$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json) Hash identifier: DL1JGmyGG38UwqHeZi2oCbynk63KKf59tgWIMWb7800= Subject key identifier: A3:43:AC:3D:B3:8A:4F:60:02:07:0A:B0:18:77:2E:2D:FC:E3:B9:4A Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82 Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft Manifest number: 0111 Signing time: Sun 19 May 2024 05:20:19 +0000 Manifest this update: Sun 19 May 2024 05:20:18 +0000 Manifest next update: Sun 26 May 2024 05:20:18 +0000 Files and hashes: 1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: V5LHg/XyaQoHmglh95+VvfdWz45T4sGvz+ZyYfTcubg=) 2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: jST31h743fh0G7nQ5yuFvr7M5qlYPELdwHHksCGFGB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182 Validity Not Before: May 19 05:20:18 2024 GMT Not After : May 26 05:20:18 2024 GMT Subject: CN=66498c12-719f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:c8:6b:47:0e:92:55:a5:99:52:30:b4:69: 02:5a:07:fb:6f:de:6d:5b:b3:d8:1f:f7:40:ce:10: 14:a4:91:23:3a:80:78:51:e1:4a:ae:18:e8:7b:61: 64:e5:9c:39:59:3c:d7:14:d3:55:71:92:46:f0:bd: 41:ac:41:6e:94:f8:fa:98:2a:39:a5:5a:d7:a3:f2: e6:32:ca:c6:ab:e3:21:b1:43:77:08:c2:1e:80:80: 4e:11:22:c1:6a:c1:c2:d0:80:ad:a5:87:3c:d1:92: e6:b7:57:34:87:ab:5c:01:d4:09:6e:15:0c:85:a0: 59:bd:f9:fa:cf:7e:7c:aa:55:bf:ce:31:49:f9:00: f3:01:0e:09:a4:5c:b1:c7:79:4f:2c:be:88:ff:38: 43:20:08:9a:3d:8c:c2:e2:ce:29:b9:c2:eb:fc:e3: 67:6c:a3:ae:99:7f:2f:96:7e:3c:91:57:fd:af:29: 8a:fc:e0:15:8b:c5:fe:2e:6d:f7:6c:c6:17:ec:9c: 60:55:32:80:74:9e:aa:79:fc:76:38:6d:a2:54:f6: dd:04:60:15:9f:23:41:08:4d:1a:c5:0b:c2:26:53: 3e:7a:d4:31:43:38:ca:93:da:5f:e7:4c:8c:63:89: 2b:d6:00:af:d9:93:fe:61:07:41:5b:df:6c:af:61: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:43:AC:3D:B3:8A:4F:60:02:07:0A:B0:18:77:2E:2D:FC:E3:B9:4A X509v3 Authority Key Identifier: keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ad:8d:b0:e1:42:e0:f2:c8:cb:84:ab:ef:6a:cd:fa:b4:9f: ca:5b:2a:bb:01:65:74:92:12:94:2f:95:30:60:b2:fb:d2:f7: 71:78:49:c7:a0:e3:25:bb:e8:be:e5:7b:4b:9e:f3:c9:b7:d9: 58:98:bc:82:cb:12:79:ea:98:09:ff:93:ad:5a:fd:0e:f9:e0: 26:d4:34:38:71:25:1d:65:39:2d:52:fd:43:43:54:4f:fe:52: e3:f2:f8:bd:e8:55:27:3a:50:88:4c:bf:ec:c9:c2:e7:f6:b7: e2:2f:4e:ec:c0:bd:b7:c3:cd:da:6c:f0:d3:9e:13:6c:83:88: 5a:84:b2:df:21:e2:51:8d:5c:54:49:c4:c7:29:49:4f:d9:4f: 97:f2:55:b6:c9:47:99:40:34:2e:a3:90:26:bf:a3:a1:10:36: 62:80:2e:70:ef:b9:86:1a:a5:59:66:19:e1:0e:c1:c5:b0:d9: ef:42:07:c4:eb:78:7b:d6:65:18:33:e5:f3:26:2f:e9:3d:02: eb:b0:a6:c8:5f:cb:3b:4c:5d:39:d7:02:9a:ca:b4:25:39:a4: 12:60:d0:d4:57:59:df:b1:5c:a3:4a:f2:40:19:b9:b0:b6:ab: db:47:45:ba:26:df:53:6e:bc:1c:ff:ff:a1:f6:60:19:34:90: 54:70:b2:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2QUYxMTAvBgNVBAUTKEEzRDI1MEM1RDUyQzVBOEFDNjdCQTAyMTg4NEQxOTFB NUQ0QTcxODIwHhcNMjQwNTE5MDUyMDE4WhcNMjQwNTI2MDUyMDE4WjAYMRYwFAYD VQQDEw02NjQ5OGMxMi03MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pnIa0cOklWlmVIwtGkCWgf7b95tW7PYH/dAzhAUpJEjOoB4UeFKrhjoe2Fk 5Zw5WTzXFNNVcZJG8L1BrEFulPj6mCo5pVrXo/LmMsrGq+MhsUN3CMIegIBOESLB asHC0ICtpYc80ZLmt1c0h6tcAdQJbhUMhaBZvfn6z358qlW/zjFJ+QDzAQ4JpFyx x3lPLL6I/zhDIAiaPYzC4s4pucLr/ONnbKOumX8vln48kVf9rymK/OAVi8X+Lm33 bMYX7JxgVTKAdJ6qefx2OG2iVPbdBGAVnyNBCE0axQvCJlM+etQxQzjKk9pf50yM Y4kr1gCv2ZP+YQdBW99sr2FoWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNDrD2z ik9gAgcKsBh3Li3847lKMB8GA1UdIwQYMBaAFKPSUMXVLFqKxnugIYhNGRpdSnGC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjZBRi9GNkQ4REE5Qzcx NDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dvckdlNkFoaUUwWkdsMUtj WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285SlF4ZFVzV29yR2U2QWhpRTBaR2wxS2NZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjZBRi9GNkQ4REE5QzcxNDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dv ckdlNkFoaUUwWkdsMUtjWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjrY2w4ULg8sjLhKvvas36tJ/KWyq7AWV0khKUL5UwYLL70vdxeEnH oOMlu+i+5XtLnvPJt9lYmLyCyxJ56pgJ/5OtWv0O+eAm1DQ4cSUdZTktUv1DQ1RP /lLj8vi96FUnOlCITL/sycLn9rfiL07swL23w83abPDTnhNsg4hahLLfIeJRjVxU ScTHKUlP2U+X8lW2yUeZQDQuo5Amv6OhEDZigC5w77mGGqVZZhnhDsHFsNnvQgfE 63h71mUYM+XzJi/pPQLrsKbIX8s7TF051wKayrQlOaQSYNDUV1nfsVyjSvJAGbmw tqvbR0W6Jt9Tbrwc//+h9mAZNJBUcLLy -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org