$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: xdmSSmqyEBtZe96Qk7aoKqhgJ2KFxWOYQuUx7SQ7Ws4= Subject key identifier: 08:7E:33:94:B9:D7:04:F9:A1:D3:BB:8E:A8:CF:51:36:78:14:FF:F9 Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0BBE Signing time: Sat 18 May 2024 19:09:33 +0000 Manifest this update: Sat 18 May 2024 19:09:33 +0000 Manifest next update: Sat 25 May 2024 19:09:33 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: 7Dj9vtCUBzAkZzlSLIlFk/Qo2C3aaJJOCy0EXYbu6C0=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: e3KA8e3Ufpsbkl9pexRMLVRDG3/Nhcl7F6sL/8AP/TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: May 18 19:09:33 2024 GMT Not After : May 25 19:09:33 2024 GMT Subject: CN=6648fced-6be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:2d:c5:42:31:d5:fa:24:ca:7c:7a:85:65: b5:60:b8:6c:22:c5:ed:b9:9e:4a:fb:e8:f2:f0:ad: 78:75:d4:83:f5:89:28:52:49:26:3a:7f:d2:07:4d: 66:1f:ef:6c:56:d8:d0:2b:a9:8e:de:03:37:90:41: da:67:4b:e1:fb:62:ae:7a:65:94:10:9b:29:1c:0e: c9:e9:92:35:d4:f8:a1:ea:83:cc:10:83:80:ba:e6: 6a:76:73:ff:37:19:b0:15:b6:22:63:c9:ea:56:aa: 85:da:21:2a:94:94:9d:f2:3b:33:56:39:13:01:6c: ed:5f:47:d8:9b:3c:4b:30:2a:4d:c4:e9:3c:6f:2a: 42:4f:60:fa:92:44:c8:79:31:6b:7a:93:30:a3:5c: ab:be:c7:73:3b:94:2f:8e:54:cc:be:35:81:08:cb: c6:08:86:be:b9:12:4f:a2:b4:e0:e8:06:ae:65:11: 2e:71:27:73:ed:6e:6f:a4:6d:ba:f1:aa:3b:e0:bb: a1:9e:62:2c:5a:07:c0:12:f5:dd:95:eb:d5:78:31: f1:43:4c:30:91:e0:1f:73:22:41:90:ba:76:07:7c: 64:2f:2a:57:84:c3:67:7f:3b:78:f7:f8:1f:a1:6c: c5:87:0d:67:29:dc:ed:c9:13:75:54:d8:fc:16:65: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7E:33:94:B9:D7:04:F9:A1:D3:BB:8E:A8:CF:51:36:78:14:FF:F9 X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:63:cb:74:38:1a:e9:6c:4b:bb:c1:49:6b:ff:4c:f3:0f:fe: 86:cd:24:4a:e3:04:bd:29:89:e6:da:30:6f:96:d7:dc:26:57: 96:f0:04:95:5e:87:9d:9e:04:95:f2:15:6d:36:23:af:f9:0c: 6a:d2:7a:8a:d5:4f:45:08:01:af:59:9c:5d:43:43:61:4c:46: bb:9c:e8:04:ac:79:b6:6d:36:6c:7e:81:17:7e:d2:93:43:89: fa:20:52:4c:a3:de:a9:a0:f9:d7:1a:e8:9d:0b:df:bf:a7:e5: fa:2f:35:10:59:f5:18:e6:b2:e0:8a:c6:f6:52:ce:d5:11:92: 9b:5e:35:4d:38:58:64:35:ae:ef:3a:96:04:94:db:97:f0:6d: 25:f7:49:6f:f1:1c:0d:9a:a7:a5:42:50:23:c8:55:2e:1b:61: 01:b5:60:57:93:90:c3:86:62:69:5f:c9:7f:ac:dc:0d:36:5c: 92:e5:53:83:8b:3f:ee:c2:87:60:ce:55:36:8b:f7:4d:81:af: 90:de:6c:59:5c:31:43:96:35:03:73:37:4a:b8:97:a3:d1:d3: 79:20:c1:44:36:e9:4e:5a:5b:4a:0c:bf:f1:b3:b4:5f:00:12: 4a:ed:ed:6b:77:18:4f:fc:ee:a2:57:d5:3b:9d:44:23:0d:77: 48:17:c5:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjQwNTE4MTkwOTMzWhcNMjQwNTI1MTkwOTMzWjAYMRYwFAYD VQQDEw02NjQ4ZmNlZC02YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9wtxUIx1fokynx6hWW1YLhsIsXtuZ5K++jy8K14ddSD9YkoUkkmOn/SB01m H+9sVtjQK6mO3gM3kEHaZ0vh+2KuemWUEJspHA7J6ZI11Pih6oPMEIOAuuZqdnP/ NxmwFbYiY8nqVqqF2iEqlJSd8jszVjkTAWztX0fYmzxLMCpNxOk8bypCT2D6kkTI eTFrepMwo1yrvsdzO5QvjlTMvjWBCMvGCIa+uRJPorTg6AauZREucSdz7W5vpG26 8ao74LuhnmIsWgfAEvXdlevVeDHxQ0wwkeAfcyJBkLp2B3xkLypXhMNnfzt49/gf oWzFhw1nKdztyRN1VNj8FmW4FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAh+M5S5 1wT5odO7jqjPUTZ4FP/5MB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Y8t0OBrpbEu7wUlr/0zzD/6GzSRK4wS9KYnm2jBvltfcJleW8ASV XoedngSV8hVtNiOv+Qxq0nqK1U9FCAGvWZxdQ0NhTEa7nOgErHm2bTZsfoEXftKT Q4n6IFJMo96poPnXGuidC9+/p+X6LzUQWfUY5rLgisb2Us7VEZKbXjVNOFhkNa7v OpYElNuX8G0l90lv8RwNmqelQlAjyFUuG2EBtWBXk5DDhmJpX8l/rNwNNlyS5VOD iz/uwodgzlU2i/dNga+Q3mxZXDFDljUDczdKuJej0dN5IMFENulOWltKDL/xs7Rf ABJK7e1rdxhP/O6iV9U7nUQjDXdIF8Uj -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org