$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: P76My0bRPlS3osHFl+3Q2+zoSfdT6WKFBsHjv7HrgA8= Subject key identifier: 17:71:1F:B0:27:F0:DC:ED:E4:FE:42:02:36:BA:B4:54:D0:51:4E:42 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 104C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 1045 Signing time: Sat 18 May 2024 17:59:13 +0000 Manifest this update: Sat 18 May 2024 17:59:13 +0000 Manifest next update: Sat 25 May 2024 17:59:13 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: 4QhNjrNqijmn533G7HKXM2Qun04YdboYAUpTeCXzX5I=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: /8SNajGFBQS2U2jNwz98Lv+owsRVOQ+nqM0OpiGoj94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: May 18 17:59:13 2024 GMT Not After : May 25 17:59:13 2024 GMT Subject: CN=6648ec71-3c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:e8:1c:ee:d0:a5:e3:68:e6:62:96:c7:75: 11:3c:4c:b1:79:b9:2b:19:ac:66:9f:8e:78:f8:b5: 08:0a:3a:1f:7f:ea:ea:d3:3a:0c:8e:c4:84:45:bf: c9:7b:6a:3e:f8:ad:c9:e5:6b:41:30:0e:92:3f:ff: 23:c1:22:16:45:a8:ec:85:dd:6e:38:fa:a4:cc:2c: 5e:a0:d1:ce:7d:a9:39:39:d5:11:31:d5:e5:e1:34: eb:02:0e:73:2e:81:b3:40:4b:bb:28:c6:62:b3:71: 24:97:85:70:dc:a2:97:69:3e:8c:30:f6:a2:75:b0: 22:aa:ed:22:59:34:73:13:5d:09:be:ec:b1:21:dd: 48:b4:29:1f:40:59:ed:8c:1f:26:b0:19:a8:46:81: 10:ce:70:38:46:ea:e1:a0:70:fc:06:a1:7d:b7:ac: 78:24:7f:8d:48:ea:28:74:8e:9b:97:69:0e:c5:75: cb:2e:1c:86:55:11:84:a4:f2:4e:75:82:ea:2c:18: 30:f1:26:16:b9:8d:3c:2e:6a:0c:e9:75:0b:a9:bb: 9a:cb:d6:b4:c5:cf:ba:21:cf:69:a6:d0:e7:1d:a3: a7:b7:d2:ca:05:33:61:0b:ec:2e:39:12:96:c8:64: e2:fe:4f:c5:75:78:11:76:88:cb:81:b0:62:f9:23: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:71:1F:B0:27:F0:DC:ED:E4:FE:42:02:36:BA:B4:54:D0:51:4E:42 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:0c:8f:92:1f:d1:54:a4:59:a3:84:b9:83:1d:64:5a:e6:e3: 2c:e0:8a:2d:9e:eb:6d:16:c7:52:b3:da:00:57:ce:3b:25:5e: 5c:56:00:5d:d0:4d:8d:b2:76:05:f1:08:cf:ea:40:83:cf:38: c9:ee:7d:84:c3:cc:f7:63:5c:61:e9:b3:00:72:08:c6:f5:27: 7f:d5:8b:b3:26:14:5b:dd:c6:9b:81:a7:00:db:87:e2:6c:4e: fd:96:d6:e5:e1:a5:f5:83:6f:71:80:86:51:02:32:14:70:69: 69:cf:8d:1d:fe:dd:81:a4:6e:07:50:be:5e:b0:59:df:3d:65: e2:da:a6:52:40:7a:2b:cc:92:2d:c2:c9:8a:9f:c9:cd:13:68: ae:a7:8c:e4:ba:2b:17:75:5f:bc:51:e9:04:0c:34:91:e8:43: 41:1f:d4:13:78:22:a1:4f:15:3c:aa:07:d4:76:8c:fa:8f:b0: 9c:2d:70:84:ec:4b:aa:45:02:65:8a:ea:40:66:5b:70:df:fd: 3e:ff:74:9c:a9:e5:9e:66:a9:33:16:ae:94:e0:41:5d:93:63: 3d:99:9b:db:8e:84:f7:24:e1:8c:17:b0:62:c0:04:c7:7b:be: 80:02:2c:b8:09:b9:38:5e:ed:c2:25:6b:66:34:35:28:c7:3a: d1:d5:14:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjQwNTE4MTc1OTEzWhcNMjQwNTI1MTc1OTEzWjAYMRYwFAYD VQQDEw02NjQ4ZWM3MS0zYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRvoHO7QpeNo5mKWx3URPEyxebkrGaxmn454+LUICjoff+rq0zoMjsSERb/J e2o++K3J5WtBMA6SP/8jwSIWRajshd1uOPqkzCxeoNHOfak5OdURMdXl4TTrAg5z LoGzQEu7KMZis3Ekl4Vw3KKXaT6MMPaidbAiqu0iWTRzE10JvuyxId1ItCkfQFnt jB8msBmoRoEQznA4RurhoHD8BqF9t6x4JH+NSOoodI6bl2kOxXXLLhyGVRGEpPJO dYLqLBgw8SYWuY08LmoM6XULqbuay9a0xc+6Ic9pptDnHaOnt9LKBTNhC+wuORKW yGTi/k/FdXgRdojLgbBi+SPiJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdxH7An 8Nzt5P5CAja6tFTQUU5CMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWDI+SH9FUpFmjhLmDHWRa5uMs4IotnuttFsdSs9oAV847JV5cVgBd 0E2NsnYF8QjP6kCDzzjJ7n2Ew8z3Y1xh6bMAcgjG9Sd/1YuzJhRb3cabgacA24fi bE79ltbl4aX1g29xgIZRAjIUcGlpz40d/t2BpG4HUL5esFnfPWXi2qZSQHorzJIt wsmKn8nNE2iup4zkuisXdV+8UekEDDSR6ENBH9QTeCKhTxU8qgfUdoz6j7CcLXCE 7EuqRQJliupAZltw3/0+/3ScqeWeZqkzFq6U4EFdk2M9mZvbjoT3JOGMF7BiwATH e76AAiy4Cbk4Xu3CJWtmNDUoxzrR1RRK -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org