$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: N8qOeoHpHfx/2Dtpg/qp69TJ2uNryZVrNEps9b76EAQ= Subject key identifier: AF:A4:CE:B6:04:4E:57:E5:85:3E:4C:6B:A8:AD:99:41:A8:42:E5:8B Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 3F Signing time: Wed 15 May 2024 08:25:24 +0000 Manifest this update: Wed 15 May 2024 08:25:24 +0000 Manifest next update: Wed 22 May 2024 08:25:24 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: Wl6YGTrCv/hKZIyg4JhwTQUBOPJuWUKW7ZczQpn2sUo=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: R6HAfsFQJCAwt/SBaezXmyue3jhCEJ5CX2/BB8RcTXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: May 15 08:25:24 2024 GMT Not After : May 22 08:25:24 2024 GMT Subject: CN=66447174-50ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a1:2b:d0:e5:2b:49:76:50:c1:8d:47:20:09: 20:a4:5e:ea:08:5b:31:20:97:03:4c:a1:d0:42:f7: e5:6d:4d:33:af:b2:fe:89:52:de:22:70:36:45:fa: 58:fc:b5:fe:92:bb:8c:ff:96:82:96:85:89:be:d3: 27:10:9f:94:c5:86:55:36:82:65:46:de:d7:27:1d: 82:ba:b4:79:7f:ac:59:3c:4a:11:31:73:75:eb:4e: d7:62:09:b6:83:60:79:d0:81:ee:43:dc:99:35:6a: 7b:80:a7:64:8f:d4:9c:7e:61:32:4e:a9:68:38:b1: 7d:a2:35:ed:5e:fa:57:0d:91:19:fb:8e:17:4f:7f: 32:ac:97:4e:86:00:c7:48:ec:a1:30:35:cb:d3:6f: 71:3b:0e:c7:e7:2d:5e:1b:1f:59:fa:7f:79:92:3c: 4a:a7:04:b4:38:b9:86:e1:db:73:71:4e:39:68:c4: ae:0a:4d:f5:af:82:82:82:f4:65:22:60:88:89:9a: e4:e2:89:cc:50:97:0b:57:f5:8d:32:6f:d2:ee:62: 43:cd:a2:fb:f9:e7:69:97:b1:67:e3:8a:b3:74:53: f8:27:85:e0:eb:85:bd:24:d1:35:ee:e8:7d:8e:d4: 5b:21:17:92:05:8f:eb:38:c7:46:a2:57:9f:2e:a4: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A4:CE:B6:04:4E:57:E5:85:3E:4C:6B:A8:AD:99:41:A8:42:E5:8B X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:9c:4b:13:54:0b:f7:a1:a6:40:2a:d7:e3:42:28:0f:26:4d: b4:43:6b:a9:e1:bd:08:6d:7d:34:15:a4:14:98:0e:46:a5:00: 0b:00:2e:c5:60:81:ea:aa:6f:91:78:0e:7a:05:a1:d7:f0:5c: dd:a1:30:f6:a8:38:fe:a7:c0:31:e9:4c:f4:e7:07:72:88:f3: e9:b8:b5:3e:18:d4:91:37:a7:c5:23:2b:01:f6:5e:ce:6e:06: 40:1e:17:7e:e1:54:f5:72:47:89:15:28:d5:c6:cc:95:d6:f1: 9c:e4:cc:c6:db:3b:d7:10:e0:68:00:62:c2:87:d5:b6:a6:81: 00:26:63:15:87:58:d9:dd:53:1b:a9:10:ff:ec:e1:cb:dc:df: 64:f0:1c:a6:6f:c1:47:c3:c8:ed:3f:02:62:f5:36:68:68:f8: 72:f8:f2:02:dd:34:e4:73:6a:61:ae:b6:42:17:cb:e4:b4:43: 34:11:ce:25:5e:a0:7d:20:e1:72:2f:a3:03:2b:f3:62:33:90: 16:aa:79:58:09:65:7c:5d:c2:88:04:d3:7e:3f:5d:75:e1:7a: 15:1f:fd:d3:d7:b8:23:d5:86:d5:87:ac:4e:fa:fc:13:91:78: 1c:92:e0:0d:ae:b4:f7:37:56:84:6c:09:94:98:78:ee:c0:61: 1b:fb:96:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODExNzExMC8GA1UEBRMoODk3REJBRDY0NzAyMzc4QTZFRTE4NjMwRTE4QkY3NUEx NzI5ODI2OTAeFw0yNDA1MTUwODI1MjRaFw0yNDA1MjIwODI1MjRaMBgxFjAUBgNV BAMTDTY2NDQ3MTc0LTUwY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDooSvQ5StJdlDBjUcgCSCkXuoIWzEglwNModBC9+VtTTOvsv6JUt4icDZF+lj8 tf6Su4z/loKWhYm+0ycQn5TFhlU2gmVG3tcnHYK6tHl/rFk8ShExc3XrTtdiCbaD YHnQge5D3Jk1anuAp2SP1Jx+YTJOqWg4sX2iNe1e+lcNkRn7jhdPfzKsl06GAMdI 7KEwNcvTb3E7DsfnLV4bH1n6f3mSPEqnBLQ4uYbh23NxTjloxK4KTfWvgoKC9GUi YIiJmuTiicxQlwtX9Y0yb9LuYkPNovv552mXsWfjirN0U/gnheDrhb0k0TXu6H2O 1FshF5IFj+s4x0aiV58upCELAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr6TOtgRO V+WFPkxrqK2ZQahC5YswHwYDVR0jBBgwFoAUiX261kcCN4pu4YYw4Yv3Whcpgmkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTE3LzhFMjhFNzk0QkUy RDExRUU4NTM2RDAzMEM0RjlBRTAyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVgyNjFrY0NONHB1NFlZdzRZdjNXaGNwZ21rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTE3LzhFMjhFNzk0QkUyRDExRUU4NTM2RDAzMEM0RjlBRTAyL2lYMjYxa2NDTjRw dTRZWXc0WXYzV2hjcGdtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALacSxNUC/ehpkAq1+NCKA8mTbRDa6nhvQhtfTQVpBSYDkalAAsALsVg geqqb5F4DnoFodfwXN2hMPaoOP6nwDHpTPTnB3KI8+m4tT4Y1JE3p8UjKwH2Xs5u BkAeF37hVPVyR4kVKNXGzJXW8ZzkzMbbO9cQ4GgAYsKH1bamgQAmYxWHWNndUxup EP/s4cvc32TwHKZvwUfDyO0/AmL1Nmho+HL48gLdNORzamGutkIXy+S0QzQRziVe oH0g4XIvowMr82IzkBaqeVgJZXxdwogE034/XXXhehUf/dPXuCPVhtWHrE76/BOR eByS4A2utPc3VoRsCZSYeO7AYRv7ljE= -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org