$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: DhviIcGGWNTDVtDISgkuc1M0DersRE68yGPaRLMbHTg= Subject key identifier: 27:A0:C9:F5:CA:25:26:1E:1C:4E:EE:A9:26:0E:9C:6D:2E:0D:71:B8 Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 0516 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 0509 Signing time: Sun 19 May 2024 01:12:13 +0000 Manifest this update: Sun 19 May 2024 01:12:12 +0000 Manifest next update: Sun 26 May 2024 01:12:12 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: hQ3IWXN1rgdf8kO0jEfDjKNi+HV+i+XjUdJ/3BNueYM=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: GjMNzKAU9vUedZERFscZm/kqyfvILrLHW9BkAqVu3Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1302 (0x516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: May 19 01:12:12 2024 GMT Not After : May 26 01:12:12 2024 GMT Subject: CN=664951ed-36de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:80:e4:ae:65:ef:ba:d5:1e:f4:62:84:7e: 39:ce:5d:5c:27:41:81:94:3e:0c:35:0c:ca:de:eb: 2d:02:9a:33:c3:fc:a6:e7:2f:d0:0b:1a:47:cd:d7: a3:c7:2b:e8:ac:c5:d3:7f:73:fb:d6:a3:ae:60:b6: 1c:92:3b:12:49:fc:17:ce:73:1d:50:f7:c5:eb:af: c7:39:cd:6c:6f:9d:6a:ec:66:f0:a7:d0:70:fe:1b: 71:f9:4f:f4:7c:77:fa:50:fd:21:42:02:e6:d1:33: bd:21:e3:e7:a1:da:7a:52:04:d1:c0:58:36:91:b0: 38:9f:fe:01:4b:d4:bc:e0:9c:43:b7:1f:20:27:da: b0:66:34:f1:00:d6:b4:2c:51:b4:e0:19:64:99:bf: 31:29:27:f5:5d:97:e1:79:63:d1:b8:49:09:42:64: 00:d1:37:05:8f:36:c8:c9:92:9e:f1:7a:9d:7e:cf: 14:de:14:11:e1:a3:13:31:0e:4d:52:39:22:19:eb: c3:dc:d6:f1:c6:68:7a:8e:42:e5:1b:1a:30:ef:52: 0e:3e:e2:4d:c9:4f:cb:44:66:48:85:16:48:97:b5: ce:0b:cc:c0:a2:ed:c5:f9:ab:51:9e:ef:57:56:dc: 08:5b:dd:e8:31:94:46:9d:34:a1:cc:40:44:dd:ef: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A0:C9:F5:CA:25:26:1E:1C:4E:EE:A9:26:0E:9C:6D:2E:0D:71:B8 X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:48:c5:df:b0:fc:d5:13:81:4c:0d:cb:7e:f7:e9:da:64:bf: e9:9c:55:fb:c6:af:81:6d:9d:4f:26:fa:16:4f:25:04:6c:0f: b8:ff:6a:fb:20:43:67:b9:67:a4:46:73:d9:62:00:7f:ac:6c: 88:b3:d2:d3:a9:40:25:58:58:7e:0f:75:2a:bf:d8:49:7d:01: 28:76:66:37:59:5c:5e:9f:3d:2b:84:16:b9:82:a9:d3:ed:6b: cb:6c:50:3f:c3:5c:29:8b:63:f4:65:1c:33:60:a6:29:89:fc: 19:de:dd:aa:82:77:5d:54:c2:61:c6:77:01:81:a7:ba:b6:d6: e9:44:b6:7a:05:0c:48:6f:ff:71:87:30:f8:2f:ae:38:fd:f1: 5c:51:47:ce:fb:50:23:6a:2b:0b:28:e5:d0:c7:57:b8:c9:ed: 02:6e:42:25:89:9b:d3:62:1b:95:2b:06:6a:4c:5e:e8:22:e6: d7:06:79:3a:e9:fa:3c:c0:f9:fc:eb:e1:fc:f2:ef:33:7f:04: b1:bd:f3:e2:3f:00:ae:55:6d:d9:dc:36:bb:53:b4:aa:b0:1d: cf:e6:ef:5a:14:a1:72:19:7b:0f:78:6f:aa:10:12:ea:d9:8f: 04:87:8b:e2:79:76:0b:0c:14:04:a7:85:15:2b:54:cd:31:a3: 00:20:f3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjQwNTE5MDExMjEyWhcNMjQwNTI2MDExMjEyWjAYMRYwFAYD VQQDEw02NjQ5NTFlZC0zNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuumA5K5l77rVHvRihH45zl1cJ0GBlD4MNQzK3ustApozw/ym5y/QCxpHzdej xyvorMXTf3P71qOuYLYckjsSSfwXznMdUPfF66/HOc1sb51q7Gbwp9Bw/htx+U/0 fHf6UP0hQgLm0TO9IePnodp6UgTRwFg2kbA4n/4BS9S84JxDtx8gJ9qwZjTxANa0 LFG04Blkmb8xKSf1XZfheWPRuEkJQmQA0TcFjzbIyZKe8Xqdfs8U3hQR4aMTMQ5N UjkiGevD3Nbxxmh6jkLlGxow71IOPuJNyU/LRGZIhRZIl7XOC8zAou3F+atRnu9X VtwIW93oMZRGnTShzEBE3e/zKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCegyfXK JSYeHE7uqSYOnG0uDXG4MB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiSMXfsPzVE4FMDct+9+naZL/pnFX7xq+BbZ1PJvoWTyUEbA+4/2r7 IENnuWekRnPZYgB/rGyIs9LTqUAlWFh+D3Uqv9hJfQEodmY3WVxenz0rhBa5gqnT 7WvLbFA/w1wpi2P0ZRwzYKYpifwZ3t2qgnddVMJhxncBgae6ttbpRLZ6BQxIb/9x hzD4L644/fFcUUfO+1AjaisLKOXQx1e4ye0CbkIliZvTYhuVKwZqTF7oIubXBnk6 6fo8wPn86+H88u8zfwSxvfPiPwCuVW3Z3Da7U7SqsB3P5u9aFKFyGXsPeG+qEBLq 2Y8Eh4vieXYLDBQEp4UVK1TNMaMAIPMU -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org