$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft File: sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json) Hash identifier: BAvESlCTNggbSMh6YG5kMShm2QMCB2vaUGU4/VB10UM= Subject key identifier: DA:B8:54:D5:E8:3D:F9:B6:55:ED:CA:97:A4:61:AA:A6:94:84:C5:6F Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93 Certificate issuer: /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft Manifest number: 0A42 Signing time: Sat 18 May 2024 20:30:39 +0000 Manifest this update: Sat 18 May 2024 20:30:38 +0000 Manifest next update: Sat 25 May 2024 20:30:38 +0000 Files and hashes: 1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: NdubRx9iwsNRlwbqMzT0xEaZ/HO14HUAnPa+NyygQdo=) 2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: LgSw+SYKve1837xCz4iHwQzI8x6segQ79vdF2sZ6C7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93 Validity Not Before: May 18 20:30:38 2024 GMT Not After : May 25 20:30:38 2024 GMT Subject: CN=66490fef-d5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:39:83:30:08:b5:a1:f6:5a:d8:19:c7:cc: 78:60:dc:7a:d3:14:43:aa:fd:7f:47:6f:b3:88:41: 99:4f:43:f3:cc:c2:3b:21:27:b4:07:b1:b1:bb:be: 9b:fe:be:0d:a1:12:7e:21:87:2c:5c:25:e3:a4:eb: 7a:7c:52:7d:e6:f9:81:da:22:34:59:24:a4:5b:e7: 03:0b:30:3a:ef:80:39:55:fb:3d:9a:a4:7b:b8:b0: aa:3f:b6:8d:06:93:9c:b6:87:2b:c8:e8:7f:94:70: cd:9d:c4:0b:c9:34:2a:8f:9d:01:03:4d:95:8c:23: 9a:3f:e8:ca:7b:1f:e6:e1:62:89:d7:f5:e0:7e:7c: d7:b2:e8:8d:85:79:10:11:37:88:42:9e:2a:da:9a: 60:7a:12:cc:b2:c2:29:67:52:13:a8:04:e6:f0:55: aa:31:f8:59:23:f3:98:3f:e2:f3:4d:1a:31:dc:4d: cb:b0:de:8e:59:de:fe:e0:9e:02:ae:84:45:8b:80: c0:71:83:75:a9:0d:87:2a:78:05:1c:06:0a:c4:c6: 4e:68:48:3e:c4:ea:2c:8f:1d:12:87:16:51:47:7f: 7d:d2:d4:3a:13:aa:ad:03:87:da:e3:18:57:3c:b0: 25:dc:0e:bd:54:b6:d5:fe:05:ac:fa:fb:d1:dc:1a: 58:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B8:54:D5:E8:3D:F9:B6:55:ED:CA:97:A4:61:AA:A6:94:84:C5:6F X509v3 Authority Key Identifier: keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:69:6d:67:29:68:a3:d8:45:f3:49:44:b0:e2:d0:d3:06:5f: 43:86:34:5c:5a:45:f4:5f:33:14:30:d3:11:3f:79:d8:ca:89: 12:08:f7:4b:0d:96:6f:1f:b7:99:75:10:72:10:55:27:37:7b: e2:62:8d:e6:71:a0:6d:a5:dd:31:9b:08:46:e3:88:09:50:36: 7e:70:c3:e8:fc:d6:ed:06:e0:6a:01:d6:de:ea:c8:a5:91:cc: fe:7c:3b:3e:44:21:5e:ec:a3:ca:15:2b:4e:9c:12:f1:3d:ee: 38:19:89:e2:c3:2e:cf:2b:4b:e2:e4:ab:da:15:03:20:10:eb: 3a:e3:3b:ae:6e:01:79:da:1d:7e:59:d9:c6:91:53:33:20:8d: 77:cc:bc:ab:a6:e9:23:96:a7:17:e1:9d:5b:5e:bb:fd:62:d5: a0:56:6b:48:da:31:40:8d:04:6c:1b:52:d2:a9:7b:c8:d8:c3: 87:00:37:f7:02:3c:e9:aa:31:40:1c:d0:2d:38:00:1c:e6:57: 0b:62:f6:37:16:a5:7d:04:c1:b3:80:42:de:6c:e7:d8:82:de: 2a:48:58:55:2a:f2:92:e3:df:7b:3b:5d:ce:6b:3b:00:bb:be: 81:d3:b4:5f:da:3d:2e:ee:72:d1:30:92:52:1f:a9:96:18:ef: 43:1a:58:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyNTkxMTAvBgNVBAUTKEIwQjFBNUQ1NTkyQkNFNUM4MUVCNzI2RDQ2NDBDQTk1 NTEwNENFOTMwHhcNMjQwNTE4MjAzMDM4WhcNMjQwNTI1MjAzMDM4WjAYMRYwFAYD VQQDEw02NjQ5MGZlZi1kNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AM5gzAItaH2WtgZx8x4YNx60xRDqv1/R2+ziEGZT0PzzMI7ISe0B7Gxu76b /r4NoRJ+IYcsXCXjpOt6fFJ95vmB2iI0WSSkW+cDCzA674A5Vfs9mqR7uLCqP7aN BpOctocryOh/lHDNncQLyTQqj50BA02VjCOaP+jKex/m4WKJ1/XgfnzXsuiNhXkQ ETeIQp4q2ppgehLMssIpZ1ITqATm8FWqMfhZI/OYP+LzTRox3E3LsN6OWd7+4J4C roRFi4DAcYN1qQ2HKngFHAYKxMZOaEg+xOosjx0ShxZRR3990tQ6E6qtA4fa4xhX PLAl3A69VLbV/gWs+vvR3BpYLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq4VNXo Pfm2Ve3Kl6RhqqaUhMVvMB8GA1UdIwQYMBaAFLCxpdVZK85cgetybUZAypVRBM6T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI1OS9ENEYyNzU4MjQ1 OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnpseUI2M0p0UmtES2xWRUV6 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMR2wxVmtyemx5QjYzSnRSa0RLbFZFRXpwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTI1OS9ENEYyNzU4MjQ1OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnps eUI2M0p0UmtES2xWRUV6cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcaW1nKWij2EXzSUSw4tDTBl9DhjRcWkX0XzMUMNMRP3nYyokSCPdL DZZvH7eZdRByEFUnN3viYo3mcaBtpd0xmwhG44gJUDZ+cMPo/NbtBuBqAdbe6sil kcz+fDs+RCFe7KPKFStOnBLxPe44GYniwy7PK0vi5KvaFQMgEOs64zuubgF52h1+ WdnGkVMzII13zLyrpukjlqcX4Z1bXrv9YtWgVmtI2jFAjQRsG1LSqXvI2MOHADf3 AjzpqjFAHNAtOAAc5lcLYvY3FqV9BMGzgELebOfYgt4qSFhVKvKS4997O13OazsA u76B07Rf2j0u7nLRMJJSH6mWGO9DGljB -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org