$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: uBb9qmH6Nqusqyz9C4AyjxzCo68uc76xSPM2w/2xBKY= Subject key identifier: 0F:F6:5C:9A:B0:28:83:79:8F:FC:5B:E4:04:8E:8E:F3:FB:5C:A8:96 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 072C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 176E Signing time: Sat 18 May 2024 17:58:52 +0000 Manifest this update: Sat 18 May 2024 17:58:52 +0000 Manifest next update: Sat 25 May 2024 17:58:52 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: 4WbvIJieWxqhzaCBKVZCIs81ARigRKSQtSkr3vjxB5w=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: ftTAj83As+pHtKdRn/zZtUvT8mYIjljP4vGjyKP+o1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: May 18 17:58:52 2024 GMT Not After : May 25 17:58:52 2024 GMT Subject: CN=6648ec5c-6cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:8e:35:82:3a:f8:0b:fd:59:8b:7d:46:44: d9:6e:a4:9f:86:b0:de:8f:14:85:06:25:a9:0f:91: 55:d1:63:cd:f7:2f:96:8c:4f:fc:50:d1:06:48:ab: e2:c3:45:03:1a:4e:bc:f2:af:74:01:b7:e6:e6:7c: 63:2e:e8:ae:c4:ca:72:bc:76:53:15:24:73:2b:20: dc:72:66:69:83:65:8d:ad:51:42:43:a5:ac:71:9f: e1:8a:db:60:57:5e:11:ae:b5:f1:fa:5c:c0:10:6e: 2f:9a:8d:4f:44:74:67:43:2a:ae:c5:1d:ac:3b:02: 57:dc:32:a1:d2:90:b2:57:80:52:4f:19:25:a6:d0: bb:d7:9a:8b:98:24:6d:b6:d7:91:47:87:b2:a2:be: 45:e1:fd:7c:08:d4:4f:f5:a9:dc:c6:05:55:41:8c: ae:2c:8e:8e:d2:29:a2:93:3e:fa:a6:ed:1e:39:67: bc:9d:cb:bb:f1:05:cb:1b:01:5f:7d:8e:c6:1f:de: d9:8b:b9:84:ac:48:a4:e9:13:75:72:37:be:4a:e1: 02:3e:3d:c4:61:9c:9e:b5:a1:e2:cc:c0:e7:87:37: 24:b8:ea:41:17:77:aa:c9:a5:dc:55:23:24:b8:70: 7c:1a:90:e0:ba:fc:f7:88:06:8a:79:bf:6d:00:23: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:5C:9A:B0:28:83:79:8F:FC:5B:E4:04:8E:8E:F3:FB:5C:A8:96 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:26:0a:a3:ae:4c:e7:2f:52:90:95:b3:8e:6f:09:4c:ba:d5: 95:43:9d:10:0c:d8:aa:66:92:8d:3e:2f:95:c5:e5:af:65:49: eb:f5:d8:cf:e3:c2:61:93:2c:8f:a5:f0:2a:5c:60:5e:5f:16: cb:51:a4:61:3d:4a:89:b2:3b:2e:54:a4:c3:89:f9:00:ae:0e: 39:ba:9d:9c:3b:83:ff:ee:a6:e0:c1:7b:44:02:55:f3:d3:ae: 21:98:6e:3d:a6:65:24:1e:c6:78:a8:89:23:f2:4b:dc:1b:28: 42:d2:ec:82:3e:ad:79:94:ba:bf:27:cb:c1:7a:00:60:71:3d: 5b:52:6a:86:83:f3:6b:ca:2d:4e:54:89:17:2a:9d:66:65:5d: e2:a1:53:41:40:48:cb:f6:7b:e5:ec:86:24:ab:d1:94:64:83: 46:2a:b4:7f:d3:46:67:04:a9:2c:f1:01:69:d6:3b:d8:db:5d: 61:66:ef:d6:b1:0e:61:c5:46:e8:87:c1:19:52:ef:2d:8b:4a: b6:2f:1c:82:78:2b:6d:47:e2:40:c3:9d:a7:68:2b:b8:09:4d: 8b:28:de:a7:d9:cf:c9:45:18:43:5d:8c:2b:0d:07:f8:7b:4b: c9:98:81:db:66:55:87:bf:c2:6c:e2:c2:86:02:4d:18:4a:da: de:38:83:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjQwNTE4MTc1ODUyWhcNMjQwNTI1MTc1ODUyWjAYMRYwFAYD VQQDEw02NjQ4ZWM1Yy02Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRKONYI6+Av9WYt9RkTZbqSfhrDejxSFBiWpD5FV0WPN9y+WjE/8UNEGSKvi w0UDGk688q90Abfm5nxjLuiuxMpyvHZTFSRzKyDccmZpg2WNrVFCQ6WscZ/hittg V14RrrXx+lzAEG4vmo1PRHRnQyquxR2sOwJX3DKh0pCyV4BSTxklptC715qLmCRt tteRR4eyor5F4f18CNRP9ancxgVVQYyuLI6O0imikz76pu0eOWe8ncu78QXLGwFf fY7GH97Zi7mErEik6RN1cje+SuECPj3EYZyetaHizMDnhzckuOpBF3eqyaXcVSMk uHB8GpDguvz3iAaKeb9tACPXsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/2XJqw KIN5j/xb5ASOjvP7XKiWMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEJgqjrkznL1KQlbOObwlMutWVQ50QDNiqZpKNPi+VxeWvZUnr9djP 48JhkyyPpfAqXGBeXxbLUaRhPUqJsjsuVKTDifkArg45up2cO4P/7qbgwXtEAlXz 064hmG49pmUkHsZ4qIkj8kvcGyhC0uyCPq15lLq/J8vBegBgcT1bUmqGg/Nryi1O VIkXKp1mZV3ioVNBQEjL9nvl7IYkq9GUZINGKrR/00ZnBKks8QFp1jvY211hZu/W sQ5hxUboh8EZUu8ti0q2LxyCeCttR+JAw52naCu4CU2LKN6n2c/JRRhDXYwrDQf4 e0vJmIHbZlWHv8Js4sKGAk0YStreOIM+ -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org