$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: mh9PHiIxdP/Ivl4itHZbS1YvvrC8a02USiO1STGp1Rk= Subject key identifier: 40:45:04:46:A1:5E:D5:28:8E:BA:46:98:C6:64:A4:4E:E0:26:A9:39 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2A0D Signing time: Sat 18 May 2024 15:50:31 +0000 Manifest this update: Sat 18 May 2024 15:50:31 +0000 Manifest next update: Sat 25 May 2024 15:50:31 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: 04XfigR/OKIgVAKXXCGKM/th+au7OUztglA/5w0URqk=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: l1nTT7+xnT2KZzHtRz1G5Vgt1HM0tCreeyUhAS32YVM=) 3: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: x+l1AZhaE2EQsLNkr34oVRQM5UjzndUuKfVANsc9uB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10823 (0x2a47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: May 18 15:50:31 2024 GMT Not After : May 25 15:50:31 2024 GMT Subject: CN=6648ce47-c62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:d9:5a:10:49:24:46:1c:33:b5:45:9f:1e: e4:4f:6e:16:5d:db:89:65:6a:df:5e:5b:32:38:f1: d4:c5:25:20:be:6a:8d:ee:84:a9:bc:09:55:65:ba: 22:63:70:8e:bc:37:bf:b4:19:06:e8:49:1c:c6:51: 3e:d0:20:7b:f9:64:00:04:c4:74:5f:a2:7e:65:dc: 26:71:b7:09:2d:d8:fe:f7:1f:c9:93:32:f4:b3:d7: 0d:93:5d:0e:b5:85:66:84:99:4d:12:9b:5d:c6:15: a8:dc:71:f0:ae:be:64:91:04:6d:05:51:ab:ec:99: 1a:7f:00:4f:1e:e9:58:7b:90:bb:2b:59:98:65:2a: 72:89:18:74:04:b5:7f:8e:ef:4c:02:4a:d4:a2:c3: 78:8b:92:23:c0:f7:c6:08:be:f8:7f:31:5c:b0:df: 2e:7c:6c:96:29:eb:5c:02:ed:04:0a:3e:a8:16:9f: fc:34:6f:08:7c:42:04:f6:bd:ab:e3:62:24:7b:39: 1f:6a:13:3d:65:99:01:84:69:09:55:39:51:21:a8: ef:82:d3:96:a8:39:99:3d:d2:e0:7d:24:93:ee:72: 74:55:ad:80:00:c3:89:cb:82:d7:29:37:53:0c:1a: 59:6c:25:5f:61:b5:5c:cd:c9:ab:a5:49:a0:40:77: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:45:04:46:A1:5E:D5:28:8E:BA:46:98:C6:64:A4:4E:E0:26:A9:39 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6e:db:74:57:96:09:71:8d:59:4a:63:f9:a7:b3:d5:8d:14: 23:68:3c:0e:68:6a:17:89:33:e1:5a:4c:22:b9:2b:d3:4d:bf: b3:71:75:e2:c4:bf:9f:75:72:a3:f3:a8:9d:43:03:70:8b:0b: 6e:4c:12:b5:2f:9e:46:09:52:ed:10:65:f3:06:08:3f:4e:77: 7f:ac:fb:f7:d5:c0:59:7e:ff:af:77:bb:43:14:1e:04:78:90: 3e:cf:b7:64:90:83:b2:77:dc:f2:7c:84:14:28:52:f0:b8:35: f6:24:5a:52:ca:64:51:35:99:2d:98:46:04:db:5d:6f:98:3e: f8:e1:31:17:f8:7d:d6:22:66:ea:34:91:e0:23:ed:26:fb:e4: 4f:06:a0:57:5e:8e:2d:c1:db:2a:b4:da:8c:91:2c:34:10:69: ac:94:86:57:7b:b2:01:c9:b5:e9:54:38:21:ca:b7:44:3f:8c: 72:18:29:f5:3d:55:97:68:fb:e2:f6:e0:d8:26:16:3d:56:67: 8a:da:7f:d4:6a:8a:e9:80:8f:4a:da:f5:91:1f:68:d7:a7:da: d1:a1:95:8c:04:b8:96:86:aa:6e:8d:40:f8:f7:35:97:48:2c: 91:0e:2c:5d:7f:b3:79:9e:9a:62:90:83:e1:48:83:66:0c:e6: e2:6a:c7:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjQwNTE4MTU1MDMxWhcNMjQwNTI1MTU1MDMxWjAYMRYwFAYD VQQDEw02NjQ4Y2U0Ny1jNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJbZWhBJJEYcM7VFnx7kT24WXduJZWrfXlsyOPHUxSUgvmqN7oSpvAlVZboi Y3COvDe/tBkG6EkcxlE+0CB7+WQABMR0X6J+ZdwmcbcJLdj+9x/JkzL0s9cNk10O tYVmhJlNEptdxhWo3HHwrr5kkQRtBVGr7JkafwBPHulYe5C7K1mYZSpyiRh0BLV/ ju9MAkrUosN4i5IjwPfGCL74fzFcsN8ufGyWKetcAu0ECj6oFp/8NG8IfEIE9r2r 42IkezkfahM9ZZkBhGkJVTlRIajvgtOWqDmZPdLgfSST7nJ0Va2AAMOJy4LXKTdT DBpZbCVfYbVczcmrpUmgQHcU8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBFBEah XtUojrpGmMZkpE7gJqk5MB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGbtt0V5YJcY1ZSmP5p7PVjRQjaDwOaGoXiTPhWkwiuSvTTb+zcXXi xL+fdXKj86idQwNwiwtuTBK1L55GCVLtEGXzBgg/Tnd/rPv31cBZfv+vd7tDFB4E eJA+z7dkkIOyd9zyfIQUKFLwuDX2JFpSymRRNZktmEYE211vmD744TEX+H3WImbq NJHgI+0m++RPBqBXXo4twdsqtNqMkSw0EGmslIZXe7IBybXpVDghyrdEP4xyGCn1 PVWXaPvi9uDYJhY9VmeK2n/UaorpgI9K2vWRH2jXp9rRoZWMBLiWhqpujUD49zWX SCyRDixdf7N5nppikIPhSINmDObiascA -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org