$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft File: IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json) Hash identifier: XqT7Zmbw2+8mJIsj3F8orGd1VKCVsFMkU4iIxUI6t3w= Subject key identifier: 98:15:95:CC:CD:78:1D:4B:FD:02:D4:2E:D4:D7:B0:F2:BF:45:E8:CA Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft Manifest number: 023F Signing time: Fri 03 May 2024 04:04:13 +0000 Manifest this update: Fri 03 May 2024 04:04:13 +0000 Manifest next update: Fri 10 May 2024 04:04:13 +0000 Files and hashes: 1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: HWcujE++6XfX7jw8DNspneWKvjAJ302msIueD/sho+k=) 2: C4D9DC68D4F911EC845C7D54C4F9AE02.roa (hash: wUGkIrP9snyAZygPXQrg/earkpSM24k5KWcsHJ8ompE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Validity Not Before: May 3 04:04:13 2024 GMT Not After : May 10 04:04:13 2024 GMT Subject: CN=6634623d-d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1c:77:16:b5:75:df:85:9c:75:c8:b8:de:fa: 21:d8:5a:d3:db:34:9c:42:ed:1b:09:72:14:f5:39: f5:4e:a0:79:02:07:54:5c:3b:ab:2d:d9:64:73:93: 36:6c:ca:71:ff:e9:41:02:4b:68:d2:48:14:37:1f: 73:c6:fe:78:f2:03:24:31:e2:56:9b:ac:3c:58:1a: a8:d4:f0:78:ff:73:04:62:16:81:4a:5c:04:15:94: 0c:47:77:ce:9e:2a:25:32:86:ac:4e:d4:a9:ec:62: 25:c7:09:eb:13:56:1a:88:94:f8:2b:36:ea:41:a5: be:fd:fc:2a:01:5e:81:91:7a:e7:a3:5b:ca:86:55: e1:25:0a:a8:c3:92:e3:90:da:8f:c8:1f:eb:89:84: 20:2a:b0:f5:04:19:09:95:da:46:0e:f1:31:1e:53: 68:8f:64:3c:01:ac:d4:3e:ad:9e:15:47:7b:1a:cd: af:fd:a5:59:c7:00:f6:1d:9a:5c:f7:f9:1c:b5:d8: e9:8f:8a:3d:be:2a:0f:98:30:2d:95:cf:0d:7f:99: a9:f5:ab:b2:78:5b:87:1d:b7:12:64:46:55:58:ba: 29:c7:01:7e:e6:e1:8f:a7:b3:63:05:d9:61:05:bb: 58:20:d1:e5:6d:7d:96:22:0a:da:4b:4f:df:ec:e6: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:15:95:CC:CD:78:1D:4B:FD:02:D4:2E:D4:D7:B0:F2:BF:45:E8:CA X509v3 Authority Key Identifier: keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:94:80:3b:93:85:35:63:94:7c:5d:01:a2:aa:87:35:12:62: 3c:78:e9:dd:13:61:35:38:62:9d:ba:4c:d0:79:e6:71:55:79: 30:83:4a:c9:05:d7:c2:1b:fd:1d:04:b1:93:94:f7:9c:78:6d: af:12:8f:4a:d3:67:89:5d:81:54:3b:3e:f0:36:95:32:4d:29: ba:0e:72:9e:73:ef:5b:01:a4:22:b2:bf:5f:59:47:76:87:4e: 31:3d:0e:52:d9:43:45:01:7c:ee:55:d0:68:f9:48:12:a7:d1: 93:01:e3:28:5a:83:af:13:d6:de:f6:36:45:87:6f:45:4d:9d: ea:61:68:2e:1b:d5:29:72:68:a2:91:69:fc:52:e0:86:76:ac: 05:95:17:12:97:e0:7a:fc:3a:1b:ed:bd:95:42:eb:e5:bb:63: cc:52:6e:7d:05:0f:ed:95:20:5d:b3:7a:91:76:23:87:e1:dd: 2c:55:35:c2:4d:8f:5f:4c:37:47:3f:b6:f1:1b:a4:6f:1f:6c: c4:c0:b0:5a:6a:08:1c:c9:73:d5:61:82:e0:a5:99:17:06:72: 47:a6:50:4b:56:6c:b1:31:1f:a0:1a:6c:fd:ed:08:94:a4:52: 77:c8:86:b0:75:3a:7b:29:1c:2d:e0:53:ff:21:0c:0d:82:20: d9:af:b5:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG RjFEQjY2NzUwHhcNMjQwNTAzMDQwNDEzWhcNMjQwNTEwMDQwNDEzWjAYMRYwFAYD VQQDEw02NjM0NjIzZC1kMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Bx3FrV134Wcdci43voh2FrT2zScQu0bCXIU9Tn1TqB5AgdUXDurLdlkc5M2 bMpx/+lBAkto0kgUNx9zxv548gMkMeJWm6w8WBqo1PB4/3MEYhaBSlwEFZQMR3fO niolMoasTtSp7GIlxwnrE1YaiJT4KzbqQaW+/fwqAV6BkXrno1vKhlXhJQqow5Lj kNqPyB/riYQgKrD1BBkJldpGDvExHlNoj2Q8AazUPq2eFUd7Gs2v/aVZxwD2HZpc 9/kctdjpj4o9vioPmDAtlc8Nf5mp9auyeFuHHbcSZEZVWLopxwF+5uGPp7NjBdlh BbtYINHlbX2WIgraS0/f7OYm0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgVlczN eB1L/QLULtTXsPK/RejKMB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0 RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI1NC83MjczNzVCNEQ0RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBL VVJLODJNdnhlcGpfSGJablUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQlIA7k4U1Y5R8XQGiqoc1EmI8eOndE2E1OGKdukzQeeZxVXkwg0rJ BdfCG/0dBLGTlPeceG2vEo9K02eJXYFUOz7wNpUyTSm6DnKec+9bAaQisr9fWUd2 h04xPQ5S2UNFAXzuVdBo+UgSp9GTAeMoWoOvE9be9jZFh29FTZ3qYWguG9Upcmii kWn8UuCGdqwFlRcSl+B6/Dob7b2VQuvlu2PMUm59BQ/tlSBds3qRdiOH4d0sVTXC TY9fTDdHP7bxG6RvH2zEwLBaaggcyXPVYYLgpZkXBnJHplBLVmyxMR+gGmz97QiU pFJ3yIawdTp7KRwt4FP/IQwNgiDZr7Wj -----END CERTIFICATE-----Generated at Fri May 3 06:29:25 2024 by rpki-client on console-fra.rpki-client.org