$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: ZBknLNW99Hix+yMv2kBhcukMbw0TphGNDKFAH9I55ko= Subject key identifier: D9:B8:83:5F:63:62:E5:77:2F:18:B8:D5:BD:84:26:0B:BF:2F:65:09 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 020D Signing time: Sun 19 May 2024 04:10:01 +0000 Manifest this update: Sun 19 May 2024 04:10:00 +0000 Manifest next update: Sun 26 May 2024 04:10:00 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: iN27f+jfzfSG+kBUs2e2hP0R9S1QvM+4BSm7ErKeEiU=) 2: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: 34rrQYul/a6yRoBhv7DIclOFH5GWbWZA8OkkSfiD2ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: May 19 04:10:00 2024 GMT Not After : May 26 04:10:00 2024 GMT Subject: CN=66497b99-e68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:e5:69:fd:85:d1:42:78:56:95:be:e2:0e: 2b:22:cf:80:cf:2a:aa:cb:d0:5b:ef:8e:6d:14:ed: f2:29:7c:c5:08:6a:5a:aa:6d:3d:f1:d2:fb:d4:9c: 98:72:46:02:84:ef:11:e3:b2:1d:2e:c4:bc:0f:7c: 14:6b:01:bf:8e:32:d3:d4:c7:16:a4:5a:75:7f:2d: 80:bf:8b:a9:76:f0:4d:4e:8f:aa:64:09:2b:28:55: e0:9c:25:b1:2a:eb:45:c8:f2:7e:6b:78:bc:d1:12: e6:e0:12:36:e6:62:79:f1:6c:a2:5c:70:fe:d3:8e: 0d:4b:55:3d:f8:29:b3:14:d3:6d:8c:5e:9a:9d:71: 30:d6:19:a2:2c:79:a2:02:83:e5:fd:f7:1f:a9:35: 19:bd:ff:68:d4:0a:38:29:99:ea:80:b9:64:73:4a: f3:51:2e:b4:5c:d2:a2:4a:65:9f:f2:31:8c:39:80: 40:e0:df:71:a4:21:10:9e:ec:37:36:f9:92:71:ce: 63:bf:39:8e:e8:95:19:b1:0b:3a:b1:c7:df:aa:38: 3c:bc:4e:36:9c:87:fd:40:5b:0f:6c:e6:1c:a1:dc: 87:d6:e7:17:ad:6a:f4:81:5f:e5:58:ec:ea:92:65: 2f:c5:2f:58:43:32:bf:e9:9a:fa:79:ce:b9:d0:fe: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B8:83:5F:63:62:E5:77:2F:18:B8:D5:BD:84:26:0B:BF:2F:65:09 X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a6:8e:15:84:94:df:c9:b3:bf:1d:31:0b:d2:77:55:74:4a: 48:9d:e2:d8:fa:74:2c:34:2c:42:0f:af:19:ee:06:55:39:0f: 3f:af:77:7a:91:87:d1:7b:9e:b6:70:e5:6d:6f:e6:9c:b6:c6: 9f:e7:1a:64:5a:78:bf:c8:44:b5:2f:28:d7:6b:43:65:5c:c6: df:00:75:c7:9d:b4:09:97:7d:38:68:d2:58:34:d3:e8:4c:67: 41:e1:e7:45:70:e2:d5:1f:5c:9d:bc:19:b2:33:f1:88:18:7b: d9:f1:53:56:fb:b9:fb:1c:96:41:80:b3:4b:6b:f6:5c:00:2b: d8:33:9f:1b:ec:7e:e7:e7:b7:7e:bd:33:f7:b3:5c:06:25:fd: 07:6f:f2:bb:e2:7d:14:b9:52:85:54:45:6f:85:d2:e2:87:d8: ce:93:47:f5:5f:fd:00:32:a2:86:dc:1a:17:f9:31:24:46:ed: 19:90:64:df:ba:1a:18:25:db:c6:1b:85:74:30:fd:1b:15:40: 1e:1c:bf:38:d9:30:ed:a1:54:92:96:4c:d3:58:39:0f:b6:a2: 52:69:25:3e:64:99:1b:8f:2c:6b:0e:77:6d:f3:6f:32:b5:e1: 8f:fb:3b:86:b8:04:7d:be:61:03:73:be:5b:d9:aa:51:4d:b0: f0:31:24:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjQwNTE5MDQxMDAwWhcNMjQwNTI2MDQxMDAwWjAYMRYwFAYD VQQDEw02NjQ5N2I5OS1lNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFHlaf2F0UJ4VpW+4g4rIs+Azyqqy9Bb745tFO3yKXzFCGpaqm098dL71JyY ckYChO8R47IdLsS8D3wUawG/jjLT1McWpFp1fy2Av4updvBNTo+qZAkrKFXgnCWx KutFyPJ+a3i80RLm4BI25mJ58WyiXHD+044NS1U9+CmzFNNtjF6anXEw1hmiLHmi AoPl/fcfqTUZvf9o1Ao4KZnqgLlkc0rzUS60XNKiSmWf8jGMOYBA4N9xpCEQnuw3 NvmScc5jvzmO6JUZsQs6scffqjg8vE42nIf9QFsPbOYcodyH1ucXrWr0gV/lWOzq kmUvxS9YQzK/6Zr6ec650P5YyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNm4g19j YuV3Lxi41b2EJgu/L2UJMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABpo4VhJTfybO/HTEL0ndVdEpIneLY+nQsNCxCD68Z7gZVOQ8/r3d6 kYfRe562cOVtb+actsaf5xpkWni/yES1LyjXa0NlXMbfAHXHnbQJl304aNJYNNPo TGdB4edFcOLVH1ydvBmyM/GIGHvZ8VNW+7n7HJZBgLNLa/ZcACvYM58b7H7n57d+ vTP3s1wGJf0Hb/K74n0UuVKFVEVvhdLih9jOk0f1X/0AMqKG3BoX+TEkRu0ZkGTf uhoYJdvGG4V0MP0bFUAeHL842TDtoVSSlkzTWDkPtqJSaSU+ZJkbjyxrDndt828y teGP+zuGuAR9vmEDc75b2apRTbDwMSRa -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org