$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: tDZNFEyur9mBKhdRigNVLiwm2fEaur2ntp6msqKF3vw= Subject key identifier: D6:5F:2E:AA:45:0B:CD:FD:E1:22:CA:85:5F:A3:D7:A1:1F:3F:C1:65 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 0422 Signing time: Sun 05 May 2024 02:11:07 +0000 Manifest this update: Sun 05 May 2024 02:11:06 +0000 Manifest next update: Sun 12 May 2024 02:11:06 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: X1OWhg2mGAwBD0bOLgyJR/ycEABocgoPWIMxt5PPsho=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: I4txh1OY5AHA1SpkilEKCcB/8ZP3lIX6/f0rM9QjBjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: May 5 02:11:06 2024 GMT Not After : May 12 02:11:06 2024 GMT Subject: CN=6636eabb-4882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cb:b6:5c:21:fd:67:a4:b0:a4:41:b6:fd:8b: 31:91:62:82:35:30:9b:be:61:6d:28:5a:06:86:b8: ec:3e:65:3e:6c:41:80:69:e7:0f:ec:07:3e:2b:93: 74:d3:22:56:66:81:1f:87:10:ad:a1:19:2e:12:33: f8:3b:78:50:d3:5d:07:da:d9:0c:28:0c:f0:42:a9: 3a:8f:e9:c0:eb:f6:30:2c:88:a6:4e:35:d5:b5:b7: ad:c7:de:f2:18:d0:a1:4f:0e:a1:43:8a:27:b0:6e: e6:30:1a:a0:16:fa:67:c3:61:da:5f:ea:d1:19:d1: 84:58:68:36:50:51:a3:f4:0a:db:65:54:d4:98:5f: 57:1e:84:3e:35:c8:36:b5:75:92:3c:e9:40:7f:c7: 70:f1:ff:34:af:72:88:0b:0a:6e:38:ef:03:bc:1a: bd:65:15:b7:d2:0a:e4:09:19:8b:13:d9:c6:3f:e1: 57:39:81:98:80:25:ae:3f:16:24:35:3e:be:c7:f9: 5f:59:6f:a7:81:9d:99:30:fb:b2:1b:30:8d:b3:0a: a0:b8:9d:14:a0:a4:cf:72:60:ad:34:5d:77:55:a3: 5e:e3:b7:dd:f0:2b:77:59:5e:e9:74:a0:ad:f6:42: c4:4b:57:84:d2:cf:48:97:7a:bc:51:fe:25:1e:c4: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5F:2E:AA:45:0B:CD:FD:E1:22:CA:85:5F:A3:D7:A1:1F:3F:C1:65 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:4a:89:be:eb:77:48:6b:b4:49:69:b4:e7:10:ab:8a:2d:3c: d7:6c:15:75:b0:41:a1:d7:29:36:49:08:3d:b2:ab:bd:2b:df: 9c:2a:58:f9:dd:34:68:a4:f6:c8:7f:70:78:c9:75:b1:95:cc: 95:9b:de:05:bc:f0:94:f8:92:ca:e5:21:92:34:dc:d9:2e:ce: 62:83:5b:b8:41:bc:e2:cb:3c:dd:9f:6e:83:50:a3:96:8c:ea: 3e:bd:27:f1:c4:31:c6:1e:57:43:58:c1:ea:4d:11:4c:a7:29: e2:2a:7f:5a:d3:f0:7b:93:38:4a:af:7c:a4:3a:56:ef:46:24: b3:06:c2:f4:d4:5d:a0:28:66:76:c9:cd:83:6c:96:a0:c8:a4: 5f:54:ce:ea:14:7b:79:4e:fc:10:e5:0a:af:ac:19:78:a8:33: ce:51:e9:33:26:bb:c2:33:65:75:d5:9b:35:64:30:dc:80:a5: ce:f1:f8:73:90:fb:07:7e:37:3c:e3:f0:93:92:a2:ed:ac:93: 94:75:ed:91:c1:bf:11:68:96:b7:2d:f6:9b:75:a6:e3:5f:58: ca:a7:d6:13:01:f9:30:d4:e5:64:e2:c3:69:84:68:84:06:18: 08:d8:cf:f9:1b:e9:2a:ec:ee:81:13:38:74:67:db:0d:ce:f7: 3b:2f:86:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjQwNTA1MDIxMTA2WhcNMjQwNTEyMDIxMTA2WjAYMRYwFAYD VQQDEw02NjM2ZWFiYi00ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5su2XCH9Z6SwpEG2/YsxkWKCNTCbvmFtKFoGhrjsPmU+bEGAaecP7Ac+K5N0 0yJWZoEfhxCtoRkuEjP4O3hQ010H2tkMKAzwQqk6j+nA6/YwLIimTjXVtbetx97y GNChTw6hQ4onsG7mMBqgFvpnw2HaX+rRGdGEWGg2UFGj9ArbZVTUmF9XHoQ+Ncg2 tXWSPOlAf8dw8f80r3KICwpuOO8DvBq9ZRW30grkCRmLE9nGP+FXOYGYgCWuPxYk NT6+x/lfWW+ngZ2ZMPuyGzCNswqguJ0UoKTPcmCtNF13VaNe47fd8Ct3WV7pdKCt 9kLES1eE0s9Il3q8Uf4lHsRp6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZfLqpF C8394SLKhV+j16EfP8FlMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuSom+63dIa7RJabTnEKuKLTzXbBV1sEGh1yk2SQg9squ9K9+cKlj5 3TRopPbIf3B4yXWxlcyVm94FvPCU+JLK5SGSNNzZLs5ig1u4Qbziyzzdn26DUKOW jOo+vSfxxDHGHldDWMHqTRFMpyniKn9a0/B7kzhKr3ykOlbvRiSzBsL01F2gKGZ2 yc2DbJagyKRfVM7qFHt5TvwQ5QqvrBl4qDPOUekzJrvCM2V11Zs1ZDDcgKXO8fhz kPsHfjc84/CTkqLtrJOUde2Rwb8RaJa3LfabdabjX1jKp9YTAfkw1OVk4sNphGiE BhgI2M/5G+kq7O6BEzh0Z9sNzvc7L4Zo -----END CERTIFICATE-----Generated at Sun May 5 03:09:57 2024 by rpki-client on console-ams.rpki-client.org