$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: qgtch4TmcpopHV1iJvloREisoEccQ7MEeXzmXGrvDAE= Subject key identifier: 02:89:49:A3:5D:D7:01:50:FA:E6:D5:D4:8F:81:27:47:0B:B4:B1:04 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1E50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1E41 Signing time: Sat 18 May 2024 16:25:09 +0000 Manifest this update: Sat 18 May 2024 16:25:08 +0000 Manifest next update: Sat 25 May 2024 16:25:08 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: 8lxFa3XwFCrFIr0yYVKMprRdlgtX77C3/pRWiqQrBo4=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: US2vOOdOmbwjdOKwSlqRIv0aYXlY/MBwxivjRy+yLM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7760 (0x1e50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: May 18 16:25:08 2024 GMT Not After : May 25 16:25:08 2024 GMT Subject: CN=6648d664-3934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:3e:71:e5:1e:88:4c:39:70:50:da:45:21: f0:03:8e:ac:34:5a:eb:f4:88:79:f3:4f:9d:a8:55: 50:22:e8:47:78:03:19:ed:60:74:7c:ce:aa:fb:49: 75:16:6f:89:fb:d4:d1:1b:50:00:98:78:a1:13:d7: be:5c:13:e9:7f:7f:af:7f:ec:f6:aa:dd:61:92:a5: b4:3f:7f:b3:7d:f3:77:b9:f7:8c:70:d4:b2:16:de: 37:37:7f:5a:0d:0b:3b:1c:cd:4e:be:a2:56:ad:5b: f4:44:c8:78:6f:84:12:c8:08:ab:2d:19:c8:4b:02: 11:d5:d2:cd:5f:f3:68:40:e5:d2:14:42:c2:46:a4: 43:ee:a5:69:66:f4:1c:1c:9e:4f:10:ef:c0:42:5b: 28:3f:79:59:87:e6:9a:e1:3f:2a:f4:5e:f9:46:33: d2:8d:73:00:47:1f:69:5c:0a:65:c1:39:20:90:18: 8e:7f:2f:ba:7c:2a:5f:16:b1:a1:1c:90:1d:a1:cb: 38:a7:ce:44:b0:d1:b0:94:9d:97:fe:2d:8c:f3:ea: 41:80:ef:99:f2:57:40:b6:81:9b:8a:87:63:22:e5: 95:5b:78:13:b8:7e:19:d6:cf:23:0b:d4:f5:85:97: a9:d6:4f:49:b4:41:8f:90:d2:82:31:02:9c:cf:4f: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:89:49:A3:5D:D7:01:50:FA:E6:D5:D4:8F:81:27:47:0B:B4:B1:04 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5e:41:09:cc:41:6c:9f:85:fa:33:cd:99:bb:90:7e:9e:8d: a0:71:c8:76:11:21:9a:f6:2e:8b:9e:ae:6d:d3:c3:9f:54:86: 68:d1:da:aa:e0:fa:51:37:8b:e1:f0:3c:02:db:51:cd:da:4a: 8e:04:96:d4:75:52:51:7d:19:e4:c1:c3:58:12:84:ed:39:83: 12:c0:4d:c9:76:74:92:a3:f7:6c:69:51:be:10:a9:f1:dc:8b: 41:9e:c7:98:c0:6b:8e:04:86:f3:99:78:e8:67:98:1f:37:b3: 18:3e:da:62:85:a3:56:aa:6c:06:21:b9:12:39:ab:99:7e:59: 49:fe:4d:03:da:dd:99:d4:b8:d8:d5:b6:f9:ee:81:03:a7:ae: f6:26:d9:75:f6:2e:2e:cd:49:54:55:a9:3c:f7:28:b8:58:03: 6b:91:ed:c2:bd:d0:1b:e7:e3:bc:99:fa:72:1d:06:26:5c:f8: a3:4c:f2:27:85:7f:a3:da:99:19:a0:c5:ce:f2:e3:51:e9:22: 1e:88:7b:57:8e:0d:33:bf:41:5c:d9:f5:cc:2d:44:a9:6e:0e: 8d:84:1e:bc:0b:bd:25:ac:f5:d3:8b:c2:dd:d0:a8:c6:3a:69: 86:c1:44:ef:ac:01:06:00:ad:39:2c:a5:c2:6f:32:b2:c0:cd: c8:9f:ba:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjQwNTE4MTYyNTA4WhcNMjQwNTI1MTYyNTA4WjAYMRYwFAYD VQQDEw02NjQ4ZDY2NC0zOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHg+ceUeiEw5cFDaRSHwA46sNFrr9Ih580+dqFVQIuhHeAMZ7WB0fM6q+0l1 Fm+J+9TRG1AAmHihE9e+XBPpf3+vf+z2qt1hkqW0P3+zffN3ufeMcNSyFt43N39a DQs7HM1OvqJWrVv0RMh4b4QSyAirLRnISwIR1dLNX/NoQOXSFELCRqRD7qVpZvQc HJ5PEO/AQlsoP3lZh+aa4T8q9F75RjPSjXMARx9pXAplwTkgkBiOfy+6fCpfFrGh HJAdocs4p85EsNGwlJ2X/i2M8+pBgO+Z8ldAtoGbiodjIuWVW3gTuH4Z1s8jC9T1 hZep1k9JtEGPkNKCMQKcz09EcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKJSaNd 1wFQ+ubV1I+BJ0cLtLEEMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXXkEJzEFsn4X6M82Zu5B+no2gcch2ESGa9i6Lnq5t08OfVIZo0dqq 4PpRN4vh8DwC21HN2kqOBJbUdVJRfRnkwcNYEoTtOYMSwE3JdnSSo/dsaVG+EKnx 3ItBnseYwGuOBIbzmXjoZ5gfN7MYPtpihaNWqmwGIbkSOauZfllJ/k0D2t2Z1LjY 1bb57oEDp672Jtl19i4uzUlUVak89yi4WANrke3CvdAb5+O8mfpyHQYmXPijTPIn hX+j2pkZoMXO8uNR6SIeiHtXjg0zv0Fc2fXMLUSpbg6NhB68C70lrPXTi8Ld0KjG OmmGwUTvrAEGAK05LKXCbzKywM3In7qE -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org