$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft File: MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json) Hash identifier: YBQ42ZXFq9Lsm00/3ShNOC38+Mpdh4c2Oj7PZAV3K3M= Subject key identifier: 09:5F:37:49:B9:BC:B4:CB:BD:D8:3B:3B:5C:98:4D:2D:78:29:FD:84 Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 Certificate issuer: /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Certificate serial: 1416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft Manifest number: 140C Signing time: Sat 18 May 2024 17:26:05 +0000 Manifest this update: Sat 18 May 2024 17:26:05 +0000 Manifest next update: Sat 25 May 2024 17:26:05 +0000 Files and hashes: 1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: WttiP9W4TPl64CUqVtwt2PC3P9rCk8ip9Lwd+TwwLK0=) 2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: s6vtNQQIQsupRxsuHL5whiOvZL5AmFIPdveK43lCi0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5142 (0x1416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Validity Not Before: May 18 17:26:05 2024 GMT Not After : May 25 17:26:05 2024 GMT Subject: CN=6648e4ad-32fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cb:c6:e3:45:60:92:63:dd:ff:f6:2a:07:da: e3:5d:a6:2d:83:07:0d:ae:1e:47:8c:ed:63:02:5f: 7f:49:3c:c8:5a:f8:4d:69:78:1a:e4:e9:9c:b0:c5: d5:3f:b2:78:cd:a3:2a:a3:4f:9f:0a:eb:0d:ac:46: b6:21:8b:f5:32:69:0d:a6:b4:a8:63:02:b5:ad:f5: 05:31:f2:42:a5:12:10:9b:a5:9a:29:3e:3b:00:26: 50:93:58:2c:8d:4e:fc:3a:1e:fb:b6:3f:ef:ea:b6: ed:61:b2:a3:94:96:5a:05:49:46:7d:1c:23:30:3f: 54:96:32:fa:19:f2:53:f3:33:aa:c9:c8:ba:4d:bd: 70:f7:71:77:b8:0d:45:d7:3d:a1:6e:ef:7b:8e:12: 22:ee:b9:84:a6:72:f0:cd:4c:c9:78:d9:64:6c:0c: 51:9c:4d:32:64:7e:f0:4b:1f:cd:c5:31:0d:0b:e2: 71:7a:c2:40:be:f3:78:aa:6b:bd:f0:13:54:d7:f1: 5c:da:95:f7:91:db:7c:31:f2:57:d6:87:5f:46:7c: 30:00:e7:f8:60:25:3b:59:d8:88:21:e4:5c:13:cd: 53:21:0b:38:37:1f:38:a8:e2:de:4a:1c:f1:96:b4: 2e:1a:8f:69:27:1f:f8:d1:75:57:fd:06:04:25:a2: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5F:37:49:B9:BC:B4:CB:BD:D8:3B:3B:5C:98:4D:2D:78:29:FD:84 X509v3 Authority Key Identifier: keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ea:16:bd:17:98:cc:b4:7a:3e:4a:6e:20:49:85:3a:79:17: 26:99:39:90:f9:f8:ac:3b:40:45:9b:ad:82:5d:73:a8:13:ff: 66:63:0c:b2:5f:fb:e7:b3:c5:d4:ca:3a:b6:75:a9:92:40:de: 27:90:4c:75:b1:77:96:7b:98:5d:c1:86:4c:b8:d6:2f:f4:fe: 58:0a:50:6c:b7:30:94:da:46:93:9f:71:21:4d:a9:b9:4f:e4: 3f:b0:f4:52:76:ed:fe:50:e2:c9:ab:28:85:a4:24:89:38:b1: e4:78:d3:ea:99:8a:dc:e2:c4:9d:30:d2:37:ab:bc:e8:ae:69: ae:34:bf:76:f2:70:77:25:0a:01:92:4f:f0:3f:97:b4:a1:a6: b9:9e:5d:01:93:47:9b:82:b0:9a:17:fa:b5:18:43:36:d1:40: 00:5c:d3:46:cf:19:c9:b1:94:b9:74:9a:d2:0b:d2:1c:3e:e2: e0:31:25:11:b2:c5:ad:6f:af:63:db:f5:f5:e4:d2:fe:70:7b: d5:61:42:4b:67:a5:38:f6:2e:34:fc:a3:27:fb:d7:d7:d0:62: e3:4b:a8:28:90:fe:94:0e:e6:de:e0:38:64:87:16:4f:98:58: d5:da:3b:ac:78:09:c4:fb:3d:54:f5:10:db:e7:ed:16:1d:b7: d3:28:f0:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NzMxMTAvBgNVBAUTKDMxRTkxMkU5RkY3M0FGNUJDNDQ3NjkzNTI4RDcyNUIy NUEyQjE3RjcwHhcNMjQwNTE4MTcyNjA1WhcNMjQwNTI1MTcyNjA1WjAYMRYwFAYD VQQDEw02NjQ4ZTRhZC0zMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cvG40VgkmPd//YqB9rjXaYtgwcNrh5HjO1jAl9/STzIWvhNaXga5OmcsMXV P7J4zaMqo0+fCusNrEa2IYv1MmkNprSoYwK1rfUFMfJCpRIQm6WaKT47ACZQk1gs jU78Oh77tj/v6rbtYbKjlJZaBUlGfRwjMD9UljL6GfJT8zOqyci6Tb1w93F3uA1F 1z2hbu97jhIi7rmEpnLwzUzJeNlkbAxRnE0yZH7wSx/NxTENC+JxesJAvvN4qmu9 8BNU1/Fc2pX3kdt8MfJX1odfRnwwAOf4YCU7WdiIIeRcE81TIQs4Nx84qOLeShzx lrQuGo9pJx/40XVX/QYEJaKjdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlfN0m5 vLTLvdg7O1yYTS14Kf2EMB8GA1UdIwQYMBaAFDHpEun/c69bxEdpNSjXJbJaKxf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY3My8wM0Y0MzA5QTU4 Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIxdkVSMmsxS05jbHNsb3JG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01la1M2Zjl6cjF2RVIyazFLTmNsc2xvckZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY3My8wM0Y0MzA5QTU4Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIx dkVSMmsxS05jbHNsb3JGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs6ha9F5jMtHo+Sm4gSYU6eRcmmTmQ+fisO0BFm62CXXOoE/9mYwyy X/vns8XUyjq2damSQN4nkEx1sXeWe5hdwYZMuNYv9P5YClBstzCU2kaTn3EhTam5 T+Q/sPRSdu3+UOLJqyiFpCSJOLHkeNPqmYrc4sSdMNI3q7zormmuNL928nB3JQoB kk/wP5e0oaa5nl0Bk0ebgrCaF/q1GEM20UAAXNNGzxnJsZS5dJrSC9IcPuLgMSUR ssWtb69j2/X15NL+cHvVYUJLZ6U49i40/KMn+9fX0GLjS6gokP6UDube4DhkhxZP mFjV2juseAnE+z1U9RDb5+0WHbfTKPCd -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org