$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: Tgwj0e0SIT9P9ScofugAFDqFUFsITwT0jF+Gqk0XfgI= Subject key identifier: B3:EE:F2:D0:06:35:AD:C4:8F:88:91:FC:2B:D7:AD:6D:76:68:A9:3F Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: F8 Signing time: Fri 31 May 2024 06:34:10 +0000 Manifest this update: Fri 31 May 2024 06:34:10 +0000 Manifest next update: Fri 07 Jun 2024 06:34:10 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: yhr6mcecThYYp2BZPVqfcPB0iFS0zHghJDjfq8OHiFs=) 2: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: Ay7zs1vbUvuiGBUzSAIsAQOZ+4xjHzR0vqWfzaWXybU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Validity Not Before: May 31 06:34:10 2024 GMT Not After : Jun 7 06:34:10 2024 GMT Subject: CN=66596f62-6356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:72:42:7d:a4:dd:f9:a6:b9:7e:f1:3b:e1: f1:f0:47:c6:ed:7f:9a:f8:73:d8:17:90:97:25:be: 2f:ed:ea:c9:cf:a9:7f:68:f8:7b:1d:d5:20:94:b1: d7:44:49:26:64:b4:5e:c8:1d:c0:a4:61:3d:79:9d: 5f:bd:ab:8c:93:1b:79:e6:ae:87:9a:94:39:e1:d9: c0:51:2c:81:bf:3a:29:4f:4c:e5:a9:e9:a8:66:ae: dd:62:db:47:f3:6c:08:1e:73:7b:6c:a9:4d:7a:5f: 00:3a:2b:a9:8e:30:d4:e0:5a:c6:67:40:a0:4d:a7: 66:43:93:c9:33:a2:79:c8:95:20:0c:e4:d1:eb:5f: 22:ad:37:07:08:26:a7:68:cc:da:8b:95:5a:64:61: 1b:a0:84:a9:ef:f8:cc:e8:06:ff:d1:53:5c:21:06: 57:53:48:70:92:2a:8a:a1:c2:0a:6f:11:e4:b5:6f: 66:9e:5b:f6:31:56:19:11:81:44:37:d3:9a:f4:37: f7:2f:5f:09:4d:95:2f:80:17:d3:f1:52:dd:f7:f5: fc:e7:94:45:0f:3a:64:21:63:0c:d4:bd:d9:1f:59: 66:ca:59:ef:ae:d7:10:18:3c:64:e0:33:a5:44:18: 30:a5:57:41:4e:78:14:ca:87:bc:e1:d4:7c:8b:3a: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EE:F2:D0:06:35:AD:C4:8F:88:91:FC:2B:D7:AD:6D:76:68:A9:3F X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:39:78:85:0c:b6:49:02:01:ae:80:ca:6d:ff:ea:aa:cc:24: 7d:88:f4:c1:bd:a5:a5:75:47:f0:d9:37:f6:d5:99:7f:c3:e6: 1e:c8:34:c8:32:42:d1:35:8f:d0:58:ee:43:d0:80:b0:68:47: 6e:8b:10:b4:f4:f7:96:a3:ce:0a:74:60:1c:d0:a7:55:fd:73: 14:8d:e1:73:c7:17:c1:34:ef:ae:52:7f:39:fd:77:e6:1e:3a: 80:5c:80:c9:e5:ab:4f:94:28:82:79:d7:e1:9c:6a:2d:c4:3d: b1:27:41:ca:9b:05:98:8b:1e:6f:11:e3:29:eb:ff:14:eb:15: f1:89:27:f6:88:e8:4f:74:67:83:5f:bd:ab:a0:26:27:87:33: 64:dc:22:54:3f:cc:f4:44:cb:61:71:1e:bc:f2:8d:5c:46:5f: 4d:72:12:40:2a:6a:34:76:af:b6:f7:ae:65:7e:f9:f2:b4:a7: 78:16:cb:a4:23:66:92:e4:33:be:2a:65:db:c6:95:c8:26:af: 84:b5:a8:51:10:93:47:82:51:c5:66:59:c6:b3:28:41:7a:47: 33:58:48:9b:6f:e4:d6:6a:62:f6:c9:93:76:ef:ee:4c:f9:0c: ca:99:4c:ad:c1:c6:1e:fd:46:11:f4:05:26:67:e7:a0:5c:88: 5d:69:79:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjQwNTMxMDYzNDEwWhcNMjQwNjA3MDYzNDEwWjAYMRYwFAYD VQQDEw02NjU5NmY2Mi02MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCVyQn2k3fmmuX7xO+Hx8EfG7X+a+HPYF5CXJb4v7erJz6l/aPh7HdUglLHX REkmZLReyB3ApGE9eZ1fvauMkxt55q6HmpQ54dnAUSyBvzopT0zlqemoZq7dYttH 82wIHnN7bKlNel8AOiupjjDU4FrGZ0CgTadmQ5PJM6J5yJUgDOTR618irTcHCCan aMzai5VaZGEboISp7/jM6Ab/0VNcIQZXU0hwkiqKocIKbxHktW9mnlv2MVYZEYFE N9Oa9Df3L18JTZUvgBfT8VLd9/X855RFDzpkIWMM1L3ZH1lmylnvrtcQGDxk4DOl RBgwpVdBTngUyoe84dR8izolqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPu8tAG Na3Ej4iR/CvXrW12aKk/MB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMOXiFDLZJAgGugMpt/+qqzCR9iPTBvaWldUfw2Tf21Zl/w+YeyDTI MkLRNY/QWO5D0ICwaEduixC09PeWo84KdGAc0KdV/XMUjeFzxxfBNO+uUn85/Xfm HjqAXIDJ5atPlCiCedfhnGotxD2xJ0HKmwWYix5vEeMp6/8U6xXxiSf2iOhPdGeD X72roCYnhzNk3CJUP8z0RMthcR688o1cRl9NchJAKmo0dq+2965lfvnytKd4Fsuk I2aS5DO+KmXbxpXIJq+EtahREJNHglHFZlnGsyhBekczWEibb+TWamL2yZN27+5M +QzKmUytwcYe/UYR9AUmZ+egXIhdaXmN -----END CERTIFICATE-----Generated at Fri May 31 10:01:40 2024 by rpki-client on console-ams.rpki-client.org