$ rpki-client -vvf rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft File: 0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft (raw, json) Hash identifier: 1e3VZP9yC0DwCv7See9m75qOQoD4zLbLHz5xKl7x8JQ= Subject key identifier: 19:86:05:E8:49:61:CD:B5:E2:6D:9B:72:72:FA:02:96:20:39:57:76 Authority key identifier: D2:F8:DF:10:4F:9C:5F:84:54:6E:95:09:43:13:23:09:78:50:B4:59 Certificate issuer: /CN=A9186057/serialNumber=D2F8DF104F9C5F84546E9509431323097850B459 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0vjfEE-cX4RUbpUJQxMjCXhQtFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft Manifest number: 045F Signing time: Sun 19 May 2024 01:48:41 +0000 Manifest this update: Sun 19 May 2024 01:48:40 +0000 Manifest next update: Sun 26 May 2024 01:48:40 +0000 Files and hashes: 1: 0vjfEE-cX4RUbpUJQxMjCXhQtFk.crl (hash: Zt329/OMYMRopfxm+7Z7j84siZMXpR6AhgAKrWUFSLU=) 2: 44BB85E0000B11ECA5BE7350C4F9AE02.roa (hash: 8ts7363cp1hkVZHIPqN09HQRGb2INIRvte2Mmp61pPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.crl rsync://rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0vjfEE-cX4RUbpUJQxMjCXhQtFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186057/serialNumber=D2F8DF104F9C5F84546E9509431323097850B459 Validity Not Before: May 19 01:48:40 2024 GMT Not After : May 26 01:48:40 2024 GMT Subject: CN=66495a78-a48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:6f:e3:b2:ab:a7:47:78:f0:7e:e7:5a:a2: 31:16:f7:57:b2:c7:5e:7b:b4:c5:cb:4c:81:92:20: ef:92:14:c9:07:d8:c5:b3:84:3a:64:d7:1e:63:f0: 10:71:32:84:ca:73:79:79:12:39:4e:7d:a9:d0:f3: 2d:5e:01:f1:80:04:d6:a2:6c:a3:26:64:43:14:73: 83:12:91:52:d2:d7:38:e1:61:81:d2:29:a5:25:64: c9:e3:04:65:21:09:24:27:2f:a2:85:df:bf:e9:48: dc:9e:ed:a7:13:c7:b5:36:10:9d:88:74:b6:05:6e: d5:15:67:dd:62:84:74:d3:b8:d1:2a:fa:6f:8d:66: a1:cd:d5:f1:74:d2:61:71:a4:8a:3c:f8:a0:67:c0: 91:be:38:61:7c:68:10:65:d8:e1:8c:1b:f2:c9:c4: 63:1f:13:52:38:0f:e0:0e:f5:0f:b7:f9:6e:92:f1: fe:a3:f5:89:ef:66:02:db:b4:57:c7:10:69:eb:67: aa:f1:e9:32:70:b0:ea:f7:0b:90:6f:3b:f7:f7:0c: 04:80:15:da:85:5d:da:cf:0b:d4:a6:7b:c4:9c:bd: 3e:91:d3:ad:af:7e:5e:b9:14:28:98:f9:00:86:ff: 51:56:94:4f:02:88:be:e0:a6:69:9c:bb:90:61:c0: 08:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:86:05:E8:49:61:CD:B5:E2:6D:9B:72:72:FA:02:96:20:39:57:76 X509v3 Authority Key Identifier: keyid:D2:F8:DF:10:4F:9C:5F:84:54:6E:95:09:43:13:23:09:78:50:B4:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0vjfEE-cX4RUbpUJQxMjCXhQtFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1b:0e:fb:6b:dc:81:85:44:e0:80:ad:64:ee:2f:d0:d8:fc: e7:64:55:e6:e6:3f:be:4b:01:a0:6b:95:37:15:b0:c8:f0:b4: b5:de:cd:7d:ca:7f:a8:93:05:57:41:9b:9d:a4:59:d7:d6:9b: 4a:c5:e3:d7:ed:13:81:bf:11:4e:93:f5:f5:34:f4:df:a9:c7: 3f:5c:75:be:86:d1:c0:37:14:ba:d3:a6:f0:09:4e:c7:75:20: b9:14:37:c6:34:b2:1f:c1:bc:53:4e:9e:e2:36:05:e4:80:ad: 6b:ff:4d:f8:14:2b:df:aa:57:19:3f:c2:67:9e:2d:d6:60:c1: ae:f4:2d:93:21:06:6d:61:21:9b:e0:23:17:6d:54:84:2a:cc: 73:f5:33:80:e5:fc:10:4e:ac:23:32:df:e7:f2:61:12:3a:3e: 62:16:73:c2:c0:9f:00:c5:f9:c5:3f:bd:2b:c1:18:ce:ce:48: fe:2a:c9:a2:7a:b7:dd:d4:77:aa:db:96:36:bb:8b:31:36:28: 08:60:20:0b:71:f0:bc:59:60:9e:f7:89:0c:c2:dd:73:9b:30: 5f:8e:46:27:92:d5:8b:40:eb:2b:04:d7:f0:59:e5:f0:59:e6: 07:5f:22:5a:26:b4:90:a2:8c:00:c1:99:b9:9e:cf:a9:0b:15: 2e:7a:d2:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYwNTcxMTAvBgNVBAUTKEQyRjhERjEwNEY5QzVGODQ1NDZFOTUwOTQzMTMyMzA5 Nzg1MEI0NTkwHhcNMjQwNTE5MDE0ODQwWhcNMjQwNTI2MDE0ODQwWjAYMRYwFAYD VQQDEw02NjQ5NWE3OC1hNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxZv47Krp0d48H7nWqIxFvdXssdee7TFy0yBkiDvkhTJB9jFs4Q6ZNceY/AQ cTKEynN5eRI5Tn2p0PMtXgHxgATWomyjJmRDFHODEpFS0tc44WGB0imlJWTJ4wRl IQkkJy+ihd+/6Ujcnu2nE8e1NhCdiHS2BW7VFWfdYoR007jRKvpvjWahzdXxdNJh caSKPPigZ8CRvjhhfGgQZdjhjBvyycRjHxNSOA/gDvUPt/lukvH+o/WJ72YC27RX xxBp62eq8ekycLDq9wuQbzv39wwEgBXahV3azwvUpnvEnL0+kdOtr35euRQomPkA hv9RVpRPAoi+4KZpnLuQYcAI2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmGBehJ Yc214m2bcnL6ApYgOVd2MB8GA1UdIwQYMBaAFNL43xBPnF+EVG6VCUMTIwl4ULRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjA1Ny8xMTcyMjk4RTAw MDkxMUVDOTlFN0QzNEVDNEY5QUUwMi8wdmpmRUUtY1g0UlVicFVKUXhNakNYaFF0 RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2amZFRS1jWDRSVWJwVUpReE1qQ1hoUXRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjA1Ny8xMTcyMjk4RTAwMDkxMUVDOTlFN0QzNEVDNEY5QUUwMi8wdmpmRUUtY1g0 UlVicFVKUXhNakNYaFF0RmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBGw77a9yBhUTggK1k7i/Q2PznZFXm5j++SwGga5U3FbDI8LS13s19 yn+okwVXQZudpFnX1ptKxePX7ROBvxFOk/X1NPTfqcc/XHW+htHANxS606bwCU7H dSC5FDfGNLIfwbxTTp7iNgXkgK1r/034FCvfqlcZP8Jnni3WYMGu9C2TIQZtYSGb 4CMXbVSEKsxz9TOA5fwQTqwjMt/n8mESOj5iFnPCwJ8AxfnFP70rwRjOzkj+Ksmi erfd1Heq25Y2u4sxNigIYCALcfC8WWCe94kMwt1zmzBfjkYnktWLQOsrBNfwWeXw WeYHXyJaJrSQoowAwZm5ns+pCxUuetKg -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org