$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: QjkWGpOoJVR7wTNdndrjB8b/SiYiAZpAguajfngB6Rk= Subject key identifier: C2:97:0C:5B:19:6B:A4:EE:5F:3C:D8:04:DD:D4:B8:21:14:0E:7C:2A Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0AAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0AA5 Signing time: Sun 12 May 2024 20:13:34 +0000 Manifest this update: Sun 12 May 2024 20:13:33 +0000 Manifest next update: Sun 19 May 2024 20:13:33 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: k4u2C9q22lM7PrlwNsptk0eEZDtcuxX9KFcIWvxxC1w=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: +AtlwJpDixwyUCDykXdm+mzXPL2l2b4XkTAoBl1SNz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2732 (0xaac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: May 12 20:13:33 2024 GMT Not After : May 19 20:13:33 2024 GMT Subject: CN=664122ee-7163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a6:28:71:7d:44:ed:78:a4:11:06:4c:6b:fc: 3a:6a:ba:37:a4:7b:b1:54:2f:76:b3:30:ad:19:dd: ab:2b:2d:18:d3:26:98:6c:d4:4b:fc:6d:79:1a:53: a9:94:ad:63:0a:59:d7:b6:c5:d6:99:31:f2:6f:14: b1:fe:4a:52:e8:7b:b7:81:dc:de:ad:aa:f8:46:62: a4:07:c2:0f:5d:be:20:02:4c:0a:e7:42:40:4a:e1: dd:57:c7:04:61:2d:e0:44:5d:54:da:01:b6:b3:25: 97:3e:82:97:41:99:21:b0:34:d1:0b:ae:d0:31:d5: 0f:a8:31:cf:e2:d5:3d:dd:9f:a3:53:26:01:11:a1: fc:bf:f5:31:63:b9:20:c8:2a:da:72:61:0b:5c:95: 41:b6:3e:6b:9d:78:1c:b1:35:fe:e9:92:45:27:5b: 33:1f:b8:72:76:17:dc:d3:59:a6:cf:8a:5f:27:22: 0e:1d:01:21:cb:b5:ad:db:68:67:63:d5:13:78:32: 97:d1:59:ab:15:5f:e2:2f:6c:ce:ca:99:31:a1:d3: ab:6a:f0:75:1a:53:1f:79:59:08:0b:51:1e:a7:57: 0e:6a:96:29:3e:89:34:60:16:d3:44:b5:34:7c:25: ab:80:6a:4e:57:c2:af:84:86:2a:e7:19:92:9d:0b: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:97:0C:5B:19:6B:A4:EE:5F:3C:D8:04:DD:D4:B8:21:14:0E:7C:2A X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c6:0a:01:43:55:56:6e:5d:9e:f9:0a:77:c4:bd:06:5f:88: 10:e2:7c:f8:07:d6:d6:03:4e:e2:da:82:68:dc:0c:d3:d3:46: 08:3f:fe:ca:0b:45:46:52:07:fb:fa:b3:13:bd:0d:b5:89:82: e4:d5:a9:71:cc:2d:93:fc:e9:07:c5:00:fc:56:65:28:b0:a7: c0:e8:97:44:18:6e:62:2a:2b:c3:9b:78:09:0a:80:32:06:f4: d2:9d:fd:4c:a5:b4:d5:e6:6b:22:a2:7d:b1:24:6b:97:b9:db: c0:a3:b7:6d:4d:14:98:c1:26:b5:b8:e6:42:73:36:2f:41:58: 5d:e5:c2:17:21:12:f6:44:bc:31:e6:be:04:b6:86:78:77:0c: 60:2e:90:36:82:f8:d3:79:6d:39:aa:44:25:2f:30:e0:19:f4: 1f:ca:5d:40:58:a8:74:2f:2b:07:a6:46:4a:0e:42:2f:3b:c5: 39:46:0a:0b:29:8f:2c:13:b0:50:9a:16:8a:64:b0:a6:64:54: ab:01:80:76:87:ae:9e:a2:93:ae:bb:e2:13:e9:53:1a:63:13: a9:5e:67:32:52:df:6c:4e:be:a2:18:3d:d1:9d:5d:e8:74:2a: bb:07:2d:ba:2f:b2:5b:dc:25:26:cc:09:04:ad:79:aa:98:94: e3:3f:f0:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjQwNTEyMjAxMzMzWhcNMjQwNTE5MjAxMzMzWjAYMRYwFAYD VQQDEw02NjQxMjJlZS03MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46YocX1E7XikEQZMa/w6aro3pHuxVC92szCtGd2rKy0Y0yaYbNRL/G15GlOp lK1jClnXtsXWmTHybxSx/kpS6Hu3gdzerar4RmKkB8IPXb4gAkwK50JASuHdV8cE YS3gRF1U2gG2syWXPoKXQZkhsDTRC67QMdUPqDHP4tU93Z+jUyYBEaH8v/UxY7kg yCracmELXJVBtj5rnXgcsTX+6ZJFJ1szH7hydhfc01mmz4pfJyIOHQEhy7Wt22hn Y9UTeDKX0VmrFV/iL2zOypkxodOravB1GlMfeVkIC1Eep1cOapYpPok0YBbTRLU0 fCWrgGpOV8KvhIYq5xmSnQtH3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKXDFsZ a6TuXzzYBN3UuCEUDnwqMB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgxgoBQ1VWbl2e+Qp3xL0GX4gQ4nz4B9bWA07i2oJo3AzT00YIP/7K C0VGUgf7+rMTvQ21iYLk1alxzC2T/OkHxQD8VmUosKfA6JdEGG5iKivDm3gJCoAy BvTSnf1MpbTV5msion2xJGuXudvAo7dtTRSYwSa1uOZCczYvQVhd5cIXIRL2RLwx 5r4EtoZ4dwxgLpA2gvjTeW05qkQlLzDgGfQfyl1AWKh0LysHpkZKDkIvO8U5RgoL KY8sE7BQmhaKZLCmZFSrAYB2h66eopOuu+IT6VMaYxOpXmcyUt9sTr6iGD3RnV3o dCq7By26L7Jb3CUmzAkErXmqmJTjP/CT -----END CERTIFICATE-----Generated at Sun May 12 22:40:03 2024 by rpki-client on console-ams.rpki-client.org