$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json) Hash identifier: ++1zmhyhgYe8CNbElIUGFtYYnfyI62Abk2SwB9eDfgQ= Subject key identifier: 91:62:81:74:C4:C8:5D:B8:1C:D6:BC:79:01:0B:B4:8B:FD:5C:36:03 Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft Manifest number: 0B74 Signing time: Sat 18 May 2024 19:29:37 +0000 Manifest this update: Sat 18 May 2024 19:29:36 +0000 Manifest next update: Sat 25 May 2024 19:29:36 +0000 Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: 1brzinIUDfilgtop+Hi+aTZzX9XpynxLzxMyp0zgLNQ=) 2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: CQr3GJqcTZiiFM7/eSUYGrEr18nzm/M4tEQIQmwunfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Validity Not Before: May 18 19:29:36 2024 GMT Not After : May 25 19:29:36 2024 GMT Subject: CN=664901a1-4566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:93:8f:f7:27:c5:08:83:56:a0:c1:3a:e7: b9:d9:4f:12:d5:6d:76:e8:fd:39:99:24:e1:88:f0: b8:28:b2:b5:60:1a:0f:b2:f5:b9:69:f4:3d:d0:72: 79:e3:ab:e6:64:61:0b:29:06:91:f1:ac:66:7f:b0: d7:b1:cf:ed:a5:65:60:f4:73:a8:29:25:25:69:9d: 90:b4:a7:3a:eb:4d:27:37:4e:4f:be:c5:f2:9c:b0: 4d:d7:a7:e8:87:e8:76:be:46:27:63:7c:7a:3b:ad: c8:f3:e1:21:dd:3b:12:f1:52:69:eb:e0:97:e1:e3: 9a:70:37:3c:ba:6f:da:c4:c5:80:f1:ac:ad:28:83: 15:0c:45:db:7c:9f:a7:0f:fe:e4:7b:db:66:9c:34: df:3e:8e:5f:70:31:92:49:03:1d:0d:e5:89:6f:1d: ec:d3:26:93:e3:91:8a:29:30:73:89:d2:59:4e:e7: 51:e0:5b:1e:67:4d:e4:15:3f:09:57:d0:98:b8:8c: 1f:e7:39:be:63:97:d4:6a:ac:6b:38:64:02:16:de: 43:94:8b:b4:b2:7b:d6:5f:7e:13:84:0a:8f:39:6f: 7a:51:31:05:50:d1:41:8a:eb:b0:0c:8a:22:94:0a: 96:01:9e:19:47:d2:47:5f:9d:ad:88:d9:fc:55:e0: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:62:81:74:C4:C8:5D:B8:1C:D6:BC:79:01:0B:B4:8B:FD:5C:36:03 X509v3 Authority Key Identifier: keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:2a:3b:c6:a2:8a:12:f5:53:ca:4a:13:f4:68:b7:1b:12:f0: 0a:1a:eb:55:42:6e:a4:ae:18:d5:92:00:d6:c3:5f:6a:2c:a9: 72:57:c8:0d:d0:d3:99:bd:ab:83:08:d2:37:3d:96:1a:15:77: 57:97:60:45:f0:dc:3a:e4:58:df:f2:f8:f3:67:97:4b:52:e0: 64:15:2c:a6:e1:e2:8e:2a:4d:ae:fd:35:6e:73:d0:e2:f9:2c: 47:33:f6:26:78:1c:a7:e9:51:6a:0b:ab:7b:a1:f6:51:3c:4b: 9d:fa:6d:a8:20:12:5d:a9:26:a8:72:b8:cf:9e:62:51:39:55: 08:ff:70:33:df:a4:50:ae:ad:9a:7a:e7:9e:8e:ee:09:c4:9f: b1:be:70:4a:e7:ef:38:fa:d2:f1:23:9d:6c:cf:a8:d5:49:9b: 87:2a:bd:3e:f0:73:42:3d:1b:c1:80:94:2b:17:35:87:11:d4: 30:12:7e:48:5d:e4:24:72:96:93:60:4e:9b:e1:71:5d:49:16: a0:cc:9f:31:1b:21:24:41:1f:9c:b3:b7:4c:d2:63:3e:3d:00: 2c:99:04:74:e5:cd:90:93:61:e3:d6:07:cd:2b:ca:d1:be:fd: 0c:28:09:f1:e3:9f:ee:26:6c:b2:83:a1:26:41:18:4f:fe:6b: bf:58:e2:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxODAxMTAvBgNVBAUTKEQ2NkUwMjgyMjc3NkZCNTUxNDNEMEM5RTU0OTAzMjg2 NTZBNUUwOEQwHhcNMjQwNTE4MTkyOTM2WhcNMjQwNTI1MTkyOTM2WjAYMRYwFAYD VQQDEw02NjQ5MDFhMS00NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZiTj/cnxQiDVqDBOue52U8S1W126P05mSThiPC4KLK1YBoPsvW5afQ90HJ5 46vmZGELKQaR8axmf7DXsc/tpWVg9HOoKSUlaZ2QtKc6600nN05PvsXynLBN16fo h+h2vkYnY3x6O63I8+Eh3TsS8VJp6+CX4eOacDc8um/axMWA8aytKIMVDEXbfJ+n D/7ke9tmnDTfPo5fcDGSSQMdDeWJbx3s0yaT45GKKTBzidJZTudR4FseZ03kFT8J V9CYuIwf5zm+Y5fUaqxrOGQCFt5DlIu0snvWX34ThAqPOW96UTEFUNFBiuuwDIoi lAqWAZ4ZR9JHX52tiNn8VeCgrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFigXTE yF24HNa8eQELtIv9XDYDMB8GA1UdIwQYMBaAFNZuAoIndvtVFD0MnlSQMoZWpeCN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE4MC8zMDU2OURCMDA3 RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0xVVVQUXllVkpBeWhsYWw0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtNENnaWQyLTFVVVBReWVWSkF5aGxhbDRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE4MC8zMDU2OURCMDA3RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0x VVVQUXllVkpBeWhsYWw0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPKjvGoooS9VPKShP0aLcbEvAKGutVQm6krhjVkgDWw19qLKlyV8gN 0NOZvauDCNI3PZYaFXdXl2BF8Nw65Fjf8vjzZ5dLUuBkFSym4eKOKk2u/TVuc9Di +SxHM/YmeByn6VFqC6t7ofZRPEud+m2oIBJdqSaocrjPnmJROVUI/3Az36RQrq2a eueeju4JxJ+xvnBK5+84+tLxI51sz6jVSZuHKr0+8HNCPRvBgJQrFzWHEdQwEn5I XeQkcpaTYE6b4XFdSRagzJ8xGyEkQR+cs7dM0mM+PQAsmQR05c2Qk2Hj1gfNK8rR vv0MKAnx45/uJmyyg6EmQRhP/mu/WOIK -----END CERTIFICATE-----Generated at Sat May 18 20:15:58 2024 by rpki-client on console-ams.rpki-client.org