$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: bxk00pf5ScZUL34AfEqEURwPSfXbFfAAEb2TCADTAqA= Subject key identifier: 05:0E:08:92:5F:FC:C2:31:05:7E:60:2A:82:5F:FF:F4:97:EC:50:09 Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0C60 Signing time: Sat 18 May 2024 18:59:20 +0000 Manifest this update: Sat 18 May 2024 18:59:20 +0000 Manifest next update: Sat 25 May 2024 18:59:20 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: XtCh9ci/iYt5JLG+XF0o4DlKFUyvHDcc3kCV8kiQpJk=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: Cr+VsfXDJWByT9UOe+f+PXNb8ByHkADYnx2wCkM5d5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: May 18 18:59:20 2024 GMT Not After : May 25 18:59:20 2024 GMT Subject: CN=6648fa88-0fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:18:09:34:42:40:a1:04:a2:1b:a7:6d:4b: 66:cc:20:cb:6a:30:e1:60:43:32:6d:3b:f8:c3:7a: 20:7b:8d:1e:29:4e:5a:9a:4a:5b:58:ea:e7:c9:04: 73:d0:73:d8:c6:de:f6:45:0d:8f:98:8a:e4:66:c2: d8:4e:6f:15:fa:9b:9a:20:d9:a9:dc:be:57:16:a8: 07:4e:5f:18:a2:ce:cd:d1:43:bd:7b:e1:6d:35:ca: b2:c6:c0:bc:99:62:ef:31:8f:c0:97:76:c6:8a:5f: 88:4d:19:65:ed:cd:d2:1b:5c:17:13:a6:28:24:44: 47:00:a1:de:41:a7:dc:98:02:d1:75:eb:d9:55:07: ae:7c:e9:66:3b:56:b9:3c:41:e1:3d:7d:5b:98:12: 92:a8:96:6f:64:c3:af:33:31:df:02:64:d1:15:fa: 81:01:7d:2e:60:cf:58:d8:78:ee:04:14:85:32:ca: d7:c5:37:e4:00:f9:22:7e:4f:d7:6a:12:0d:da:49: bc:ac:1c:0b:a4:0d:b0:82:dc:b5:ae:9b:4b:56:6f: c7:3f:92:35:f2:42:44:01:26:51:6d:8a:9f:02:22: 77:5f:1b:d6:18:4e:f3:30:12:e7:a7:0a:3d:2c:aa: be:e9:c7:92:20:fc:3b:15:81:5e:a7:dd:6c:f0:76: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:08:92:5F:FC:C2:31:05:7E:60:2A:82:5F:FF:F4:97:EC:50:09 X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:15:53:30:ac:6f:5c:39:6f:74:8b:a1:fd:c2:db:62:a6:c1: 2c:a6:eb:66:6c:b4:56:03:be:ee:e5:01:42:09:96:71:2a:5f: 0b:aa:95:8e:2c:73:ba:bb:6a:93:81:7e:6f:6c:31:7a:0b:2c: 0e:b6:96:fe:16:a7:e3:91:78:03:6b:43:67:d9:8c:67:aa:63: b4:51:a1:38:b5:cd:00:36:3e:36:39:79:fb:a8:e4:16:c4:98: c7:2b:c9:44:2b:a7:a2:98:62:16:a8:69:3e:05:be:6a:21:38: da:e5:85:84:41:ae:d3:7c:52:b3:6b:de:48:e2:ea:dd:31:d2: 1b:db:04:4e:3c:04:49:bf:9a:c0:a1:54:f6:1e:b6:90:46:bf: 89:eb:fe:b5:5f:7e:d0:6c:bd:4b:9c:08:3d:77:1e:00:2b:cb: 79:41:6e:25:e2:99:a3:ce:40:d1:b5:2a:e4:7e:85:36:d9:55: a5:0c:6b:06:63:47:f2:84:25:50:9f:05:fd:5d:e8:5b:07:2b: e0:f6:cd:c7:96:4a:95:de:20:74:ff:95:46:bc:d9:4a:39:54: 76:f3:25:a3:e8:06:9f:19:2c:da:98:80:58:44:64:f1:00:19: 64:67:ba:6e:e3:a5:f5:ca:73:f9:5f:fb:26:7f:bb:cb:a8:53: 37:91:6a:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjQwNTE4MTg1OTIwWhcNMjQwNTI1MTg1OTIwWjAYMRYwFAYD VQQDEw02NjQ4ZmE4OC0wZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoEYCTRCQKEEohunbUtmzCDLajDhYEMybTv4w3oge40eKU5amkpbWOrnyQRz 0HPYxt72RQ2PmIrkZsLYTm8V+puaINmp3L5XFqgHTl8Yos7N0UO9e+FtNcqyxsC8 mWLvMY/Al3bGil+ITRll7c3SG1wXE6YoJERHAKHeQafcmALRdevZVQeufOlmO1a5 PEHhPX1bmBKSqJZvZMOvMzHfAmTRFfqBAX0uYM9Y2HjuBBSFMsrXxTfkAPkifk/X ahIN2km8rBwLpA2wgty1rptLVm/HP5I18kJEASZRbYqfAiJ3XxvWGE7zMBLnpwo9 LKq+6ceSIPw7FYFep91s8HabOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUOCJJf /MIxBX5gKoJf//SX7FAJMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfFVMwrG9cOW90i6H9wttipsEsputmbLRWA77u5QFCCZZxKl8LqpWO LHO6u2qTgX5vbDF6CywOtpb+FqfjkXgDa0Nn2YxnqmO0UaE4tc0ANj42OXn7qOQW xJjHK8lEK6eimGIWqGk+Bb5qITja5YWEQa7TfFKza95I4urdMdIb2wROPARJv5rA oVT2HraQRr+J6/61X37QbL1LnAg9dx4AK8t5QW4l4pmjzkDRtSrkfoU22VWlDGsG Y0fyhCVQnwX9XehbByvg9s3HlkqV3iB0/5VGvNlKOVR28yWj6AafGSzamIBYRGTx ABlkZ7pu46X1ynP5X/smf7vLqFM3kWpc -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org