$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json) Hash identifier: A+w5wcQPIATikt9VTNmOzDbV362R8UXCMT2E/jtmK/M= Subject key identifier: 9D:99:8C:C7:3C:3D:25:B4:16:BC:AC:39:31:FC:53:52:37:8B:BB:6F Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft Manifest number: 0464 Signing time: Sun 19 May 2024 01:47:19 +0000 Manifest this update: Sun 19 May 2024 01:47:18 +0000 Manifest next update: Sun 26 May 2024 01:47:18 +0000 Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: urHPmAh6keInqUjpcQZ2DdSZvIlYc7OaMJMZuYCY+N0=) 2: 06184FEC07C411EC8F79EC2FC4F9AE02.roa (hash: +Hit9S7xn4KKn3w7aDqiZzcfw5tOLDjZT862u/toJE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Validity Not Before: May 19 01:47:18 2024 GMT Not After : May 26 01:47:18 2024 GMT Subject: CN=66495a27-e2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:77:5d:5d:bf:3f:d5:f5:74:c2:6e:31:04:04: 5a:2c:08:47:3d:c2:e4:5f:ef:b5:f7:40:2a:6c:18: 73:e7:94:a3:24:34:cc:9b:07:bc:e6:1b:23:1a:85: 3b:dd:87:d6:e7:58:13:ef:76:c3:d1:fb:5d:dd:ca: 44:31:e7:88:b9:fb:b8:2f:79:95:5d:e3:00:85:ed: 70:3c:85:89:b3:df:a3:07:7c:9f:c5:e9:b0:60:1d: c5:d4:e7:64:a9:3c:8a:c1:91:0c:46:31:ce:b6:cb: ca:25:59:54:07:dd:9e:53:e7:01:15:41:79:bf:47: 2a:d2:cc:14:ec:fc:70:e2:84:c7:fb:27:1a:1f:22: f8:bc:80:d7:67:51:ba:38:ad:03:34:fa:ff:91:e5: 73:0f:07:cd:87:2d:4c:17:79:c3:66:99:3f:11:4d: 42:26:94:a2:d9:29:19:02:5c:8a:e4:f4:c5:3d:3c: 47:73:70:30:19:37:4d:f0:89:94:20:da:db:3e:76: 72:01:ca:8b:45:7d:c0:5f:fa:c9:6b:b8:37:e5:68: a7:74:3c:4e:7a:04:a6:15:01:da:3a:38:6a:ec:42: 07:be:8a:a6:9c:6e:99:21:93:67:77:f7:c5:f0:ef: 3a:db:85:6f:0d:fd:e6:98:63:fc:52:ed:40:f8:70: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:99:8C:C7:3C:3D:25:B4:16:BC:AC:39:31:FC:53:52:37:8B:BB:6F X509v3 Authority Key Identifier: keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b4:12:34:a2:7d:38:bf:5f:34:47:28:7d:20:28:e0:3d:91: dc:3a:9f:19:41:b7:a9:d8:d2:04:ff:e9:02:58:3c:fe:a4:6f: ff:1f:2a:7a:37:52:9b:53:5c:8a:f2:5a:45:44:fa:cb:39:1d: 7d:37:95:4a:8e:71:82:53:0c:af:6e:d6:25:df:46:5e:58:f5: 75:7e:e3:0d:66:f2:fd:5d:ca:84:1c:d6:9d:f3:5f:39:a9:94: 13:98:6e:8c:41:73:08:e7:e5:5a:d9:4b:97:ae:ef:f5:06:71: ae:7f:fb:18:c9:2c:b0:44:ed:dc:a4:a1:8b:b7:08:fe:b5:25: c2:97:23:f1:0f:9d:ae:15:ce:47:20:58:cf:65:76:13:6b:1b: 9e:06:de:80:e5:df:8b:fe:30:2c:ad:5d:11:4b:72:52:d1:b7: a6:75:b9:d8:94:9c:08:cb:d4:ce:c5:98:10:c3:37:b6:67:5b: 46:3e:43:ad:56:80:81:4c:1e:66:f4:2b:a1:fb:e8:e4:eb:d6: 45:f7:5a:8b:5f:b6:ac:b7:aa:9e:8a:1a:5c:5d:1e:b1:45:69: d8:3d:2f:ca:86:9d:71:14:45:db:d8:2f:9a:b5:42:5f:6b:4a: a0:5f:93:d2:e3:24:89:9c:5b:e2:69:e6:28:93:0b:4c:28:9e: 7f:f2:bc:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG NjZENEM3MzUwHhcNMjQwNTE5MDE0NzE4WhcNMjQwNTI2MDE0NzE4WjAYMRYwFAYD VQQDEw02NjQ5NWEyNy1lMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HddXb8/1fV0wm4xBARaLAhHPcLkX++190AqbBhz55SjJDTMmwe85hsjGoU7 3YfW51gT73bD0ftd3cpEMeeIufu4L3mVXeMAhe1wPIWJs9+jB3yfxemwYB3F1Odk qTyKwZEMRjHOtsvKJVlUB92eU+cBFUF5v0cq0swU7Pxw4oTH+ycaHyL4vIDXZ1G6 OK0DNPr/keVzDwfNhy1MF3nDZpk/EU1CJpSi2SkZAlyK5PTFPTxHc3AwGTdN8ImU INrbPnZyAcqLRX3AX/rJa7g35WindDxOegSmFQHaOjhq7EIHvoqmnG6ZIZNnd/fF 8O8624VvDf3mmGP8Uu1A+HBXXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2ZjMc8 PSW0FrysOTH8U1I3i7tvMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw UzkyTXBBWXhGNVAyYlV4elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0tBI0on04v180Ryh9ICjgPZHcOp8ZQbep2NIE/+kCWDz+pG//Hyp6 N1KbU1yK8lpFRPrLOR19N5VKjnGCUwyvbtYl30ZeWPV1fuMNZvL9XcqEHNad8185 qZQTmG6MQXMI5+Va2UuXru/1BnGuf/sYySywRO3cpKGLtwj+tSXClyPxD52uFc5H IFjPZXYTaxueBt6A5d+L/jAsrV0RS3JS0bemdbnYlJwIy9TOxZgQwze2Z1tGPkOt VoCBTB5m9Cuh++jk69ZF91qLX7ast6qeihpcXR6xRWnYPS/Khp1xFEXb2C+atUJf a0qgX5PS4ySJnFviaeYokwtMKJ5/8rzI -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org