$ rpki-client -vvf rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft File: B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft (raw, json) Hash identifier: bG6L0Lf+ETptMvItkoMbXL7PskqqUNMuqxwSk29Mavw= Subject key identifier: 7F:78:22:BF:8F:2A:09:CA:93:04:6C:50:3C:A8:51:F6:5E:F3:E3:0E Authority key identifier: 07:9C:FC:C5:12:EA:61:96:6F:A3:19:A2:98:8C:92:FD:86:BD:F8:8B Certificate issuer: /CN=A9177157/serialNumber=079CFCC512EA61966FA319A2988C92FD86BDF88B Certificate serial: 1025 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft Manifest number: 101C Signing time: Sat 18 May 2024 18:00:20 +0000 Manifest this update: Sat 18 May 2024 18:00:19 +0000 Manifest next update: Sat 25 May 2024 18:00:19 +0000 Files and hashes: 1: B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl (hash: 0J1am9nJ2UbscXqC5Y9U0/VTFSN2wEs5eibHsZAzOtA=) 2: 78CEA40E63CE11EBB442586CC4F9AE02.roa (hash: NewJlP4FcPImSES9Zii/D+Z8AFnZFa5F2PVIi0h4zOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4133 (0x1025) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177157/serialNumber=079CFCC512EA61966FA319A2988C92FD86BDF88B Validity Not Before: May 18 18:00:19 2024 GMT Not After : May 25 18:00:19 2024 GMT Subject: CN=6648ecb3-98d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:52:4a:75:ea:67:d4:73:b2:6f:19:74:e4:70: 1a:02:a0:1c:38:9c:79:63:72:90:dc:cb:3b:bd:8e: 31:12:8f:ea:31:7d:6d:60:e4:6f:a3:f6:46:a9:1f: 79:4f:a8:52:a0:0f:fd:7a:6d:f1:a2:7c:0d:7a:3c: b8:a0:13:fc:ad:a1:80:04:96:e3:36:d8:6c:33:78: 6a:7a:99:52:bf:b6:ee:c3:e3:b4:60:f1:93:2a:70: d8:11:21:bd:b2:1c:a7:45:b4:aa:f3:a0:3b:0b:bc: b1:e1:c0:7f:9b:de:b9:b4:4c:95:70:d2:36:57:fe: de:4c:ad:53:d2:c8:e4:95:5b:63:58:89:01:3d:cf: 9e:d6:b9:c2:04:fc:77:ae:22:9b:b3:46:d1:43:f7: 63:5a:e8:10:a7:4b:db:72:e3:1c:7c:53:76:41:98: 71:d1:29:06:60:0d:19:a0:bc:a5:da:47:7b:e2:35: 7a:2c:8b:d4:a6:09:1d:fc:ef:f7:b8:6d:c8:6e:97: 7c:7b:bf:85:a7:85:9c:b0:e8:fb:48:79:f6:85:36: 2a:2a:e4:b5:9c:00:fa:9d:84:3a:6d:e7:fc:f6:8e: 8e:94:01:77:5a:f6:42:08:91:d7:90:9a:2c:7a:bf: a0:ee:12:8d:18:5a:6f:cf:cd:0e:0d:bb:7e:97:81: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:78:22:BF:8F:2A:09:CA:93:04:6C:50:3C:A8:51:F6:5E:F3:E3:0E X509v3 Authority Key Identifier: keyid:07:9C:FC:C5:12:EA:61:96:6F:A3:19:A2:98:8C:92:FD:86:BD:F8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e3:ea:70:ee:97:d5:12:9c:e2:5f:70:9c:03:a5:aa:c8:c7: 78:f1:c1:1a:b2:2e:2d:82:84:c3:42:3b:e0:f4:70:21:10:8f: 1d:36:9c:31:28:c5:ec:d4:1b:20:2e:00:02:f0:e8:89:4d:d6: cb:b2:a9:61:b9:b1:2b:bb:10:29:c0:30:f4:a0:a4:82:d8:b8: b1:a2:32:f1:ef:29:62:30:7b:36:c6:e5:b5:7b:b2:c6:32:9a: 42:81:0c:7d:f2:9b:94:b5:fb:1b:56:f5:49:74:32:44:61:9c: c0:27:c8:bb:83:51:7a:d0:d4:aa:14:66:05:94:6e:7d:d2:0d: 24:ba:b2:39:bb:40:6c:ab:82:e4:fb:2c:1a:bd:be:9b:b2:42: 8f:42:23:77:66:4b:19:04:ad:d6:e9:a3:f7:a8:e9:46:2e:30: c8:78:b1:1a:e7:b7:72:30:f9:a6:e3:95:54:cf:04:fd:6c:f2: 69:c7:50:7c:be:65:3b:59:c7:e0:c5:78:0a:e3:db:90:8c:2b: 36:b0:ba:bc:ec:95:00:44:c7:77:3a:bc:b0:10:bd:5d:ac:20: d3:8f:b2:be:ef:25:d4:7e:f8:37:17:23:38:51:10:01:63:ff: b7:b2:23:15:09:54:70:2b:45:e3:88:18:e8:f9:fa:85:e8:b0: 1a:1d:e7:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxNTcxMTAvBgNVBAUTKDA3OUNGQ0M1MTJFQTYxOTY2RkEzMTlBMjk4OEM5MkZE ODZCREY4OEIwHhcNMjQwNTE4MTgwMDE5WhcNMjQwNTI1MTgwMDE5WjAYMRYwFAYD VQQDEw02NjQ4ZWNiMy05OGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VJKdepn1HOybxl05HAaAqAcOJx5Y3KQ3Ms7vY4xEo/qMX1tYORvo/ZGqR95 T6hSoA/9em3xonwNejy4oBP8raGABJbjNthsM3hqeplSv7buw+O0YPGTKnDYESG9 shynRbSq86A7C7yx4cB/m965tEyVcNI2V/7eTK1T0sjklVtjWIkBPc+e1rnCBPx3 riKbs0bRQ/djWugQp0vbcuMcfFN2QZhx0SkGYA0ZoLyl2kd74jV6LIvUpgkd/O/3 uG3Ibpd8e7+Fp4WcsOj7SHn2hTYqKuS1nAD6nYQ6bef89o6OlAF3WvZCCJHXkJos er+g7hKNGFpvz80ODbt+l4HBpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH94Ir+P KgnKkwRsUDyoUfZe8+MOMB8GA1UdIwQYMBaAFAec/MUS6mGWb6MZopiMkv2GvfiL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzE1Ny81NEU0N0RFRTFE M0UxMUU5QTQ1REI3NkRDNEY5QUUwMi9CNXo4eFJMcVlaWnZveG1pbUl5U19ZYTkt SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I1ejh4UkxxWVpadm94bWltSXlTX1lhOS1Jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzE1Ny81NEU0N0RFRTFEM0UxMUU5QTQ1REI3NkRDNEY5QUUwMi9CNXo4eFJMcVla WnZveG1pbUl5U19ZYTktSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ4+pw7pfVEpziX3CcA6WqyMd48cEasi4tgoTDQjvg9HAhEI8dNpwx KMXs1BsgLgAC8OiJTdbLsqlhubEruxApwDD0oKSC2LixojLx7yliMHs2xuW1e7LG MppCgQx98puUtfsbVvVJdDJEYZzAJ8i7g1F60NSqFGYFlG590g0kurI5u0Bsq4Lk +ywavb6bskKPQiN3ZksZBK3W6aP3qOlGLjDIeLEa57dyMPmm45VUzwT9bPJpx1B8 vmU7WcfgxXgK49uQjCs2sLq87JUARMd3OrywEL1drCDTj7K+7yXUfvg3FyM4URAB Y/+3siMVCVRwK0XjiBjo+fqF6LAaHeeL -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org