$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json) Hash identifier: 7LpLh+QSibDOEC2PHoLdCHMuP8ruScXgw/hLvyIw1Xs= Subject key identifier: E2:92:4A:55:9C:AD:69:EE:6C:6A:3C:0C:62:C1:95:78:D1:0A:86:FD Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft Manifest number: 0B2C Signing time: Sat 18 May 2024 19:48:15 +0000 Manifest this update: Sat 18 May 2024 19:48:14 +0000 Manifest next update: Sat 25 May 2024 19:48:14 +0000 Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: JbnH92rGugu6otNJmLVYSAOASjNifbAMKugFyKm4PW8=) 2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: 2owkOPv5cf70JDjVVaT6RIFBzLMnz6Rb03IohYtEZXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Validity Not Before: May 18 19:48:14 2024 GMT Not After : May 25 19:48:14 2024 GMT Subject: CN=664905fe-adb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:db:78:1d:63:c9:2e:df:c7:88:de:83:f6: ab:f6:a2:a2:17:88:94:7d:a5:a6:8d:40:db:3a:d9: c9:be:fe:e2:cb:3f:ba:1c:59:71:03:1c:4a:3e:ef: 57:06:46:19:67:a4:08:95:c0:92:26:e7:cf:12:48: a0:49:b4:d6:73:bb:69:4b:fd:f3:25:b3:d5:8a:9e: ea:f3:60:1d:3c:4d:39:e4:3d:7a:23:0a:9e:3c:34: 2f:c9:5f:33:b2:50:8d:2a:d5:42:75:90:f7:82:08: d2:9d:23:1c:a5:59:63:32:ee:f8:03:0d:78:47:46: cb:21:58:7f:8e:c5:e2:e5:cd:c4:09:2b:88:25:5d: 66:e0:e2:9a:a2:1a:bc:1f:b0:ef:97:36:f2:e2:ce: 82:0c:f7:a8:02:54:6e:43:37:89:73:a2:40:b3:4d: 8e:de:22:86:bf:71:81:d5:1f:c8:f4:ee:82:34:dd: ef:cb:16:30:57:98:60:90:62:28:e3:53:95:1a:1e: 30:93:12:58:ab:a4:fa:c7:6c:75:e1:8c:53:66:5e: 83:5c:41:56:d4:1f:40:79:d6:5d:d6:5f:2a:c1:6f: 80:b0:44:1a:67:a9:6f:04:f8:e1:07:02:c9:2a:54: 39:40:ea:53:d9:39:ca:05:13:bd:35:4a:67:fd:04: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:92:4A:55:9C:AD:69:EE:6C:6A:3C:0C:62:C1:95:78:D1:0A:86:FD X509v3 Authority Key Identifier: keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:55:8e:4a:c8:f3:80:18:96:29:d9:64:47:d2:c8:49:e2:00: 4e:5f:76:26:c0:c5:70:6a:0d:a4:94:62:6f:09:5d:1f:8e:7b: b1:cc:35:e1:6d:a9:67:aa:a3:b3:1c:45:e3:4f:51:61:07:fd: 7f:5f:3d:4c:de:a7:6a:03:41:f8:ce:d2:74:7c:56:df:76:c5: 34:52:a5:86:6e:7c:2c:2d:76:b4:7c:b3:1d:b5:38:79:fc:2c: e0:e6:53:59:c4:94:29:45:c4:20:1a:87:1e:85:f2:4d:4f:22: 04:fd:00:62:38:bd:4d:9d:98:09:a4:f0:65:8d:49:bd:de:b8: 17:7d:e5:30:6d:d3:1e:59:dd:51:b5:aa:ac:47:f7:16:cf:c6: dc:2a:55:57:de:cb:90:61:63:e1:a8:6c:57:22:31:af:81:6c: 25:0c:29:67:73:27:17:5c:d8:22:64:74:2b:cf:dc:16:03:14: 2d:00:de:5a:1e:45:35:57:6c:d4:07:89:f3:cb:70:22:fe:26: c6:83:17:eb:a1:61:4c:c9:60:59:8a:a7:f3:ca:1d:05:ee:3b: 30:40:83:0a:a8:dd:26:ff:28:8b:74:a6:81:41:7f:f1:13:02: e8:a8:7c:e2:a2:6d:b6:fd:4e:b2:03:7d:b7:70:94:31:d3:76: 81:5e:5d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG RENFRjIxRDYwHhcNMjQwNTE4MTk0ODE0WhcNMjQwNTI1MTk0ODE0WjAYMRYwFAYD VQQDEw02NjQ5MDVmZS1hZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcHbeB1jyS7fx4jeg/ar9qKiF4iUfaWmjUDbOtnJvv7iyz+6HFlxAxxKPu9X BkYZZ6QIlcCSJufPEkigSbTWc7tpS/3zJbPVip7q82AdPE055D16IwqePDQvyV8z slCNKtVCdZD3ggjSnSMcpVljMu74Aw14R0bLIVh/jsXi5c3ECSuIJV1m4OKaohq8 H7Dvlzby4s6CDPeoAlRuQzeJc6JAs02O3iKGv3GB1R/I9O6CNN3vyxYwV5hgkGIo 41OVGh4wkxJYq6T6x2x14YxTZl6DXEFW1B9AedZd1l8qwW+AsEQaZ6lvBPjhBwLJ KlQ5QOpT2TnKBRO9NUpn/QQzqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKSSlWc rWnubGo8DGLBlXjRCob9MB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1 OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr VkcyV0tmUWh3M2I5enZJZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoVY5KyPOAGJYp2WRH0shJ4gBOX3YmwMVwag2klGJvCV0fjnuxzDXh balnqqOzHEXjT1FhB/1/Xz1M3qdqA0H4ztJ0fFbfdsU0UqWGbnwsLXa0fLMdtTh5 /Czg5lNZxJQpRcQgGocehfJNTyIE/QBiOL1NnZgJpPBljUm93rgXfeUwbdMeWd1R taqsR/cWz8bcKlVX3suQYWPhqGxXIjGvgWwlDClncycXXNgiZHQrz9wWAxQtAN5a HkU1V2zUB4nzy3Ai/ibGgxfroWFMyWBZiqfzyh0F7jswQIMKqN0m/yiLdKaBQX/x EwLoqHziom22/U6yA323cJQx03aBXl2A -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org