$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: vuM0GllDIhlkLRU4gjOhTiYUXgUUYBpKGEPa0LLlh+M= Subject key identifier: E6:11:7F:84:AF:96:CD:FD:AB:A3:BD:F9:D2:15:11:B3:66:A9:7F:6E Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0B00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0AF6 Signing time: Sat 18 May 2024 20:01:07 +0000 Manifest this update: Sat 18 May 2024 20:01:05 +0000 Manifest next update: Sat 25 May 2024 20:01:05 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: LN/PM00CgXGyhqQCiA3zf0csEGNI30clgzk+LPHhtao=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: Ck1WD7p4avD14kYk6acsE6Oxjn8NFvEZZQEZtK+VTmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2816 (0xb00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: May 18 20:01:05 2024 GMT Not After : May 25 20:01:05 2024 GMT Subject: CN=66490901-dfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:d1:00:81:b2:66:be:7d:6c:f9:5c:f3:a1: 6b:8b:5f:96:0e:cf:68:fb:02:a9:bc:24:4c:34:b3: 35:5b:bf:7e:cc:df:af:d6:d8:53:3c:8f:c3:6d:ec: 8b:28:65:79:f4:c8:36:27:9a:d8:23:3a:9a:1f:94: d3:4a:94:e1:8d:d4:36:8a:31:ab:4a:b7:cf:b0:95: 35:54:03:2d:32:6f:5d:59:1a:9b:6a:39:34:0f:99: 90:be:ed:9e:b7:4c:ac:f8:7f:1e:b8:db:d3:4f:48: 7b:8d:36:4d:b7:4b:48:de:86:6d:b9:ac:89:70:6e: a5:52:8e:c5:0e:6c:96:af:9a:8a:e8:0a:cf:05:8c: de:09:63:67:70:ca:79:5a:ae:8a:db:16:ef:d5:a0: 44:2e:5a:12:3b:70:47:c4:78:8b:45:b5:42:1c:70: ee:45:85:81:4f:bd:e5:10:05:e5:40:ce:db:15:c5: a2:59:0c:a7:00:1a:9f:a1:4b:c3:f2:22:e2:d1:af: df:21:5f:62:2a:48:5f:a7:c5:0f:db:eb:a8:7e:1d: 41:a8:a5:76:6e:5d:60:d4:71:f3:f9:98:bd:9b:b6: 38:61:6e:8e:9c:dd:ea:86:3a:d8:84:f0:08:cb:d4: 54:a4:27:8a:16:54:14:09:02:f5:a7:6d:88:4d:0e: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:11:7F:84:AF:96:CD:FD:AB:A3:BD:F9:D2:15:11:B3:66:A9:7F:6E X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:63:13:89:3d:27:aa:d8:3d:23:bd:72:81:8a:fc:9a:0a:ec: 94:8f:39:d7:9b:5d:fe:bf:30:17:51:5f:1e:f5:b9:f6:73:14: a2:e8:d9:90:c1:8c:5e:ec:84:3b:d0:f0:89:c6:6c:42:77:6c: f7:b7:90:2d:8e:e7:85:ad:0c:0a:1e:8c:97:98:e2:dd:e2:9d: c2:32:2d:40:35:ad:eb:b4:38:13:3c:76:ac:cb:8c:ea:2a:41: e4:69:90:50:2d:e0:70:c8:ed:69:15:6d:9d:4c:01:c8:76:a0: 0d:f1:d4:11:be:eb:04:c0:4c:2e:ee:d6:93:d4:2a:9c:2e:b1: 67:fe:9a:0e:c0:27:cb:f0:3e:b8:c1:5b:9d:f0:8d:7d:b4:1b: d5:43:b3:fa:a5:2e:96:5f:e3:e3:83:fb:5d:a0:3e:0c:d2:22: 59:e9:fc:c9:22:a2:e3:3e:0e:5b:71:23:b1:69:c4:e3:ea:6d: ed:5b:29:ad:46:d5:2d:a6:7b:a2:b7:bf:3c:a3:10:d0:84:f0: 7f:ed:8d:e1:2c:ee:b1:95:64:d8:f6:24:2a:1f:c4:d6:75:04: 3f:fc:41:24:74:18:e9:d8:18:de:b5:e7:de:86:97:22:82:68: 30:13:ee:99:c2:87:9f:b5:79:70:ca:13:0b:15:ad:e1:96:cc: 5a:77:69:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjQwNTE4MjAwMTA1WhcNMjQwNTI1MjAwMTA1WjAYMRYwFAYD VQQDEw02NjQ5MDkwMS1kZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzzRAIGyZr59bPlc86Fri1+WDs9o+wKpvCRMNLM1W79+zN+v1thTPI/DbeyL KGV59Mg2J5rYIzqaH5TTSpThjdQ2ijGrSrfPsJU1VAMtMm9dWRqbajk0D5mQvu2e t0ys+H8euNvTT0h7jTZNt0tI3oZtuayJcG6lUo7FDmyWr5qK6ArPBYzeCWNncMp5 Wq6K2xbv1aBELloSO3BHxHiLRbVCHHDuRYWBT73lEAXlQM7bFcWiWQynABqfoUvD 8iLi0a/fIV9iKkhfp8UP2+uofh1BqKV2bl1g1HHz+Zi9m7Y4YW6OnN3qhjrYhPAI y9RUpCeKFlQUCQL1p22ITQ5tQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYRf4Sv ls39q6O9+dIVEbNmqX9uMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIYxOJPSeq2D0jvXKBivyaCuyUjznXm13+vzAXUV8e9bn2cxSi6NmQ wYxe7IQ70PCJxmxCd2z3t5AtjueFrQwKHoyXmOLd4p3CMi1ANa3rtDgTPHasy4zq KkHkaZBQLeBwyO1pFW2dTAHIdqAN8dQRvusEwEwu7taT1CqcLrFn/poOwCfL8D64 wVud8I19tBvVQ7P6pS6WX+Pjg/tdoD4M0iJZ6fzJIqLjPg5bcSOxacTj6m3tWymt RtUtpnuit788oxDQhPB/7Y3hLO6xlWTY9iQqH8TWdQQ//EEkdBjp2Bjetefehpci gmgwE+6ZwoeftXlwyhMLFa3hlsxad2nN -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org