$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: jQH9pzi3Let2tJGpiSvFRNwWRLsoiK7H9OJ03grpO2g= Subject key identifier: F7:12:84:22:EC:4F:D8:E3:7E:60:CC:59:4D:A5:41:71:DE:22:0F:31 Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: A8 Signing time: Sun 19 May 2024 06:46:55 +0000 Manifest this update: Sun 19 May 2024 06:46:55 +0000 Manifest next update: Sun 26 May 2024 06:46:55 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: tFVPaVk+2nNPMhee6VTlo6ij57/UKSS0/HVkj/qWQTc=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: aFp0PQud0q/TjxdCuxh6tVPwMKuXsDlwgaqllQ0z8s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: May 19 06:46:55 2024 GMT Not After : May 26 06:46:55 2024 GMT Subject: CN=6649a05f-8c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:10:9c:de:e0:bb:d5:88:e9:8b:60:64:4e:d9: 88:5d:78:85:c7:9e:10:b3:9a:1c:1c:45:69:43:33: 3a:ab:08:9e:07:2f:08:e7:f6:e6:88:e8:ef:41:7b: 81:ba:75:ff:d2:f8:c7:27:fa:14:cb:a8:ee:77:7b: 60:99:a8:e9:14:85:ef:42:be:35:b9:9e:0b:72:1e: 26:2f:05:9f:20:a1:0b:8c:89:58:42:f9:53:dd:68: b6:cf:0a:2f:f2:86:81:b8:ed:80:8f:ea:00:08:de: 0e:af:33:0e:6c:08:96:5e:89:5e:c2:57:17:9f:ca: d3:1c:47:d4:f0:ed:d5:5f:8f:59:8a:0a:72:6b:c7: e8:6c:45:c8:ce:78:98:b5:0c:ee:6b:7b:83:60:8f: 9d:9b:75:1d:c8:d3:1e:89:08:ff:02:ad:bb:53:c7: 44:0f:58:7c:ec:0f:02:75:31:9d:ad:52:99:65:eb: 36:5d:6d:db:1c:af:13:93:77:22:bd:b5:a4:a5:82: cb:c4:5a:fd:4a:a9:11:81:27:a8:e4:7d:cb:44:80: 45:f7:1e:9a:cf:a8:5f:fa:09:0f:20:54:0e:f6:96: 73:47:43:78:37:0c:23:b4:ad:76:0c:a2:9c:62:9a: ae:65:32:3e:0b:a7:05:18:78:e5:8a:4c:a3:f0:01: 64:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:12:84:22:EC:4F:D8:E3:7E:60:CC:59:4D:A5:41:71:DE:22:0F:31 X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5d:f5:b5:95:40:56:d1:3d:37:3d:c5:60:c4:d3:02:bc:67: 8e:38:4f:89:4b:2b:8b:9d:e4:46:d9:9c:a7:45:ac:4a:5b:74: eb:08:e3:25:eb:0a:61:10:11:9a:fc:06:8a:42:0a:dc:c7:d7: 7f:0c:55:5a:24:66:5f:c5:5c:0f:e7:6d:f1:25:8b:32:e1:f3: ad:d0:3d:3c:ae:8e:1e:d4:a0:ad:b3:b1:6a:96:11:f7:b6:1e: 4d:11:f1:4b:2b:41:56:4e:53:b1:64:b3:92:84:a2:10:ba:c1: cb:f3:0d:47:4a:33:a9:0b:85:f0:85:46:59:ee:f1:3a:14:0f: 47:83:83:59:a6:52:d1:d9:46:da:4a:74:88:29:0b:0f:9e:69: 4b:1b:2d:ec:36:e4:c5:5c:c4:85:65:d0:d8:d2:8b:9d:17:ab: 8d:0f:9e:7e:5e:27:73:6e:e2:b3:84:d0:35:b4:6b:a3:07:72: 42:4d:92:51:90:05:05:78:ec:f1:40:2f:f0:ae:9e:f0:0d:f7: 9a:62:7e:6d:d2:32:18:b8:bc:60:33:bd:9b:68:b0:1e:dc:b6: 43:4c:a3:84:07:1d:eb:8e:04:a8:be:40:d7:e6:ae:64:f4:0b: 96:57:d4:aa:98:54:3b:a2:10:fd:e4:bb:f1:b9:df:e4:3b:98: 06:30:1e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjQwNTE5MDY0NjU1WhcNMjQwNTI2MDY0NjU1WjAYMRYwFAYD VQQDEw02NjQ5YTA1Zi04YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RCc3uC71Yjpi2BkTtmIXXiFx54Qs5ocHEVpQzM6qwieBy8I5/bmiOjvQXuB unX/0vjHJ/oUy6jud3tgmajpFIXvQr41uZ4Lch4mLwWfIKELjIlYQvlT3Wi2zwov 8oaBuO2Aj+oACN4OrzMObAiWXolewlcXn8rTHEfU8O3VX49Zigpya8fobEXIzniY tQzua3uDYI+dm3UdyNMeiQj/Aq27U8dED1h87A8CdTGdrVKZZes2XW3bHK8Tk3ci vbWkpYLLxFr9SqkRgSeo5H3LRIBF9x6az6hf+gkPIFQO9pZzR0N4NwwjtK12DKKc YpquZTI+C6cFGHjlikyj8AFkAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcShCLs T9jjfmDMWU2lQXHeIg8xMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbXfW1lUBW0T03PcVgxNMCvGeOOE+JSyuLneRG2ZynRaxKW3TrCOMl 6wphEBGa/AaKQgrcx9d/DFVaJGZfxVwP523xJYsy4fOt0D08ro4e1KCts7FqlhH3 th5NEfFLK0FWTlOxZLOShKIQusHL8w1HSjOpC4XwhUZZ7vE6FA9Hg4NZplLR2Uba SnSIKQsPnmlLGy3sNuTFXMSFZdDY0oudF6uND55+XidzbuKzhNA1tGujB3JCTZJR kAUFeOzxQC/wrp7wDfeaYn5t0jIYuLxgM72baLAe3LZDTKOEBx3rjgSovkDX5q5k 9AuWV9SqmFQ7ohD95Lvxud/kO5gGMB4y -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org