$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json) Hash identifier: iBLynOIdql0m79+2HT6+4aFRkZqjp4iOZOZCkxUYk1A= Subject key identifier: 71:17:5F:7F:56:DB:1B:53:18:FD:DC:E9:DA:2D:74:D5:33:CD:D1:3B Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Certificate serial: 3147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft Manifest number: 3137 Signing time: Sat 18 May 2024 15:39:50 +0000 Manifest this update: Sat 18 May 2024 15:39:50 +0000 Manifest next update: Sat 25 May 2024 15:39:50 +0000 Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: P8jEIwhArFPL0OasZgj95icnQGjhyJDVg2CUVI/U+dc=) 2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: GwEd/26xF/DfkXiJJZoepivIT3fVmKJAKhWohZoydz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12615 (0x3147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Validity Not Before: May 18 15:39:50 2024 GMT Not After : May 25 15:39:50 2024 GMT Subject: CN=6648cbc6-94d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:5b:2b:6e:b4:f6:a1:c0:4e:7c:48:7c:88: 2a:15:89:16:e3:8c:72:21:98:55:cf:d2:9f:fd:5b: 55:a6:d7:e6:59:24:a5:51:98:4c:ce:6a:75:f4:16: 97:9e:19:f4:61:6b:06:ff:22:cf:d8:95:8e:1a:7d: c2:3b:8f:b3:72:5d:20:00:ef:8c:4f:93:14:dd:68: 46:42:99:b9:69:71:93:f5:50:35:76:27:ee:ef:f9: f8:72:ce:fc:9d:b9:d6:c8:95:c8:19:06:b3:ba:76: 55:22:97:bc:fe:86:15:b0:4a:4a:3c:12:01:e8:02: 40:66:5f:d0:d3:1c:fe:90:87:2d:0f:0f:7e:8d:d5: 94:08:8c:0b:e6:89:ac:bf:3a:d3:89:3a:eb:ea:35: 8a:be:bc:7f:08:38:52:19:9e:1a:e5:7e:5e:5e:41: 38:54:97:43:f8:91:16:a7:40:b3:10:e9:e4:e5:88: d9:c1:d0:46:75:ad:0a:12:3a:37:aa:7e:68:05:38: 3e:4f:91:b8:e5:eb:32:d4:08:41:dc:b6:2e:2c:d7: 58:f8:19:9f:ba:08:49:9c:52:f8:31:99:18:38:f0: 86:c6:c5:c8:08:7e:9b:d7:43:68:ab:89:f3:96:51: 2a:c1:92:41:72:28:44:c7:fc:84:32:62:89:6a:aa: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:17:5F:7F:56:DB:1B:53:18:FD:DC:E9:DA:2D:74:D5:33:CD:D1:3B X509v3 Authority Key Identifier: keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:73:cf:1f:1a:a8:d0:39:37:c2:48:da:10:3e:cc:b7:86:b3: 7f:1d:dc:f4:0a:07:6f:19:df:5b:6c:0a:07:99:d9:aa:ae:f0: 51:08:83:42:4b:1f:07:5e:f1:58:da:de:e1:d6:79:0e:71:81: 40:09:68:cd:b3:7e:4e:e2:6f:dd:08:77:21:4f:40:69:7a:11: 26:80:b2:e3:68:b3:78:92:b6:a4:4b:6c:3a:93:1b:5c:fd:ab: 48:b7:e0:06:d3:4f:3e:ca:b3:2c:4e:33:26:2c:28:61:1c:2e: d5:d5:f1:f0:b3:b6:24:91:6d:ff:ad:e0:81:25:b2:af:0a:d8: be:07:a1:1b:4d:72:7b:6c:26:f9:90:77:76:63:14:15:08:4b: 5f:eb:ec:73:3c:f0:30:16:b7:52:4e:66:55:84:03:d2:b0:fd: cf:24:02:5e:aa:2b:85:4a:2f:19:b5:b2:f7:da:db:96:0c:3e: 72:85:9c:37:ca:d5:28:97:4a:52:ff:83:2e:67:06:11:53:88: 61:8c:3a:d2:62:b2:9b:fc:13:4b:1b:f9:ab:05:5a:f6:81:ce: a7:2c:44:bf:1d:97:ab:6c:57:db:50:36:cb:ad:01:41:df:ac: 14:0f:fb:79:59:a4:2b:cb:b3:fa:bf:b9:35:dc:dc:35:75:7d: 36:69:f2:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEMDYxMTAvBgNVBAUTKEQzMTU2RkY1MzhBMEQzRjUzOTczODYxRkFENjQzNkZC MUU1RkU4QzAwHhcNMjQwNTE4MTUzOTUwWhcNMjQwNTI1MTUzOTUwWjAYMRYwFAYD VQQDEw02NjQ4Y2JjNi05NGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNNbK2609qHATnxIfIgqFYkW44xyIZhVz9Kf/VtVptfmWSSlUZhMzmp19BaX nhn0YWsG/yLP2JWOGn3CO4+zcl0gAO+MT5MU3WhGQpm5aXGT9VA1difu7/n4cs78 nbnWyJXIGQazunZVIpe8/oYVsEpKPBIB6AJAZl/Q0xz+kIctDw9+jdWUCIwL5oms vzrTiTrr6jWKvrx/CDhSGZ4a5X5eXkE4VJdD+JEWp0CzEOnk5YjZwdBGda0KEjo3 qn5oBTg+T5G45esy1AhB3LYuLNdY+BmfughJnFL4MZkYOPCGxsXICH6b10Noq4nz llEqwZJBcihEx/yEMmKJaqpsGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEXX39W 2xtTGP3c6dotdNUzzdE7MB8GA1UdIwQYMBaAFNMVb/U4oNP1OXOGH61kNvseX+jA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQwNi8xQ0VDQjE4QUEw MDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBfVTVjNFlmcldRMi14NWY2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4VnY5VGlnMF9VNWM0WWZyV1EyLXg1ZjZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQwNi8xQ0VDQjE4QUEwMDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBf VTVjNFlmcldRMi14NWY2TUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcc88fGqjQOTfCSNoQPsy3hrN/Hdz0CgdvGd9bbAoHmdmqrvBRCINC Sx8HXvFY2t7h1nkOcYFACWjNs35O4m/dCHchT0BpehEmgLLjaLN4krakS2w6kxtc /atIt+AG008+yrMsTjMmLChhHC7V1fHws7YkkW3/reCBJbKvCti+B6EbTXJ7bCb5 kHd2YxQVCEtf6+xzPPAwFrdSTmZVhAPSsP3PJAJeqiuFSi8ZtbL32tuWDD5yhZw3 ytUol0pS/4MuZwYRU4hhjDrSYrKb/BNLG/mrBVr2gc6nLES/HZerbFfbUDbLrQFB 36wUD/t5WaQry7P6v7k13Nw1dX02afJN -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org