$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft File: 1AsQwSJMYeDTGML8YAOTeOz3LQA.mft (raw, json) Hash identifier: nuMqrOia9KMsbzWvWC6HswN9ZlFkIDLkBEDFYR/9f7w= Subject key identifier: 2E:A7:5A:D3:79:35:13:2A:CA:AF:C2:35:FA:92:07:F5:18:74:08:EA Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Certificate serial: 0A17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft Manifest number: 0A10 Signing time: Fri 31 May 2024 21:16:17 +0000 Manifest this update: Fri 31 May 2024 21:16:17 +0000 Manifest next update: Fri 07 Jun 2024 21:16:17 +0000 Files and hashes: 1: 1AsQwSJMYeDTGML8YAOTeOz3LQA.crl (hash: a1Rhjr1Km0gDVtUPStfo/EXqZ5W8NIIqWY/iF+FCZT8=) 2: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (hash: G/eOqgEpWZFr1HOkV3DCeyILuIaljP+37f1Jcziv0j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2583 (0xa17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Validity Not Before: May 31 21:16:17 2024 GMT Not After : Jun 7 21:16:17 2024 GMT Subject: CN=665a3e21-f9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:da:4b:16:51:2d:82:e4:ef:b9:a2:5e:12: 59:36:52:58:df:79:6a:56:1a:3d:61:7c:3c:e0:3e: 81:9e:15:c6:58:d7:56:4b:fb:e5:73:5c:10:9b:f7: 26:6d:dd:a3:c7:d6:df:3f:50:05:eb:3e:a5:a5:05: 32:09:20:b9:44:f4:a0:48:87:dd:78:9e:3f:80:26: 71:fd:d4:5a:fa:4b:75:92:6d:71:81:02:d0:ef:03: c9:1b:50:6c:4c:15:40:5b:97:98:11:45:77:81:42: 16:f6:01:99:88:e6:9b:8f:2e:4b:31:16:d6:11:b2: 45:9e:4a:6c:36:0e:82:04:4e:db:6d:30:1f:c8:74: 3a:46:f5:b8:96:93:2f:c8:a4:28:b8:3f:c6:4f:37: 06:be:c9:5f:3a:2d:4b:38:e7:25:eb:2b:55:1c:db: bf:33:db:3e:5e:8f:6a:4a:44:ef:28:c1:48:bf:e5: 52:b4:b8:e9:2a:05:2c:f6:26:80:ac:dd:ef:53:60: df:d3:cb:43:8b:cc:83:c0:35:3e:df:b2:e0:86:6b: 21:1f:93:f7:e2:80:f6:a4:2e:81:05:fd:8e:1a:18: 61:ec:44:e5:95:44:a2:a0:b7:64:36:a9:ca:1c:2f: bb:d4:3f:d3:bc:42:1c:60:fb:58:e3:59:db:e6:61: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A7:5A:D3:79:35:13:2A:CA:AF:C2:35:FA:92:07:F5:18:74:08:EA X509v3 Authority Key Identifier: keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:35:79:21:38:b0:65:92:49:f3:41:d6:67:5e:7a:78:aa:7d: 91:e8:5a:5b:a1:7d:ca:c2:0b:e1:59:26:d7:f6:51:4e:52:20: 8f:f8:e6:18:d5:5b:bb:ea:0a:9d:3b:43:f5:66:16:87:f3:40: c2:6b:b8:86:46:1e:c9:6e:02:15:12:46:90:49:f9:df:7f:03: 77:29:39:51:10:87:2e:ef:5f:4b:2b:a3:f0:8c:60:8a:87:03: e5:77:bd:50:5d:85:7b:28:43:9d:86:e2:79:b3:79:29:8e:34: fb:0c:49:dd:96:86:58:c8:ea:60:1f:ad:ee:77:af:34:29:9d: 65:b3:72:29:92:da:ad:bf:93:3a:3e:02:75:e7:13:cd:30:d3: 9b:4f:bc:71:26:24:12:2b:3d:46:17:58:0e:6d:5b:b0:34:3c: c0:28:ed:9d:c4:38:28:f6:65:8d:8c:ef:59:2c:c2:79:36:68: 87:a8:07:70:55:ee:58:6c:e3:15:16:a0:76:b7:4e:ba:4f:9e: e9:88:4e:cb:a1:dc:cf:2d:90:ff:0b:95:3d:fa:b7:38:dd:23: 97:70:73:1f:d1:9b:0d:9c:6c:23:b3:a6:a8:c1:1a:34:03:8c: 6d:5e:54:80:51:6a:e4:89:73:26:0a:09:94:9b:08:89:a7:6d: 4a:a4:cf:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDMjAxMTAvBgNVBAUTKEQ0MEIxMEMxMjI0QzYxRTBEMzE4QzJGQzYwMDM5Mzc4 RUNGNzJEMDAwHhcNMjQwNTMxMjExNjE3WhcNMjQwNjA3MjExNjE3WjAYMRYwFAYD VQQDEw02NjVhM2UyMS1mOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CTaSxZRLYLk77miXhJZNlJY33lqVho9YXw84D6BnhXGWNdWS/vlc1wQm/cm bd2jx9bfP1AF6z6lpQUyCSC5RPSgSIfdeJ4/gCZx/dRa+kt1km1xgQLQ7wPJG1Bs TBVAW5eYEUV3gUIW9gGZiOabjy5LMRbWEbJFnkpsNg6CBE7bbTAfyHQ6RvW4lpMv yKQouD/GTzcGvslfOi1LOOcl6ytVHNu/M9s+Xo9qSkTvKMFIv+VStLjpKgUs9iaA rN3vU2Df08tDi8yDwDU+37LghmshH5P34oD2pC6BBf2OGhhh7ETllUSioLdkNqnK HC+71D/TvEIcYPtY41nb5mEtswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6nWtN5 NRMqyq/CNfqSB/UYdAjqMB8GA1UdIwQYMBaAFNQLEMEiTGHg0xjC/GADk3js9y0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0MyMC84NjU3MUMxMDRF QTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVllRFRHTUw4WUFPVGVPejNM UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBc1F3U0pNWWVEVEdNTDhZQU9UZU96M0xRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0MyMC84NjU3MUMxMDRFQTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVll RFRHTUw4WUFPVGVPejNMUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCENXkhOLBlkknzQdZnXnp4qn2R6FpboX3KwgvhWSbX9lFOUiCP+OYY 1Vu76gqdO0P1ZhaH80DCa7iGRh7JbgIVEkaQSfnffwN3KTlREIcu719LK6PwjGCK hwPld71QXYV7KEOdhuJ5s3kpjjT7DEndloZYyOpgH63ud680KZ1ls3Ipktqtv5M6 PgJ15xPNMNObT7xxJiQSKz1GF1gObVuwNDzAKO2dxDgo9mWNjO9ZLMJ5NmiHqAdw Ve5YbOMVFqB2t066T57piE7LodzPLZD/C5U9+rc43SOXcHMf0ZsNnGwjs6aowRo0 A4xtXlSAUWrkiXMmCgmUmwiJp21KpM91 -----END CERTIFICATE-----Generated at Fri May 31 22:13:05 2024 by rpki-client on console-fra.rpki-client.org