$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft File: n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json) Hash identifier: mrSzn2/oHVkFqe5W+rbIUDSCDaw2HdSfuiCrGLXyDlE= Subject key identifier: 14:4F:DB:98:6F:97:3F:81:D9:82:D6:D6:BE:28:9A:C5:86:A8:28:0D Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 Certificate issuer: /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft Manifest number: 02AD Signing time: Sun 19 May 2024 03:32:37 +0000 Manifest this update: Sun 19 May 2024 03:32:37 +0000 Manifest next update: Sun 26 May 2024 03:32:37 +0000 Files and hashes: 1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: FRTo1NGernfUYszK6LAelf//mcbP69KMVf+pHYp0Nzg=) 2: 2D48DA46AC6A11ECA081B04BC4F9AE02.roa (hash: HUhVwkfdV3sTJrisC5Y30AQGjCeWWgA6aOiWM2Snkps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Validity Not Before: May 19 03:32:37 2024 GMT Not After : May 26 03:32:37 2024 GMT Subject: CN=664972d5-3f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:21:c8:96:fb:0e:32:6a:1e:3f:ea:49:4f:61: 86:b8:97:34:aa:84:02:bb:6a:f7:cc:56:88:e6:55: 6a:da:25:e6:81:7e:8c:7d:64:e3:0d:d0:75:8a:84: e4:d4:06:34:3d:1b:97:3a:86:26:04:2c:d7:44:13: 2a:50:e8:cf:32:14:fc:55:3c:07:4a:2b:6e:e0:ec: b3:d6:e3:64:ed:79:cc:67:2b:fe:3b:6b:21:7b:20: dc:32:b1:99:68:12:bb:c8:4f:f6:b8:b5:fe:b6:44: 3d:a4:35:c1:d7:dc:48:1f:88:0d:cf:8e:1d:2d:88: 7b:5f:da:85:9f:4a:01:92:0f:07:3f:b8:ef:d4:6b: fd:04:82:b0:34:c1:f2:bc:ad:92:bb:1a:b4:16:82: b6:2b:b2:f6:95:01:ba:69:b0:e7:1e:3b:9d:e0:01: b2:78:db:98:8e:16:31:af:e1:dd:1c:b4:c0:19:75: 0d:f8:03:88:d9:51:6e:d2:7f:a6:ea:b8:e3:2e:8a: 60:01:87:4c:6f:32:c5:cb:ec:49:31:a8:eb:34:54: d8:d0:a4:4b:01:e6:60:fe:8c:66:4e:a1:58:ac:5e: 62:34:f4:ca:e7:e8:be:cb:fc:da:a2:49:55:e2:5d: 91:7f:38:94:db:d6:cd:22:d2:bd:52:1c:c3:e8:7a: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:DB:98:6F:97:3F:81:D9:82:D6:D6:BE:28:9A:C5:86:A8:28:0D X509v3 Authority Key Identifier: keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:16:75:74:dd:a8:bb:ac:4e:c1:78:d4:20:be:8a:77:71:2e: eb:a7:d0:96:80:3b:70:be:19:a8:2a:d8:02:af:d9:8b:cd:98: f0:b7:7b:7a:e6:23:ca:a9:21:17:07:ae:dd:df:5f:68:2f:dc: 08:fc:d6:54:ae:f3:d3:df:92:63:cd:5d:c2:a0:a1:45:a7:16: 63:f1:a0:79:f1:e6:5a:f9:b7:09:69:9c:71:67:01:fd:dd:14: 24:88:fc:84:67:8d:ae:1a:40:85:74:92:5b:ba:3c:25:5e:1b: 15:41:03:de:72:d4:c3:29:75:fa:b3:be:33:82:4f:c2:99:d9: 86:fc:3e:b6:fc:9c:d8:2f:ef:0f:a0:c6:9e:23:a1:8c:43:d5: 24:87:24:1b:b0:41:21:d7:ce:28:e4:ed:38:8b:e6:c6:26:6e: 90:a5:d7:f5:2c:f0:0f:eb:f0:ef:79:21:95:7e:5b:b4:d3:ff: 65:9d:b9:14:aa:f9:c6:ea:7d:99:0c:a9:93:78:29:9c:0a:94: a8:e8:4d:56:ad:9d:90:b2:a5:16:8a:d6:39:1d:44:b5:25:3f: 51:20:ab:11:28:17:bf:c7:a7:b2:8b:7f:c0:2b:1d:c1:29:32: 99:d1:ef:1e:c1:38:81:72:d2:1e:37:22:e2:e6:ab:cc:18:87: 53:e8:a2:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDlGOUMyM0QyNzNGNkE5OUM2NUVGQkMwMzBEMkI2ODFF NDIzMjkxNjcwHhcNMjQwNTE5MDMzMjM3WhcNMjQwNTI2MDMzMjM3WjAYMRYwFAYD VQQDEw02NjQ5NzJkNS0zZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8SHIlvsOMmoeP+pJT2GGuJc0qoQCu2r3zFaI5lVq2iXmgX6MfWTjDdB1ioTk 1AY0PRuXOoYmBCzXRBMqUOjPMhT8VTwHSitu4Oyz1uNk7XnMZyv+O2sheyDcMrGZ aBK7yE/2uLX+tkQ9pDXB19xIH4gNz44dLYh7X9qFn0oBkg8HP7jv1Gv9BIKwNMHy vK2Suxq0FoK2K7L2lQG6abDnHjud4AGyeNuYjhYxr+HdHLTAGXUN+AOI2VFu0n+m 6rjjLopgAYdMbzLFy+xJMajrNFTY0KRLAeZg/oxmTqFYrF5iNPTK5+i+y/zaoklV 4l2RfziU29bNItK9UhzD6HobIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRP25hv lz+B2YLW1r4omsWGqCgNMB8GA1UdIwQYMBaAFJ+cI9Jz9qmcZe+8Aw0raB5CMpFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFaeGw3N3dERFN0b0hrSXlr V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL241d2owblAycVp4bDc3d0REU3RvSGtJeWtXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFa eGw3N3dERFN0b0hrSXlrV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByFnV03ai7rE7BeNQgvop3cS7rp9CWgDtwvhmoKtgCr9mLzZjwt3t6 5iPKqSEXB67d319oL9wI/NZUrvPT35JjzV3CoKFFpxZj8aB58eZa+bcJaZxxZwH9 3RQkiPyEZ42uGkCFdJJbujwlXhsVQQPectTDKXX6s74zgk/CmdmG/D62/JzYL+8P oMaeI6GMQ9UkhyQbsEEh184o5O04i+bGJm6Qpdf1LPAP6/DveSGVflu00/9lnbkU qvnG6n2ZDKmTeCmcCpSo6E1WrZ2QsqUWitY5HUS1JT9RIKsRKBe/x6eyi3/AKx3B KTKZ0e8ewTiBctIeNyLi5qvMGIdT6KKR -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org