$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: RaSfHBeCYpSHruANsVMHIIi7/cIQdc7nCrdtHnBIyTo= Subject key identifier: 80:C4:DE:46:45:46:1F:4E:8D:0B:64:33:DB:28:68:00:0D:32:45:6F Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 0122 Signing time: Sun 19 May 2024 05:09:45 +0000 Manifest this update: Sun 19 May 2024 05:09:44 +0000 Manifest next update: Sun 26 May 2024 05:09:44 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: n4RySecExP6jIKOFpRUTbmZMuVphd6251th6C6pSEPA=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: cnsvLrD9d71bslE6am613R88KBMFCsrauhJ9vutckNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: May 19 05:09:44 2024 GMT Not After : May 26 05:09:44 2024 GMT Subject: CN=66498999-cff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:98:fe:5f:fd:03:23:cc:79:31:3f:56:66: b3:dd:bf:48:f3:4c:71:2f:aa:a0:8e:90:1a:39:05: bf:a0:45:c5:22:ce:06:d4:42:17:b2:b1:1a:1f:cc: 80:62:ba:12:dd:c7:2f:cc:f8:eb:e2:b2:57:8b:33: 91:77:86:b5:0b:fb:91:c9:ec:2b:4e:eb:74:e9:7a: c7:17:53:71:02:6c:a4:30:df:99:81:fe:ad:72:99: 62:65:83:71:cf:e9:79:da:fb:2f:a8:89:e2:86:60: 3b:d0:8c:bc:cb:e8:f6:1c:5f:e9:6f:0c:3f:cd:ae: 36:83:af:b7:10:63:b6:ef:34:78:62:aa:f4:e3:84: f4:b4:ff:5f:45:2c:d8:38:3e:76:8f:fd:7f:3d:8a: 01:2a:7c:76:c9:62:c8:ac:b4:c8:63:a0:c1:94:bc: d5:d4:45:f7:3a:5f:fd:7d:39:7f:8c:0e:e4:0b:0c: ad:6b:ab:1d:64:3a:e7:41:41:62:7c:db:d9:7b:5b: 4c:78:58:01:89:58:17:c2:19:0f:4d:d8:7f:ec:90: 8c:13:8e:a5:40:b2:d4:d2:4e:38:56:35:20:c4:d5: 1e:5e:e6:b2:f5:12:a6:ee:63:14:16:6b:cb:03:75: 3c:a1:63:73:c9:5e:3f:4b:3b:9e:c9:b2:14:ca:3b: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C4:DE:46:45:46:1F:4E:8D:0B:64:33:DB:28:68:00:0D:32:45:6F X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e9:37:59:2e:12:f7:af:d6:c6:d2:e2:4c:55:c4:28:c8:dd: 07:fc:6d:43:50:96:d7:bc:37:0f:fb:9d:c4:ff:8a:a3:71:7b: a0:f1:22:51:b7:d2:64:96:f5:cb:d4:3e:2a:da:ae:8b:f8:b1: 7a:91:55:86:d5:98:01:66:8a:ff:8d:bf:c3:5e:7f:b9:8a:dd: 63:ad:83:d7:7b:2e:63:18:ef:b3:7f:59:d8:9c:55:96:78:7f: 88:5e:40:b7:b2:b7:23:16:a3:ff:e0:88:49:d6:18:81:dc:29: f9:86:6a:93:b1:fe:68:be:cf:34:24:43:a5:c9:e9:1f:22:36: 7d:42:41:46:02:c4:3d:59:20:ae:00:60:c9:58:26:07:11:34: 73:5b:78:59:8f:07:7a:38:f5:d4:73:90:39:44:9f:2f:da:40: ce:05:b3:89:f1:5f:0e:be:32:15:ed:85:b6:5a:98:fe:3d:ee: fb:61:b8:7e:00:ba:c7:1e:18:45:84:6a:47:2b:36:b2:17:1e: 82:75:01:d0:17:ca:f7:dc:53:74:80:19:97:5c:57:6d:53:d8: a9:36:50:a4:f7:e4:d5:6c:95:59:eb:60:f6:4c:8e:6c:0b:72: 44:c0:ba:c6:19:3c:5d:e9:45:d0:5c:e1:7d:d8:67:7b:4e:c7: 5a:18:fc:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjQwNTE5MDUwOTQ0WhcNMjQwNTI2MDUwOTQ0WjAYMRYwFAYD VQQDEw02NjQ5ODk5OS1jZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQKY/l/9AyPMeTE/Vmaz3b9I80xxL6qgjpAaOQW/oEXFIs4G1EIXsrEaH8yA YroS3ccvzPjr4rJXizORd4a1C/uRyewrTut06XrHF1NxAmykMN+Zgf6tcpliZYNx z+l52vsvqInihmA70Iy8y+j2HF/pbww/za42g6+3EGO27zR4Yqr044T0tP9fRSzY OD52j/1/PYoBKnx2yWLIrLTIY6DBlLzV1EX3Ol/9fTl/jA7kCwyta6sdZDrnQUFi fNvZe1tMeFgBiVgXwhkPTdh/7JCME46lQLLU0k44VjUgxNUeXuay9RKm7mMUFmvL A3U8oWNzyV4/SzueybIUyjvHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDE3kZF Rh9OjQtkM9soaAANMkVvMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW6TdZLhL3r9bG0uJMVcQoyN0H/G1DUJbXvDcP+53E/4qjcXug8SJR t9JklvXL1D4q2q6L+LF6kVWG1ZgBZor/jb/DXn+5it1jrYPXey5jGO+zf1nYnFWW eH+IXkC3srcjFqP/4IhJ1hiB3Cn5hmqTsf5ovs80JEOlyekfIjZ9QkFGAsQ9WSCu AGDJWCYHETRzW3hZjwd6OPXUc5A5RJ8v2kDOBbOJ8V8OvjIV7YW2Wpj+Pe77Ybh+ ALrHHhhFhGpHKzayFx6CdQHQF8r33FN0gBmXXFdtU9ipNlCk9+TVbJVZ62D2TI5s C3JEwLrGGTxd6UXQXOF92Gd7TsdaGPz9 -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org