$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: SRAWu+IZMGApvIsZgYN8KZD6LcXcnMNUnPQCrKwa+HM= Subject key identifier: 8C:E4:9A:C8:42:0E:2F:AC:3E:3B:D0:79:EC:D1:59:52:E6:D4:3D:14 Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1C0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1BFC Signing time: Thu 02 May 2024 16:39:28 +0000 Manifest this update: Thu 02 May 2024 16:39:28 +0000 Manifest next update: Thu 09 May 2024 16:39:28 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: oZoTKPJsvK80zWD/0o6KoNYXUwD+ZLbcxXgoVTMHweQ=) 2: EB7012446FDE11E9AF945067C4F9AE02.roa (hash: vQD4PYQAa5MZI60m/m75p1m8bjgTwcTg+2u9kN05meI=) 3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: DxvDXpmcdz1MzgXK4Tqja4O0aeUes4QTXJJibehUHAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7181 (0x1c0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: May 2 16:39:28 2024 GMT Not After : May 9 16:39:28 2024 GMT Subject: CN=6633c1c0-38a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:23:34:1d:71:41:ef:13:3c:8b:d4:91:b3: db:d3:da:8b:4c:82:26:36:5c:00:6a:2a:9d:ee:e5: 54:47:b5:dc:18:47:3c:e5:b9:ad:b4:81:67:5a:6b: 12:46:79:50:b6:24:1a:c5:30:53:60:94:82:14:b5: 4d:d7:2b:4c:7f:a6:63:41:3f:2c:95:7c:20:d1:78: 2d:7f:6f:2c:60:8f:df:3c:03:d7:97:06:e1:d4:4c: 69:1d:55:67:4a:db:e7:b4:25:a4:c6:9b:bf:e7:7b: e4:ff:4b:e7:4e:91:89:1a:22:6b:7a:53:5b:9b:74: 87:70:62:46:97:91:01:4d:39:01:41:30:8a:2c:c5: f6:2d:50:ba:97:79:15:2c:e8:33:bc:24:b0:ee:d3: 33:23:44:79:a9:84:a9:3d:e1:a8:dd:c7:53:e7:38: 06:78:da:cc:d3:8b:a2:f1:e6:b8:65:41:4e:5d:c9: f1:54:b1:86:d4:60:d8:a5:4f:76:b1:8a:b2:1f:a9: ef:da:a7:5d:96:33:46:3b:fe:40:06:42:6c:cd:70: 45:97:ca:ee:a7:cd:5e:a0:b1:b8:a5:60:ea:54:a3: 3b:ca:f5:96:d8:c1:39:50:3c:fd:6f:9a:a5:87:96: 99:a1:ea:05:65:03:98:52:99:9d:9b:15:38:81:06: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E4:9A:C8:42:0E:2F:AC:3E:3B:D0:79:EC:D1:59:52:E6:D4:3D:14 X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:55:06:8a:85:73:83:4a:cb:30:4c:51:56:03:e9:cf:4a:e3: a3:fc:6f:f3:b1:1a:85:4a:e8:98:5b:5c:5a:12:9d:43:69:5f: 4c:d0:53:22:ac:b0:ba:bb:b5:0f:24:87:06:5b:9b:55:f6:b9: a4:ef:00:bf:b1:d4:ac:3a:a4:3f:ef:33:80:25:0f:13:dd:9e: f5:ab:20:17:94:65:72:f2:cb:a3:5c:4b:f3:7b:9d:8a:46:55: 9f:13:ce:ba:62:cc:f9:27:78:aa:19:a5:dc:16:b4:3f:68:77: 28:66:bb:2a:be:b6:d4:a6:d4:1e:db:3e:6b:81:2f:35:34:23: ad:e2:0b:c4:29:e4:c5:4a:6c:fa:4f:4b:ff:a2:79:03:8b:72: 5a:f7:70:a4:18:77:c7:3f:23:f3:89:2f:25:83:1d:28:71:41: b6:c5:39:5a:99:76:b7:6a:4b:40:37:69:66:f1:6a:28:da:a6: e7:d0:af:25:c4:04:24:76:3e:eb:35:e2:60:cc:82:a1:ee:10: 30:9c:3e:26:46:9b:fe:ff:a9:c3:52:e0:8e:3a:f1:cf:68:b6: 65:62:64:5e:a5:5a:57:00:d2:fd:bb:be:b3:13:d6:78:60:58: 42:91:43:fd:49:2d:da:f7:4b:e2:5a:29:22:4b:d5:5b:c2:02: f1:ab:70:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjQwNTAyMTYzOTI4WhcNMjQwNTA5MTYzOTI4WjAYMRYwFAYD VQQDEw02NjMzYzFjMC0zOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze0jNB1xQe8TPIvUkbPb09qLTIImNlwAaiqd7uVUR7XcGEc85bmttIFnWmsS RnlQtiQaxTBTYJSCFLVN1ytMf6ZjQT8slXwg0Xgtf28sYI/fPAPXlwbh1ExpHVVn StvntCWkxpu/53vk/0vnTpGJGiJrelNbm3SHcGJGl5EBTTkBQTCKLMX2LVC6l3kV LOgzvCSw7tMzI0R5qYSpPeGo3cdT5zgGeNrM04ui8ea4ZUFOXcnxVLGG1GDYpU92 sYqyH6nv2qddljNGO/5ABkJszXBFl8rup81eoLG4pWDqVKM7yvWW2ME5UDz9b5ql h5aZoeoFZQOYUpmdmxU4gQaFVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzkmshC Di+sPjvQeezRWVLm1D0UMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNVQaKhXODSsswTFFWA+nPSuOj/G/zsRqFSuiYW1xaEp1DaV9M0FMi rLC6u7UPJIcGW5tV9rmk7wC/sdSsOqQ/7zOAJQ8T3Z71qyAXlGVy8sujXEvze52K RlWfE866Ysz5J3iqGaXcFrQ/aHcoZrsqvrbUptQe2z5rgS81NCOt4gvEKeTFSmz6 T0v/onkDi3Ja93CkGHfHPyPziS8lgx0ocUG2xTlamXa3aktAN2lm8Woo2qbn0K8l xAQkdj7rNeJgzIKh7hAwnD4mRpv+/6nDUuCOOvHPaLZlYmRepVpXANL9u76zE9Z4 YFhCkUP9SS3a90viWikiS9VbwgLxq3Dy -----END CERTIFICATE-----Generated at Thu May 2 17:18:59 2024 by rpki-client on console-ams.rpki-client.org