$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: UPMt0mEGPYRoWAe7wmIyl48Mv+46MjC0O6pByqXH1OE= Subject key identifier: 3E:1E:CD:5F:35:0C:A1:28:5E:71:33:0E:E1:E9:B1:C8:FA:77:55:25 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: AA Signing time: Sun 19 May 2024 06:38:01 +0000 Manifest this update: Sun 19 May 2024 06:38:00 +0000 Manifest next update: Sun 26 May 2024 06:38:00 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: 0Y9SjYF88trSgZSYQArQtg1Kya6huFH2I0km20DGIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: May 19 06:38:00 2024 GMT Not After : May 26 06:38:00 2024 GMT Subject: CN=66499e48-5ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:41:bd:8c:fb:ae:ab:26:bb:63:b3:68:4c: 41:ce:14:51:46:c9:d1:54:7a:11:d8:f3:3b:81:a7: fb:50:17:8a:88:bb:96:d7:b9:d2:f6:2e:0c:9b:30: b2:52:0b:7d:15:95:ee:53:50:bf:59:96:77:9f:e4: b3:94:31:08:a8:96:60:f3:d8:8d:2a:f5:d4:69:d4: 4d:8b:15:10:7f:e2:cb:71:8a:f7:e4:67:7d:1d:b8: 53:15:93:59:2d:76:57:5f:07:ee:42:24:93:c7:b3: b3:90:6d:15:6f:0f:80:f5:d2:57:f9:cb:23:86:68: ac:6c:57:81:bb:0a:f3:8d:f2:49:de:98:1e:1d:ab: a3:57:10:57:84:40:e8:aa:6f:8d:76:d6:87:24:7f: 8c:ae:9a:46:b1:85:27:ba:09:3e:f1:13:31:09:62: d5:7a:2d:c8:6a:69:89:8f:f7:9c:8b:0b:3e:e7:8d: 61:b6:8a:39:32:ce:5f:5e:c3:7e:9a:46:2c:6d:38: 84:c8:25:2f:56:62:2a:ff:7b:fa:30:cb:70:d3:3a: 35:ec:ef:e4:bd:39:4a:1b:ac:a1:a7:a5:3d:dd:00: ce:28:2f:3c:ae:cd:63:17:08:b5:28:3a:fc:9d:5e: 4c:f2:51:11:55:17:23:51:4d:b0:21:d2:9c:d2:af: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1E:CD:5F:35:0C:A1:28:5E:71:33:0E:E1:E9:B1:C8:FA:77:55:25 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:72:b3:32:1d:89:14:ff:84:fb:cc:35:f3:19:93:b5:9a:ae: 2e:a0:e8:82:98:52:ed:ab:cd:59:84:96:ea:28:94:23:b6:d9: 42:7f:af:a3:32:5d:17:87:7f:84:8d:6f:72:77:e5:ef:2a:d0: 02:7f:75:77:e6:24:b8:ba:74:ba:01:38:23:29:36:65:c9:8f: bc:8a:cc:9d:c4:34:fe:08:62:d2:d4:10:d6:4c:b7:84:32:bc: 97:c6:01:16:ec:fb:1f:82:69:a3:cf:c8:5f:ee:94:36:65:43: 70:b0:ca:de:f1:00:08:07:b4:d3:6d:99:01:0c:9e:d4:10:4a: 45:05:9b:fb:16:b2:5e:b3:fb:fa:8a:f3:b6:cd:48:03:ff:21: 98:cf:db:46:14:99:b5:cd:49:5f:51:3f:42:ea:8e:30:87:25: 21:e3:58:7b:68:4a:e3:b7:ca:5b:12:3a:02:f5:f3:d9:17:ed: 2d:34:dd:c3:70:5f:e1:84:fe:e4:4b:7d:b4:48:97:81:b2:fc: fd:cc:07:25:24:0c:ee:25:18:54:fa:b9:1d:f3:2c:a3:d8:13: fb:da:72:5f:60:d4:18:d5:9f:2e:0a:33:ad:ed:55:c9:d1:25: 3b:c3:f1:57:4d:62:79:09:2f:61:27:52:ef:bb:42:81:33:43: 9e:94:11:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjQwNTE5MDYzODAwWhcNMjQwNTI2MDYzODAwWjAYMRYwFAYD VQQDEw02NjQ5OWU0OC01YWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYBBvYz7rqsmu2OzaExBzhRRRsnRVHoR2PM7gaf7UBeKiLuW17nS9i4MmzCy Ugt9FZXuU1C/WZZ3n+SzlDEIqJZg89iNKvXUadRNixUQf+LLcYr35Gd9HbhTFZNZ LXZXXwfuQiSTx7OzkG0Vbw+A9dJX+csjhmisbFeBuwrzjfJJ3pgeHaujVxBXhEDo qm+NdtaHJH+MrppGsYUnugk+8RMxCWLVei3IammJj/eciws+541htoo5Ms5fXsN+ mkYsbTiEyCUvVmIq/3v6MMtw0zo17O/kvTlKG6yhp6U93QDOKC88rs1jFwi1KDr8 nV5M8lERVRcjUU2wIdKc0q803QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4ezV81 DKEoXnEzDuHpscj6d1UlMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0crMyHYkU/4T7zDXzGZO1mq4uoOiCmFLtq81ZhJbqKJQjttlCf6+j Ml0Xh3+EjW9yd+XvKtACf3V35iS4unS6ATgjKTZlyY+8isydxDT+CGLS1BDWTLeE MryXxgEW7Psfgmmjz8hf7pQ2ZUNwsMre8QAIB7TTbZkBDJ7UEEpFBZv7FrJes/v6 ivO2zUgD/yGYz9tGFJm1zUlfUT9C6o4whyUh41h7aErjt8pbEjoC9fPZF+0tNN3D cF/hhP7kS320SJeBsvz9zAclJAzuJRhU+rkd8yyj2BP72nJfYNQY1Z8uCjOt7VXJ 0SU7w/FXTWJ5CS9hJ1Lvu0KBM0OelBHA -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org