$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: IwmdE4C4TC5fTAiP4Geri3bLTWCZ7CD0LTjouN001VU= Subject key identifier: E0:AA:2D:C7:9C:06:25:0B:D8:88:2D:EC:9D:1E:CE:6A:5E:C3:5C:DC Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 0F92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 0F90 Signing time: Sat 18 May 2024 18:07:00 +0000 Manifest this update: Sat 18 May 2024 18:07:00 +0000 Manifest next update: Sat 25 May 2024 18:07:00 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: chMRDHMz7eoT3c3EPxD9jimAXTZNw9u03PTOnR1vSD4=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: 1WgHu7gwVe3qgqJ+RVqyr2qFjsMKsHJgrsGEzkZiuNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3986 (0xf92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: May 18 18:07:00 2024 GMT Not After : May 25 18:07:00 2024 GMT Subject: CN=6648ee44-f3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:ce:62:e4:3f:f0:23:d6:db:fc:75:02:d7: e3:c7:fa:60:7a:50:94:53:29:50:1f:c7:06:3b:11: d5:46:6d:7d:51:e9:99:48:c6:9c:45:b4:4f:69:3c: 08:83:9e:4e:dd:96:3d:cd:3a:83:44:09:26:ac:10: 0f:11:eb:a2:bd:c3:66:68:8c:89:1f:d9:52:55:fa: 6a:d8:55:82:a6:63:ff:de:0c:5f:f7:ee:63:7f:17: 02:e5:2f:c4:a9:e7:43:5d:48:a2:6c:59:80:1a:e6: b6:89:84:2d:74:d2:8d:b8:59:19:a4:57:de:76:98: c7:e1:9b:44:41:79:e0:0e:8d:99:10:85:0b:a9:39: 79:bd:52:c0:16:fb:0d:b6:46:ab:2c:b8:6a:f5:b3: 44:3b:9e:41:36:b3:b5:1f:1f:c4:14:4b:5b:c5:f5: 96:0f:d3:01:84:af:1b:4b:18:fb:79:ef:32:f3:4d: 25:6e:63:01:94:22:c4:ff:f6:49:ba:93:ee:85:cb: a5:5c:11:41:bb:18:bb:83:36:f9:a3:de:f2:5a:1e: 4b:6b:4a:75:11:b0:8d:b9:9a:d0:f5:55:3d:29:69: 74:38:e0:6c:4a:5c:f4:08:a5:1f:2e:04:23:3d:20: 8a:9d:6f:87:30:45:ee:02:85:84:7c:5a:0a:89:2e: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AA:2D:C7:9C:06:25:0B:D8:88:2D:EC:9D:1E:CE:6A:5E:C3:5C:DC X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:cf:23:ab:a1:07:bb:d3:a9:4f:84:28:80:ea:c2:9a:c7:0b: 44:a6:6a:da:e3:86:8f:07:20:f4:8e:f6:38:32:3d:73:92:32: 01:93:07:4b:75:b3:17:68:b5:b4:91:ec:7e:98:9e:50:1c:b1: fd:cb:6a:e0:3c:d0:f0:2e:08:04:8f:26:a8:69:b9:cc:cf:ab: 93:2a:4f:4c:d8:0c:14:b0:5e:5e:cd:5e:42:f5:ff:be:f3:69: 58:10:0b:35:94:56:e2:7d:53:1d:17:23:a7:57:f2:8a:1b:39: bc:c0:71:27:50:87:f3:7d:6a:e0:e8:e1:32:c1:ad:68:81:9e: b7:34:5f:4d:42:33:15:70:8d:b5:14:fd:79:8e:1f:95:27:ee: 32:52:a8:d3:df:08:ad:a2:a7:41:db:42:95:9b:0f:41:05:01: b4:ae:5c:00:cb:6c:06:8e:5a:18:67:b0:fa:18:e1:a3:43:0f: 0e:28:86:57:7e:9e:cf:4a:8f:67:bd:f0:f8:7f:03:20:e1:00: 96:af:eb:a7:76:e7:1c:ac:1b:ab:51:62:73:e4:7b:8a:0d:93: ec:1c:ac:5d:bc:4a:c4:a8:89:d0:d0:3e:95:51:a6:27:4c:e2: 46:e8:41:a1:b4:4f:66:81:91:d2:58:61:a0:0a:2b:b0:4c:1a: 6a:1f:80:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjQwNTE4MTgwNzAwWhcNMjQwNTI1MTgwNzAwWjAYMRYwFAYD VQQDEw02NjQ4ZWU0NC1mM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1XOYuQ/8CPW2/x1Atfjx/pgelCUUylQH8cGOxHVRm19UemZSMacRbRPaTwI g55O3ZY9zTqDRAkmrBAPEeuivcNmaIyJH9lSVfpq2FWCpmP/3gxf9+5jfxcC5S/E qedDXUiibFmAGua2iYQtdNKNuFkZpFfedpjH4ZtEQXngDo2ZEIULqTl5vVLAFvsN tkarLLhq9bNEO55BNrO1Hx/EFEtbxfWWD9MBhK8bSxj7ee8y800lbmMBlCLE//ZJ upPuhculXBFBuxi7gzb5o97yWh5La0p1EbCNuZrQ9VU9KWl0OOBsSlz0CKUfLgQj PSCKnW+HMEXuAoWEfFoKiS5+HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCqLcec BiUL2Igt7J0ezmpew1zcMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBzyOroQe706lPhCiA6sKaxwtEpmra44aPByD0jvY4Mj1zkjIBkwdL dbMXaLW0kex+mJ5QHLH9y2rgPNDwLggEjyaoabnMz6uTKk9M2AwUsF5ezV5C9f++ 82lYEAs1lFbifVMdFyOnV/KKGzm8wHEnUIfzfWrg6OEywa1ogZ63NF9NQjMVcI21 FP15jh+VJ+4yUqjT3witoqdB20KVmw9BBQG0rlwAy2wGjloYZ7D6GOGjQw8OKIZX fp7PSo9nvfD4fwMg4QCWr+unduccrBurUWJz5HuKDZPsHKxdvErEqInQ0D6VUaYn TOJG6EGhtE9mgZHSWGGgCiuwTBpqH4DN -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org