$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: a2qA+PzN+4FjJ+JephPlizp8dGJ5bu/6FSAkX+sxr1M= Subject key identifier: 31:21:E4:08:92:C7:C6:55:43:77:A9:E4:C8:B6:5A:5E:84:9C:83:E2 Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 0117 Signing time: Sun 19 May 2024 05:17:23 +0000 Manifest this update: Sun 19 May 2024 05:17:23 +0000 Manifest next update: Sun 26 May 2024 05:17:23 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: MLzyAaHViequHU4qjvs8DIos84rtloMdLrZcUJ5z2i8=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: 3+Upn21KBIIQ52u+KXtC8fitbPdwy4fWqI6j9Dzm3Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: May 19 05:17:23 2024 GMT Not After : May 26 05:17:23 2024 GMT Subject: CN=66498b63-f692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:2d:2b:98:3d:39:e3:f3:af:60:7e:ac:c3: ae:e5:d3:7c:d9:f0:07:7f:b3:82:5d:b9:f9:65:25: 0c:3d:10:87:94:77:91:b8:fc:23:5e:ed:3e:0f:44: 32:be:7e:0e:3d:ee:43:2a:71:39:90:bd:d9:bb:a6: 55:80:5e:2d:0a:0e:89:99:46:19:d5:51:55:3d:ee: 8a:6b:9e:3e:99:5b:9f:0e:bf:66:ae:91:0c:da:34: c8:9b:ff:dd:68:4e:b7:55:57:af:72:d7:cd:6c:d2: 13:9a:f5:62:5d:41:dd:ca:9d:f7:35:4c:9f:0d:36: d5:0e:79:d4:e4:6f:ca:98:77:c3:78:a3:0f:77:61: ad:17:64:1e:8b:03:f0:8a:10:e0:2e:94:c9:5c:63: 9a:e8:46:82:d3:f9:ef:18:82:04:35:2a:b0:4a:83: 40:25:3f:5e:00:2a:8f:99:72:92:b5:a9:6f:9a:37: 19:4b:c5:5f:12:ef:6f:54:ac:ac:56:1e:59:09:71: e0:68:b9:50:99:81:67:2a:32:a2:82:08:fb:b7:8c: 4f:4f:3b:4d:c5:03:33:1e:f6:10:09:66:c0:7c:2b: 16:5a:ec:63:ef:fa:b8:d5:f4:05:fd:9a:7e:5e:87: 9c:8d:14:0c:bb:5f:a4:24:c6:b8:71:90:cb:40:7b: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:21:E4:08:92:C7:C6:55:43:77:A9:E4:C8:B6:5A:5E:84:9C:83:E2 X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:88:9f:b7:8d:93:55:f6:31:d1:d1:85:05:b7:23:ba:37:a3: 9c:ab:ca:80:b7:92:6e:8c:a0:38:c1:d7:29:fe:ce:96:cb:2a: e1:6d:b7:21:c4:1b:1b:84:16:52:f8:9c:d5:53:78:a3:67:ea: a8:05:1d:48:dc:c3:30:d1:85:8e:e6:c8:ec:0e:58:54:ab:84: 7a:de:01:69:b2:0f:36:1e:cc:15:bc:06:dc:c5:85:e5:59:34: fe:ae:4c:36:63:e5:24:65:0e:07:c0:df:30:1b:c9:22:bd:bb: ea:c9:29:1b:df:65:cc:5e:fd:ad:ba:16:bc:50:38:66:be:b5: ff:76:62:c9:a5:1b:39:39:b8:38:d0:9d:de:36:42:29:0f:72: 38:32:6e:fb:bd:91:6a:36:1c:88:7a:38:e3:61:a3:1b:7c:dd: c2:e3:8c:64:a2:c5:2d:c5:3a:d7:58:cd:e6:2c:17:d2:ae:22: f6:df:12:94:71:2e:19:3a:25:57:36:4e:e4:b7:75:df:eb:71: b3:54:b5:48:e8:fd:d8:b5:1c:49:77:66:13:a8:31:d8:25:f0: 6d:6e:04:4b:ae:9b:13:fc:ce:49:b9:b1:3f:fe:67:f7:c5:1b: d1:ea:f7:38:99:17:71:d3:39:10:0a:3c:54:48:b7:94:61:8f: e2:25:31:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjQwNTE5MDUxNzIzWhcNMjQwNTI2MDUxNzIzWjAYMRYwFAYD VQQDEw02NjQ5OGI2My1mNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wItK5g9OePzr2B+rMOu5dN82fAHf7OCXbn5ZSUMPRCHlHeRuPwjXu0+D0Qy vn4OPe5DKnE5kL3Zu6ZVgF4tCg6JmUYZ1VFVPe6Ka54+mVufDr9mrpEM2jTIm//d aE63VVevctfNbNITmvViXUHdyp33NUyfDTbVDnnU5G/KmHfDeKMPd2GtF2QeiwPw ihDgLpTJXGOa6EaC0/nvGIIENSqwSoNAJT9eACqPmXKStalvmjcZS8VfEu9vVKys Vh5ZCXHgaLlQmYFnKjKiggj7t4xPTztNxQMzHvYQCWbAfCsWWuxj7/q41fQF/Zp+ XoecjRQMu1+kJMa4cZDLQHsrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEh5AiS x8ZVQ3ep5Mi2Wl6EnIPiMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQiJ+3jZNV9jHR0YUFtyO6N6Ocq8qAt5JujKA4wdcp/s6Wyyrhbbch xBsbhBZS+JzVU3ijZ+qoBR1I3MMw0YWO5sjsDlhUq4R63gFpsg82HswVvAbcxYXl WTT+rkw2Y+UkZQ4HwN8wG8kivbvqySkb32XMXv2tuha8UDhmvrX/dmLJpRs5Obg4 0J3eNkIpD3I4Mm77vZFqNhyIejjjYaMbfN3C44xkosUtxTrXWM3mLBfSriL23xKU cS4ZOiVXNk7kt3Xf63GzVLVI6P3YtRxJd2YTqDHYJfBtbgRLrpsT/M5JubE//mf3 xRvR6vc4mRdx0zkQCjxUSLeUYY/iJTGn -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org