$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json) Hash identifier: 3bs9pOClf5yNsQilDUlgceqDXZr/FLVq7pizsylzLzw= Subject key identifier: 89:C1:94:31:C2:90:18:28:7C:5C:55:FA:77:D3:74:9E:16:ED:C9:75 Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft Manifest number: 03B3 Signing time: Fri 17 May 2024 03:21:37 +0000 Manifest this update: Fri 17 May 2024 03:21:37 +0000 Manifest next update: Fri 24 May 2024 03:21:37 +0000 Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: KTc6dbrv/VZzvpXXH16ocGXimjF3OKCFUEn/Ds4PQkA=) 2: 3DC02FC0A7C011EEBACABC6FC4F9AE02.roa (hash: +sKqxphwA1TMt+gFNlY/JFqz2M+7+ooTgIdSSkZeVeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Validity Not Before: May 17 03:21:37 2024 GMT Not After : May 24 03:21:37 2024 GMT Subject: CN=6646cd41-2212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:17:df:ff:9a:48:61:12:18:63:17:a8:89: df:a2:28:37:22:25:d9:9d:97:f3:fa:58:d6:e0:21: 21:b5:5f:d4:ab:b0:e6:1c:b9:86:f4:e5:c9:69:a9: 54:d0:e3:39:04:b6:3e:ce:a2:e2:1a:ee:3a:75:71: 55:f4:e3:c0:57:90:b2:12:8a:b7:10:32:12:15:9a: 9d:da:4e:09:ba:01:c6:a5:70:e9:01:53:03:74:c2: 19:55:a4:4c:67:45:05:5e:52:09:50:31:e7:c1:9a: 8f:eb:68:e0:39:48:ed:dc:eb:17:d4:51:df:c0:41: b3:16:84:ad:17:75:87:8e:7d:57:b8:b6:14:bf:72: 79:89:9e:d8:01:61:eb:72:9c:60:92:bf:16:c5:05: 5e:c5:45:10:c7:18:eb:cc:b2:d6:aa:12:93:de:dd: 3f:32:f9:16:43:85:ff:4f:57:ea:fd:09:55:13:2a: 8d:58:ae:eb:8e:b8:dc:a6:f3:88:d0:2d:e0:2d:fe: 1f:8a:42:b6:f3:4c:82:3b:cf:e4:47:a3:01:96:8e: 18:75:3f:48:b6:d8:35:34:82:65:a6:e6:cd:a5:1d: 42:93:d3:86:77:e3:b4:fb:e5:01:46:1d:d4:de:2e: 20:a7:6c:0e:6d:d5:79:25:2d:10:19:bd:82:ae:cf: 01:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:94:31:C2:90:18:28:7C:5C:55:FA:77:D3:74:9E:16:ED:C9:75 X509v3 Authority Key Identifier: keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b6:c7:eb:f3:5f:b2:a9:d6:f4:a1:d1:11:2e:1f:aa:eb:4f: db:91:7f:bf:aa:aa:d9:9c:1a:8a:65:1a:ae:b4:b5:43:99:8f: 66:76:79:8b:53:47:cd:6e:ec:36:5c:be:41:31:a4:fb:24:93: 09:2f:5d:9b:e5:2e:d0:40:a4:d0:fb:b4:0f:ae:c0:8a:11:6a: 36:d0:c0:0f:eb:cb:7e:62:0e:b3:93:ce:3b:55:b7:d8:1a:92: 19:1a:35:b6:10:8d:33:46:13:52:64:56:1f:80:71:fd:e6:c1: a3:eb:cf:11:c6:c8:d7:aa:11:f7:f7:f7:79:aa:fa:2a:4a:32: 58:73:69:ab:db:94:a8:27:5a:8f:29:b3:ab:32:41:ad:8e:e8: 5a:d6:1a:a7:b9:c2:40:ff:bd:27:13:53:38:ea:39:5f:df:d5: 65:b5:86:af:65:10:8c:98:ef:db:00:36:93:03:5d:72:82:0e: 40:f8:97:f1:49:21:dd:d7:e8:0f:bb:3c:43:6a:85:07:d2:84: 7e:03:21:8c:10:dd:0b:98:3d:50:50:a5:77:f3:b0:4a:cf:c4: 38:9a:83:cb:57:0d:c2:9b:01:c9:eb:55:01:1e:b2:7b:e6:a0: 5e:28:92:e9:b6:29:80:a8:56:7e:3b:a1:3b:b7:e1:37:95:da: 9b:a8:45:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKDIwRUQwQUFCMjA3NTBCOEIyN0E4NkRGOTg5QTc1NEJG NTcyNkREN0UwHhcNMjQwNTE3MDMyMTM3WhcNMjQwNTI0MDMyMTM3WjAYMRYwFAYD VQQDEw02NjQ2Y2Q0MS0yMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT8X3/+aSGESGGMXqInfoig3IiXZnZfz+ljW4CEhtV/Uq7DmHLmG9OXJaalU 0OM5BLY+zqLiGu46dXFV9OPAV5CyEoq3EDISFZqd2k4JugHGpXDpAVMDdMIZVaRM Z0UFXlIJUDHnwZqP62jgOUjt3OsX1FHfwEGzFoStF3WHjn1XuLYUv3J5iZ7YAWHr cpxgkr8WxQVexUUQxxjrzLLWqhKT3t0/MvkWQ4X/T1fq/QlVEyqNWK7rjrjcpvOI 0C3gLf4fikK280yCO8/kR6MBlo4YdT9Ittg1NIJlpubNpR1Ck9OGd+O0++UBRh3U 3i4gp2wObdV5JS0QGb2Crs8BoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInBlDHC kBgofFxV+nfTdJ4W7cl1MB8GA1UdIwQYMBaAFCDtCqsgdQuLJ6ht+YmnVL9XJt1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0c25xRzM1aWFkVXYxY20z WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lPMEtxeUIxQzRzbnFHMzVpYWRVdjFjbTNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0 c25xRzM1aWFkVXYxY20zWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCStsfr81+yqdb0odERLh+q60/bkX+/qqrZnBqKZRqutLVDmY9mdnmL U0fNbuw2XL5BMaT7JJMJL12b5S7QQKTQ+7QPrsCKEWo20MAP68t+Yg6zk847VbfY GpIZGjW2EI0zRhNSZFYfgHH95sGj688RxsjXqhH39/d5qvoqSjJYc2mr25SoJ1qP KbOrMkGtjuha1hqnucJA/70nE1M46jlf39VltYavZRCMmO/bADaTA11ygg5A+Jfx SSHd1+gPuzxDaoUH0oR+AyGMEN0LmD1QUKV387BKz8Q4moPLVw3CmwHJ61UBHrJ7 5qBeKJLptimAqFZ+O6E7t+E3ldqbqEWy -----END CERTIFICATE-----Generated at Fri May 17 03:50:09 2024 by rpki-client on console-fra.rpki-client.org