$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft File: p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json) Hash identifier: lor/M/opoTAKOSHDTUVSFylX93Eg63o9MxjWhV1zWoc= Subject key identifier: 13:F6:4B:06:2D:37:DA:47:57:CD:23:16:62:54:0E:CA:7C:82:6A:22 Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft Manifest number: 014D Signing time: Sun 19 May 2024 04:54:52 +0000 Manifest this update: Sun 19 May 2024 04:54:52 +0000 Manifest next update: Sun 26 May 2024 04:54:52 +0000 Files and hashes: 1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: CXp3t+tTN8cOqWwk9GnlGpwFIISwoxehEmOivdwCG5E=) 2: 51DC4CFA3E8911EEBAA0A668C4F9AE02.roa (hash: gETNMennaw10aPiXd21M18PnUZ+N9oPyo2vnsLtZhks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: May 19 04:54:52 2024 GMT Not After : May 26 04:54:52 2024 GMT Subject: CN=6649861c-727f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:51:3e:c0:e3:e1:e2:67:4c:f3:b3:ef:48: 9a:c4:f8:97:a4:2c:c5:ac:c0:36:d3:fe:4d:2f:84: e9:6c:bd:1d:73:2c:4c:87:30:ec:fa:2c:f7:54:7d: fd:39:1a:91:45:51:4d:9a:47:7e:1e:03:d8:6e:9f: f6:35:5c:3d:3a:c9:22:02:a1:41:02:67:80:dd:53: d8:67:af:e4:58:4f:a7:d8:82:08:4e:a9:8a:85:f5: 2c:c4:38:64:4d:8b:26:7a:c5:cf:f2:35:2e:3b:9b: 3f:1e:7c:a0:db:d6:02:4e:5b:02:69:5a:a2:1a:15: 4b:be:e9:70:1b:2a:85:37:f3:12:d2:84:0a:ad:1b: ef:e0:ab:ea:78:55:38:1a:e1:4f:f9:94:5b:da:b5: 31:f9:d8:1e:9a:ee:42:2e:bc:12:ef:e7:c1:e3:81: 57:0e:7b:49:19:c9:13:d5:2f:b4:b4:1f:c9:97:8e: a0:55:cd:1b:99:f5:11:4a:c5:c6:2c:42:5e:31:af: 47:66:d1:24:6e:d8:2d:48:db:9c:3b:30:f7:9a:90: bd:d8:da:74:1b:d1:5a:bb:0d:0f:f1:35:85:89:cd: 31:15:e1:08:de:b0:a3:86:09:de:97:40:ef:b9:f9: d7:55:3f:6e:67:94:4c:43:5f:7d:63:45:6f:a3:cd: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F6:4B:06:2D:37:DA:47:57:CD:23:16:62:54:0E:CA:7C:82:6A:22 X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e3:91:a8:9b:16:90:a7:05:3d:12:11:3f:57:8e:7e:3e:1a: c2:8f:38:37:2d:a0:9d:2b:ec:32:c1:fc:31:06:32:c2:c9:be: 0d:3d:41:84:6f:fd:1f:cc:b7:60:0d:74:1e:73:fa:5a:99:d0: 4f:9d:74:17:46:d9:72:29:25:0b:eb:cd:f7:03:db:14:22:c7: 58:3b:57:68:ba:07:f4:5e:b5:8e:f2:c5:18:bf:d2:cb:4f:ab: f6:77:8a:b6:90:c2:65:d4:51:45:fd:b7:a1:15:4e:67:ef:45: 92:e2:84:2e:06:ca:c7:8a:80:e9:98:96:ed:0d:8c:90:ee:02: 5a:0e:07:cd:09:a0:2b:60:48:63:cb:36:fb:c3:21:bf:0a:4c: af:95:f8:a6:89:8a:b8:14:74:3d:05:8d:1e:dc:75:91:c1:ed: 56:96:f6:6d:8b:90:92:70:86:d3:c2:50:de:d3:a9:2b:05:4e: 4b:84:d6:da:71:af:78:d4:d1:1d:78:80:03:5d:80:4b:36:63: 91:88:55:8f:e2:c2:04:7f:a3:37:ab:7c:49:40:5b:be:15:f5: f3:9e:75:90:ac:be:67:94:6c:2d:d9:b1:27:91:69:ff:ad:6d: 16:5c:76:f6:d4:65:9d:7a:30:06:46:26:35:eb:1d:a2:ca:bf: 5c:88:70:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjQwNTE5MDQ1NDUyWhcNMjQwNTI2MDQ1NDUyWjAYMRYwFAYD VQQDEw02NjQ5ODYxYy03MjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8hRPsDj4eJnTPOz70iaxPiXpCzFrMA20/5NL4TpbL0dcyxMhzDs+iz3VH39 ORqRRVFNmkd+HgPYbp/2NVw9OskiAqFBAmeA3VPYZ6/kWE+n2IIITqmKhfUsxDhk TYsmesXP8jUuO5s/Hnyg29YCTlsCaVqiGhVLvulwGyqFN/MS0oQKrRvv4KvqeFU4 GuFP+ZRb2rUx+dgemu5CLrwS7+fB44FXDntJGckT1S+0tB/Jl46gVc0bmfURSsXG LEJeMa9HZtEkbtgtSNucOzD3mpC92Np0G9Fauw0P8TWFic0xFeEI3rCjhgnel0Dv ufnXVT9uZ5RMQ199Y0Vvo83gCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBP2SwYt N9pHV80jFmJUDsp8gmoiMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzE0Mi85NjYxODVCQTM4M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09W eEN5OWk4YjFMd01wekhhMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd45GomxaQpwU9EhE/V45+PhrCjzg3LaCdK+wywfwxBjLCyb4NPUGE b/0fzLdgDXQec/pamdBPnXQXRtlyKSUL6833A9sUIsdYO1dougf0XrWO8sUYv9LL T6v2d4q2kMJl1FFF/behFU5n70WS4oQuBsrHioDpmJbtDYyQ7gJaDgfNCaArYEhj yzb7wyG/CkyvlfimiYq4FHQ9BY0e3HWRwe1WlvZti5CScIbTwlDe06krBU5LhNba ca941NEdeIADXYBLNmORiFWP4sIEf6M3q3xJQFu+FfXznnWQrL5nlGwt2bEnkWn/ rW0WXHb21GWdejAGRiY16x2iyr9ciHDi -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org