$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: UvVEgwU0gZvKp7jVksRMYLHGJa/gAqHbV/IIuU4zXN0= Subject key identifier: D4:0C:F9:5C:F9:C7:F2:CE:29:A4:B3:14:DD:85:E6:91:B4:8C:1B:31 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0A17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0A0C Signing time: Sat 18 May 2024 20:38:18 +0000 Manifest this update: Sat 18 May 2024 20:38:17 +0000 Manifest next update: Sat 25 May 2024 20:38:17 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: T4ZeukJjUkPYEC5nhQukfFZiPffunbMfoD7OgEWtGqk=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: kRARa+uUzxbZ+NEb5MEJFAdFIet/TAzXthEijJD892g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2583 (0xa17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: May 18 20:38:17 2024 GMT Not After : May 25 20:38:17 2024 GMT Subject: CN=664911ba-e826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:79:f6:ef:13:52:33:94:2b:b6:06:3f:71: 43:63:e8:35:e9:45:3f:f8:fc:e5:4d:fa:a9:20:86: f5:e0:7c:8c:06:7a:48:62:e9:e1:84:3a:81:b1:74: c0:8c:9b:c9:3d:4f:83:a6:01:93:92:b3:1a:8f:b0: e0:3d:05:d6:e8:0e:f9:58:57:fc:c8:4c:a1:a0:af: 01:0b:c7:30:bd:5f:12:78:a8:55:2c:6e:1c:ab:79: 62:75:9e:95:56:5f:b7:0e:e7:ca:37:57:d4:08:0e: c8:84:54:8c:8c:fe:e2:0a:54:88:d8:84:b3:c3:e4: 89:2d:d4:47:ef:41:19:86:b9:e1:22:03:ab:e3:2b: 13:1d:9b:55:2e:00:28:23:7c:d5:00:6e:e9:9e:41: b7:20:03:59:70:5e:ef:4f:34:c9:c0:18:69:c3:16: ac:09:a5:f0:4e:67:f9:ef:20:12:7a:84:ce:1a:25: 1b:a9:b6:90:57:45:98:a8:d7:40:f7:c8:8a:1f:89: 77:35:b5:11:72:a5:ab:39:5f:ab:06:f7:b9:37:ee: 0b:71:f6:9b:93:46:f7:c1:91:31:2f:66:db:7b:32: ee:c1:7e:a0:21:7c:d5:54:bb:5f:62:87:c2:6f:c3: b0:69:20:f5:f7:99:af:94:60:9d:62:dc:6e:c2:ca: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0C:F9:5C:F9:C7:F2:CE:29:A4:B3:14:DD:85:E6:91:B4:8C:1B:31 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a7:f9:51:30:3e:b2:78:3a:db:78:36:86:83:51:ba:00:04: ee:e2:ec:c4:62:4b:c9:20:77:c5:90:24:3f:89:62:69:5a:44: 87:17:e4:31:0a:c5:2c:49:1a:f3:b8:2b:42:da:05:b9:60:24: 97:5f:ae:8d:1d:af:dc:32:b5:2c:e1:fb:9e:24:ed:64:24:8d: 1d:1e:80:b7:35:c8:99:54:c2:b7:96:69:c7:6b:70:4e:b4:2f: 70:28:37:b9:ed:30:55:4a:c9:df:69:d9:0c:b0:7f:ca:04:d0: 52:e2:5f:15:4b:b9:19:c1:fc:a5:52:5d:d1:47:0a:3b:9f:c1: 13:2c:2a:8f:f7:e1:83:d3:36:aa:f1:a4:86:7d:d7:14:25:51: e3:27:c8:e8:f0:df:a1:a6:69:08:8a:91:d0:d5:8e:c7:fc:0b: f5:6c:8c:ef:cb:5a:56:87:06:19:8d:86:0a:a6:1b:f0:87:a7: f5:5e:c9:96:fe:a8:92:18:4f:f0:5b:3c:df:7f:c0:93:50:af: 8c:77:4b:43:65:aa:2e:cb:ed:58:44:e7:a0:64:93:c3:d6:b3: ef:91:82:57:60:04:fb:4b:fe:b2:cc:a3:09:81:71:8b:5e:60: 20:64:cc:6c:35:86:bb:68:eb:fb:d4:c1:c5:3b:80:f9:4a:30: 07:45:6b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjQwNTE4MjAzODE3WhcNMjQwNTI1MjAzODE3WjAYMRYwFAYD VQQDEw02NjQ5MTFiYS1lODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5Z59u8TUjOUK7YGP3FDY+g16UU/+PzlTfqpIIb14HyMBnpIYunhhDqBsXTA jJvJPU+DpgGTkrMaj7DgPQXW6A75WFf8yEyhoK8BC8cwvV8SeKhVLG4cq3lidZ6V Vl+3DufKN1fUCA7IhFSMjP7iClSI2ISzw+SJLdRH70EZhrnhIgOr4ysTHZtVLgAo I3zVAG7pnkG3IANZcF7vTzTJwBhpwxasCaXwTmf57yASeoTOGiUbqbaQV0WYqNdA 98iKH4l3NbURcqWrOV+rBve5N+4Lcfabk0b3wZExL2bbezLuwX6gIXzVVLtfYofC b8OwaSD195mvlGCdYtxuwspA0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQM+Vz5 x/LOKaSzFN2F5pG0jBsxMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdp/lRMD6yeDrbeDaGg1G6AATu4uzEYkvJIHfFkCQ/iWJpWkSHF+Qx CsUsSRrzuCtC2gW5YCSXX66NHa/cMrUs4fueJO1kJI0dHoC3NciZVMK3lmnHa3BO tC9wKDe57TBVSsnfadkMsH/KBNBS4l8VS7kZwfylUl3RRwo7n8ETLCqP9+GD0zaq 8aSGfdcUJVHjJ8jo8N+hpmkIipHQ1Y7H/Av1bIzvy1pWhwYZjYYKphvwh6f1XsmW /qiSGE/wWzzff8CTUK+Md0tDZaouy+1YROegZJPD1rPvkYJXYAT7S/6yzKMJgXGL XmAgZMxsNYa7aOv71MHFO4D5SjAHRWvC -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org