$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft File: 05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json) Hash identifier: xz2Gl7V8hlyhVr0/nMp/ABlWjRHkSlf54E8eTE6VHMQ= Subject key identifier: 0A:8D:25:6D:6D:A3:C6:8C:FA:8C:3F:60:03:CE:01:16:06:0F:79:CE Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft Manifest number: 81 Signing time: Sun 19 May 2024 07:11:22 +0000 Manifest this update: Sun 19 May 2024 07:11:22 +0000 Manifest next update: Sun 26 May 2024 07:11:22 +0000 Files and hashes: 1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: 62/WYwDQhjz2i/Srpc0LA1M5w1zKUyBlTg3UPdw+Lwk=) 2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: rxyz7R7XEZ0StcHzWcM5qmNZrUP1LQOdlSjbVIVUXQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Validity Not Before: May 19 07:11:22 2024 GMT Not After : May 26 07:11:22 2024 GMT Subject: CN=6649a61a-89c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:89:79:30:ba:7f:12:0e:a1:21:e9:8a:ad: 53:a4:23:a4:d3:12:2c:78:2b:e9:10:1a:24:9d:76: d4:12:42:ab:ff:b9:8c:da:62:de:6e:f4:6d:4b:cc: f7:2f:e2:19:f7:63:58:a4:ba:b1:1f:5a:26:81:ad: 8e:28:eb:69:88:c9:d6:3c:0f:14:94:4d:b8:03:43: 3c:82:d7:19:37:04:e7:9f:07:39:c7:81:ca:e7:c7: a2:40:45:f0:63:ff:c3:bb:35:44:31:79:32:94:8b: 45:c3:d0:07:3b:2f:40:df:b5:29:b6:f5:a7:9f:02: 31:8d:ef:15:7a:c8:76:0e:15:37:92:2b:82:e0:f5: ec:9e:ac:37:d0:b0:c3:67:32:87:65:01:c1:4f:07: 43:39:93:15:4d:1f:76:f7:99:3c:6f:01:13:e9:8c: c5:ce:67:20:83:f3:18:06:2c:cb:41:50:5c:28:a1: 92:8e:08:77:4b:5f:ef:08:ef:c3:83:e8:b3:a5:d4: 75:df:3d:d7:e0:ff:90:2b:46:86:de:8e:59:3c:15: 99:f4:7d:24:0c:77:b2:b5:a0:ca:b0:c9:6f:75:57: 8c:ec:49:18:25:38:fd:33:2d:ba:c5:10:57:28:9b: f5:52:2c:0a:fb:9c:a3:83:ad:81:ea:ae:09:3a:8a: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8D:25:6D:6D:A3:C6:8C:FA:8C:3F:60:03:CE:01:16:06:0F:79:CE X509v3 Authority Key Identifier: keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f6:ea:eb:57:0c:93:f5:3f:32:da:93:dd:34:df:f0:00:3d: 5d:45:70:94:b6:7d:79:4a:98:9b:18:bc:2f:92:09:59:5c:61: bd:f6:44:41:ae:b7:0b:6c:3a:ef:cb:9d:f9:8d:6e:66:e9:42: 86:46:ea:40:fb:c1:41:41:83:bb:fc:10:5c:9a:d4:49:97:06: 64:4e:55:85:82:6f:e3:93:df:fc:48:37:c6:7e:d8:e3:71:3c: c6:b7:70:86:ae:95:f5:21:2a:16:8c:3a:a2:11:5d:6c:ec:ea: 2c:ac:23:76:3a:12:c0:a4:ec:74:c1:01:14:9e:e5:4d:15:6d: 6b:fc:32:78:f3:46:2c:cb:4e:18:9f:15:c3:2f:c9:c4:ec:30: 17:15:47:b3:fe:bd:d9:9e:91:52:b7:b8:94:75:01:69:e6:86: 44:23:37:8c:72:58:14:fb:a3:af:9c:50:e1:3c:04:47:d1:db: 8b:49:0f:cc:f9:11:c5:81:0e:7e:a7:1d:21:09:61:ff:87:07: ba:56:3a:78:5b:fc:f0:52:8c:1c:94:c5:4e:5a:74:7d:25:c3: 7e:38:27:74:4e:77:b6:34:a3:f1:0d:7d:7f:eb:cf:d6:48:e1: d9:51:da:44:60:37:db:f2:63:dd:e4:2b:2a:31:b2:f9:71:b6: 19:63:b3:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCRTIxMTAvBgNVBAUTKEQzOUExMEU2MUE4Q0E5NTA0RURCMTU0ODY5MzZCMzc3 NDNBMjREQ0UwHhcNMjQwNTE5MDcxMTIyWhcNMjQwNTI2MDcxMTIyWjAYMRYwFAYD VQQDEw02NjQ5YTYxYS04OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPeJeTC6fxIOoSHpiq1TpCOk0xIseCvpEBoknXbUEkKr/7mM2mLebvRtS8z3 L+IZ92NYpLqxH1omga2OKOtpiMnWPA8UlE24A0M8gtcZNwTnnwc5x4HK58eiQEXw Y//DuzVEMXkylItFw9AHOy9A37UptvWnnwIxje8Vesh2DhU3kiuC4PXsnqw30LDD ZzKHZQHBTwdDOZMVTR9295k8bwET6YzFzmcgg/MYBizLQVBcKKGSjgh3S1/vCO/D g+izpdR13z3X4P+QK0aG3o5ZPBWZ9H0kDHeytaDKsMlvdVeM7EkYJTj9My26xRBX KJv1UiwK+5yjg62B6q4JOor7ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqNJW1t o8aM+ow/YAPOARYGD3nOMB8GA1UdIwQYMBaAFNOaEOYajKlQTtsVSGk2s3dDok3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJFMi82Q0I5QTk2NjUx OTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFWQk8yeFZJYVRhemQwT2lU YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1b1E1aHFNcVZCTzJ4VklhVGF6ZDBPaVRjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJFMi82Q0I5QTk2NjUxOTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFW Qk8yeFZJYVRhemQwT2lUYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL9urrVwyT9T8y2pPdNN/wAD1dRXCUtn15SpibGLwvkglZXGG99kRB rrcLbDrvy535jW5m6UKGRupA+8FBQYO7/BBcmtRJlwZkTlWFgm/jk9/8SDfGftjj cTzGt3CGrpX1ISoWjDqiEV1s7OosrCN2OhLApOx0wQEUnuVNFW1r/DJ480Ysy04Y nxXDL8nE7DAXFUez/r3ZnpFSt7iUdQFp5oZEIzeMclgU+6OvnFDhPARH0duLSQ/M +RHFgQ5+px0hCWH/hwe6Vjp4W/zwUowclMVOWnR9JcN+OCd0Tne2NKPxDX1/68/W SOHZUdpEYDfb8mPd5CsqMbL5cbYZY7M2 -----END CERTIFICATE-----Generated at Sun May 19 08:24:56 2024 by rpki-client on console-ams.rpki-client.org