$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft File: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json) Hash identifier: hgUXjpIB+4mHR4TOoKvB1uuqjmYoaPDGXIk4gNwZQB8= Subject key identifier: CA:AE:E2:D1:A7:FC:F7:52:17:65:C8:1E:5A:69:C9:97:43:E2:82:6B Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC Certificate issuer: /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft Manifest number: 0664 Signing time: Fri 31 May 2024 00:05:47 +0000 Manifest this update: Fri 31 May 2024 00:05:47 +0000 Manifest next update: Fri 07 Jun 2024 00:05:47 +0000 Files and hashes: 1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: 1tGKLiW5MnkXEI1qL0uVyP15Fv0IFcKUWrJf/4KDapw=) 2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: QChP7wZDX3OK2X+vnot3Rv1St2Y6Cc+E+ff1NZZ5nZo=) 3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: BDH8SKiJ7MQ/EI011YGzmBhbAD++HA//ZDEjoMjomV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 00:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Validity Not Before: May 31 00:05:47 2024 GMT Not After : Jun 7 00:05:47 2024 GMT Subject: CN=6659145b-b7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:ba:7b:03:74:dc:40:69:4a:ac:4c:05:7a: e8:06:f7:0f:0c:ab:4c:b9:bb:44:0c:60:ad:bd:89: 81:f1:70:1e:f8:2e:d7:54:a1:1f:f8:76:3e:b3:e8: 9d:6b:cc:6e:28:27:10:35:78:aa:3d:30:1d:82:41: 80:aa:97:55:a7:f8:97:10:dd:a3:b7:3b:cf:2b:99: 6a:7c:88:85:77:e3:b8:ce:20:b8:71:f7:c6:3b:92: 5d:91:6e:db:38:9d:29:a2:49:35:9c:f3:83:8f:73: 96:13:d8:64:6e:08:cb:07:d6:ec:49:d0:1d:b8:c2: d4:a1:40:76:ec:01:f4:76:42:a6:e2:45:2c:9c:26: 27:52:51:6d:96:6b:1f:8b:0e:a1:69:53:ff:1c:a5: a3:c5:8d:b7:a3:82:0a:da:71:39:60:a6:2a:24:36: d6:73:a9:21:d2:14:09:a2:c1:da:e0:8a:84:ea:99: b8:b1:c8:2b:eb:aa:b0:ba:92:7b:7d:25:57:15:db: 4d:45:92:b4:a9:2b:d5:2f:83:2f:d0:ed:8b:a8:ae: 65:31:4f:e6:c4:b7:da:47:7b:e9:2a:e7:87:23:61: 12:09:83:c5:43:d5:64:1f:a5:3f:08:fe:0b:07:0f: 92:9f:99:18:5e:03:9e:2e:a2:99:68:e9:65:48:98: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:E2:D1:A7:FC:F7:52:17:65:C8:1E:5A:69:C9:97:43:E2:82:6B X509v3 Authority Key Identifier: keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2d:1e:4c:bc:a0:ed:68:63:85:72:f8:ec:b1:eb:90:da:33: b8:f6:e1:d6:34:c4:f5:b5:5e:e8:7f:eb:22:e3:bc:a4:9e:10: 33:8c:64:0e:55:ed:ed:5f:87:3f:49:fb:f9:c5:89:6d:a3:08: 67:7b:7d:b3:36:81:05:88:ce:f2:85:df:08:27:6c:ff:01:b7: 71:c9:c9:04:ce:b1:3d:ca:09:fa:20:59:46:31:bb:5e:9a:3f: ab:03:e9:46:fe:14:12:53:36:95:1e:4e:96:28:33:be:79:0d: 67:61:62:43:ba:a3:66:50:0b:14:6d:0e:73:74:97:64:60:03: 52:54:b9:16:b7:1f:fb:d6:eb:65:5c:dc:de:a0:2b:f6:7f:09: 36:32:a3:8e:28:65:3d:e2:01:b7:2a:53:06:69:f3:fe:52:25: ef:4c:29:08:c7:9a:f6:a9:81:4a:5f:2e:70:63:b1:99:76:dc: 53:cf:63:75:8b:ca:60:56:18:9c:9e:fd:3d:fa:44:a0:5c:58: e3:df:c3:78:f9:17:36:9b:e1:d3:3d:15:dd:f2:9a:00:c6:40: de:34:69:66:6b:90:d1:5d:8c:da:14:26:de:e4:85:43:18:34: 75:46:9b:9a:72:91:32:91:be:1f:79:da:4d:a8:37:1b:5f:cc: f4:bb:12:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx RjcxNjVDREMwHhcNMjQwNTMxMDAwNTQ3WhcNMjQwNjA3MDAwNTQ3WjAYMRYwFAYD VQQDEw02NjU5MTQ1Yi1iN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RK6ewN03EBpSqxMBXroBvcPDKtMubtEDGCtvYmB8XAe+C7XVKEf+HY+s+id a8xuKCcQNXiqPTAdgkGAqpdVp/iXEN2jtzvPK5lqfIiFd+O4ziC4cffGO5JdkW7b OJ0pokk1nPODj3OWE9hkbgjLB9bsSdAduMLUoUB27AH0dkKm4kUsnCYnUlFtlmsf iw6haVP/HKWjxY23o4IK2nE5YKYqJDbWc6kh0hQJosHa4IqE6pm4scgr66qwupJ7 fSVXFdtNRZK0qSvVL4Mv0O2LqK5lMU/mxLfaR3vpKueHI2ESCYPFQ9VkH6U/CP4L Bw+Sn5kYXgOeLqKZaOllSJivSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqu4tGn /PdSF2XIHlppyZdD4oJrMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA3Ny85ODBDQThGRTNBRDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFa Zy1pelhGRjdaUmNmY1dYTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/LR5MvKDtaGOFcvjsseuQ2jO49uHWNMT1tV7of+si47yknhAzjGQO Ve3tX4c/Sfv5xYltowhne32zNoEFiM7yhd8IJ2z/AbdxyckEzrE9ygn6IFlGMbte mj+rA+lG/hQSUzaVHk6WKDO+eQ1nYWJDuqNmUAsUbQ5zdJdkYANSVLkWtx/71utl XNzeoCv2fwk2MqOOKGU94gG3KlMGafP+UiXvTCkIx5r2qYFKXy5wY7GZdtxTz2N1 i8pgVhicnv09+kSgXFjj38N4+Rc2m+HTPRXd8poAxkDeNGlma5DRXYzaFCbe5IVD GDR1RpuacpEykb4fedpNqDcbX8z0uxIj -----END CERTIFICATE-----Generated at Fri May 31 01:36:41 2024 by rpki-client on console-fra.rpki-client.org