$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft File: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json) Hash identifier: p5jPTTQyxOOlKitCFk8j+tKNCMW9mWXhwpJrbT1LYlk= Subject key identifier: 14:78:97:93:00:22:8D:8D:4E:26:2C:1F:DF:97:AF:C0:F9:B0:D6:68 Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft Manifest number: 03EE Signing time: Sun 19 May 2024 02:15:18 +0000 Manifest this update: Sun 19 May 2024 02:15:17 +0000 Manifest next update: Sun 26 May 2024 02:15:17 +0000 Files and hashes: 1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: oXVj/SA9lKthn/skdH/oFgW6dKI3q61KBlm6dt5B5YM=) 2: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: xSQuICqEftDO2jVAN6yCIdaEpdEAXBTf0APY5z9yvHA=) 3: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: x9h06qfhNpw9HDsZ2fx+rNHJ0LpcCakerBbSGHozgRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Validity Not Before: May 19 02:15:17 2024 GMT Not After : May 26 02:15:17 2024 GMT Subject: CN=664960b5-fb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:6f:d8:2f:45:94:53:a1:07:64:ce:25:44: c0:14:bd:00:dc:67:60:99:a2:b2:04:81:71:c4:ae: a4:40:08:68:19:e2:3b:d6:3d:d6:27:88:1a:35:89: 9a:68:fd:14:ab:46:c1:b9:e0:39:9e:a6:a5:e8:04: 96:61:dd:09:81:2f:64:e0:6b:f9:ff:f6:ec:ff:9a: db:66:ed:99:d2:ad:26:49:26:16:04:04:ce:45:86: 07:8d:ab:dc:d5:cd:37:cd:f0:96:c9:68:c0:75:a3: f3:a2:0c:b7:3b:1e:4e:49:2b:2a:61:03:8a:a8:55: a6:fa:ed:95:2b:21:2f:41:f5:a5:43:0b:8f:0f:52: e2:48:78:8c:bb:e1:c6:14:f1:3e:1c:41:26:b8:25: 92:bc:fa:b3:40:d1:91:2f:92:8d:44:98:d5:2a:ff: 1f:1c:dc:0a:80:6c:19:33:d8:6e:27:6d:40:a7:32: 6a:80:f7:8a:24:c7:f8:bf:fa:49:ca:72:76:d2:3f: b8:fe:0e:e0:8d:57:b8:0e:d5:52:21:2b:39:53:b5: e9:0c:1c:81:68:3f:39:ad:aa:8d:85:68:69:e2:74: 39:9a:87:18:95:d9:9f:4b:7c:21:08:6e:d9:95:37: d4:cb:6f:27:35:7c:72:62:a8:f6:a4:9c:af:2d:0d: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:97:93:00:22:8D:8D:4E:26:2C:1F:DF:97:AF:C0:F9:B0:D6:68 X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ae:40:e4:10:be:0e:80:b9:b1:1d:1c:99:73:8f:f1:3f:ee: b1:7f:60:b1:0d:10:dd:cf:ad:0e:cd:7c:04:c7:a5:9c:76:4b: 17:20:ac:5a:23:a6:f5:ac:34:3a:f9:9f:a2:d2:26:16:62:26: 43:56:52:4b:b2:5f:ea:a7:14:44:64:ba:46:4c:95:6d:fc:61: 0d:ce:c2:db:dd:f5:5d:ba:67:d9:7f:4b:82:35:ed:13:59:aa: 66:8f:e3:bc:14:4e:4d:14:90:a2:a4:da:67:26:a3:e8:e2:9b: 41:47:d7:97:c6:ca:78:13:7a:b1:ed:90:51:a5:82:5b:c6:df: 35:8c:9d:4a:94:9a:1c:5d:49:fa:e2:4a:2b:e7:13:b2:d0:d4: 8e:cf:50:be:1b:44:29:75:b0:17:56:4b:a5:39:48:88:7f:09: 87:5a:0f:63:24:44:e9:e5:e3:a5:19:bf:61:fc:36:1c:23:a7: 74:4e:04:a1:15:6b:2a:ee:00:45:d8:19:31:b1:a1:a5:83:7f: c4:c5:ff:0e:ae:00:02:37:18:ad:6f:1e:a9:7d:e3:bd:96:f5: 99:33:9b:d9:53:e1:c6:f7:3d:59:87:3b:89:9b:05:96:8c:31: 11:e3:da:9d:b2:fb:61:22:a5:0f:4c:f5:de:18:f8:ac:fa:c4: ab:32:a0:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjQwNTE5MDIxNTE3WhcNMjQwNTI2MDIxNTE3WjAYMRYwFAYD VQQDEw02NjQ5NjBiNS1mYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDVv2C9FlFOhB2TOJUTAFL0A3GdgmaKyBIFxxK6kQAhoGeI71j3WJ4gaNYma aP0Uq0bBueA5nqal6ASWYd0JgS9k4Gv5//bs/5rbZu2Z0q0mSSYWBATORYYHjavc 1c03zfCWyWjAdaPzogy3Ox5OSSsqYQOKqFWm+u2VKyEvQfWlQwuPD1LiSHiMu+HG FPE+HEEmuCWSvPqzQNGRL5KNRJjVKv8fHNwKgGwZM9huJ21ApzJqgPeKJMf4v/pJ ynJ20j+4/g7gjVe4DtVSISs5U7XpDByBaD85raqNhWhp4nQ5mocYldmfS3whCG7Z lTfUy28nNXxyYqj2pJyvLQ0RnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR4l5MA Io2NTiYsH9+Xr8D5sNZoMB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zNTkwNjVBNjMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZN UXkza2JVdy0yaFQyUXYyaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcrkDkEL4OgLmxHRyZc4/xP+6xf2CxDRDdz60OzXwEx6WcdksXIKxa I6b1rDQ6+Z+i0iYWYiZDVlJLsl/qpxREZLpGTJVt/GENzsLb3fVdumfZf0uCNe0T Wapmj+O8FE5NFJCipNpnJqPo4ptBR9eXxsp4E3qx7ZBRpYJbxt81jJ1KlJocXUn6 4kor5xOy0NSOz1C+G0QpdbAXVkulOUiIfwmHWg9jJETp5eOlGb9h/DYcI6d0TgSh FWsq7gBF2BkxsaGlg3/Exf8OrgACNxitbx6pfeO9lvWZM5vZU+HG9z1ZhzuJmwWW jDER49qdsvthIqUPTPXeGPis+sSrMqAh -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org