$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json) Hash identifier: HxdSp/I9oTvrWJZTsnyUD7LEHVyK4PJcdPE1UOUZzSA= Subject key identifier: E8:A0:57:DD:D5:4A:08:78:9A:A0:38:CF:52:BA:9E:E6:5D:F9:59:B9 Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft Manifest number: 02DA Signing time: Sun 19 May 2024 03:22:23 +0000 Manifest this update: Sun 19 May 2024 03:22:23 +0000 Manifest next update: Sun 26 May 2024 03:22:23 +0000 Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: VkIVaK1ESVVnZmVFBDK4NTCPEk6MYRCE50Els8zftIs=) 2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: guTq71O2LSxBtq9wp1j3np+TPnuYZq23yDrd9yyvAgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Validity Not Before: May 19 03:22:23 2024 GMT Not After : May 26 03:22:23 2024 GMT Subject: CN=6649706f-9b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:78:b9:6e:0c:21:d0:a4:49:a9:ba:13:21: 59:d0:37:f5:2e:08:02:c9:52:dc:27:c1:eb:7f:01: eb:10:a2:1b:2d:b2:9e:9d:06:f9:d0:72:6b:28:7b: 32:db:bc:a6:09:24:a5:a4:60:0b:b3:e3:95:f0:94: 2f:62:bb:52:d6:53:ec:ee:e1:b0:fa:16:d5:f9:00: 2d:47:f3:44:7b:7f:6b:b1:22:34:c4:ab:63:87:fa: 1f:c0:13:91:6f:d6:51:d4:84:73:15:5b:93:00:28: 97:0a:7c:63:1a:66:0a:f9:c6:a4:c4:79:de:2b:d2: eb:b2:29:a5:54:d8:ac:91:c0:c8:87:01:9d:10:d7: 0e:1a:7b:55:3b:94:88:f6:84:bd:44:cd:73:98:fb: 5b:8f:14:ea:8f:52:0d:47:24:51:76:77:18:9b:d5: 21:5e:7d:98:5b:d8:89:6d:47:e7:32:4f:98:ff:46: 9e:e8:6b:77:b0:6a:9c:7a:12:45:42:a2:5f:64:e5: b1:95:3f:52:df:e8:f1:c0:38:3d:49:a2:b5:b4:03: e7:09:e7:52:e2:06:6f:be:8b:28:2d:2e:f5:95:05: 1e:e3:56:8a:12:e8:ff:e3:47:30:97:cc:aa:d9:13: a9:b4:b7:80:d7:a7:76:7e:ed:e4:ad:47:15:29:2d: 08:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A0:57:DD:D5:4A:08:78:9A:A0:38:CF:52:BA:9E:E6:5D:F9:59:B9 X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d4:5e:67:81:01:c1:cd:a1:7c:03:b8:08:1d:29:31:71:bc: b8:81:ad:5e:7e:26:f7:0f:4e:de:a0:c0:5d:e2:b6:c4:27:0b: c8:ea:5e:26:d6:33:be:0c:42:11:57:1d:59:d0:f3:64:36:b7: 11:5a:8d:25:75:d6:0a:6e:e7:90:7d:0d:73:84:55:8d:5a:a9: 1c:31:b3:da:fa:eb:88:fa:07:66:32:e0:57:4b:f8:b6:c3:f5: 14:e0:80:58:96:86:83:49:ba:d2:f0:b7:ed:70:c7:88:00:35: 8a:64:ba:b9:ef:e5:06:7a:b9:67:92:7b:fe:b3:03:dc:c0:d4: 7a:2f:8a:79:21:68:05:72:77:0c:3c:ae:fa:3a:e1:68:54:92: f3:28:c2:17:46:07:10:a3:60:6a:a8:56:d7:3b:e8:60:07:38: 79:68:9a:19:c2:6a:32:4d:3f:84:16:4b:56:90:59:18:49:e0: 79:28:04:5f:b5:d6:df:de:27:ac:f6:d7:47:42:c6:b4:b9:a5: ca:15:f1:4a:ec:6e:40:85:e8:38:a4:08:1f:92:cd:03:b7:0b: d0:81:ce:82:ec:02:b4:34:05:79:82:db:1a:3e:10:5f:ae:82: 9b:b6:7b:6e:0a:1e:a7:b4:8f:27:96:35:39:74:1e:7a:55:c3: 79:45:3f:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjQwNTE5MDMyMjIzWhcNMjQwNTI2MDMyMjIzWjAYMRYwFAYD VQQDEw02NjQ5NzA2Zi05YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPB4uW4MIdCkSam6EyFZ0Df1LggCyVLcJ8HrfwHrEKIbLbKenQb50HJrKHsy 27ymCSSlpGALs+OV8JQvYrtS1lPs7uGw+hbV+QAtR/NEe39rsSI0xKtjh/ofwBOR b9ZR1IRzFVuTACiXCnxjGmYK+cakxHneK9LrsimlVNiskcDIhwGdENcOGntVO5SI 9oS9RM1zmPtbjxTqj1INRyRRdncYm9UhXn2YW9iJbUfnMk+Y/0ae6Gt3sGqcehJF QqJfZOWxlT9S3+jxwDg9SaK1tAPnCedS4gZvvosoLS71lQUe41aKEuj/40cwl8yq 2ROptLeA16d2fu3krUcVKS0I8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOigV93V Sgh4mqA4z1K6nuZd+Vm5MB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMi9GRjc3MUJCQzlEMjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlP clJpS0w1X1JIbVBWSXoyWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr1F5ngQHBzaF8A7gIHSkxcby4ga1efib3D07eoMBd4rbEJwvI6l4m 1jO+DEIRVx1Z0PNkNrcRWo0lddYKbueQfQ1zhFWNWqkcMbPa+uuI+gdmMuBXS/i2 w/UU4IBYloaDSbrS8LftcMeIADWKZLq57+UGerlnknv+swPcwNR6L4p5IWgFcncM PK76OuFoVJLzKMIXRgcQo2BqqFbXO+hgBzh5aJoZwmoyTT+EFktWkFkYSeB5KARf tdbf3ies9tdHQsa0uaXKFfFK7G5Aheg4pAgfks0DtwvQgc6C7AK0NAV5gtsaPhBf roKbtntuCh6ntI8nljU5dB56VcN5RT9U -----END CERTIFICATE-----Generated at Sun May 19 04:20:41 2024 by rpki-client on console-ams.rpki-client.org