$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json) Hash identifier: Xs8lgeMQmL5JWGn2VPB6syJOtPoqzbDhLUEha5hCU+0= Subject key identifier: CD:DA:CD:ED:95:9C:E1:B7:ED:49:23:EA:17:3E:5E:88:C4:3D:2F:A5 Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft Manifest number: 050D Signing time: Sun 19 May 2024 01:18:19 +0000 Manifest this update: Sun 19 May 2024 01:18:19 +0000 Manifest next update: Sun 26 May 2024 01:18:19 +0000 Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: 8B2kvzT5Ub28vRiGyKn4vN6nuWimjQYf3p2Pwj06450=) 2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: 6wob0mUxft+bGhg2oBjgPWmMCtXvERbVWEvaGtJ2oGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Validity Not Before: May 19 01:18:19 2024 GMT Not After : May 26 01:18:19 2024 GMT Subject: CN=6649535b-dc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:ba:c4:26:66:85:0f:76:23:af:3e:53:cc: 5a:29:7e:d4:c9:b1:73:b2:23:d2:23:5f:8a:9d:7e: c8:0a:da:a7:43:53:2a:b2:b7:23:e8:22:89:13:e3: 47:7f:fc:ff:21:6e:41:c2:a2:a3:3e:42:ff:dd:05: 85:bb:7e:a6:0f:ee:78:5f:89:ee:5f:a9:1c:3f:15: ed:74:48:ed:33:31:80:89:a0:27:f2:b0:49:69:f5: a8:ac:93:ff:43:1b:e8:c2:4a:93:cd:56:a0:cf:aa: 0b:c6:a3:a4:6a:35:87:83:bd:2b:09:99:f0:68:37: 5a:20:6f:9e:a8:cc:a7:f3:b3:05:0b:c2:1a:1c:d7: 04:66:4c:b9:b3:98:32:4b:f5:0c:17:63:ca:6c:22: 76:b6:1e:70:52:5d:9f:0a:ef:a9:e0:5c:ab:bd:96: 35:8e:be:24:52:92:e9:31:c0:08:15:d5:43:f7:86: 7e:a5:71:88:a1:7a:56:0b:10:79:da:cf:bc:ec:5f: 8c:36:87:9d:36:b5:23:7f:56:d6:42:41:c4:02:2f: 5b:e9:82:9f:85:13:cf:08:e2:59:6b:36:ae:e7:26: 17:7e:c8:57:56:3b:86:18:ba:c4:18:54:b6:39:88: 86:18:6d:5b:49:97:29:57:df:9d:ad:9f:2b:27:9d: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DA:CD:ED:95:9C:E1:B7:ED:49:23:EA:17:3E:5E:88:C4:3D:2F:A5 X509v3 Authority Key Identifier: keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f0:40:02:ed:2c:dd:84:3e:94:2f:4f:f6:51:06:0e:6c:6c: 5d:f8:da:b6:72:e2:cb:ee:75:d5:0e:ec:ea:72:05:e9:0e:9f: b1:ca:fb:c6:7b:45:a8:23:58:7f:12:95:96:7b:06:90:53:a7: 58:d3:e1:06:18:8e:84:21:4d:8d:c4:3e:3e:50:62:8d:72:41: 0d:52:f6:8b:93:a6:69:fe:aa:e4:e9:60:3a:aa:bb:26:5e:30: 78:d5:4d:24:35:bc:61:b8:cb:4e:e0:31:36:63:ca:18:5e:74: 56:2f:8f:50:35:02:6c:d9:a4:28:52:4b:45:8c:cf:9e:89:9b: a2:b3:6e:b9:8a:5b:81:1a:1c:cd:4a:07:f8:0b:5a:5a:2c:da: 36:f2:7b:22:69:77:21:76:df:82:b7:87:55:a8:d0:75:92:13: 85:c0:ae:a3:ac:90:eb:16:c4:65:08:0b:51:04:6a:2d:d9:d6: cc:85:58:09:f0:cb:2a:35:71:df:bf:e2:d0:8b:cb:b0:b7:f3: 70:b2:28:99:e4:bc:6c:d1:6e:0e:f5:1d:d7:71:62:42:2c:2e: 3d:a4:c2:58:f7:5a:20:c2:c9:7a:3a:0d:37:cd:75:4c:83:76: 6d:67:a2:24:4d:c9:d5:3c:93:de:5e:ac:d5:9f:7c:f2:2d:23: f6:40:82:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF QkUzNDE3MEUwHhcNMjQwNTE5MDExODE5WhcNMjQwNTI2MDExODE5WjAYMRYwFAYD VQQDEw02NjQ5NTM1Yi1kYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlC6xCZmhQ92I68+U8xaKX7UybFzsiPSI1+KnX7ICtqnQ1Mqsrcj6CKJE+NH f/z/IW5BwqKjPkL/3QWFu36mD+54X4nuX6kcPxXtdEjtMzGAiaAn8rBJafWorJP/ QxvowkqTzVagz6oLxqOkajWHg70rCZnwaDdaIG+eqMyn87MFC8IaHNcEZky5s5gy S/UMF2PKbCJ2th5wUl2fCu+p4FyrvZY1jr4kUpLpMcAIFdVD94Z+pXGIoXpWCxB5 2s+87F+MNoedNrUjf1bWQkHEAi9b6YKfhRPPCOJZazau5yYXfshXVjuGGLrEGFS2 OYiGGG1bSZcpV9+drZ8rJ523uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3aze2V nOG37Ukj6hc+XojEPS+lMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ dWNORDdVU2NGcERyNDBGdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/8EAC7SzdhD6UL0/2UQYObGxd+Nq2cuLL7nXVDuzqcgXpDp+xyvvG e0WoI1h/EpWWewaQU6dY0+EGGI6EIU2NxD4+UGKNckENUvaLk6Zp/qrk6WA6qrsm XjB41U0kNbxhuMtO4DE2Y8oYXnRWL49QNQJs2aQoUktFjM+eiZuis265iluBGhzN Sgf4C1paLNo28nsiaXchdt+Ct4dVqNB1khOFwK6jrJDrFsRlCAtRBGot2dbMhVgJ 8MsqNXHfv+LQi8uwt/NwsiiZ5Lxs0W4O9R3XcWJCLC49pMJY91ogwsl6Og03zXVM g3ZtZ6IkTcnVPJPeXqzVn3zyLSP2QIIz -----END CERTIFICATE-----Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org