$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json) Hash identifier: DFzNvXz9URVq1z8h1Tggbv0falmDI38bHF8t57EK77g= Subject key identifier: 15:3C:BE:AF:14:C1:9C:09:DC:BB:9E:E2:99:91:F2:5C:D3:04:9C:48 Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft Manifest number: 010D Signing time: Sun 19 May 2024 05:26:24 +0000 Manifest this update: Sun 19 May 2024 05:26:23 +0000 Manifest next update: Sun 26 May 2024 05:26:23 +0000 Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: gBrUkfqYgeAvVCOkd06gc1mQPC+z5Kq5LT02Ms+EH0A=) 2: CA181F42791211ED9D926781C4F9AE02.roa (hash: 7nUrgsXGN1+KumYSAJKqjvtegrJHofkPLzFdsb9Xqkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: May 19 05:26:23 2024 GMT Not After : May 26 05:26:23 2024 GMT Subject: CN=66498d7f-4ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:bb:86:8b:92:c5:06:61:d5:cb:bb:26:f3: a9:e0:28:56:1a:f0:1a:60:8d:7c:45:f6:9f:7d:56: c3:68:47:27:51:12:2b:64:94:b0:7e:5d:d6:da:c4: 99:7c:2f:1b:a3:20:52:4e:b7:0e:07:e1:03:ec:dc: ca:2c:e9:ec:a2:1c:dc:6a:ca:ab:0d:a8:65:5f:c8: be:88:ee:05:35:0a:c4:96:f9:75:49:fc:90:b7:09: 52:62:f5:83:83:4a:ac:35:0d:f9:3d:2f:1b:06:57: 36:99:6f:14:da:9b:7f:be:04:1a:9b:29:15:cf:ac: 93:09:83:7d:f7:62:40:71:84:b5:aa:99:1c:86:94: 2d:76:41:ad:ae:53:da:5c:44:16:d2:fd:9b:57:5b: ae:b0:09:0e:ff:77:86:6b:0d:b2:5e:01:a5:05:40: 1d:b2:28:74:d3:ab:b2:dc:7c:cc:9e:bc:b2:31:f0: 21:e5:c3:8c:14:2e:38:05:dd:6e:7e:58:64:9d:a2: 61:5b:f8:e0:f2:03:bc:22:02:d0:0c:f3:54:9d:27: 97:e1:7c:5f:7c:8f:48:23:10:fc:76:11:70:f7:94: c8:3c:e4:fd:47:90:06:6c:00:16:c9:d8:04:e7:7a: 74:99:fe:a5:5c:b6:ff:49:9e:f1:97:42:be:12:42: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3C:BE:AF:14:C1:9C:09:DC:BB:9E:E2:99:91:F2:5C:D3:04:9C:48 X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:8b:a7:77:af:58:11:52:46:c8:3c:f5:03:a7:15:45:ac:b0: ed:d3:8d:c6:81:6f:d7:a9:60:c7:13:f7:dc:6d:5d:72:e6:66: 46:b6:29:8d:64:47:76:86:72:1e:ba:f2:35:e6:09:63:74:7c: e6:47:8e:6f:c7:66:9f:eb:1e:70:b8:a8:fb:9a:36:59:9f:c8: eb:27:24:dd:06:82:2d:60:6d:e8:27:e5:36:19:d0:a2:cc:01: 9f:b5:9f:ac:be:09:f1:44:11:f9:78:12:5a:88:87:4e:38:48: c8:6c:2b:01:dd:29:c1:af:23:28:95:cf:2d:eb:bf:20:14:57: 7a:26:7d:21:e0:f1:2d:30:39:fc:15:5e:82:4d:9a:5d:a0:fb: 7e:d1:c3:f3:6b:bc:bc:18:c4:86:ab:8d:12:7f:a4:2f:4b:e4: c4:8b:c0:b0:3c:60:51:d1:b4:99:c2:b8:44:ee:88:36:65:16: 8d:72:cc:e6:c6:d4:0f:be:84:4a:4f:43:cf:ea:da:78:70:0c: 75:bc:10:c7:83:4b:3e:fb:7f:4c:f3:a6:04:4b:3a:30:1a:87: 8b:e7:69:c1:fb:e1:d4:a2:9e:8a:cc:0d:b5:9f:06:22:f6:9e: cc:b7:a7:3f:1a:53:a4:ca:30:ac:c6:81:93:93:6c:db:c6:b0: db:8f:35:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjQwNTE5MDUyNjIzWhcNMjQwNTI2MDUyNjIzWjAYMRYwFAYD VQQDEw02NjQ5OGQ3Zi00ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQ+7houSxQZh1cu7JvOp4ChWGvAaYI18RfaffVbDaEcnURIrZJSwfl3W2sSZ fC8boyBSTrcOB+ED7NzKLOnsohzcasqrDahlX8i+iO4FNQrElvl1SfyQtwlSYvWD g0qsNQ35PS8bBlc2mW8U2pt/vgQamykVz6yTCYN992JAcYS1qpkchpQtdkGtrlPa XEQW0v2bV1uusAkO/3eGaw2yXgGlBUAdsih006uy3HzMnryyMfAh5cOMFC44Bd1u flhknaJhW/jg8gO8IgLQDPNUnSeX4XxffI9IIxD8dhFw95TIPOT9R5AGbAAWydgE 53p0mf6lXLb/SZ7xl0K+EkJqMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBU8vq8U wZwJ3Lue4pmR8lzTBJxIMB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVBQy81RkFGNTY0Mjc5MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9h NExZTmpQYWtQYk03YjA5cm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBi6d3r1gRUkbIPPUDpxVFrLDt043GgW/XqWDHE/fcbV1y5mZGtimN ZEd2hnIeuvI15gljdHzmR45vx2af6x5wuKj7mjZZn8jrJyTdBoItYG3oJ+U2GdCi zAGftZ+svgnxRBH5eBJaiIdOOEjIbCsB3SnBryMolc8t678gFFd6Jn0h4PEtMDn8 FV6CTZpdoPt+0cPza7y8GMSGq40Sf6QvS+TEi8CwPGBR0bSZwrhE7og2ZRaNcszm xtQPvoRKT0PP6tp4cAx1vBDHg0s++39M86YESzowGoeL52nB++HUop6KzA21nwYi 9p7Mt6c/GlOkyjCsxoGTk2zbxrDbjzXD -----END CERTIFICATE-----Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org