$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: +8vzdabM2RpMnTOVrqPsDsYg7tRq3p1rQ0e1vM/rtYU= Subject key identifier: F1:13:7A:DC:99:CE:2E:EC:C6:62:EB:6D:E8:AA:98:04:B9:0F:F1:C9 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: 2F Signing time: Fri 17 May 2024 08:33:43 +0000 Manifest this update: Fri 17 May 2024 08:33:43 +0000 Manifest next update: Fri 24 May 2024 08:33:43 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: 8qk710IC8tPXOVCWkYY4ECAi7G/I936HvAzX+zZMuco=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: rao6m+0CNNHk39UCfSySyHpZ6I8A/9rkFLhpDFmF54Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: May 17 08:33:43 2024 GMT Not After : May 24 08:33:43 2024 GMT Subject: CN=66471667-3806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:a8:ab:70:f2:a0:ca:45:fe:2c:0e:9e:dd: be:6c:9f:54:27:b3:b5:c2:86:1d:d1:1e:2d:3d:f6: 3e:cb:ff:ce:ee:20:9b:e6:3f:aa:ca:e4:3e:3f:b0: b2:60:b2:51:29:d4:75:5d:dc:50:04:70:50:93:8d: d9:e5:2c:d5:37:ca:e1:25:45:68:7d:7b:b0:81:87: 5b:77:e7:af:a9:d4:bf:01:1d:d9:ff:82:f8:7f:7a: 03:95:4f:b8:32:ca:76:32:f1:09:e9:1d:3b:c0:3c: 00:68:db:ea:f0:4e:6d:0a:6a:3a:8b:6c:7e:a4:61: 32:e4:8b:49:0d:60:46:f3:88:79:60:43:74:a4:eb: 18:b3:3a:b4:92:11:9e:e9:cf:18:df:46:c6:43:8e: 51:c0:bf:14:d1:55:4a:22:13:fc:ae:ba:ea:32:90: a9:4c:90:a0:9f:11:73:a9:b7:5d:02:1a:70:d2:17: 1d:bb:c7:0c:b9:b3:ab:e4:14:b3:c5:d3:9e:5b:47: 1a:bd:a0:7e:32:6c:c3:af:d4:d8:58:c1:c6:3a:71: 6e:55:43:68:59:7e:d0:f5:a5:a7:4e:52:5e:fb:22: ae:0b:0a:21:2d:a3:d8:a7:7e:17:b0:14:a9:94:56: 0a:08:35:c0:f4:f1:32:ff:db:71:8a:64:f9:97:31: 94:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:13:7A:DC:99:CE:2E:EC:C6:62:EB:6D:E8:AA:98:04:B9:0F:F1:C9 X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cf:64:1e:18:57:c2:ea:07:af:e2:2f:5d:e4:8a:6f:b3:82: e0:55:67:00:ba:97:48:77:f5:68:22:3a:b3:0b:5b:06:8f:e8: bd:d5:f1:0b:49:2b:59:2a:42:1c:62:46:61:e5:f7:5b:6a:34: d2:e1:05:15:6f:00:95:a9:fa:66:c9:33:f4:3b:ff:e3:96:4f: 5f:0e:84:db:bd:8e:30:f5:fc:a9:8c:3b:9e:64:d4:8a:9c:62: 95:1b:40:16:56:a5:b9:95:6a:58:67:a8:75:0d:0b:83:6a:5b: 58:41:e1:72:4f:62:61:71:94:6b:e3:a2:51:8d:de:ae:e6:16: f4:c5:a9:bd:aa:79:aa:bc:3f:fb:63:9b:69:2e:45:bf:13:7d: dd:9b:42:7a:4c:48:c5:be:7d:08:7f:95:09:56:61:e4:d6:2c: 6e:23:07:af:60:6c:da:e4:fa:2b:0c:6a:ed:a5:ff:71:9f:9f: ba:d5:69:95:74:97:25:42:42:0c:f0:5a:8f:87:ef:84:50:fe: 50:12:84:be:a5:cf:af:ec:bc:13:69:f4:66:34:85:e5:e0:93: 06:ee:be:ce:f4:69:fc:24:7d:41:2f:d2:ba:e8:e9:bd:13:1b: 5d:31:e7:57:72:e5:24:76:1d:02:c3:b6:8e:e1:ec:ae:f3:9b: 27:f4:46:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MEVERjExMC8GA1UEBRMoOEI2NDE5Njg2OTExN0I5OUI4NzlCNERDQkFGMDQyOTBC QzE2ODEwQzAeFw0yNDA1MTcwODMzNDNaFw0yNDA1MjQwODMzNDNaMBgxFjAUBgNV BAMTDTY2NDcxNjY3LTM4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKgqircPKgykX+LA6e3b5sn1Qns7XChh3RHi099j7L/87uIJvmP6rK5D4/sLJg slEp1HVd3FAEcFCTjdnlLNU3yuElRWh9e7CBh1t356+p1L8BHdn/gvh/egOVT7gy ynYy8QnpHTvAPABo2+rwTm0KajqLbH6kYTLki0kNYEbziHlgQ3Sk6xizOrSSEZ7p zxjfRsZDjlHAvxTRVUoiE/yuuuoykKlMkKCfEXOpt10CGnDSFx27xwy5s6vkFLPF 055bRxq9oH4ybMOv1NhYwcY6cW5VQ2hZftD1padOUl77Iq4LCiEto9infhewFKmU VgoINcD08TL/23GKZPmXMZTjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8RN63JnO LuzGYutt6KqYBLkP8ckwHwYDVR0jBBgwFoAUi2QZaGkRe5m4ebTcuvBCkLwWgQww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwRURGLzNERTM5RTgyQ0ZB RDExRUVBQ0ZBNDI2OEM0RjlBRTAyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dR dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaTJRWmFHa1JlNW00ZWJUY3V2QkNrTHdXZ1F3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw RURGLzNERTM5RTgyQ0ZBRDExRUVBQ0ZBNDI2OEM0RjlBRTAyL2kyUVphR2tSZTVt NGViVGN1dkJDa0x3V2dRdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFrPZB4YV8LqB6/iL13kim+zguBVZwC6l0h39WgiOrMLWwaP6L3V8QtJ K1kqQhxiRmHl91tqNNLhBRVvAJWp+mbJM/Q7/+OWT18OhNu9jjD1/KmMO55k1Iqc YpUbQBZWpbmValhnqHUNC4NqW1hB4XJPYmFxlGvjolGN3q7mFvTFqb2qeaq8P/tj m2kuRb8Tfd2bQnpMSMW+fQh/lQlWYeTWLG4jB69gbNrk+isMau2l/3Gfn7rVaZV0 lyVCQgzwWo+H74RQ/lAShL6lz6/svBNp9GY0heXgkwbuvs70afwkfUEv0rro6b0T G10x51dy5SR2HQLDto7h7K7zmyf0RtU= -----END CERTIFICATE-----Generated at Fri May 17 10:59:13 2024 by rpki-client on console-ams.rpki-client.org