$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: R+IJcFjMQr67cHC24fylKOns+LmjLzdK7bdJNoVTmY0= Subject key identifier: 84:82:D4:58:D7:FB:1F:2C:0E:59:26:94:4E:18:AF:D2:9B:C5:84:15 Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 05DA Signing time: Sun 19 May 2024 00:04:03 +0000 Manifest this update: Sun 19 May 2024 00:04:02 +0000 Manifest next update: Sun 26 May 2024 00:04:02 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: OkDta2dIWXJrqpJrSamJsVhMvchPuCC8XP314snpCPM=) 2: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: WkicyrZMnc/A3KfnVZpmFid5I7BALmKDtV6vj3aIa1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: May 19 00:04:02 2024 GMT Not After : May 26 00:04:02 2024 GMT Subject: CN=664941f3-d613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:22:8c:9b:6a:76:6d:10:6b:b7:6e:32:b6: de:25:19:e6:50:e1:0c:98:6c:05:b2:4c:91:88:aa: 36:79:4d:f3:34:67:d8:44:d3:68:92:73:b5:d9:af: 26:ae:ef:4f:a0:b0:dd:0d:04:13:be:6a:b9:a1:74: c7:da:0e:28:87:7d:3c:03:f3:61:7d:67:84:e8:11: 85:15:50:de:ff:a4:9b:db:86:a1:de:87:15:a7:2b: 7d:27:ec:cb:f0:8d:71:c6:b7:a3:55:e4:8d:67:b5: 63:9c:2e:9e:6a:7c:99:14:e1:5f:cf:3e:9f:fe:a4: 69:9f:a9:75:6b:32:94:c4:b9:5b:db:72:27:d1:98: 7c:87:4a:d8:94:90:79:2b:fc:1d:f1:66:72:79:73: 28:67:d3:d8:83:eb:be:3a:36:08:e3:17:47:c1:13: c0:8a:4d:4f:92:fa:4e:36:0d:12:11:4e:50:b4:ee: 87:05:3f:79:b3:a7:f9:ad:1e:b5:66:0e:fc:d1:f8: 2b:9e:d6:40:f6:9d:00:cb:02:fa:a4:c4:02:c6:9d: 69:ce:5f:e2:cf:84:e1:4b:3b:33:84:01:87:9d:e4: 29:33:09:e7:80:8e:34:bc:ce:c6:7a:80:ce:04:7f: 03:3c:f1:f6:93:00:a1:ae:74:d4:03:92:d9:8b:92: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:82:D4:58:D7:FB:1F:2C:0E:59:26:94:4E:18:AF:D2:9B:C5:84:15 X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:84:f9:29:99:cb:0e:2d:a3:69:af:f0:c2:af:00:45:57:6f: 36:c1:9d:d8:12:3f:db:5c:47:7d:16:85:6a:02:c0:89:fe:ac: 0c:78:e3:06:9b:a9:83:65:69:b5:cc:96:1f:21:6f:00:50:d1: 55:8e:f9:2f:2d:c4:da:81:39:70:b2:07:59:d1:c2:2b:a2:f6: 83:0a:ab:2a:5c:1b:a3:88:90:1c:6d:33:dc:f2:01:57:1c:90: 81:2d:fc:4a:1e:10:2b:31:fa:20:53:6a:30:5d:9e:be:5a:fb: f2:43:fd:a8:f5:93:bf:00:c2:dd:18:14:20:f7:75:f5:45:db: b7:34:ef:85:b4:7c:44:bf:5c:3f:6b:73:24:0f:21:5f:d2:02: e9:b7:07:e3:f9:84:bc:5a:56:cb:fd:d1:07:66:87:e6:a2:e2: e2:e1:31:5f:41:80:bf:54:4b:5a:fb:18:62:3d:bf:cd:c0:35: be:5b:8c:a5:8e:d7:66:af:ae:5b:5d:12:71:11:57:b5:6b:5e: 77:89:6c:e4:ec:24:f6:01:1c:48:00:a2:d9:f9:a7:df:ab:fb: b2:cb:e4:20:26:38:e8:9a:11:5b:8a:a1:83:14:72:54:cb:67: 8e:27:6e:a7:35:33:73:ba:fc:f3:ac:51:d2:54:7f:68:8d:e9: 24:72:b0:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjQwNTE5MDAwNDAyWhcNMjQwNTI2MDAwNDAyWjAYMRYwFAYD VQQDEw02NjQ5NDFmMy1kNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpYijJtqdm0Qa7duMrbeJRnmUOEMmGwFskyRiKo2eU3zNGfYRNNoknO12a8m ru9PoLDdDQQTvmq5oXTH2g4oh308A/NhfWeE6BGFFVDe/6Sb24ah3ocVpyt9J+zL 8I1xxrejVeSNZ7VjnC6eanyZFOFfzz6f/qRpn6l1azKUxLlb23In0Zh8h0rYlJB5 K/wd8WZyeXMoZ9PYg+u+OjYI4xdHwRPAik1PkvpONg0SEU5QtO6HBT95s6f5rR61 Zg780fgrntZA9p0AywL6pMQCxp1pzl/iz4ThSzszhAGHneQpMwnngI40vM7GeoDO BH8DPPH2kwChrnTUA5LZi5IhpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISC1FjX +x8sDlkmlE4Yr9KbxYQVMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqhPkpmcsOLaNpr/DCrwBFV282wZ3YEj/bXEd9FoVqAsCJ/qwMeOMG m6mDZWm1zJYfIW8AUNFVjvkvLcTagTlwsgdZ0cIrovaDCqsqXBujiJAcbTPc8gFX HJCBLfxKHhArMfogU2owXZ6+WvvyQ/2o9ZO/AMLdGBQg93X1Rdu3NO+FtHxEv1w/ a3MkDyFf0gLptwfj+YS8WlbL/dEHZofmouLi4TFfQYC/VEta+xhiPb/NwDW+W4yl jtdmr65bXRJxEVe1a153iWzk7CT2ARxIAKLZ+affq/uyy+QgJjjomhFbiqGDFHJU y2eOJ26nNTNzuvzzrFHSVH9ojekkcrDe -----END CERTIFICATE-----Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org