$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft File: cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json) Hash identifier: 7oBTh+Tg8P1zmgRtF6fqxIUYKywrCMNwPdrxedBEDpw= Subject key identifier: 75:04:A0:27:DD:8E:F8:6F:00:54:76:EF:FF:CB:6A:E0:7C:AE:4C:B7 Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E Certificate issuer: /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft Manifest number: 0131 Signing time: Sun 19 May 2024 05:01:36 +0000 Manifest this update: Sun 19 May 2024 05:01:36 +0000 Manifest next update: Sun 26 May 2024 05:01:36 +0000 Files and hashes: 1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: IO5VlG6ywj1JYALs4mgZNAPJo3EvXpfyrz0AzJ1k1TI=) 2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: 3aaeEi1YrA3uSceTUOZGuJZHBHy8WbpEjF+B/7Isrys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E Validity Not Before: May 19 05:01:36 2024 GMT Not After : May 26 05:01:36 2024 GMT Subject: CN=664987b0-9c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:56:dc:5a:51:3e:0c:13:a9:5c:57:a0:96: c8:3f:eb:7f:e6:f7:0e:3d:04:7e:65:92:0f:23:3a: b5:8d:49:53:35:01:b5:ab:e3:3b:2a:6a:2e:37:12: 6e:cb:72:c4:65:64:eb:f8:82:97:d0:36:17:71:7a: e7:73:fc:fd:f7:ba:a5:54:50:97:d1:91:aa:50:fe: 8d:0c:97:65:0b:85:e6:f5:d5:bc:d3:b3:ca:43:1b: 3e:82:9c:3a:09:22:27:77:b2:f8:17:0e:d0:b5:55: 92:5d:e7:d8:1c:c9:f2:e7:e7:f2:08:87:8d:b6:0b: 0d:78:a1:be:28:bd:b0:70:89:da:40:46:e0:5e:72: 7c:5f:8a:a2:ab:b7:60:a1:2a:35:88:19:d4:0e:46: 13:0e:9b:ba:c8:6b:78:28:46:f3:8b:88:7f:39:12: a0:53:3a:2b:43:e9:1f:9b:93:df:0c:0e:ac:22:16: e5:74:70:83:2d:18:58:97:24:45:da:7e:07:af:ba: c4:45:b2:2b:4f:e1:c7:76:ac:e6:17:06:de:3a:f6: 6e:0d:7b:b9:74:76:9b:02:3f:d1:48:3a:db:4b:ab: 53:c2:b3:28:3c:e1:d6:55:ef:0f:02:e0:9f:dc:bd: 54:76:47:e2:a4:ca:01:51:62:60:e5:6d:75:90:55: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:04:A0:27:DD:8E:F8:6F:00:54:76:EF:FF:CB:6A:E0:7C:AE:4C:B7 X509v3 Authority Key Identifier: keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:9f:dd:b8:ff:6d:08:74:57:c4:e8:8c:8a:7b:ef:1a:98:86: d4:53:2f:c4:d7:92:68:cf:85:a6:f6:c1:10:c5:ab:54:b5:b6: 66:ad:32:bd:3f:c6:e0:c6:bf:31:c1:be:d7:4b:3e:4d:65:97: c2:a7:d0:f5:52:8d:42:64:62:de:ac:65:49:ac:11:7d:53:94: 70:66:ed:dd:59:ce:04:be:76:b7:29:04:8b:ef:ee:13:2c:fd: 7e:d1:f6:77:f4:c7:e5:b4:e2:6c:66:18:c2:19:a2:d1:f9:dd: c2:2e:2a:9a:11:2a:f2:86:6a:6a:bd:5a:6b:dc:7c:71:21:a2: 2b:a9:4f:fb:53:fa:77:c4:95:f5:ce:d4:7e:58:a9:38:96:77: 67:68:04:22:9c:11:a4:6f:26:cc:aa:01:2c:6c:a5:b7:35:1a: b2:64:fa:4a:fd:cb:55:7e:ca:e3:e8:83:7d:62:8a:82:e6:2e: 42:04:b2:44:3c:2d:94:23:b2:aa:62:ce:c8:99:e6:e4:f6:ba: 81:42:11:ff:ca:a3:18:1c:e8:ca:12:fb:e9:c1:ff:f7:b8:36: 47:ef:44:29:0f:b8:88:52:3d:f0:47:8f:36:98:0f:9e:a0:ba: bb:37:26:87:b2:58:2d:b1:65:eb:cd:ae:0c:bd:71:ab:f1:a2: 2c:86:5f:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMjQxMTAvBgNVBAUTKDcwMzZBMjAwNzdGRjg3RkVGQTM0MDBEN0Y5MDc2QjdF MTk4MzhCMkUwHhcNMjQwNTE5MDUwMTM2WhcNMjQwNTI2MDUwMTM2WjAYMRYwFAYD VQQDEw02NjQ5ODdiMC05YzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFtW3FpRPgwTqVxXoJbIP+t/5vcOPQR+ZZIPIzq1jUlTNQG1q+M7KmouNxJu y3LEZWTr+IKX0DYXcXrnc/z997qlVFCX0ZGqUP6NDJdlC4Xm9dW807PKQxs+gpw6 CSInd7L4Fw7QtVWSXefYHMny5+fyCIeNtgsNeKG+KL2wcInaQEbgXnJ8X4qiq7dg oSo1iBnUDkYTDpu6yGt4KEbzi4h/ORKgUzorQ+kfm5PfDA6sIhbldHCDLRhYlyRF 2n4Hr7rERbIrT+HHdqzmFwbeOvZuDXu5dHabAj/RSDrbS6tTwrMoPOHWVe8PAuCf 3L1UdkfipMoBUWJg5W11kFVC3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUEoCfd jvhvAFR27//LauB8rky3MB8GA1UdIwQYMBaAFHA2ogB3/4f++jQA1/kHa34Zg4su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEyNC81NjU1REE3NjQ5 RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hfNzZOQURYLVFkcmZobURp eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEYWlBSGZfaF83Nk5BRFgtUWRyZmhtRGl5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEyNC81NjU1REE3NjQ5RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hf NzZOQURYLVFkcmZobURpeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQn924/20IdFfE6IyKe+8amIbUUy/E15Joz4Wm9sEQxatUtbZmrTK9 P8bgxr8xwb7XSz5NZZfCp9D1Uo1CZGLerGVJrBF9U5RwZu3dWc4Evna3KQSL7+4T LP1+0fZ39MfltOJsZhjCGaLR+d3CLiqaESryhmpqvVpr3HxxIaIrqU/7U/p3xJX1 ztR+WKk4lndnaAQinBGkbybMqgEsbKW3NRqyZPpK/ctVfsrj6IN9YoqC5i5CBLJE PC2UI7KqYs7Imebk9rqBQhH/yqMYHOjKEvvpwf/3uDZH70QpD7iIUj3wR482mA+e oLq7NyaHslgtsWXrza4MvXGr8aIshl+u -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org