94:27:6c:1a:82: 2e:98:05:e6:7e:62:38:69:82:14:32:13:ac:79:ba:07:7c:39: 4e:c0:b4:94:a4:2e:8e:46:c9:68:3d:27:9d:82:6d:24:17:b1: 6e:48:94:1e:2a:67:75:5f:c1:e5:ac:f3:7b:9b:c1:63:4c:74: 20:a7:79:72:6e:c4:55:50:f9:1b:ed:db:ca:cf:6a:7a:07:d3: 28:a0:61:14:38:07:41:1c:10:9a:75:8f:f4:a0:0b:16:b2:20: de:ce:45:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjQwNTA0MjM1OTAwWhcNMjQwNTExMjM1OTAwWjAYMRYwFAYD VQQDEw02NjM2Y2JjNC1kZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcPixL2HN5sKQohdOg6naH9OeQINGcno1pJzj+usOGR0DajZMrbTWhlf0TaM JwD7Eba+cwBppKdfUxxjzgBoQVf6VrI8B58fzAM93NBAfFAch9f8gctFX8sAbggY ezlcyKI8PuOtDjyfTnZQHx+Bf+NU4azsEjYRLFL57m0FEYvRuArut/QSN6ZoWoav SDSq2Qjub8vkQrTuammKj/FjxzNFOjXaqky5nENXsDhy5b0/hS3HcGOBCWJaYJ1m 5GzMwI4ZUaoR0N7LgBe1MOKfZHt8po3CkVtU3rYB9+KX3Uc0zSTeNsLdKsA3uXki 3kMRyJgwM159h92iH7mVWqf+IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNl5omw c/QAFdNOXJ2baOXmwFbVMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrUoAzLtEPg0l3bL/LH6IlZLc+LwNcDXUmBFdR5qJ1fxAVKYlrol90 O1NwKyy8ZJ5owDX3wjfuHphfBuQfGA8/C2OXnamQm6coliPMtrLwH3PufwwX4u+Q xdHCVKJKaPatw7G7i1dh0lpSPW4STe6yzjEPYqcSR4FeWUwrcAfXcj+522c6xBbu MoHcOXBMN8olbdTm1zovrYMPwQjKlCdsGoIumAXmfmI4aYIUMhOseboHfDlOwLSU pC6ORsloPSedgm0kF7FuSJQeKmd1X8HlrPN7m8FjTHQgp3lybsRVUPkb7dvKz2p6 B9MooGEUOAdBHBCadY/0oAsWsiDezkXI -----END CERTIFICATE-----Generated at Sun May 5 01:22:24 2024 by rpki-client on console-fra.rpki-client.org