$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json) Hash identifier: eUxIQ7pLc2LS3gr1ecK2UrVxmqgfY25ZdGFf5IaqcDI= Subject key identifier: 16:52:DF:27:90:AF:F5:E3:C6:B2:45:63:95:68:09:37:59:EF:43:9B Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft Manifest number: 010A Signing time: Sun 19 May 2024 05:31:46 +0000 Manifest this update: Sun 19 May 2024 05:31:46 +0000 Manifest next update: Sun 26 May 2024 05:31:46 +0000 Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: gjAk0QS9ZIbqIOJ955fSIvAKX41cVc+zM54mcNYtTew=) 2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: eQ2WRGlkPYQhR/9zYv45ZwxC5Ts9bN3eQubOpmDwz/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Validity Not Before: May 19 05:31:46 2024 GMT Not After : May 26 05:31:46 2024 GMT Subject: CN=66498ec2-7114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:6d:f9:93:7e:14:a4:0f:68:4c:71:60:79: 8c:7a:d6:38:29:74:b8:5d:62:15:ff:e0:6f:47:7e: 89:4b:ee:4d:58:76:09:a9:92:2b:23:88:2a:91:43: f8:84:40:aa:65:77:69:5e:f2:d7:fe:b3:84:02:a9: 78:e9:66:ce:b7:b4:63:7b:51:ee:3a:f1:df:2c:fc: 96:b1:e4:93:93:7a:3e:33:49:f3:18:4b:0e:5c:2d: 55:2e:ef:5a:e3:d9:6a:75:07:65:2d:a7:95:5a:b0: 12:3e:67:6a:33:49:51:e2:bd:a4:42:a5:0d:1f:15: db:47:b6:7c:8b:70:32:cf:f3:d6:04:6e:73:1f:48: 21:b7:71:1f:32:46:fa:b5:a6:49:d7:f4:18:ca:3a: e1:29:ab:16:c0:02:d6:3a:7f:4c:7f:6d:52:49:aa: 70:3c:85:10:53:ef:d1:ed:45:49:4a:82:2b:0b:3b: fb:bb:df:57:ff:d4:6d:0b:96:87:75:2c:be:34:e9: bc:e9:79:b0:b6:a5:e8:15:76:58:fa:60:47:a4:64: 0d:89:73:0a:b2:e4:10:49:b7:4b:c6:be:50:45:1c: d7:70:1f:0d:29:f8:61:77:ea:18:24:d1:8e:92:22: d5:b2:92:a4:01:d6:ea:cd:8a:65:90:2c:91:53:07: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:52:DF:27:90:AF:F5:E3:C6:B2:45:63:95:68:09:37:59:EF:43:9B X509v3 Authority Key Identifier: keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:29:ea:ac:88:21:98:ad:2e:69:49:25:83:4e:75:f6:21:3d: 23:00:f3:48:cb:eb:e3:03:c9:11:f1:70:f2:04:b1:e7:79:65: d4:40:f0:00:e0:70:58:88:55:02:17:b5:45:b1:fd:85:26:a7: 52:65:e1:d7:27:d0:46:fc:0c:14:39:b9:3d:eb:ba:80:28:bc: 03:39:a5:dc:73:3f:b7:24:b0:36:84:8a:a1:6d:18:93:4b:74: ca:c2:d4:57:ec:8d:c8:2a:00:2a:6a:3e:16:da:c9:6b:61:94: e9:37:6d:b2:c9:7d:46:df:68:71:a2:c9:21:9e:e4:28:dd:56: 48:2a:33:06:27:c9:65:d9:39:e9:63:bc:ce:fc:be:85:a3:96: 85:36:27:e6:f9:65:9c:32:40:6d:eb:0d:3a:52:2a:22:c0:6f: a1:46:1e:64:ec:d4:cc:a8:31:3d:23:2b:c2:dd:85:bd:a8:67: a4:91:ae:4b:91:45:1c:3d:d7:5a:32:dc:51:ae:c9:01:44:e0: 19:41:b8:2e:bc:a4:93:e9:c7:ca:4b:2e:74:ce:87:28:20:be: 56:26:c2:26:5f:2a:0b:b0:27:6b:4f:e7:4c:de:b8:51:2d:00: cb:63:0b:0f:87:9a:20:1e:6f:52:1d:76:43:d7:80:0b:9b:f5: 32:66:8d:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCMkQxMTAvBgNVBAUTKEQ2Qjc1MTRDQkYwQkUyMDQ2QzEzQ0EwRDdGNUQyMjM1 MkZEQTU4RUUwHhcNMjQwNTE5MDUzMTQ2WhcNMjQwNTI2MDUzMTQ2WjAYMRYwFAYD VQQDEw02NjQ5OGVjMi03MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFBt+ZN+FKQPaExxYHmMetY4KXS4XWIV/+BvR36JS+5NWHYJqZIrI4gqkUP4 hECqZXdpXvLX/rOEAql46WbOt7Rje1HuOvHfLPyWseSTk3o+M0nzGEsOXC1VLu9a 49lqdQdlLaeVWrASPmdqM0lR4r2kQqUNHxXbR7Z8i3Ayz/PWBG5zH0ght3EfMkb6 taZJ1/QYyjrhKasWwALWOn9Mf21SSapwPIUQU+/R7UVJSoIrCzv7u99X/9RtC5aH dSy+NOm86XmwtqXoFXZY+mBHpGQNiXMKsuQQSbdLxr5QRRzXcB8NKfhhd+oYJNGO kiLVspKkAdbqzYplkCyRUwdbcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZS3yeQ r/XjxrJFY5VoCTdZ70ObMB8GA1UdIwQYMBaAFNa3UUy/C+IEbBPKDX9dIjUv2lju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEIyRC8wMzFGNDUxRTgz N0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRnUnNFOG9OZjEwaU5TX2FX TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyZFJUTDhMNGdSc0U4b05mMTBpTlNfYVdPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEIyRC8wMzFGNDUxRTgzN0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRn UnNFOG9OZjEwaU5TX2FXTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPKeqsiCGYrS5pSSWDTnX2IT0jAPNIy+vjA8kR8XDyBLHneWXUQPAA 4HBYiFUCF7VFsf2FJqdSZeHXJ9BG/AwUObk967qAKLwDOaXccz+3JLA2hIqhbRiT S3TKwtRX7I3IKgAqaj4W2slrYZTpN22yyX1G32hxoskhnuQo3VZIKjMGJ8ll2Tnp Y7zO/L6Fo5aFNifm+WWcMkBt6w06UioiwG+hRh5k7NTMqDE9IyvC3YW9qGekka5L kUUcPddaMtxRrskBROAZQbguvKST6cfKSy50zocoIL5WJsImXyoLsCdrT+dM3rhR LQDLYwsPh5ogHm9SHXZD14ALm/UyZo0Y -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org