$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft File: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json) Hash identifier: yfiwHxGg76PJ3TTTmp7ynIA7Y6b2q5tMj1MD7YRFr7s= Subject key identifier: 05:F4:2E:F9:A8:DA:0A:75:6B:2E:E5:0C:41:3F:F9:21:64:D3:E9:19 Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1 Certificate issuer: /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1 Certificate serial: 0571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft Manifest number: 056C Signing time: Sun 19 May 2024 00:43:07 +0000 Manifest this update: Sun 19 May 2024 00:43:07 +0000 Manifest next update: Sun 26 May 2024 00:43:07 +0000 Files and hashes: 1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: xDuNHDDr7Bj4sVik0SmPXRncqrmYm5qOS9TmizHvGpw=) 2: 948A2714980211EB82357D6CC4F9AE02.roa (hash: iUwsMlwG14yhQu9mFdyFQuqtn6Bv++zfI2iNXgm3mns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1 Validity Not Before: May 19 00:43:07 2024 GMT Not After : May 26 00:43:07 2024 GMT Subject: CN=66494b1b-9d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:91:e0:3a:d2:ee:76:ec:36:14:f2:5e:ed: 08:90:f9:4f:a1:b8:0b:37:ae:7a:e8:b7:94:ee:41: ac:0a:d3:b7:2f:41:ff:39:78:32:c7:38:16:72:07: 5c:2c:09:5a:15:5f:81:ff:9f:65:fc:5c:ec:36:cc: 63:cb:2d:70:cf:e1:56:9b:cd:46:2f:1e:e9:71:67: 9c:f3:2d:26:96:a5:b7:7b:0f:7a:d5:7b:33:7c:84: 01:62:2a:46:c1:85:30:89:12:4f:43:bb:71:fc:49: 22:60:73:d0:3d:da:78:d0:16:39:cf:63:e4:36:98: eb:25:dd:97:9f:84:a8:55:3f:c4:ad:ca:d5:44:15: 36:8c:79:88:c9:9f:8b:b6:2c:44:e0:6c:e1:40:99: 55:3a:44:65:0e:a6:83:a4:dc:55:73:3a:40:da:07: 18:b9:21:33:e9:2a:ec:cf:55:af:1f:c3:2c:65:86: e9:87:b1:78:a8:93:50:43:68:5e:e2:1a:6d:1c:0f: 63:d6:7c:50:8c:ba:d3:e5:77:67:98:de:4c:93:72: 48:fa:c9:96:95:6d:ff:e9:8c:27:72:58:9c:6a:c4: a7:1e:1e:6d:c0:e8:39:d6:0d:1a:b6:1a:1e:2e:18: 4c:bf:94:a8:53:45:19:6f:83:76:bb:54:60:bc:b4: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:2E:F9:A8:DA:0A:75:6B:2E:E5:0C:41:3F:F9:21:64:D3:E9:19 X509v3 Authority Key Identifier: keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4a:f7:e6:1e:ca:2a:be:ea:f8:36:fb:30:1a:11:d7:6d:a4: ef:60:b2:f9:94:36:53:06:7f:ae:2e:86:eb:f5:e8:5d:89:a4: f2:df:1a:94:1c:47:c1:f1:db:6a:d8:9c:5e:68:89:c3:17:46: e2:ec:fc:d5:dc:8a:b3:93:af:8e:e2:ea:b0:22:87:7f:d2:6e: b4:f0:be:07:6d:28:b6:ca:ba:bf:7b:44:dc:3c:72:e4:b0:a7: 32:35:77:11:b6:e9:7d:96:89:ab:c4:0b:40:ca:c2:1f:94:07: b6:a9:44:14:52:f1:b1:9a:46:df:8a:bf:e8:4f:74:34:17:2b: 8e:e3:94:54:1a:88:85:50:be:a3:d0:53:ab:aa:22:15:af:bf: fc:ef:14:0d:a8:9e:aa:38:48:8e:9e:3b:67:3a:48:e2:f3:fa: 79:4b:03:fb:7e:72:43:83:4c:3f:3b:14:60:4b:6a:86:bd:ac: 13:eb:f1:69:c3:72:b3:7a:2c:70:10:9b:52:e5:99:fc:db:4e: 4d:3d:c6:4f:48:15:09:35:63:7d:8b:4c:4d:17:85:62:67:67: 88:c2:8d:1b:fd:5f:e9:a2:06:36:eb:8d:da:2b:cf:6d:99:60: 2c:51:60:27:7a:fe:36:5b:8f:b7:45:f7:29:9d:de:bd:a6:a9: ce:ad:71:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCRkIxMTAvBgNVBAUTKEY2RTcxMkZDNUM2OUU3MkY2OTM5NkU1RTExNDJDQzdG NzhDNjhGRDEwHhcNMjQwNTE5MDA0MzA3WhcNMjQwNTI2MDA0MzA3WjAYMRYwFAYD VQQDEw02NjQ5NGIxYi05ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcWR4DrS7nbsNhTyXu0IkPlPobgLN6566LeU7kGsCtO3L0H/OXgyxzgWcgdc LAlaFV+B/59l/FzsNsxjyy1wz+FWm81GLx7pcWec8y0mlqW3ew961XszfIQBYipG wYUwiRJPQ7tx/EkiYHPQPdp40BY5z2PkNpjrJd2Xn4SoVT/ErcrVRBU2jHmIyZ+L tixE4GzhQJlVOkRlDqaDpNxVczpA2gcYuSEz6Srsz1WvH8MsZYbph7F4qJNQQ2he 4hptHA9j1nxQjLrT5XdnmN5Mk3JI+smWlW3/6YwnclicasSnHh5twOg51g0athoe LhhMv5SoU0UZb4N2u1RgvLTjHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX0Lvmo 2gp1ay7lDEE/+SFk0+kZMB8GA1UdIwQYMBaAFPbnEvxcaecvaTluXhFCzH94xo/R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUJGQi9ERTJERTY0Njk4 MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5OXBPVzVlRVVMTWYzakdq OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl1Y1NfRnhwNXk5cE9XNWVFVUxNZjNqR2o5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUJGQi9ERTJERTY0Njk4MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5 OXBPVzVlRVVMTWYzakdqOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuSvfmHsoqvur4NvswGhHXbaTvYLL5lDZTBn+uLobr9ehdiaTy3xqU HEfB8dtq2JxeaInDF0bi7PzV3Iqzk6+O4uqwIod/0m608L4HbSi2yrq/e0TcPHLk sKcyNXcRtul9lomrxAtAysIflAe2qUQUUvGxmkbfir/oT3Q0FyuO45RUGoiFUL6j 0FOrqiIVr7/87xQNqJ6qOEiOnjtnOkji8/p5SwP7fnJDg0w/OxRgS2qGvawT6/Fp w3KzeixwEJtS5Zn8205NPcZPSBUJNWN9i0xNF4ViZ2eIwo0b/V/pogY2643aK89t mWAsUWAnev42W4+3Rfcpnd69pqnOrXGh -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org