$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json) Hash identifier: 8xriZ1QqH9bXdw5x0gCLXIeBAW8Sj03PoXgdmAbl3q0= Subject key identifier: B4:BA:CF:08:12:1F:EB:9E:C6:3C:CF:99:C1:C0:C6:9E:EB:4D:D9:1E Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft Manifest number: C7 Signing time: Sun 19 May 2024 06:16:28 +0000 Manifest this update: Sun 19 May 2024 06:16:27 +0000 Manifest next update: Sun 26 May 2024 06:16:27 +0000 Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: ebDttAq4tCdogFNdh1cbxsH1Y6kBNYP1VjM6FUJJsKQ=) 2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: lEiCE2p10mQyaPle/AVLUYsqAZx1ehh1ZxBRoLe3RfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Validity Not Before: May 19 06:16:27 2024 GMT Not After : May 26 06:16:27 2024 GMT Subject: CN=6649993b-9b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b5:05:0f:66:c6:1a:c1:ce:f0:91:b8:82:1c: 60:9a:9e:4b:5d:5c:de:81:d3:62:07:36:3a:73:e8: f2:13:bb:38:82:12:98:69:b0:6e:c8:be:5e:04:a9: a1:65:f3:0f:ad:b5:55:01:62:15:28:09:da:9b:09: cc:e7:2e:af:8b:e2:8d:2c:c2:2d:44:c7:14:1f:88: 18:dc:d7:fd:81:91:8d:b3:68:dc:7d:3b:25:e9:2a: fa:07:f7:63:22:21:38:99:2f:54:bf:e6:99:03:3e: 26:d1:9d:5a:bd:cf:52:ba:b7:3d:b3:14:e2:34:6b: 2e:7b:b8:8b:b7:16:10:12:c9:71:96:64:38:7c:91: 43:54:35:28:6e:b3:a2:76:27:c1:4c:bd:72:a9:91: 6b:8a:30:b9:09:c4:c9:4c:dd:19:a2:32:89:3a:13: 39:40:60:a8:91:d4:06:e1:9a:2e:94:9c:9d:26:b3: 93:5c:55:80:b1:26:0e:c7:b5:30:35:22:19:aa:11: 34:57:e1:ad:28:5a:4e:4b:8b:34:e5:76:4f:93:9b: 8e:bf:30:09:05:a1:3e:ff:2c:c1:5e:31:83:c4:6f: 0a:cb:21:00:63:29:95:e0:a9:8f:19:8e:c1:c2:13: 41:34:71:7c:df:b6:5f:fc:4b:bb:0d:66:52:1b:cb: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BA:CF:08:12:1F:EB:9E:C6:3C:CF:99:C1:C0:C6:9E:EB:4D:D9:1E X509v3 Authority Key Identifier: keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b7:f0:73:c5:c9:c8:40:cb:e5:cd:8d:d2:3c:65:a3:70:0d: cc:e7:0b:46:59:0d:02:d8:f3:75:c6:70:d3:44:97:69:1c:a9: 14:b8:bd:29:5e:b0:98:0c:4b:b2:f5:50:9c:46:4a:4b:f5:71: ad:d4:0a:81:e5:77:37:c7:65:94:cb:1b:7a:5a:9d:f5:7e:09: 07:bf:f9:58:1f:04:3f:84:b3:bc:48:13:a7:a8:fa:02:d0:bf: a8:1b:7e:1b:35:88:d9:74:55:af:50:51:15:38:21:1f:f9:f3: aa:ee:13:85:dc:92:53:9b:0c:c4:65:30:67:c2:52:09:27:c6: b4:b0:c9:e6:a1:c3:6d:10:1d:4f:3a:f0:fb:32:9c:06:dc:58: 5e:59:4e:36:35:1b:06:f5:78:1c:85:bb:21:9c:99:09:48:82: c7:b3:8a:6f:e1:92:a9:61:f3:82:a8:3a:75:22:42:b1:06:f4: b9:30:52:62:d1:9c:e9:7f:90:3a:b8:13:08:bb:7e:3d:cf:52: 49:92:83:2f:7f:1c:3f:4b:61:61:61:75:47:8a:dc:52:15:18: b1:d3:06:c2:27:44:02:7d:17:ad:fd:00:fd:cb:e0:db:2c:6b: 22:ca:d1:12:00:4e:79:6e:63:77:a7:0f:a6:c7:96:eb:5c:30: 28:4f:05:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw RDMzMkFEMDEwHhcNMjQwNTE5MDYxNjI3WhcNMjQwNTI2MDYxNjI3WjAYMRYwFAYD VQQDEw02NjQ5OTkzYi05Yjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rUFD2bGGsHO8JG4ghxgmp5LXVzegdNiBzY6c+jyE7s4ghKYabBuyL5eBKmh ZfMPrbVVAWIVKAnamwnM5y6vi+KNLMItRMcUH4gY3Nf9gZGNs2jcfTsl6Sr6B/dj IiE4mS9Uv+aZAz4m0Z1avc9Surc9sxTiNGsue7iLtxYQEslxlmQ4fJFDVDUobrOi difBTL1yqZFrijC5CcTJTN0ZojKJOhM5QGCokdQG4ZoulJydJrOTXFWAsSYOx7Uw NSIZqhE0V+GtKFpOS4s05XZPk5uOvzAJBaE+/yzBXjGDxG8KyyEAYymV4KmPGY7B whNBNHF837Zf/Eu7DWZSG8vffwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLS6zwgS H+uexjzPmcHAxp7rTdkeMB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2 NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla bGduRDZncFRIRm9OTXlyUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXt/BzxcnIQMvlzY3SPGWjcA3M5wtGWQ0C2PN1xnDTRJdpHKkUuL0p XrCYDEuy9VCcRkpL9XGt1AqB5Xc3x2WUyxt6Wp31fgkHv/lYHwQ/hLO8SBOnqPoC 0L+oG34bNYjZdFWvUFEVOCEf+fOq7hOF3JJTmwzEZTBnwlIJJ8a0sMnmocNtEB1P OvD7MpwG3FheWU42NRsG9XgchbshnJkJSILHs4pv4ZKpYfOCqDp1IkKxBvS5MFJi 0Zzpf5A6uBMIu349z1JJkoMvfxw/S2FhYXVHitxSFRix0wbCJ0QCfRet/QD9y+Db LGsiytESAE55bmN3pw+mx5brXDAoTwVw -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org