$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: HqqSVVUOCAM2wU1iEn6vq6mnzrno82HF2eqlwrm+dxI= Subject key identifier: 52:43:9B:4D:C3:D5:28:25:23:23:D1:BE:61:6C:72:BF:E1:E3:7A:A8 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 010F Signing time: Sun 19 May 2024 05:33:01 +0000 Manifest this update: Sun 19 May 2024 05:33:01 +0000 Manifest next update: Sun 26 May 2024 05:33:01 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: 433IxvpInRbdjpxDse093C59TgwpDNgV6Sj9k35Lmg0=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: UV7m9UL6VQkCLJOeRN4XING/h7wyzD1/+qKh16w25VE=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: X4f4JpNrLXW6Kc1FSQUgNny44PNWQc3+/3wUXFRNjBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: May 19 05:33:01 2024 GMT Not After : May 26 05:33:01 2024 GMT Subject: CN=66498f0d-938c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:42:16:4c:ec:b3:8d:e4:f6:df:ed:c1:d6: 70:eb:cb:03:0e:a2:33:5f:47:16:7a:11:b7:b1:c2: a3:72:6a:a0:c6:9f:75:a4:61:89:87:90:56:5c:a3: 49:75:57:5b:34:d7:63:da:df:ad:9c:72:3f:dc:69: 77:e5:27:b9:aa:65:13:64:b1:85:bc:b6:d5:c2:f9: 34:4d:9a:cd:e8:92:f9:e3:b5:3f:ad:32:7a:b1:75: 4f:92:3d:80:9a:bb:58:59:24:94:53:e2:6a:77:47: ce:65:e9:a6:12:bf:75:7f:f6:ba:33:51:91:55:8b: d5:3f:34:c6:36:5d:a7:b1:59:f0:54:f0:f1:40:fd: cf:9a:de:32:2a:aa:27:c1:0b:50:80:5a:72:4b:d3: 6e:83:79:b2:a7:3a:a5:2c:8e:7a:b1:b1:94:53:f9: 29:1d:1a:36:4a:85:49:93:d4:b8:f8:2a:15:bb:af: 14:25:39:87:15:bd:61:da:e4:0a:9c:ea:1f:9c:0a: f5:8d:08:b9:68:ba:ba:3a:23:35:f0:1a:2f:8f:3b: e9:e0:3f:8c:a3:ca:38:6a:ee:d0:8c:18:86:1d:98: de:b2:8d:56:af:e5:9f:3d:9a:13:99:d3:46:ed:a1: 85:9a:02:bf:1d:58:67:bf:0a:97:93:c1:de:e9:c1: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:9B:4D:C3:D5:28:25:23:23:D1:BE:61:6C:72:BF:E1:E3:7A:A8 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:90:7f:69:de:74:03:31:8d:df:fc:bd:d0:27:2f:61:69:e6: c6:0c:96:83:d9:20:38:68:7e:5b:d0:26:29:69:c4:ce:67:98: 1a:d1:71:d5:36:28:7a:5c:46:11:5e:79:97:89:e1:1f:71:9d: 18:bf:eb:4d:74:d5:89:7a:65:41:8e:57:73:25:35:83:1d:1f: af:81:3f:65:2d:bf:47:86:c8:ca:2c:23:99:66:57:d2:92:a5: 68:85:66:32:98:1a:57:28:19:f3:96:89:d9:07:34:a8:82:0b: d9:24:bc:d2:9f:0f:c5:39:2a:dc:5e:f9:52:74:5d:43:55:c9: c6:b6:d1:50:5e:0f:79:b8:6e:d9:a1:4e:b6:20:c7:62:6b:0a: 88:9d:15:e0:d4:1d:82:8f:e4:8a:6a:91:54:b6:dd:85:e5:4d: 39:54:e7:e2:72:09:9e:1e:b1:80:03:ac:8a:27:2a:4a:7e:8e: 4a:79:ee:a0:88:8f:bf:87:f3:13:39:c1:80:9c:99:50:20:dc: 19:80:74:e0:b4:6f:ec:cb:e0:a7:4e:64:49:c3:62:31:df:5a: 99:d5:56:43:82:3c:43:b4:c4:9f:95:f9:f4:c1:d9:2c:75:d3: 5f:70:cd:74:df:f8:fa:ef:34:d3:2a:3f:21:d9:b4:25:3d:b0: dc:e6:1a:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjQwNTE5MDUzMzAxWhcNMjQwNTI2MDUzMzAxWjAYMRYwFAYD VQQDEw02NjQ5OGYwZC05MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8xCFkzss43k9t/twdZw68sDDqIzX0cWehG3scKjcmqgxp91pGGJh5BWXKNJ dVdbNNdj2t+tnHI/3Gl35Se5qmUTZLGFvLbVwvk0TZrN6JL547U/rTJ6sXVPkj2A mrtYWSSUU+Jqd0fOZemmEr91f/a6M1GRVYvVPzTGNl2nsVnwVPDxQP3Pmt4yKqon wQtQgFpyS9Nug3mypzqlLI56sbGUU/kpHRo2SoVJk9S4+CoVu68UJTmHFb1h2uQK nOofnAr1jQi5aLq6OiM18Bovjzvp4D+Mo8o4au7QjBiGHZjeso1Wr+WfPZoTmdNG 7aGFmgK/HVhnvwqXk8He6cFppQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJDm03D 1SglIyPRvmFscr/h43qoMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBkH9p3nQDMY3f/L3QJy9haebGDJaD2SA4aH5b0CYpacTOZ5ga0XHV Nih6XEYRXnmXieEfcZ0Yv+tNdNWJemVBjldzJTWDHR+vgT9lLb9HhsjKLCOZZlfS kqVohWYymBpXKBnzlonZBzSoggvZJLzSnw/FOSrcXvlSdF1DVcnGttFQXg95uG7Z oU62IMdiawqInRXg1B2Cj+SKapFUtt2F5U05VOficgmeHrGAA6yKJypKfo5Kee6g iI+/h/MTOcGAnJlQINwZgHTgtG/sy+CnTmRJw2Ix31qZ1VZDgjxDtMSflfn0wdks ddNfcM103/j67zTTKj8h2bQlPbDc5hq4 -----END CERTIFICATE-----Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org