$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: LEkaK0VBNQ+VHImOuMpcfwILDh+z6MAq3JMEz9T8/Gc= Subject key identifier: 8F:78:6A:44:F3:70:89:45:05:DF:E6:80:CF:16:07:5E:6F:9C:F5:49 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: A9 Signing time: Sun 19 May 2024 06:51:01 +0000 Manifest this update: Sun 19 May 2024 06:51:00 +0000 Manifest next update: Sun 26 May 2024 06:51:00 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: CtJVQGOOQ7EiXsXoA60gN7JsRPO/3zyGKm80vbmeF4w=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: Aa0S8NhZ6avRIqzViExX6WxTYLzcutfhF3IU+SlYafs=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: /Vh/4JY8xCIY7gjrvacdvkrn99MfimK7KiFPU0rc0TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: May 19 06:51:00 2024 GMT Not After : May 26 06:51:00 2024 GMT Subject: CN=6649a154-118c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8e:57:6e:98:b9:58:5c:72:eb:fc:7a:68:22: b0:c0:85:85:18:09:89:ac:2e:5f:35:fd:c6:ac:4a: 7c:74:9c:80:e1:b4:a5:18:81:c1:0a:34:f9:6c:09: 7d:33:dc:33:c5:46:73:17:f4:05:bf:d8:bf:41:40: 38:41:98:d4:86:30:86:0b:d6:cc:da:e7:54:2b:c8: ce:bc:a1:e7:dd:2c:19:71:c3:c4:1d:8a:52:c0:5b: d0:a5:fe:dc:0e:d2:59:ea:c4:8a:ca:53:63:12:05: ad:f0:53:56:da:54:9d:15:90:d0:64:b9:9c:23:76: d7:d7:66:95:06:af:4f:ca:90:b9:f1:ed:4c:e2:5c: c5:2f:9b:d1:c1:b4:ec:8b:1b:a8:bd:c6:d3:76:e8: bb:06:7d:b3:b0:e8:05:39:5b:d5:74:0e:db:44:00: ca:6c:5f:d9:52:3e:cf:a0:86:ce:f4:6e:a8:6d:06: 76:67:1f:94:c1:40:c0:cc:31:79:39:d5:e9:71:44: 11:f1:6f:b2:9f:54:7e:95:6b:65:4c:ad:f7:e2:b1: 70:30:d9:bb:9f:48:48:fa:fb:1c:d7:5c:fd:c7:7f: bf:97:23:c0:99:64:16:84:c0:c0:e9:b2:86:62:45: c2:63:d2:16:aa:b4:29:7a:d7:4e:37:29:2f:76:d5: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:78:6A:44:F3:70:89:45:05:DF:E6:80:CF:16:07:5E:6F:9C:F5:49 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:28:3b:47:0e:8c:e8:3e:eb:eb:f6:e9:5c:99:e5:0d:cc:b0: b5:56:62:d8:ab:3f:49:a6:41:fc:bd:ed:93:cf:1c:6e:47:6a: c9:11:93:a7:72:3d:a4:f5:23:79:35:f1:01:8a:e8:1a:3d:46: 31:6f:97:6a:96:e7:6e:e1:db:f0:b2:c4:5f:22:0d:4d:56:39: 98:5c:a1:12:47:2a:21:26:36:fb:b9:ba:66:b8:af:d1:f0:74: b0:46:05:16:9e:e4:2f:cc:7e:03:e4:c7:ae:c7:fa:52:21:80: 3b:96:2e:c6:5c:00:9b:3c:2b:de:19:20:43:f2:76:ee:91:35: 2b:45:84:7b:41:f1:9e:e2:0c:36:43:29:b4:ca:bf:3e:38:b3: db:e8:23:ca:e6:48:b2:1a:27:36:ed:2b:99:43:53:e5:74:d7: c5:4d:99:a2:6e:f1:6a:ce:1e:0b:aa:e4:bd:9c:d6:29:2f:02: fa:5a:4d:a5:26:21:3f:48:e1:a7:d1:2c:2b:9a:fa:98:63:92: 1d:29:6d:5f:ad:c2:9d:5c:c9:72:4f:91:f7:73:2e:5a:7e:d1: 74:ee:5e:34:d4:20:ab:04:91:73:fd:b9:f1:de:7e:b0:d5:ac: c8:c4:63:5e:41:f9:e9:89:fd:a1:6d:ad:dd:9e:27:87:f1:43: 9e:1d:bf:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjQwNTE5MDY1MTAwWhcNMjQwNTI2MDY1MTAwWjAYMRYwFAYD VQQDEw02NjQ5YTE1NC0xMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4o5Xbpi5WFxy6/x6aCKwwIWFGAmJrC5fNf3GrEp8dJyA4bSlGIHBCjT5bAl9 M9wzxUZzF/QFv9i/QUA4QZjUhjCGC9bM2udUK8jOvKHn3SwZccPEHYpSwFvQpf7c DtJZ6sSKylNjEgWt8FNW2lSdFZDQZLmcI3bX12aVBq9PypC58e1M4lzFL5vRwbTs ixuovcbTdui7Bn2zsOgFOVvVdA7bRADKbF/ZUj7PoIbO9G6obQZ2Zx+UwUDAzDF5 OdXpcUQR8W+yn1R+lWtlTK334rFwMNm7n0hI+vsc11z9x3+/lyPAmWQWhMDA6bKG YkXCY9IWqrQpetdONykvdtV0gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI94akTz cIlFBd/mgM8WB15vnPVJMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMKDtHDozoPuvr9ulcmeUNzLC1VmLYqz9JpkH8ve2TzxxuR2rJEZOn cj2k9SN5NfEBiugaPUYxb5dqludu4dvwssRfIg1NVjmYXKESRyohJjb7ubpmuK/R 8HSwRgUWnuQvzH4D5Meux/pSIYA7li7GXACbPCveGSBD8nbukTUrRYR7QfGe4gw2 Qym0yr8+OLPb6CPK5kiyGic27SuZQ1PldNfFTZmibvFqzh4LquS9nNYpLwL6Wk2l JiE/SOGn0SwrmvqYY5IdKW1frcKdXMlyT5H3cy5aftF07l401CCrBJFz/bnx3n6w 1azIxGNeQfnpif2hba3dnieH8UOeHb/H -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org